46.246.84.11
Classification: Malicious
46.246.84.11 is a malicious IP address in Stockholm, SE. Linked to Asyncrat, Dcrat malware. 113 sightings from 9 threat sources (Proxy), last seen 2026-10-13.
Current activity
- VPN node — Provides anonymization that can hide an attacker.
MITRE ATT&CK associations
Malware families: ASYNCRAT (S1087) DCRAT (S9017)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| AsyncRAT | ThreatFox Abuse.ch | 2024-02-27 15:17:09 | 2026-10-13 10:25:06 | malicious-activity | S1087 AsyncRAT |
| VPN | IPWhois.io | 2025-01-17 05:01:57 | 2026-09-18 07:39:07 | anonymization vpn | |
| Proxy | IPWhois.io | 2025-05-10 10:24:48 | 2025-05-10 10:24:48 | anonymization | |
| Proxy | FireHOL | 2023-01-18 21:19:31 | 2025-03-31 07:45:16 | anonymization | |
| Asyncrat | Maltrail | 2025-03-27 14:15:54 | 2025-03-27 14:15:54 | malicious-activity | S1087 AsyncRAT |
| DCRat | ThreatFox Abuse.ch | 2025-01-17 01:17:04 | 2025-01-19 00:06:04 | malicious-activity | S9017 DCRAT |
| Parasite requests to the website alieparusa.in.ua | Blocklist.net.ua | 2022-07-14 01:47:19 | 2023-04-10 05:59:00 | malicious-activity | |
| Anonymizer | Maltiverse Research Team | 2020-11-21 15:55:41 | 2021-05-22 22:13:31 | anonymizer | |
| HTTP Spammer | StopForumSpam.com | 2021-02-12 01:26:16 | 2021-05-12 10:55:11 | malicious-activity | |
| HTTP Spammer | Sblam | 2021-02-19 22:55:43 | 2021-03-18 13:47:45 | malicious-activity | |
| Parasite traffic on site activium.com.ua. | Blocklist.net.ua | 2019-12-27 07:16:24 | 2019-12-28 00:51:20 | ||
| Anonymizer | Maltiverse | 2019-12-27 08:09:04 | 2019-12-27 08:09:04 |
Tags
anonymization abuse anonymizer bot as42708 c2 censys rat port:2000 dcrat glesys port:9000 darkcrystal rat port:5064 drb-ra asyncratWhois information
- AS name
- AS42708 Glesys AB
- AS registry
- ripencc
- AS date
- 2011-01-27 00:00:00
- AS CIDR
- 46.246.0.0/17
- Registrant
- Glesys AB
- City
- Stockholm
- Postal code
- 117 56
- Country
- SE — Sweden 🇸🇪
- First indexed
- 2019-12-27 04:26:01
- Last updated
- 2026-10-13 10:25:06
Malicious IPs in the same CIDR
46.246.41.154 46.246.6.8 46.246.12.11 46.246.41.155 46.246.3.206 46.246.3.226 46.246.8.130 46.246.44.53 46.246.12.13 46.246.8.177 46.246.12.8 46.246.12.18 46.246.39.245 46.246.8.176 46.246.123.6 46.246.6.3 46.246.84.11 46.246.6.15 46.246.97.3 46.246.84.3 46.246.6.17 46.246.4.15 46.246.84.14 46.246.14.21 46.246.12.24