37.32.4.108

Classification: Malicious

37.32.4.108 is a malicious IP address. Reported by 7 threat sources, last seen 2026-09-02. Network: AS202468 Noyan Abr Arvan Co. ( Private Joint Stock).

Current activity

Known attacker — Seen launching attacks over the Internet.
Open proxy — Provides anonymization that can hide an attacker.

Blacklist sightings

Description	Source	First seen	Last seen	Labels	MITRE ATT&CK
Proxy	FireHOL	2022-12-31 17:01:52	2026-09-02 19:11:42	anomalous-activity anonymization proxy
Anonymizer	FireHOL	2026-02-27 08:58:12	2026-09-02 18:15:07	anomalous-activity anonymization
Proxy	IPWhois.io	2025-02-17 00:43:30	2026-07-13 19:41:36	anonymization proxy
Mail Spammer	Barracuda	2025-02-17 00:43:30	2026-07-13 19:41:36	attacker malicious-activity
ET COMPROMISED Known Compromised or Hostile Host Traffic UDP	Emerging Threats	2022-12-28 21:17:23	2023-01-16 09:13:29	malicious-activity
ET COMPROMISED Known Compromised or Hostile Host Traffic TCP	Emerging Threats	2022-12-28 21:17:20	2023-01-16 09:13:26	malicious-activity
Anonymizer	FireHol	2022-01-18 12:53:38	2022-12-29 16:54:59	anonymization
Anonymizer	Maltiverse Research Team	2020-11-21 15:04:37	2021-12-21 05:56:49	anonymization anonymizer
Anonymizer	Maltiverse	2020-01-14 01:56:49	2020-01-14 01:56:49

Tags

anonymization anonymizer

Whois information

AS name: AS202468 Noyan Abr Arvan Co. ( Private Joint Stock)
AS registry: ripencc
AS date: 2012-01-02 00:00:00
AS CIDR: 37.32.4.0/22
Registrant: Noyan Abr Arvan Co. ( Private Joint Stock)
City: Tehran
Postal code: 1317947564
Country: IR — Iran, Islamic Republic of 🇮🇷
First indexed: 2020-01-14 01:56:49
Last updated: 2026-09-02 19:12:44

Malicious IPs in the same CIDR

37.32.4.138 37.32.5.98 37.32.5.232 37.32.4.222 37.32.5.25 37.32.5.121 37.32.6.216 37.32.6.171 37.32.5.131 37.32.6.227 37.32.6.248 37.32.4.132 37.32.4.98 37.32.4.108 37.32.4.162 37.32.4.124