37.46.130.143
Classification: Suspicious
37.46.130.143 is a suspicious IP address in Moscow, RU. Linked to Lokibot malware. Reported by Cybercrime-tracker.net and IPWhois.io, last seen 2026-09-08.
Current activity
- VPN node — Provides anonymization that can hide an attacker.
MITRE ATT&CK associations
Malware families: LOKIBOT (S0447)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| VPN | IPWhois.io | 2026-09-08 06:29:21 | 2026-09-08 06:29:21 | anonymization vpn | |
| Lokibot | Cybercrime-tracker.net | 2020-02-01 00:54:27 | 2020-02-01 00:54:30 | S0447 Lokibot |
Whois information
- AS name
- AS29182 JSC Datacenter
- AS registry
- ripencc
- AS date
- 2012-01-20 00:00:00
- AS CIDR
- 37.46.130.0/23
- CIDR
- 37.46.128.0/22
- Registrant
- JSC Datacenter
- Address
- m-r Raduzhniy 34a, 3 Irkutsk, 664017 Russian Federation
- City
- Moscow
- Postal code
- 103073
- Country
- RU — Russian Federation 🇷🇺
- Contact email
- [email protected], [email protected], [email protected]
- First indexed
- 2020-02-01 00:54:27
- Last updated
- 2026-09-08 06:29:22