31.56.19.149
Classification: Malicious
31.56.19.149 is a malicious IP address in Berlin, DE. Linked to Menupass activity. 2 sightings from ThreatFox Abuse.ch (Potassium), last seen 2026-10-16.
Current activity
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Intrusion sets: MENUPASS (G0045)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Potassium | ThreatFox Abuse.ch | 2026-10-16 04:40:14 | 2026-10-16 11:26:00 | botnet malicious-activity | G0045 menuPass |
Tags
mirai port:7193 botnet woof ddos potassiumWhois information
- AS name
- AS403005 Blatant Technologies, LLC
- Registrant
- Blatant Technologies, LLC
- City
- Berlin
- Postal code
- 10173
- Country
- DE — Germany 🇩🇪
- First indexed
- 2026-10-16 05:25:06
- Last updated
- 2026-10-16 11:26:09