89.32.41.109
Classification: Malicious
89.32.41.109 is a malicious IP address in Timisoara, RO. Linked to Menupass activity. 23 sightings from 4 threat sources, last seen 2026-10-13.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Intrusion sets: MENUPASS (G0045)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Potassium | ThreatFox Abuse.ch | 2026-10-07 03:45:21 | 2026-10-13 05:25:06 | malicious-activity | G0045 menuPass |
| Mail Spammer | Barracuda | 2025-11-03 00:43:16 | 2026-10-07 06:14:57 | attacker malicious-activity | |
| Malicious Host | HoneyDB | 2025-11-02 00:00:00 | 2025-11-05 00:00:00 | malicious-activity | |
| Malware Download | URLhaus Abuse.ch | 2025-11-03 22:05:22 | 2025-11-03 22:05:23 | malicious-activity | |
| Mirai | ThreatFox Abuse.ch | 2025-11-03 22:01:19 | 2025-11-03 22:01:19 | malicious-activity | |
| MooBot | ThreatFox Abuse.ch | 2025-11-03 08:01:30 | 2025-11-03 11:01:26 | malicious-activity |
Tags
mirai katana hostmaze as48874 port:80 censys c2 port:1995 moobot elf woof ddos botnet potassium port:7193 port:42061 port:23789Whois information
- AS name
- AS48874 NETPROTECT SRL
- Registrant
- NETPROTECT SRL
- City
- Timisoara
- Postal code
- 300789
- Country
- RO — Romania 🇷🇴
- First indexed
- 2025-11-03 00:43:14
- Last updated
- 2026-10-13 05:25:06