89.32.41.117
Classification: Malicious
89.32.41.117 is a malicious IP address in Timisoara, RO. Linked to Menupass activity. 12 sightings from 7 threat sources (Potassium), last seen 2026-10-14.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Intrusion sets: MENUPASS (G0045)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Potassium | ThreatFox Abuse.ch | 2026-10-07 03:45:22 | 2026-10-14 04:25:06 | malicious-activity | G0045 menuPass |
| Mail Spammer | Barracuda | 2026-10-07 06:14:57 | 2026-10-07 06:14:57 | attacker malicious-activity | |
| Suspicious Host | AbuseIPDB | 2024-08-31 07:32:35 | 2024-08-31 07:32:35 | anomalous-activity | |
| Malicious Host | Alienvault Ip Reputation Database | 2020-04-21 07:23:47 | 2020-10-15 07:40:20 | ||
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2020-04-22 02:35:18 | 2020-04-22 08:58:22 | ||
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2020-04-22 02:35:09 | 2020-04-22 08:58:21 | ||
| Malicious Host | CIArmy | 2020-04-21 02:52:45 | 2020-04-21 07:56:51 | ||
| Malicious Host | HoneyDB | 2020-04-20 00:00:00 | 2020-04-20 00:00:00 |
Tags
woof ddos mirai botnet potassium port:7193 port:27651 port:15987Whois information
- AS name
- AS48874 NETPROTECT SRL
- AS registry
- ripencc
- AS date
- 2005-11-29 00:00:00
- AS CIDR
- 89.32.41.0/24
- CIDR
- 89.32.41.0/25
- Registrant
- NETPROTECT SRL
- Address
- Platanilor nr 5 sc a ap 3, Timisoara Timis 300185, Romania
- City
- Timisoara
- Postal code
- 300789
- Country
- RO — Romania 🇷🇴
- First indexed
- 2020-04-21 02:52:45
- Last updated
- 2026-10-14 04:25:06
Malicious IPs in the same CIDR
89.32.41.146 89.32.41.117 89.32.41.42 89.32.41.43 89.32.41.19 89.32.41.38