89.32.41.146
Classification: Malicious
89.32.41.146 is a malicious IP address in Timisoara, RO. Linked to Menupass activity. 10 sightings from 4 threat sources (Potassium), last seen 2026-10-14.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Intrusion sets: MENUPASS (G0045)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Potassium | ThreatFox Abuse.ch | 2026-10-07 03:45:22 | 2026-10-14 05:25:07 | malicious-activity | G0045 menuPass |
| Mail Spammer | Barracuda | 2020-11-19 18:33:15 | 2026-10-07 06:14:57 | attacker malicious-activity | |
| Malicious url | Cyber Threat Coalition | 2020-12-15 01:00:15 | 2020-12-17 01:10:44 | malicious-activity | |
| Covid19 scam | Cyber Threat Coalition | 2020-11-25 04:22:20 | 2020-12-14 02:05:58 | malicious-activity | |
| Phishing | Phishtank | 2020-11-19 18:33:12 | 2020-11-19 18:33:12 | compromised malicious-activity | |
| Social Engineering | Phishtank | 2020-11-19 18:33:12 | 2020-11-19 18:33:12 | malicious-activity |
Tags
covid19 coronavirus scam phishing woof ddos mirai botnet potassium port:7193 port:27651 port:15987Whois information
- AS name
- AS48874 NETPROTECT SRL
- AS registry
- ripencc
- AS date
- 2005-11-29 00:00:00
- AS CIDR
- 89.32.41.0/24
- CIDR
- 89.32.41.128/25
- Registrant
- NETPROTECT SRL
- Address
- Platanilor nr 5 sc a ap 3, Timisoara Timis 300185, Romania
- City
- Timisoara
- Postal code
- 300789
- Country
- RO — Romania 🇷🇴
- First indexed
- 2020-11-19 18:33:12
- Last updated
- 2026-10-14 05:25:07
Malicious IPs in the same CIDR
89.32.41.146 89.32.41.117 89.32.41.42 89.32.41.43 89.32.41.19 89.32.41.38