89.32.41.42
Classification: Malicious
89.32.41.42 is a malicious IP address in Timisoara, RO. 505 sightings from 7 threat sources (Bruteforce, Mirai), last seen 2026-10-14.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2024-11-23 23:00:18 | 2026-10-14 04:00:15 | attacker malicious-activity | |
| Bruteforce | AbuseIPDB | 2025-02-08 18:00:51 | 2026-10-14 02:00:02 | attacker malicious-activity | |
| Hacking | AbuseIPDB | 2025-02-08 16:36:26 | 2026-10-14 02:00:02 | attacker malicious-activity | |
| Mail Spammer | AbuseIPDB | 2026-09-29 10:27:25 | 2026-10-13 16:52:12 | attacker malicious-activity | |
| Port Scanner | AbuseIPDB | 2025-02-08 16:36:26 | 2026-10-13 14:22:01 | malicious-activity reconnaissance | |
| DDoS Attacker | AbuseIPDB | 2026-10-10 20:18:30 | 2026-10-10 20:18:30 | attacker malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2025-02-10 04:28:47 | 2026-10-10 08:19:48 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2025-02-09 08:32:15 | 2026-10-10 08:19:48 | attacker malicious-activity | |
| DNS Compromise | AbuseIPDB | 2026-10-02 18:45:51 | 2026-10-10 08:19:48 | compromised malicious-activity | |
| DNS Poisoning | AbuseIPDB | 2026-10-02 18:45:51 | 2026-10-10 08:19:48 | compromised malicious-activity | |
| Phishing | AbuseIPDB | 2026-10-02 18:45:51 | 2026-10-10 08:19:48 | malicious-activity phishing | |
| SIP Attacker | Blocklist.de | 2026-10-07 13:00:04 | 2026-10-07 13:00:04 | attacker malicious-activity | |
| SIP Attacker | AbuseIPDB | 2026-09-29 13:45:29 | 2026-10-06 02:56:34 | attacker malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2025-02-10 04:28:47 | 2026-10-05 22:27:03 | anomalous-activity | |
| MooBot | ThreatFox Abuse.ch | 2025-02-12 06:17:02 | 2025-02-14 05:24:59 | malicious-activity | |
| Malware Download | URLhaus Abuse.ch | 2025-02-09 13:25:48 | 2025-02-11 20:25:48 | malicious-activity | |
| DDoS attack | AbuseIPDB | 2025-02-08 21:05:12 | 2025-02-10 06:29:06 | malicious-activity | |
| Malicious Host | AbuseIPDB | 2025-02-08 16:36:26 | 2025-02-10 06:29:06 | compromised malicious-activity | |
| IoT Attacker | AbuseIPDB | 2025-02-08 21:05:12 | 2025-02-09 00:26:29 | malicious-activity | |
| Mirai | ThreatFox Abuse.ch | 2024-11-21 16:17:07 | 2024-11-25 05:18:35 | malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP UDP | Emerging Threats | 2021-01-28 02:38:08 | 2021-01-29 13:01:46 | malicious-activity | |
| ET CINS Active Threat Intelligence Poor Reputation IP TCP | Emerging Threats | 2021-01-28 02:38:06 | 2021-01-29 13:01:44 | malicious-activity | |
| Malicious Host | CIArmy | 2021-01-27 12:01:09 | 2021-01-28 03:34:58 | malicious-activity |
Tags
mirai rrdns port:1311 katana alex hailbotskidrip kamru micheal port:2345 elf fbi.gov as48874 c2 censys port:80 sip bruteforce bot attackerWhois information
- AS name
- AS48874 NETPROTECT SRL
- AS registry
- ripencc
- AS date
- 2005-11-29 00:00:00
- AS CIDR
- 89.32.41.0/24
- Registrant
- NETPROTECT SRL
- City
- Timisoara
- Postal code
- 300789
- Country
- RO — Romania 🇷🇴
- First indexed
- 2021-01-27 12:01:09
- Last updated
- 2026-10-14 04:00:19
Malicious IPs in the same CIDR
89.32.41.146 89.32.41.117 89.32.41.42 89.32.41.43 89.32.41.19 89.32.41.38