89.41.173.201
Classification: Neutral
89.41.173.201 is a neutral IP address. Reported by 2 threat sources, last seen 2021-05-01. Network: AS199524 G-Core Labs Customer assignment.
MITRE ATT&CK associations
Malware families: PONY (S0453) LOKIBOT (S0447)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Lokibot | Cybercrime-tracker.net | 2019-06-18 00:00:00 | 2021-05-01 11:14:35 | malicious-activity | S0447 Lokibot |
| Pony | Cybercrime-tracker.net | 2019-06-18 00:00:00 | 2021-04-04 11:51:57 | malicious-activity | S0453 Pony |
| Generic.Malware | Hybrid-Analysis | 2019-06-18 14:00:10 | 2019-06-18 14:00:10 | ||
| Gen:Variant.Midie | Hybrid-Analysis | 2019-06-11 14:00:34 | 2019-06-11 14:00:34 | ||
| Gen:Variant.Razy | Hybrid-Analysis | 2019-06-11 09:15:25 | 2019-06-11 09:15:25 |
Whois information
- AS name
- AS199524 G-Core Labs Customer assignment
- AS registry
- ripencc
- AS date
- 2005-11-29 00:00:00
- AS CIDR
- 89.41.173.0/24
- Registrant
- G-Core Labs Customer assignment
- City
- Luxembourg
- Postal code
- L-1341
- Country
- LU — Luxembourg 🇱🇺
- First indexed
- 2019-06-11 09:15:25
- Last updated
- 2026-09-13 00:30:44