94.189.241.130
Classification: Malicious
94.189.241.130 is a malicious IP address in Belgrade, RS. Linked to Zeroaccess malware. 3 sightings from Barracuda and Hybrid-Analysis, last seen 2026-10-14.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Malware families: ZEROACCESS (S0027)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2019-05-13 10:01:05 | 2026-10-14 11:11:09 | attacker malicious-activity | |
| Backdoor.ZAccess | Hybrid-Analysis | 2019-05-13 10:01:05 | 2019-05-13 10:07:40 | S0027 Zeroaccess |
Whois information
- AS name
- AS31042 Yettel d.o.o.
- AS registry
- ripencc
- AS date
- 2008-08-20 00:00:00
- AS CIDR
- 94.189.192.0/18
- Registrant
- Yettel d.o.o.
- City
- Belgrade
- Postal code
- 11167
- Country
- RS — Serbia 🇷🇸
- First indexed
- 2019-05-13 10:01:05
- Last updated
- 2026-10-14 11:11:11