18.192.31.30
Classification: Suspicious
18.192.31.30 is a suspicious IP address. Linked to Njrat malware. Reported by 1 threat source, last seen 2025-09-01. Network: AS16509 A100 Row GmbH.
MITRE ATT&CK associations
Malware families: NJRAT (S0385)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| NjRAT | ThreatFox Abuse.ch | 2024-10-07 14:17:04 | 2025-09-01 10:19:36 | malicious-activity | S0385 njRAT |
| XWorm | ThreatFox Abuse.ch | 2025-08-17 06:20:33 | 2025-08-22 14:18:59 | malicious-activity |
Tags
njrat port:17846 bladabindi lime-worm port:14987 port:14673 port:14005 port:14026 rat port:18377 port:10698 port:19331 port:10095 port:18053 port:15638 port:18858 port:11056 xworm port:15466 port:18890Whois information
- AS name
- AS16509 A100 Row GmbH
- AS registry
- arin
- AS date
- 2019-10-07 00:00:00
- AS CIDR
- 18.192.0.0/15
- CIDR
- 18.64.0.0/10, 18.32.0.0/11, 18.128.0.0/9
- Registrant
- A100 Row GmbH
- Address
- 410 Terry Ave N.
- City
- Frankfurt am Main
- State
- WA
- Postal code
- 60311
- Country
- DE — Germany 🇩🇪
- Contact email
- [email protected], [email protected], [email protected], [email protected]
- First indexed
- 2024-10-07 14:17:04
- Last updated
- 2026-07-24 07:21:01