31.56.48.238
Classification: Malicious
31.56.48.238 is a malicious IP address. Linked to Darkwatchman malware. Reported by 1 threat source, last seen 2026-09-02.
Current activity
- Command & Control server — Used by cybercriminals to control victim computers.
MITRE ATT&CK associations
Malware families: DARKWATCHMAN (S0673)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| DarkWatchman | ThreatFox Abuse.ch | 2026-09-02 08:19:46 | 2026-09-02 08:25:04 | botnet malicious-activity | S0673 DarkWatchman |
Tags
port:443 darkwatchmanWhois information
- AS name
- AS56971 CGI GLOBAL LIMITED
- Registrant
- CGI GLOBAL LIMITED
- City
- Paris
- Postal code
- 75004
- Country
- FR — France 🇫🇷
- First indexed
- 2026-09-02 08:25:04
- Last updated
- 2026-09-02 08:25:04