52.57.120.10
Classification: Suspicious
52.57.120.10 is a suspicious IP address. Linked to Njrat malware. Reported by 1 threat source, last seen 2025-09-01. Network: AS16509 A100 Row GmbH.
MITRE ATT&CK associations
Malware families: NJRAT (S0385)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| NjRAT | ThreatFox Abuse.ch | 2024-10-07 14:17:04 | 2025-09-01 10:19:36 | malicious-activity | S0385 njRAT |
| XWorm | ThreatFox Abuse.ch | 2025-08-13 17:18:03 | 2025-08-22 14:18:59 | malicious-activity | |
| Unknown malware | ThreatFox Abuse.ch | 2025-04-28 07:17:43 | 2025-04-30 06:20:38 | malicious-activity |
Tags
njrat port:17846 bladabindi lime-worm port:18377 port:14673 port:14026 rat port:14987 port:14390 port:10698 port:18053 botnet:default discovery port:12802 port:15638 port:17355 xworm port:15466 port:18890Whois information
- AS name
- AS16509 A100 Row GmbH
- AS registry
- arin
- AS date
- 1991-12-19 00:00:00
- AS CIDR
- 52.57.0.0/16
- CIDR
- 52.0.0.0/10, 52.64.0.0/12
- Registrant
- A100 Row GmbH
- Address
- 410 Terry Ave N.
- City
- Frankfurt am Main
- State
- WA
- Postal code
- 60311
- Country
- DE — Germany 🇩🇪
- Contact email
- [email protected], [email protected], [email protected], [email protected]
- First indexed
- 2024-10-07 14:17:04
- Last updated
- 2026-07-18 23:33:32