52.58.78.16

Classification: Whitelisted

52.58.78.16 is a whitelisted (trusted) IP address listed by Maltiverse. 92 sightings from 17 threat sources, last seen 2026-10-09.

Current activity

  • Open proxy — Provides anonymization that can hide an attacker.
  • Hosting provider — Shared hosting infrastructure.

MITRE ATT&CK associations

Malware families: PONY (S0453)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Proxy IPWhois.io 2026-07-21 09:16:18 2026-10-09 07:18:01 anonymization proxy
Hosting Provider Maltiverse 2026-07-21 09:16:19 2026-07-21 09:16:19 benign hosting
Unauthorized scanning of hosts Blocklist.net.ua 2024-12-08 14:07:44 2024-12-08 14:07:44 malicious-activity
virut Maltiverse Research Team 2018-10-03 02:04:50 2022-02-16 00:58:14 malicious-activity
Phishing site Hybrid-Analysis 2020-09-15 20:30:49 2021-10-16 13:16:33
Malware Hybrid-Analysis 2021-02-25 14:31:32 2021-09-26 14:30:06
Malicious site Hybrid-Analysis 2019-03-27 04:45:05 2021-09-13 16:15:31
Trojan.Generic Hybrid-Analysis 2020-04-01 07:31:19 2021-08-13 13:16:18
Kryptik.ACJR Hybrid-Analysis 2021-08-12 08:30:17 2021-08-12 08:30:17
Malware site Hybrid-Analysis 2019-02-15 17:45:03 2021-08-07 15:45:05
Trojan.Kryptik Hybrid-Analysis 2021-08-05 10:45:13 2021-08-05 10:45:13
Gen:Variant.Bulz Hybrid-Analysis 2021-08-04 14:45:45 2021-08-04 14:45:45
Malware.Generic Hybrid-Analysis 2021-04-15 19:01:32 2021-07-29 14:15:49
BehavesLike.VBS.Dropper Hybrid-Analysis 2021-06-28 12:45:33 2021-07-12 13:16:39
Injector.EPMJ Hybrid-Analysis 2021-07-07 19:45:34 2021-07-07 20:30:45
DangerousObject.Multi Hybrid-Analysis 2018-11-20 12:30:06 2021-06-28 12:45:26
Artemis Hybrid-Analysis 2020-12-28 07:31:03 2021-06-25 17:45:16
Gen:Variant.Nemesis Hybrid-Analysis 2021-06-11 09:45:10 2021-06-11 09:45:10
Backdoor.MSIL Hybrid-Analysis 2021-06-04 10:17:05 2021-06-04 11:30:22
Generic.Malware Hybrid-Analysis 2018-08-06 16:00:49 2021-04-29 16:21:49
Injector.AHD.gen Hybrid-Analysis 2021-04-26 13:16:06 2021-04-26 14:07:04
Scr.Malcode Hybrid-Analysis 2021-04-15 15:06:45 2021-04-15 15:06:45
RATX Hybrid-Analysis 2021-04-01 11:00:26 2021-04-01 11:51:27
Cutwail Hybrid-Analysis 2021-03-26 22:00:43 2021-03-26 22:01:28
Unsafe.AI_Score_99% Hybrid-Analysis 2021-03-25 09:00:17 2021-03-25 09:00:27
Malicious url Cyber Threat Coalition 2020-12-14 17:09:21 2021-03-04 17:44:51 malicious-activity
Malicious Hostname Cyber Threat Coalition 2020-12-16 04:40:47 2021-03-03 13:32:25 malicious-activity
Kryptik.ZTA Hybrid-Analysis 2021-02-23 02:45:09 2021-02-23 02:45:10
Social Engineering Cyber Threat Coalition 2021-01-29 08:16:26 2021-01-29 08:16:26 malicious-activity
Kryptik.imbgc Hybrid-Analysis 2021-01-22 07:00:22 2021-01-22 07:00:25
HEUR:Trojan.MSIL.Taskun Hybrid-Analysis 2021-01-21 16:00:29 2021-01-21 16:00:29
Gen:Variant.Symmi Hybrid-Analysis 2021-01-18 06:15:24 2021-01-18 06:15:24
Gen:Variant.Zusy Hybrid-Analysis 2020-10-07 14:15:14 2021-01-12 21:30:46
ATRAPS.Gen Hybrid-Analysis 2020-12-21 15:19:23 2020-12-21 15:19:31
EncDoc.TET Hybrid-Analysis 2020-12-21 08:30:24 2020-12-21 08:30:36
Covid19 scam Cyber Threat Coalition 2020-11-20 21:53:37 2020-12-13 22:05:25 malicious-activity
BehavesLike.Generic Hybrid-Analysis 2020-10-25 14:00:14 2020-10-25 14:00:14
Kryptik.XSA Hybrid-Analysis 2020-09-14 15:30:13 2020-09-14 15:30:16
Phishing RuneScape Phishtank 2020-09-01 19:59:20 2020-09-01 19:59:20 compromised malicious-activity
Covid19 scam DomainTools 2020-04-19 18:06:19 2020-08-25 02:01:08 malicious-activity
AD.Swotter Hybrid-Analysis 2020-07-23 00:45:26 2020-07-23 00:45:29
uber phishing Antiphishing.com.ar 2019-09-17 08:20:52 2020-07-15 10:21:13
HEUR:Backdoor.MSIL.Crysan Hybrid-Analysis 2020-07-02 14:15:58 2020-07-02 14:15:59
Gen:Variant.Graftor Hybrid-Analysis 2020-06-18 14:15:26 2020-06-18 14:15:29
Gen:Variant.Razy Hybrid-Analysis 2020-06-17 15:30:06 2020-06-17 15:30:15
Covid19 scam CCN-CERT 2020-04-12 22:25:09 2020-06-02 11:03:58 malicious-activity
Injector.EMBN Hybrid-Analysis 2020-06-01 05:45:12 2020-06-01 05:45:12
Adware.ADON potentially unwanted Hybrid-Analysis 2020-05-28 17:45:40 2020-05-28 17:45:40
linkedin phishing Antiphishing.com.ar 2018-11-05 07:51:47 2020-05-18 02:47:16
Malicious domain Telefonica Peru 2020-04-08 17:57:55 2020-04-10 04:39:03
Simda Bambernek 2017-10-15 13:02:46 2020-04-04 19:05:02 anomalous-activity
Gen:Variant.Ulise Hybrid-Analysis 2020-03-27 07:45:12 2020-03-27 07:45:16
Downloader.FI.gen Hybrid-Analysis 2020-03-24 15:15:12 2020-03-24 15:15:12
IOC_03032020 CronUp Threat Intel 2020-03-03 05:51:08 2020-03-03 05:51:08
Trojan.Injector Hybrid-Analysis 2020-02-21 15:00:32 2020-02-21 15:00:33
Kryptik.BBL.gen Hybrid-Analysis 2020-02-08 17:15:36 2020-02-08 17:15:39
Matsnu Bambernek 2020-01-21 00:39:47 2020-01-21 00:39:47
Dropper.p Hybrid-Analysis 2020-01-15 04:15:04 2020-01-15 04:15:05
Gen:Heur.PonyStealer Hybrid-Analysis 2019-12-17 14:45:11 2019-12-17 14:45:13
DeepScan:Generic.Sality.3 Hybrid-Analysis 2019-12-07 08:15:04 2019-12-07 08:15:04
banjori Bambernek 2018-10-09 06:48:31 2019-11-23 12:14:03 malicious-activity
Possible_HPGen Hybrid-Analysis 2019-11-22 08:15:27 2019-11-22 08:15:27
Virus.Sality Hybrid-Analysis 2019-10-25 18:15:07 2019-11-05 14:45:16
Backdoor.Sinowal Hybrid-Analysis 2019-10-22 21:45:19 2019-10-22 21:45:19
suspicious.low.ml Hybrid-Analysis 2019-09-23 04:30:06 2019-09-23 04:30:06
Pykspa Bambernek 2019-06-28 08:07:57 2019-06-28 08:07:57
suppobox Maltiverse Research Team 2019-05-14 01:33:10 2019-05-14 01:33:10
Gen:Variant.Adware.MultiPlug Hybrid-Analysis 2019-04-06 13:45:10 2019-04-06 13:45:10
Gen:Heur.Fareit Hybrid-Analysis 2019-03-05 21:45:07 2019-03-05 21:45:07 S0453 Pony
Nemucod.IM Hybrid-Analysis 2019-02-27 03:49:03 2019-02-27 03:49:03
CVE-2017-11882 Hybrid-Analysis 2019-01-31 12:34:02 2019-01-31 13:00:40
HTML:PhishingAdb Hybrid-Analysis 2019-01-25 16:33:50 2019-01-25 16:33:50
Malicious Host APT Notes 2019-01-12 08:45:22 2019-01-12 08:45:22
Gen:Variant.Kazy Hybrid-Analysis 2019-01-03 03:45:05 2019-01-03 03:45:05
Trojan.JS.Iframe Hybrid-Analysis 2018-10-03 03:15:14 2018-10-23 03:15:07
FakejQuery.B Hybrid-Analysis 2018-10-09 06:15:14 2018-10-09 06:15:14
simda Maltiverse 2018-03-25 08:57:51 2018-10-06 19:11:44
Nymaim Bambernek 2018-10-02 07:19:04 2018-10-02 07:19:04
Backdoor.Generic Hybrid-Analysis 2018-09-11 13:15:08 2018-09-11 13:15:08
Virut Bambernek 2018-08-12 06:46:47 2018-08-12 06:46:47
Suppobox Bambernek 2018-05-31 06:33:19 2018-05-31 06:33:19
Phishing Phishtank 2018-05-14 17:05:28 2018-05-14 17:05:28
virut Maltiverse 2018-04-02 11:26:01 2018-04-02 11:26:01
backdoor ,sinkhole Maltiverse 2018-03-19 22:18:38 2018-03-19 22:18:38
evasive Maltiverse 2018-03-16 21:03:06 2018-03-16 21:03:06
Defacement Zone-H 2018-01-03 19:28:50 2018-01-03 19:28:50
apt Maltiverse 2017-11-10 01:36:21 2017-11-10 01:36:21
banker,ransomware,shade,troldesh,tvrat,zbot Maltiverse 2017-10-18 06:04:42 2017-10-18 06:04:42
Ransomware Locky distribution site Ransomware Tracker 2017-10-15 17:37:49 2017-10-15 17:37:49
ZeuS Cybercrime-tracker.net 2017-10-15 16:22:46 2017-10-15 16:22:46
Cythosia Cybercrime-tracker.net 2017-10-15 15:38:42 2017-10-15 15:38:42

Tags

c&c c2 dga malware simda evasive backdoor sinkhole phishing suppobox virut nymaim banjori https://www.threatminer.org/report.php?q=on the hunt for fin7_ pursuing an enigmatic and evasive global criminal operation « on the hunt for fin7_ pursuing an enigmatic and evasive global criminal operation _ fireeye inc.pdf&y=2018 pykspa matsnu covid19 coronavirus scam abuse

Whois information

AS name
AS16509 A100 ROW GmbH
AS registry
arin
AS date
2015-09-02 00:00:00
AS CIDR
52.58.0.0/15
CIDR
52.58.0.0/15
Registrant
A100 ROW GmbH
Address
Marcel-Breuer-Strasse 10
City
Frankfurt am Main
State
PostalCode: 80807
Postal code
60256
Country
DE — Germany 🇩🇪
Contact email
[email protected], [email protected]
First indexed
2017-10-15 13:02:46
Last updated
2026-10-09 07:18:02

Malicious IPs in the same CIDR

52.59.199.1