185.140.53.8

Classification: Malicious

185.140.53.8 is a malicious IP address in London, GB. Linked to Asyncrat malware. 73 sightings from 13 threat sources (Proxy), last seen 2026-10-07.

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Open proxy — Provides anonymization that can hide an attacker.

MITRE ATT&CK associations

Malware families: ASYNCRAT (S1087)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Proxy IPWhois.io 2025-03-27 15:31:09 2026-10-07 02:44:14 anonymization proxy
Mail Spammer Barracuda 2025-03-27 15:31:09 2026-10-07 02:44:14 attacker malicious-activity
Proxy FireHOL 2023-03-13 01:32:31 2025-10-07 01:49:50 anonymization
Asyncrat Maltrail 2025-03-27 13:45:29 2025-03-27 13:45:29 malicious-activity S1087 AsyncRAT
Trojan.Generic Hybrid-Analysis 2021-11-09 08:00:07 2021-11-09 08:00:12
Malicious site Hybrid-Analysis 2021-10-27 21:15:07 2021-10-27 21:15:07
Anonymizer Maltiverse Research Team 2021-03-07 13:03:26 2021-05-19 18:01:21 anonymizer
HTTP Spammer StopForumSpam.com 2020-10-14 06:36:22 2021-05-17 09:28:14 malicious-activity
HTTP Spammer Sblam 2020-11-11 04:38:01 2021-03-11 04:04:31 malicious-activity
Anonymizer Maltiverse 2021-03-07 03:23:31 2021-03-07 03:23:31
ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic Emerging Threats 2020-10-06 05:04:20 2021-02-19 16:03:19 anonymization
ET TOR Known Tor Exit Node TCP Traffic Emerging Threats 2020-10-06 05:03:28 2021-02-19 16:00:26 anonymization
TOR Exit Node TorProject.org 2020-10-03 06:02:55 2021-02-17 17:28:22 anonymizer
SSH Attacker Blocklist.net.ua 2020-11-02 08:35:51 2021-02-12 11:15:43 malicious-activity
Malicious Host HoneyDB 2020-10-10 00:00:00 2021-02-09 00:00:00 malicious-activity
ET COMPROMISED Known Compromised or Hostile Host Traffic UDP Emerging Threats 2021-01-20 12:20:47 2021-02-08 14:44:54 malicious-activity
ET COMPROMISED Known Compromised or Hostile Host Traffic TCP Emerging Threats 2021-01-20 12:20:44 2021-02-08 14:44:50 malicious-activity
Parasite SEO Blocklist.net.ua 2021-01-01 18:45:51 2021-01-02 10:17:56 malicious-activity
DDoS Attacker Blocklist.net.ua 2020-11-18 02:06:14 2020-12-27 09:27:06 malicious-activity
Generic.Malware Hybrid-Analysis 2019-12-05 19:45:09 2020-04-20 07:45:35
Trojan.VBS.Agent Hybrid-Analysis 2019-12-02 19:00:22 2019-12-02 19:00:23

Tags

anonymization tor anonymizer bot abuse port:6060

Whois information

AS name
AS201801 Zerospace Cloud
AS registry
ripencc
AS date
2016-02-24 00:00:00
AS CIDR
185.140.53.0/24
CIDR
185.140.53.0/24
Registrant
Zerospace Cloud
Address
Suite 9, Ansuya Estate Revolution Avenue Mahe, Seychelles
City
London
Postal code
WC1V
Country
GB — United Kingdom 🇬🇧
Contact email
[email protected]
First indexed
2019-12-02 19:00:22
Last updated
2026-10-07 02:44:15

Malicious IPs in the same CIDR

185.140.53.9 185.140.53.8