5.53.125.205

Classification: Suspicious

5.53.125.205 is a suspicious IP address in Saint Petersburg, RU. Linked to Socgholish malware. 51 sightings, last seen 2026-09-03.

MITRE ATT&CK associations

Malware families: SOCGHOLISH (S1124)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Mail Spammer Barracuda 2026-09-03 02:56:04 2026-09-03 02:56:04 attacker malicious-activity
FAKEUPDATES ThreatFox Abuse.ch 2024-06-27 07:19:04 2024-06-29 06:23:33 malicious-activity S1124 SocGholish

Tags

keitarotds socgholish port:443 fakeupdate

Whois information

AS name
AS49505 Selectel Network
AS registry
ripencc
AS date
2012-05-29 00:00:00
AS CIDR
5.53.124.0/23
Registrant
Selectel Network
City
Saint Petersburg
Postal code
191186
Country
RU — Russian Federation 🇷🇺
First indexed
2024-06-27 07:19:04
Last updated
2026-09-03 02:56:05

Malicious IPs in the same CIDR

5.53.125.155 5.53.124.147 5.53.124.59 5.53.124.110 5.53.124.193