142.11.195.231
Classification: Malicious
142.11.195.231 is a malicious IP address in Dallas, US. Linked to Bumblebee malware. 7 sightings from 4 threat sources (Mail Spammer), last seen 2026-10-09.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Malware families: BUMBLEBEE (S1039)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2023-04-19 08:17:38 | 2026-10-09 20:08:34 | attacker malicious-activity | |
| ET CNC Feodo Tracker Reported CnC Server UDP | Emerging Threats | 2023-04-21 11:43:07 | 2023-06-09 10:48:17 | malicious-activity | |
| ET CNC Feodo Tracker Reported CnC Server TCP | Emerging Threats | 2023-04-23 09:17:54 | 2023-06-09 10:48:14 | malicious-activity | |
| BumbleBee | FeodoTracker Abuse.ch | 2023-04-20 00:00:21 | 2023-05-08 00:00:16 | malicious-activity | S1039 Bumblebee |
| BumbleBee | ThreatFox Abuse.ch | 2023-04-19 08:17:37 | 2023-04-21 07:19:37 | malicious-activity | S1039 Bumblebee |
Tags
c&c port:443 coldtrain shellsting shindigWhois information
- AS name
- AS54290 HostPapa
- AS registry
- arin
- AS date
- 2012-06-22 00:00:00
- AS CIDR
- 142.11.192.0/18
- CIDR
- 142.11.192.0/18
- Registrant
- HostPapa
- Address
- 12101 Tukwila International Blvd, 3rd Floor, Suite 320
- City
- Dallas
- State
- TX
- Postal code
- 75270
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected]
- First indexed
- 2023-04-19 08:17:37
- Last updated
- 2026-10-09 20:08:35
Malicious IPs in the same CIDR
142.11.194.99 142.11.250.8 142.11.194.182 142.11.195.231 142.11.237.178 142.11.214.36