142.11.237.178
Classification: Malicious
142.11.237.178 is a malicious IP address in Dallas, US. Linked to Bazar malware. 5 sightings from 3 threat sources (Mail Spammer), last seen 2026-10-09.
Current activity
- Known attacker — Seen launching attacks over the Internet.
MITRE ATT&CK associations
Malware families: BAZAR (S0534)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mail Spammer | Barracuda | 2022-01-22 00:00:48 | 2026-10-09 07:18:07 | attacker malicious-activity | |
| ET CNC Feodo Tracker Reported CnC Server UDP | Emerging Threats | 2022-02-03 04:01:21 | 2022-03-11 01:54:14 | malicious-activity | |
| ET CNC Feodo Tracker Reported CnC Server TCP | Emerging Threats | 2022-02-03 04:01:20 | 2022-03-11 01:54:13 | malicious-activity | |
| BazarLoader | FeodoTracker Abuse.ch | 2022-01-22 00:00:48 | 2022-02-10 00:00:19 | malicious-activity | S0534 Bazar |
Tags
c&cWhois information
- AS name
- AS54290 HostPapa
- AS registry
- arin
- AS date
- 2012-06-22 00:00:00
- AS CIDR
- 142.11.192.0/18
- CIDR
- 142.11.192.0/18
- Registrant
- HostPapa
- Address
- 12101 Tukwila International Blvd, 3rd Floor, Suite 320
- City
- Dallas
- State
- TX
- Postal code
- 75270
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected]
- First indexed
- 2022-01-22 00:00:48
- Last updated
- 2026-10-09 07:18:08
Malicious IPs in the same CIDR
142.11.194.99 142.11.250.8 142.11.194.182 142.11.195.231 142.11.237.178 142.11.214.36