209.141.47.99
Classification: Suspicious
209.141.47.99 is a suspicious IP address. Linked to Cobalt Strike malware. Reported by 12 threat sources, last seen 2026-08-07.
MITRE ATT&CK associations
Malware families: COBALT STRIKE (S0154)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| VPN | IPWhois.io | 2025-02-17 03:35:17 | 2026-08-07 13:11:55 | anonymization vpn | |
| Mail Spammer | Barracuda | 2025-02-17 03:35:17 | 2026-08-07 13:11:55 | attacker malicious-activity | |
| SSH Attacker | Blocklist.net.ua | 2024-02-28 08:34:30 | 2024-02-28 08:34:30 | malicious-activity | |
| Cobalt Strike | ThreatFox Abuse.ch | 2022-11-24 12:19:23 | 2023-01-18 02:17:43 | malicious-activity | S0154 Cobalt Strike |
| Anonymizer | Maltiverse Research Team | 2020-11-22 11:11:11 | 2021-03-28 13:57:53 | anonymizer | |
| ET TOR Known Tor Relay/Router (Not Exit) Node TCP Traffic | Emerging Threats | 2019-10-08 01:55:20 | 2020-04-07 08:41:15 | anonymization | |
| ET TOR Known Tor Exit Node TCP Traffic | Emerging Threats | 2019-10-08 01:54:58 | 2020-04-07 08:40:38 | anonymization | |
| HTTP Spammer | Cleantalk.org | 2019-12-13 01:05:04 | 2020-02-23 07:23:52 | ||
| DDoS Attacker | Blocklist.net.ua | 2019-11-24 00:55:16 | 2020-01-24 07:03:53 | ||
| HTTP Spammer | Botscout | 2019-11-14 07:24:15 | 2019-11-14 07:24:15 | ||
| HTTP Spammer | Sblam | 2019-11-14 03:21:01 | 2019-11-14 03:21:01 | ||
| TOR Exit Node | TorProject.org | 2019-10-06 03:09:15 | 2019-11-03 13:32:12 | anonymizer | |
| HTTP Spammer | StopForumSpam.com | 2019-10-10 03:41:24 | 2019-10-10 03:41:24 | ||
| Anonymizer | Maltiverse | 2019-10-06 02:14:09 | 2019-10-06 02:14:09 |
Tags
cobaltstrike frantech solutions agentemis beacon cobeacon port:443 port:80 anonymizer tor bot abuseWhois information
- AS name
- AS53667 Frantech Solutions
- AS registry
- arin
- AS date
- 2011-01-27 00:00:00
- AS CIDR
- 209.141.32.0/19
- CIDR
- 209.141.32.0/19
- Registrant
- Frantech Solutions
- Address
- 1621 Central Ave
- City
- Las Vegas
- State
- NV
- Postal code
- 89101
- Country
- US — United States 🇺🇸
- Contact email
- [email protected]
- First indexed
- 2019-10-06 02:14:09
- Last updated
- 2026-08-07 13:11:57
Malicious IPs in the same CIDR
209.141.33.44 209.141.35.105 209.141.61.17 209.141.51.90 209.141.43.146 209.141.51.180 209.141.32.198 209.141.51.30 209.141.51.29 209.141.51.219 209.141.62.206 209.141.45.141 209.141.43.66 209.141.55.26 209.141.34.155 209.141.44.125 209.141.45.56 209.141.56.103 209.141.35.5 209.141.33.47 209.141.48.24 209.141.34.15 209.141.40.68 209.141.58.254 209.141.45.143