99.47.138.226
Classification: Malicious
99.47.138.226 is a malicious IP address in El Paso, US. 256 sightings from 3 threat sources (Port Scanner, Bruteforce), last seen 2026-11-06.
Current activity
- Known attacker — Seen launching attacks over the Internet.
- Known scanner — Seen scanning hosts over the Internet.
- IoT threat — Seen attacking IoT devices.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Port Scanner | AbuseIPDB | 2026-08-14 03:00:36 | 2026-11-06 06:49:26 | malicious-activity reconnaissance | |
| HTTP Scrapper | AbuseIPDB | 2026-11-03 19:55:46 | 2026-11-05 16:54:03 | anomalous-activity | |
| HTTP Attacker | AbuseIPDB | 2026-08-13 03:24:20 | 2026-11-05 16:54:03 | attacker malicious-activity | |
| IoT Attacker | AbuseIPDB | 2026-08-20 09:56:44 | 2026-11-03 20:53:38 | iot malicious-activity | |
| Bruteforce | AbuseIPDB | 2026-08-13 07:18:45 | 2026-11-03 19:55:46 | attacker malicious-activity | |
| Hacking | AbuseIPDB | 2026-08-13 14:57:49 | 2026-11-02 02:04:19 | attacker malicious-activity | |
| SSH Attacker | AbuseIPDB | 2026-08-13 07:18:45 | 2026-11-01 23:24:09 | attacker malicious-activity | |
| DDoS Attacker | AbuseIPDB | 2026-08-22 08:44:12 | 2026-08-22 08:44:12 | attacker malicious-activity | |
| Malicious Host | HoneyDB | 2026-08-14 00:00:00 | 2026-08-22 00:00:00 | attacker malicious-activity | |
| SSH Attacker | Blocklist.de | 2026-08-16 14:00:54 | 2026-08-16 14:00:54 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2026-08-13 14:57:49 | 2026-08-13 14:57:49 | attacker compromised malicious-activity |
Tags
ssh bruteforce botWhois information
- AS name
- AS7018 AT&T Enterprises, LLC
- Registrant
- AT&T Enterprises, LLC
- City
- El Paso
- State
- TX
- Postal code
- 79941
- Country
- US — United States 🇺🇸
- First indexed
- 2026-08-14 22:04:25
- Last updated
- 2026-11-07 03:12:09