50.87.144.20
Classification: Malicious
50.87.144.20 is a malicious IP address in Phoenix, US. 194 sightings from 5 threat sources (HTTP Attacker, Bruteforce), last seen 2026-10-12.
Current activity
- Known attacker — Seen launching attacks over the Internet.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| DDoS Attacker | Blocklist.net.ua | 2026-09-09 16:02:45 | 2026-10-12 16:23:37 | attacker malicious-activity | |
| Empty reason | Blocklist.net.ua | 2026-09-11 16:22:13 | 2026-09-11 16:22:13 | attacker malicious-activity | |
| Bruteforce | AbuseIPDB | 2025-06-17 20:08:35 | 2026-09-10 01:49:49 | attacker malicious-activity | |
| HTTP Attacker | AbuseIPDB | 2025-06-17 22:28:40 | 2026-09-10 01:35:16 | attacker malicious-activity | |
| HTTP Scrapper | AbuseIPDB | 2025-06-20 23:00:29 | 2026-09-09 20:36:32 | attacker malicious-activity | |
| Hacking | AbuseIPDB | 2025-06-17 07:01:46 | 2026-09-09 19:26:53 | attacker malicious-activity | |
| Malicious Host | AbuseIPDB | 2025-06-20 22:52:20 | 2026-09-09 12:43:25 | attacker compromised malicious-activity | |
| SSH Attacker | AbuseIPDB | 2025-06-23 01:52:35 | 2026-09-09 06:00:01 | attacker malicious-activity | |
| Suspicious Host | AbuseIPDB | 2025-06-20 23:00:29 | 2025-09-18 20:01:03 | anomalous-activity | |
| Bruteforce login attacker | Blocklist.de | 2025-06-17 07:53:02 | 2025-06-25 07:11:32 | malicious-activity | |
| HTTP Attacker | Blocklist.de | 2025-06-17 07:16:34 | 2025-06-25 06:35:00 | malicious-activity | |
| Parasite traffic on site cars.autoopora.com. | Blocklist.net.ua | 2024-02-13 05:03:30 | 2024-08-19 13:34:51 | malicious-activity | |
| Parasite traffic on site junkkari.technopol.com.ua. | Blocklist.net.ua | 2024-07-29 13:51:45 | 2024-07-29 13:51:45 | malicious-activity | |
| Parasite traffic on site labzone.kyiv.ua. | Blocklist.net.ua | 2024-07-22 18:46:07 | 2024-07-22 18:46:07 | malicious-activity | |
| Parasite traffic on site advocate.net.ua. | Blocklist.net.ua | 2024-01-03 04:33:19 | 2024-01-03 04:33:19 | malicious-activity | |
| Mail Spammer | Blocklist.de | 2023-07-14 03:31:39 | 2023-07-15 03:35:51 | malicious-activity | |
| IMAP Attacker | Blocklist.de | 2023-07-14 03:26:01 | 2023-07-15 03:30:13 | malicious-activity | |
| Parasite traffic on site bubbletea.com.ua. | Blocklist.net.ua | 2019-12-30 07:20:02 | 2019-12-31 00:51:52 | ||
| Parasite traffic on site word.dredstudio.com. | Blocklist.net.ua | 2019-12-28 07:19:33 | 2019-12-29 00:49:25 | ||
| HTTP Attacker | BadIPs | 2019-01-09 06:52:23 | 2019-01-09 06:52:23 | ||
| HTTP Spammer | Myip.ms | 2018-10-17 08:31:11 | 2018-10-17 08:31:11 |
Tags
mail spam attacker imap pop3 sasl bot abuse apache noscript ddos rfi login bruteforce joomla wordpressWhois information
- AS name
- AS31898 WEBSITEWELCOME.COM
- AS registry
- arin
- AS date
- 2011-01-24 00:00:00
- AS CIDR
- 50.87.0.0/16
- CIDR
- 50.87.0.0/16
- Registrant
- WEBSITEWELCOME.COM
- Address
- 1958 South 950 East
- City
- Phoenix
- State
- AZ
- Postal code
- 85097
- Country
- US — United States 🇺🇸
- Contact email
- [email protected], [email protected]
- First indexed
- 2018-10-17 08:31:11
- Last updated
- 2026-10-12 16:23:37
Malicious IPs in the same CIDR
50.87.144.37 50.87.144.66 50.87.144.58 50.87.144.133 50.87.144.147 50.87.144.181 50.87.144.171 50.87.144.153 50.87.144.177 50.87.144.183 50.87.144.36 50.87.144.115 50.87.144.13 50.87.144.15 50.87.144.31 50.87.144.20 50.87.144.71 50.87.144.11 50.87.144.182