50.99.170.152

Classification: Malicious

50.99.170.152 is a malicious IP address. Reported by 4 threat sources, last seen 2026-09-05. Network: AS852 Telus Communications Inc..

Current activity

  • Known attacker — Seen launching attacks over the Internet.
  • Known scanner — Seen scanning hosts over the Internet.

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Unauthorized scanning of hosts Blocklist.net.ua 2026-05-18 12:01:24 2026-09-05 16:21:49 attacker malicious-activity reconnaissance
Empty reason Blocklist.net.ua 2026-09-04 16:23:49 2026-09-04 16:23:49 attacker malicious-activity
SSH Attacker Blocklist.de 2026-03-26 10:10:26 2026-09-03 14:02:49 attacker malicious-activity
Malicious Host AbuseIPDB 2026-03-25 23:05:09 2026-06-03 07:00:12 malicious-activity
Bruteforce login attacker Blocklist.de 2026-03-29 05:01:26 2026-05-18 05:02:22 malicious-activity
HTTP Attacker Blocklist.de 2026-03-29 03:01:37 2026-05-18 03:02:25 malicious-activity
FTP Attacker Blocklist.de 2026-03-27 06:00:19 2026-05-08 06:00:16 malicious-activity
Malicious Host HoneyDB 2026-03-25 00:00:00 2026-05-07 00:00:00 malicious-activity
SSH Attacker AbuseIPDB 2026-03-25 15:06:42 2026-03-26 00:05:11 malicious-activity
Bruteforce AbuseIPDB 2026-03-25 15:06:42 2026-03-26 00:05:11 malicious-activity
HTTP Attacker AbuseIPDB 2026-03-25 21:06:17 2026-03-25 21:35:47 malicious-activity
Hacking AbuseIPDB 2026-03-25 15:06:42 2026-03-25 21:35:47 malicious-activity
Port Scanner AbuseIPDB 2026-03-25 18:39:23 2026-03-25 21:08:36 anomalous-activity
HTTP Scrapper AbuseIPDB 2026-03-25 21:06:17 2026-03-25 21:06:17 anomalous-activity
FTP Attacker AbuseIPDB 2026-03-25 18:39:43 2026-03-25 18:39:43 malicious-activity

Tags

ssh bruteforce bot attacker ftp apache ddos rfi login joomla wordpress abuse

Whois information

AS name
AS852 Telus Communications Inc.
Registrant
Telus Communications Inc.
City
Hinton
Postal code
T7V 2B2
Country
CA — Canada 🇨🇦
First indexed
2026-03-26 00:06:42
Last updated
2026-09-05 16:21:49