201.50.22.27

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
73% Elevated
21 reports
17 reporters · latest 1 day ago
ISP
ZenoX AI
Usage Type
Data Center/Web Hosting/Transit
ASN
Unknown
Hostname(s)
sparrow.scan.zenox.ai
Domain Name
zenox.ai
Country
🇫🇷 France
City
Lille, Hauts-de-France
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
21 from 17 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 6 🇫🇷 France 6 🇺🇸 United States of America 3
Most common categories Port Scan 13 Web App Attack 5 Hacking 4 Brute-Force 3 Bad Web Bot 3
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 Aurealize
firewall port scanning detected. 2 or more observation(s) from 2026-11-06T05:09:55.000Z through 2026-11-06T05:09:57.000Z.
Port Scan
Anonymous
2026-11-05T16:10:32.624272+13:00 fbsj-server sshd[2015795]: banner exchange: Connection from 201.50.22.27 port 42621: invalid format ...
Brute-Force SSH
🇩🇪 Ilop
[hp-100] 4 unsolicited packets to honeypot ports 88,8082,8089,8445 (OCI DShield sensor)
Port Scan
🇨🇦 dpinse
Honeypot [honeypot-ca-sensor1]: SMB traffic on port 445
Hacking
🇩🇪 nidaren
201.50.22.27 - - [05/Nov/2026:02:03:21 +0100] "\x16\x03\x01\x05\xE2\x01\x00\x05\xDE\x03\x03)\x92\xCC\xD2x\x1F" 400 150 "-" "-" ...
Bad Web Bot Web App Attack
🇮🇱 Ilop
[v5-99] Port scan: 3 packet(s) from 201.50.22.27 to 3 distinct destination ports (7778,8085,9099) blocked at the perimeter (automated sensor)
Port Scan
🇩🇪 Ilop
[v7-22] Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=8008,8088,9010, src_ip=201.50.22.27
Port Scan Hacking
🇮🇱 Ilop
[v4-00] Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=808,8808,99, src_ip=201.50.22.27
Port Scan Hacking
🇺🇸 avgsmoe
Connection to a honeypot port. Automated report (firemon).
Port Scan
🇺🇸 thefuzz4
SSH tarpit (endlessh): 2 unsolicited connection(s) to port 22. Automated report.
Brute-Force SSH
🇩🇪 schuh
27-10-2026:09:46:01UTC [Port Scan] unique_ports:4 ports:2122,9100,10000,55555 (4 packets). SRC=201.50.22.27 TTL=54 DF PROTO=TCP SPT=49076 DPT=2122 SYN
Port Scan
🇩🇪 ManagedStack
Probing access to unauthorized locations
Hacking Exploited Host Web App Attack
🇳🇱 taivas.nl
General_bad_requests
Bad Web Bot
🇸🇬 anotherwatcher
bad bot
Bad Web Bot
🇫🇷 Coco Bongo
1792457255 - 10/20/2026 02:47:35 Host: 201.50.22.27/201.50.22.27 Port: 88 TCP Blocked ...
Port Scan

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇳🇱 195.178.110.26
🇵🇰 110.38.8.83
🇮🇳 106.219.180.219
🇺🇸 99.89.253.111
🇨🇳 54.223.139.243
🇲🇾 47.254.242.200
🇪🇪 37.157.91.62
🇹🇼 35.185.139.127
🇺🇸 209.139.115.95
🇩🇪 194.88.98.94
🇦🇷 190.2.121.156
🇻🇳 171.231.197.44
🇨🇳 122.193.10.215
🇻🇳 116.110.213.124
🇧🇪 35.210.173.193
🇨🇭 179.43.153.10
🇪🇸 157.240.5.207
🇺🇸 65.49.20.67
🇺🇸 64.62.197.188
🇨🇦 57.134.36.126
feedback