201.50.22.28

Recent Activity This IP has received recent abuse reports, which causes the score to increase.
Abuse Confidence Score
60% Elevated
18 reports
13 reporters · latest 2 days ago
ISP
ZenoX AI
Usage Type
Data Center/Web Hosting/Transit
ASN
Unknown
Hostname(s)
swan.scan.zenox.ai
Domain Name
zenox.ai
Country
🇫🇷 France
City
Lille, Hauts-de-France
Log in to view charts and search reports for this IP. Log In
Example preview
Account required for the enhanced features Log in Sign up

Abuse Reports

Total reports
18 from 13 distinct reporters
First reported
Most recent report
Last 60 days
Top reporter locations 🇩🇪 Germany 6 🇫🇷 France 4 🇺🇸 United States of America 3
Most common categories Port Scan 12 Hacking 5 Web App Attack 3 Brute-Force 2 Bad Web Bot 2
Recent reports We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.
Reporter IoA Timestamp (UTC) Comment Categories
🇺🇸 Aurealize
firewall port scanning detected. 2 or more observation(s) from 2026-11-06T05:09:55.000Z through 2026-11-06T05:09:56.000Z.
Port Scan
🇩🇪 Ilop
[hp-100] 3 unsolicited packets to honeypot ports 445,6666,8123 (OCI DShield sensor)
Port Scan
🇩🇪 Ilop
[v7-22] Blocked by os-abuseipdb; 5 hits, proto=tcp, ports=8084,88,8808,8880,8889, src_ip=201.50.22.28
Port Scan Hacking
🇮🇱 Ilop
[v4-00] Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=10443,8001,9443, src_ip=201.50.22.28
Port Scan Hacking
🇹🇷 kie
04-11-2026:22:00:53UTC [Firewall] Unsolicited connection attempt to blocked port(s): port:TCP:88 port:TCP:444 (4 packet(s) blocked).
Port Scan
🇩🇪 ValtonTahiri
Port Scan
🇩🇪 schuh
27-10-2026:09:46:01UTC [Port Scan] unique_ports:6 ports:6666,8009,8083,8877,8999,9443 (6 packets). SRC=201.50.22.28 TTL=53 DF PROTO=TCP SPT=34907 DPT=6666 SYN
Port Scan
🇺🇸 drewf.ink
[00:13] Probed an open proxy (direct request to the proxy port)
Open Proxy
🇬🇧 thetomtaylor.co.uk
Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [ice02]
Hacking SQL Injection Web App Attack
🇸🇬 drewf.ink
[19:31] Probed an open proxy (direct request to the proxy port)
Open Proxy
🇩🇪 phil2k
DDoS Attack Port Scan
🇩🇪 reznekcs
Blocked by UFW firewall
Brute-Force
🇺🇸 Starburst SysOp Team
Host header is a numeric IP address. Pattern match "(?:^( (920350-stl2-14)
Hacking Bad Web Bot
🇸🇬 Starburst SysOp Team
Host header is a numeric IP address. Pattern match "(?:^( (920350-sin2-2)
Hacking Bad Web Bot
🇫🇷 Stara
Port scan detected - multiple connection attempts to various ports
Port Scan Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇺🇸 162.243.37.199
🇩🇪 69.5.169.106
🇧🇪 34.14.4.216
🇬🇧 167.71.136.105
🇩🇪 164.92.193.233
🇧🇩 114.130.157.198
🇵🇹 87.196.83.163
🇺🇸 52.20.198.190
🇧🇪 35.210.97.115
🇨🇳 218.94.4.146
🇰🇷 183.109.124.136
🇺🇸 162.216.149.64
🇺🇸 91.230.168.200
🇺🇸 20.150.212.98
🇬🇧 193.32.209.239
🇺🇸 162.216.150.164
🇪🇸 158.158.34.156
🇯🇵 111.238.174.6
🇿🇦 102.66.152.125
🇺🇸 65.181.127.40
feedback