201.50.22.40
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- ZenoX AI
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- Unknown
- Hostname(s)
- flamingo.scan.zenox.ai
- Domain Name
- zenox.ai
- Country
- 🇫🇷 France
- City
- Lille, Hauts-de-France
Abuse Reports
Total reports
10 from
10 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 Aurealize |
firewall port scanning detected. 2 or more observation(s) from 2026-11-06T05:09:56.000Z through 2026-11-06T05:09:57.000Z.
|
Port Scan | |
| 🇧🇷 ICS Labs |
ICS Labs threat intelligence (ICS Feeds): Brute-Force, Exploited Host. Last observed 2026-11-05 UTC.
|
Brute-Force Exploited Host | |
| 🇺🇸 drewf.ink |
[17:38] Probed an open proxy (direct request to the proxy port)
|
Open Proxy | |
| 🇺🇸 knock |
Knock-Knock honeypot brute-force: HTTP (2 total hits)
|
Web App Attack | |
| 🇩🇪 ghostwarriors |
Attempts against non-existent wp-login
|
Brute-Force Web App Attack | |
| Anonymous |
Fail2Ban triggered
|
Web App Attack | |
| 🇩🇪 ecs.ge |
Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.
|
Web App Attack Hacking | |
| 🇩🇪 schuh |
27-10-2026:09:46:01UTC [Port Scan] unique_ports:6 ports:444,5555,8085,8181,8899,9191 (6 packets). SRC=201.50.22.40 TTL=54 DF PROTO=TCP SPT=17194 DPT=444 SYN
|
Port Scan | |
| 🇩🇪 jann |
Honeypot: connection to unused port 445 at 2026-10-27 09:29:28 UTC. No service runs there, any connection is unsolicited scanning.
|
Port Scan | |
| 🇩🇪 mailox |
2026-10-27T09:50:13.892846+02:00 REDACTED dovecot[1774877]: imap-login: Login aborted: Too many invalid commands (no auth attempts in 0 secs) (no_auth_attempts): user=<>, rip=201.50.22.40, lip=REDACTED, TLS, session=<6+1ass1eWaXJMhYo>
...
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown