JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 202.50.55.105

202.50.55.105 was found in our database!

This IP was reported 54 times. Confidence of Abuse is 100%: ?

100%

ISP	Zappie Host LLC
Usage Type	Data Center/Web Hosting/Transit
ASN	AS56655
Domain Name	zappiehost.com
Country	🇳🇴 Norway
City	Sandefjord, Vestfold

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 202.50.55.105

Whois 202.50.55.105

IP Abuse Reports for 202.50.55.105:

This IP address has been reported a total of 54 times from 50 distinct sources. 202.50.55.105 was first reported on June 5th 2026, and the most recent report was 1 week ago.

Old Reports: The most recent abuse report for this IP address is from 1 week ago . It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 phil2k	2026-06-06 13:52:08 (1 week ago)	TCP portscan or auth bruteforce on ports: ssh : Firewall: Within 2026-06-05 09:10:53 - 2026-06-05 09 ... show more TCP portscan or auth bruteforce on ports: ssh : Firewall: Within 2026-06-05 09:10:53 - 2026-06-05 09:12:34 CEST(+0200) identified: unallowed access from 202.50.55.105/32 on port 22(ssh) (1 trial) Fail2ban: Within 2026-06-05 09:10:53 - 2026-06-05 09:12:35 CEST(+0200) banned: 5 times by fail2ban[firewall]; 5 times by fail2ban[recidive] show less	Port Scan Brute-Force SSH
Anonymous	2026-06-05 18:16:06 (1 week ago)	Unauthorized connection attempt on Port 23	Port Scan Hacking Exploited Host
Anonymous	2026-06-05 15:50:02 (1 week ago)	\| [Dangerous/Nepal] Aggressive IP 202.50.55.105 (~30 hits). Type: DoS Defender- Web server 400 error ... show more \| [Dangerous/Nepal] Aggressive IP 202.50.55.105 (~30 hits). Type: DoS Defender- Web server 400 error code show less	Web App Attack Hacking SQL Injection
🇺🇸 seraph.ws	2026-06-05 11:27:11 (1 week ago)	SSH honeypot contact — automated credential stuffing attempt	Brute-Force SSH
🇺🇸 ThreatHunter7	2026-06-05 10:00:03 (1 week ago)	Malicious scanning/attack activity detected. 12 suspicious requests from this IP.	Web App Attack
🇸🇬 demonsword	2026-06-05 09:44:29 (1 week ago)	SSH brute-force detected: 8 failed login attempts in the last 1 hour.	Brute-Force SSH
🇳🇱 EGP Abuse Dept	2026-06-05 09:05:16 (1 week ago)	Unauthorized connection to Telnet port 23	Port Scan Hacking
🇺🇸 xmission.com	2026-06-05 09:04:36 (1 week ago)	Blocked by UFW (TCP on 23) Source port: 50037 TTL: 51 Packet length: 40 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 23) Source port: 50037 TTL: 51 Packet length: 40 TOS: 0x00 This report (for 202.50.55.105) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Hacking Brute-Force
🇺🇸 sumnone	2026-06-05 09:04:16 (1 week ago)	Port probing on unauthorized port 2375	Port Scan Hacking Exploited Host
🇺🇸 knock	2026-06-05 09:00:41 (1 week ago)	Knock-Knock honeypot brute-force: proto8 (18 total hits)	Brute-Force
🇺🇸 juguemosalacarioca.com	2026-06-05 08:55:32 (1 week ago)	(sshd) Failed SSH login from 202.50.55.105 (NO/Norway/-): 5 in the last 3600 secs; Ports: ; Directi ... show more (sshd) Failed SSH login from 202.50.55.105 (NO/Norway/-): 5 in the last 3600 secs; Ports: ; Direction: inout; Trigger: LF_SSHD; Logs: Jun 5 08:21:35 instance-20200224-1146 sshd[9253]: Invalid user admin from 202.50.55.105 port 37952 Jun 5 08:24:42 instance-20200224-1146 sshd[9424]: Invalid user orangepi from 202.50.55.105 port 50826 Jun 5 08:46:20 instance-20200224-1146 sshd[10719]: Invalid user test from 202.50.55.105 port 51632 Jun 5 08:49:16 instance-20200224-1146 sshd[10883]: Invalid user user from 202.50.55.105 port 60094 Jun 5 08:55:29 instance-20200224-1146 sshd[11238]: Invalid user admin from 202.50.55.105 port 42138 show less	Port Scan
🇺🇸 TPI-Abuse	2026-06-05 08:54:57 (1 week ago)	(mod_security) mod_security (id:218420) triggered by 202.50.55.105 (-): 1 in the last 300 secs; Port ... show more (mod_security) mod_security (id:218420) triggered by 202.50.55.105 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 04:54:51.840158 2026] [security2:error] [pid 30700:tid 30700] [client 202.50.55.105:35000] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i)php://(std(in\|out\|err)\|(in\|out)put\|fd\|memory\|temp\|filter)" at ARGS_NAMES:\\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/21_PHP_PHPGen.conf"] [line "22"] [id "218420"] [rev "2"] [msg "COMODO WAF: PHP Injection Attack: I/O Stream Found\|\|192.64.150.34:80\|F\|2"] [data "Matched Data: php://input found within ARGS_NAMES:\\x5cxadd allow_url_include=1 \\x5cxadd auto_prepend_file=php://input: \\xadd allow_url_include=1 \\xadd auto_prepend_file=php://input"] [severity "CRITICAL"] [tag "CWAF"] [tag "PHPGen"] [hostname "192.64.150.34"] [uri "/hello.world"] [unique_id "aiKO29v06gzq1Nw-Q6SAqQAAAA8"] show less	Brute-Force Bad Web Bot Web App Attack
🇸🇬 drewf.ink	2026-06-05 08:52:41 (1 week ago)	[08:52] Attempted SSH login on port 22 with credentials cirros:gocubsgo	Brute-Force SSH
🇵🇱 mkey	2026-06-05 08:50:01 (1 week ago)	Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS ... show more Verified scan activity detected by local IDS/firewall correlation. SCAN: HIGHRISK_SINGLEPORT \| PORTS=23 \| HITS=2 \| IPSET=ADD \| FIRST=2026-06-05 10:44:14 \| LAST=2026-06-05 10:44:14. Last seen 2026-06-05 10:44:15. show less	Port Scan
🇸🇬 Vano Ganzzz	2026-06-05 08:49:46 (1 week ago)	[Fail2Ban] Banned 202.50.55.105 for 3600 seconds.\nRelevant log lines:\nJun 5 16:46:37 iZt4n7rlv57t ... show more [Fail2Ban] Banned 202.50.55.105 for 3600 seconds.\nRelevant log lines:\nJun 5 16:46:37 iZt4n7rlv57tk8vhdup9fcZ sshd[2862913]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.50.55.105 Jun 5 16:46:39 iZt4n7rlv57tk8vhdup9fcZ sshd[2862913]: Failed password for invalid user admin from 202.50.55.105 port 46420 ssh2 Jun 5 16:49:45 iZt4n7rlv57tk8vhdup9fcZ sshd[2862988]: Invalid user orangepi from 202.50.55.105 port 54806 show less	Brute-Force SSH

Showing 1 to 15 of 54 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.244.232.111

🇬🇧 195.206.182.199

🇬🇧 193.32.209.243

🇳🇱 176.65.149.194

🇳🇱 176.65.139.195

🇸🇬 174.138.23.14

🇩🇪 165.22.28.115

🇸🇬 129.226.221.96

🇮🇳 122.184.124.46

🇳🇱 91.92.40.23

🇷🇺 85.12.248.68

🇧🇬 79.124.62.126

🇺🇸 52.20.198.190

🇺🇸 47.77.195.187

🇧🇷 206.42.8.243

🇧🇷 187.16.96.250

🇵🇪 161.132.54.218

🇨🇦 159.203.35.5

🇨🇳 122.226.223.59

🇨🇳 120.229.253.140