IP address

Search at other sites:

.159201.50.22.27sparrow.scan.zenox.ai

Shodan(more info)

Passive DNS

IP blacklists

Spamhaus XBL CBL

201.50.22.27 was recently listed on the Spamhaus XBL CBL blacklist, but currently it is not.

Description: The Spamhaus Exploits Block List (XBL) is a realtime database of IP addresses of hijacked PCs infected by illegal 3rd party exploits, including open proxies, worms/viruses with built-in spam engines, and other types of trojan-horse exploits.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-11-11 05:11:02.595000
Was present on blacklist at: 2026-10-28 05:04

Echelon port scan

201.50.22.27 is listed on the Echelon port scan blacklist.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: Scanning 5+ ports on target host
Type of feed: primary (feed detail page)

Last checked at: 2026-11-14 10:25:00.674000
Was present on blacklist at: 2026-11-06 10:25, 2026-11-07 10:25, 2026-11-08 10:25, 2026-11-09 10:25, 2026-11-10 10:25, 2026-11-11 10:25, 2026-11-12 10:25, 2026-11-13 10:25, 2026-11-14 10:25

Echelon TLS/SSL crawler

201.50.22.27 was recently listed on the Echelon TLS/SSL crawler blacklist, but currently it is not.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: TLS/SSL connection fingerprinting detected via Suricata
Type of feed: primary (feed detail page)

Last checked at: 2026-11-13 10:40:00.454000
Was present on blacklist at: 2026-11-07 10:40, 2026-11-08 10:40, 2026-11-09 10:40, 2026-11-10 10:40, 2026-11-11 10:40, 2026-11-12 10:40, 2026-11-13 10:40

Echelon web crawler

201.50.22.27 was recently listed on the Echelon web crawler blacklist, but currently it is not.

Description: IPs detected by Echelon sensors (honeypots) as performing this activity: HTTP web crawling activity detected on web honeypots
Type of feed: primary (feed detail page)

Last checked at: 2026-11-13 10:50:00.687000
Was present on blacklist at: 2026-11-07 10:50, 2026-11-08 10:50, 2026-11-09 10:50, 2026-11-10 10:50, 2026-11-11 10:50, 2026-11-12 10:50, 2026-11-13 10:50

Threat categories

TL	Role	Category	Details
59	src	scan

---

DShield reports (IP summary, reports)

2026-10-27

Number of reports: 64

Distinct targets: 53

2026-10-28

Number of reports: 64

Distinct targets: 53

2026-11-05

Number of reports: 33

Distinct targets: 19

2026-11-07

Number of reports: 11

Distinct targets: 8

2026-11-08

Number of reports: 60

Distinct targets: 26

2026-11-09

Number of reports: 20

Distinct targets: 8

2026-11-10

Number of reports: 18

Distinct targets: 9

2026-11-11

Number of reports: 18

Distinct targets: 9

2026-11-12

Number of reports: 30

Distinct targets: 11

Origin AS

AS16276 - OVH

BGP Prefix

201.50.22.0/24

geo

Brazil, Rio de Janeiro

🕑 America/Sao_Paulo

hostname

sparrow.scan.zenox.ai

Address block ('inetnum' or 'NetRange' in whois database)

201.50.0.0 - 201.50.63.255

rep

0.15930011679450506

reserved_range

0

Shodan's InternetDB

Open ports: 22

Tags: –

CPEs: cpe:/o:linux:linux_kernel, cpe:/a:openbsd:openssh:10.0p2, cpe:/o:debian:debian_linux

ts_added

2026-10-28 05:04:07.277000

ts_last_update

2026-11-15 05:13:17.316000

Warden event timeline

DShield event timeline

Presence on blacklists