AbuseIPDB » 122.96.28.127
IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.
Top Reporter Countries (Last 60 Days)
Example previewReport Categories (Last 60 Days)
Example previewIP Abuse Reports for 122.96.28.127:
This IP address has been reported a total of 478 times from 124 distinct sources. 122.96.28.127 was first reported on , and the most recent report was . In the last 60 days, the top reporter locations were: United States of America with 16 reports; India with 6 reports; Germany with 5 reports. The most common categories in these recent reports were: Port Scan 32 times; Hacking 18 times; SSH 6 times; Brute-Force 6 times; Bad Web Bot 4 times; Other 5 times.
| Reporter | IoA Timestamp (UTC) | Comment | Categories | |
|---|---|---|---|---|
| 🇺🇸 MPL |
tcp/7288 (2 or more attempts)
|
Port Scan | ||
| 🇪🇸 raiolanetworks.com |
|
Port Scan | ||
| 🇦🇺 LiftUp Hosting |
Honeypot hit: Empty payload (likely service probe); 2015 [1] TCP
|
Port Scan | ||
| 🇺🇸 MPL |
tcp/12178
|
Port Scan | ||
| 🇺🇸 xmission.com |
|
Port Scan | ||
| 🇺🇸 donarev419 |
|
Port Scan Hacking | ||
| 🇩🇪 iNetWorker |
firewall-block, port(s): 12115/tcp
|
Port Scan | ||
| 🇪🇸 raiolanetworks.com |
|
Port Scan | ||
| 🇺🇸 sandra361 |
|
Port Scan | ||
| 🇳🇱 Maurice |
|
Port Scan | ||
| Anonymous |
unsolicited connect TCP dport 32080 (sport 53573)
|
Hacking | ||
| Anonymous |
Automated report (2026-08-28T11:32:02-04:00). Caught probing for CVE-2016-10563 vulnerability.
|
Hacking Web App Attack | ||
| 🇫🇷 EvoX |
🛡️ Honeypot [bsts-tpot-hive]: Empty payload (likely service probe); 6400 [1] TCP
|
Port Scan | ||
| 🇸🇪 NordhTech |
More than 3 malicious connection attempts, trying port(s) 27950/tcp, then blocked from services ...
|
Port Scan Hacking | ||
| Anonymous |
MikroTik Enterprise Honeypot
|
Port Scan |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩