JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.96.28.172

122.96.28.172 was found in our database!

This IP was reported 394 times. Confidence of Abuse is 95%: ?

95%

ISP	China Unicom Jiangsu province network
Usage Type	Mobile ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Nanjing, Jiangsu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.96.28.172

Whois 122.96.28.172

IP Abuse Reports for 122.96.28.172:

This IP address has been reported a total of 394 times from 102 distinct sources. 122.96.28.172 was first reported on February 20th 2022, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 MPL	2026-06-07 14:26:51 (1 hour ago)	tcp/1521 (2 or more attempts)	Port Scan
🇩🇪 zupan	2026-06-07 13:13:25 (2 hours ago)	Blocked by UFW on vps [10019/tcp] \| SPT: 45720 \| TTL: 237 \| LEN: 44 \| TOS: 0x00 • Reported by: githu ... show more Blocked by UFW on vps [10019/tcp] \| SPT: 45720 \| TTL: 237 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇩🇪 dispaisyenterprises	2026-06-07 05:33:57 (10 hours ago)	Honeypot [fra-de-honeypot]: Unauthorized traffic (16 bytes of payload); 7093 [1] TCP Reported by Dis ... show more Honeypot [fra-de-honeypot]: Unauthorized traffic (16 bytes of payload); 7093 [1] TCP Reported by DisPaisy Enterprises (dispaisy.systems) using: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇬🇧 PeravixGroup	2026-06-06 23:19:28 (16 hours ago)	Honeypot detection: LDAP injection / directory service abuse attempt on port 9200. Severity: MEDIUM. ... show more Honeypot detection: LDAP injection / directory service abuse attempt on port 9200. Severity: MEDIUM. Aaran.cloud show less	Web App Attack
🇩🇪 femboy.cat	2026-06-06 23:05:01 (16 hours ago)	Port scan to tcp/13722 from 122.96.28.172	Brute-Force
🇯🇵 mkaraki	2026-06-06 20:01:07 (19 hours ago)	1780776066 # Service_probe # SIGNATURE_SEND # source_ip:122.96.28.172 # dst_port:5236 ...	Port Scan
🇫🇷 security.rdmc.fr	2026-06-06 12:29:37 (1 day ago)	VoIP Attack proto:UDP src:61628 dst:5060	Port Scan Fraud VoIP
🇺🇸 xmission.com	2026-06-04 16:20:23 (2 days ago)	Blocked by UFW (TCP on 20) Source port: 64010 TTL: 237 Packet length: 44 TOS: 0x00 This report (for ... show more Blocked by UFW (TCP on 20) Source port: 64010 TTL: 237 Packet length: 44 TOS: 0x00 This report (for 122.96.28.172) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇬🇧 PeravixGroup	2026-06-02 23:48:58 (4 days ago)	Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. ... show more Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud show less	Brute-Force Hacking
🇬🇧 PeravixGroup	2026-06-02 02:23:45 (5 days ago)	Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) o ... show more Honeypot detection: Jenkins CI unauthorized access / script console abuse attempt (CVE-2024-23897) on port 50000. Severity: MEDIUM. Aaran.cloud show less	Hacking Exploited Host
🇬🇧 PeravixGroup	2026-05-28 20:04:20 (1 week ago)	Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. ... show more Honeypot detection: Remote Desktop Protocol (RDP) brute-force attempt on port 3389. Severity: HIGH. Aaran.cloud show less	Brute-Force Hacking
🇬🇧 PeravixGroup	2026-05-28 04:57:26 (1 week ago)	Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. A ... show more Honeypot detection: Web application scanning / reconnaissance attempt on port 8443. Severity: LOW. Aaran.cloud show less	Port Scan Bad Web Bot
🇺🇸 xmission.com	2026-05-27 10:47:20 (1 week ago)	Blocked by UFW (TCP on 9999) Source port: 46708 TTL: 237 Packet length: 44 TOS: 0x08 This report (f ... show more Blocked by UFW (TCP on 9999) Source port: 46708 TTL: 237 Packet length: 44 TOS: 0x08 This report (for 122.96.28.172) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Ping of Death
🇷🇴 abuse_IP_reporter	2026-05-26 11:45:03 (1 week ago)	May 26 14:39:13 server UFW BLOCK SRC=122.96.28.172 PROTO=TCP SPT=55722 DPT=9943	Port Scan
Anonymous	2026-05-24 09:09:25 (2 weeks ago)	2026-05-24T10:09:24.100352+01:00 vps kernel: [41353941.017671] [PORTSCAN DETECTED] IN=ens3 OUT= MAC= ... show more 2026-05-24T10:09:24.100352+01:00 vps kernel: [41353941.017671] [PORTSCAN DETECTED] IN=ens3 OUT= MAC=fa:16:3e:66:f6:24:02:37:19:0d:c2:f3:08:00 SRC=122.96.28.172 DST=54.37.14.118 LEN=44 TOS=0x00 PREC=0x00 TTL=231 ID=31266 PROTO=TCP SPT=12712 DPT=5984 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan Brute-Force

Showing 1 to 15 of 394 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇰🇪 197.248.207.139

🇳🇱 185.242.226.85

🇮🇪 4.210.91.174

🇷🇴 2.57.121.25

🇨🇳 193.112.105.97

🇰🇷 175.213.118.146

🇨🇳 171.120.156.71

🇺🇸 162.214.153.189

🇮🇳 124.108.17.190

🇳🇱 91.92.42.227

🇺🇸 45.33.42.25

🇨🇳 183.224.131.83

🇩🇪 178.105.210.107

🇮🇳 165.140.164.99

🇨🇳 112.6.212.233

🇺🇸 72.167.50.103

🇺🇸 54.211.130.176

🇳🇱 2.58.56.131

🇷🇴 2.57.121.112

🇨🇳 223.199.181.117