JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 122.96.28.7

122.96.28.7 was found in our database!

This IP was reported 539 times. Confidence of Abuse is 100%: ?

100%

ISP	China Unicom Jiangsu province network
Usage Type	Mobile ISP
ASN	AS4837
Domain Name	chinaunicom.cn
Country	🇨🇳 China
City	Nanjing, Jiangsu

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 122.96.28.7

Whois 122.96.28.7

IP Abuse Reports for 122.96.28.7:

This IP address has been reported a total of 539 times from 116 distinct sources. 122.96.28.7 was first reported on December 16th 2020, and the most recent report was 2 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 CounterScrape	2026-07-05 01:05:46 (2 hours ago)	CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked hon ... show more CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked honeytoken infrastructure subdomain). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.01 MB. show less	Bad Web Bot Port Scan
🇵🇱 sefinek.net	2026-07-04 23:52:41 (3 hours ago)	Honeypot hit: Large payload (1457 bytes); 9870 [1] TCP Reported by: https://github.com/sefinek/T-Pot ... show more Honeypot hit: Large payload (1457 bytes); 9870 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇫🇷 Petre 21_ip	2026-07-04 10:43:23 (16 hours ago)	2026-07-04T12:43:23.330082+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c ... show more 2026-07-04T12:43:23.330082+02:00 vmi2775508 kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:50:56:5c:a7:cf:c0:69:11:b3:85:db:08:00 SRC=122.96.28.7 DST=155.133.26.57 LEN=44 TOS=0x00 PREC=0x00 TTL=239 ID=5398 PROTO=TCP SPT=29111 DPT=10104 WINDOW=1024 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇳🇱 BIV	2026-07-04 08:02:28 (19 hours ago)	Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 1200. Automated ti ... show more Honeypot multi-source hit. Sources: tpot:Honeytrap,tpot:P0f,tpot:Suricata. Ports: 1200. Automated tiered (T-Pot+DShield). show less	Port Scan Hacking
🇺🇸 CounterScrape	2026-07-04 00:06:38 (1 day ago)	CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked hon ... show more CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked honeytoken infrastructure subdomain). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.01 MB. show less	Bad Web Bot Port Scan
🇸🇪 NordhTech	2026-07-03 08:45:11 (1 day ago)	More than 3 malicious connection attempts, trying port(s) 51007/tcp, then blocked from services ...	Port Scan Hacking
🇺🇸 CounterScrape	2026-07-02 19:02:58 (2 days ago)	CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked hon ... show more CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked honeytoken infrastructure subdomain). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.01 MB. show less	Bad Web Bot Port Scan
🇺🇸 MPL	2026-07-01 19:15:05 (3 days ago)	tcp/8181	Port Scan
Anonymous	2026-07-01 18:42:36 (3 days ago)	Honeypot hit: Large payload (1457 bytes); 3522 [1] TCP Reported by: https://github.com/sefinek/T-Pot ... show more Honeypot hit: Large payload (1457 bytes); 3522 [1] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Bad Web Bot
🇺🇸 CounterScrape	2026-07-01 18:04:44 (3 days ago)	CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked hon ... show more CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked honeytoken infrastructure subdomain). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.01 MB. show less	Bad Web Bot Port Scan
🇧🇬 pa4080	2026-07-01 10:33:32 (3 days ago)	Detected by ModSecurity. Host header is an IP address, Request URI: /issues.php	Hacking Web App Attack
🇺🇸 MPL	2026-07-01 02:26:40 (4 days ago)	tcp/8378 (2 or more attempts)	Port Scan
🇧🇷 diego	2026-07-01 00:50:41 (4 days ago)	[rede-top188] 06/30/2026-21:50:41.112099, 122.96.28.7, Protocol: 6, ET CINS Active Threat Intelligen ... show more [rede-top188] 06/30/2026-21:50:41.112099, 122.96.28.7, Protocol: 6, ET CINS Active Threat Intelligence Poor Reputation IP group 161 show less	Hacking
🇺🇸 CounterScrape	2026-06-30 17:09:03 (4 days ago)	CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked hon ... show more CounterScrape Deception: Bot identified as HONEYTOKEN_HIT (Unauthorized access attempt to leaked honeytoken infrastructure subdomain). Trapped in honeypot. Concurrency hits: 2. Bandwidth drained: 0.01 MB. show less	Bad Web Bot Port Scan
🇺🇸 drewf.ink	2026-06-30 14:05:03 (4 days ago)	[14:05] Port scanning. Port(s) scanned: TCP/1720	Port Scan

Showing 1 to 15 of 539 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 162.216.149.128

🇩🇪 140.248.75.69

🇳🇱 45.148.10.141

🇵🇸 212.14.247.121

🇺🇸 162.216.150.69

🇩🇪 140.248.75.149

🇩🇪 140.248.75.131

🇩🇪 140.248.75.126

🇩🇪 140.248.75.99

🇩🇪 140.248.75.36

🇬🇧 118.26.104.93

🇩🇪 92.209.217.245

🇳🇱 81.19.216.103

🇩🇪 69.5.169.46

🇺🇸 45.56.84.110

🇺🇸 167.99.4.252

🇺🇸 144.172.97.10

🇩🇪 140.248.75.167

🇩🇪 140.248.75.165

🇩🇪 140.248.75.161