JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 128.1.123.196

128.1.123.196 was found in our database!

This IP was reported 16 times. Confidence of Abuse is 40%: ?

40%

ISP	Zenlayer Inc
Usage Type	Data Center/Web Hosting/Transit
ASN	AS62610
Domain Name	zenlayer.com
Country	🇩🇪 Germany
City	Frankfurt am Main, Hesse

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 128.1.123.196

Whois 128.1.123.196

IP Abuse Reports for 128.1.123.196:

This IP address has been reported a total of 16 times from 7 distinct sources. 128.1.123.196 was first reported on May 28th 2026, and the most recent report was 3 hours ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 london2038.com	2026-07-06 05:46:54 (3 hours ago)	Connection atttempts against closed TCP ports Jul 6 07:46:43 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x0 ... show more Connection atttempts against closed TCP ports Jul 6 07:46:43 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=50938 DPT=443 WINDOW=0 RES=0x00 RST Jul 6 07:46:47 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=50938 DPT=443 WINDOW=0 RES=0x00 RST Jul 6 07:46:53 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=50938 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan
🇩🇪 london2038.com	2026-07-04 06:15:41 (2 days ago)	Connection atttempts against closed TCP ports Jul 4 08:15:35 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x0 ... show more Connection atttempts against closed TCP ports Jul 4 08:15:35 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=58806 DPT=443 WINDOW=0 RES=0x00 RST Jul 4 08:15:37 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=58806 DPT=443 WINDOW=0 RES=0x00 RST Jul 4 08:15:40 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=58806 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan
🇩🇪 london2038.com	2026-07-02 03:28:08 (4 days ago)	Connection atttempts against closed TCP ports Jul 2 05:28:02 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x0 ... show more Connection atttempts against closed TCP ports Jul 2 05:28:02 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=44314 DPT=443 WINDOW=0 RES=0x00 RST Jul 2 05:28:04 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=44314 DPT=443 WINDOW=0 RES=0x00 RST Jul 2 05:28:07 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=44314 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan
🇩🇪 london2038.com	2026-06-29 11:33:53 (6 days ago)	Connection atttempts against closed TCP ports Jun 29 13:33:51 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x0 ... show more Connection atttempts against closed TCP ports Jun 29 13:33:51 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=32814 DPT=443 WINDOW=0 RES=0x00 RST Jun 29 13:33:51 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=32814 DPT=443 WINDOW=0 RES=0x00 RST Jun 29 13:33:52 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=32814 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan
🇺🇸 Hmorrin	2026-06-28 04:16:10 (1 week ago)		Port Scan
🇺🇸 Hmorrin	2026-06-27 01:16:07 (1 week ago)		Port Scan
🇺🇸 kosada.com	2026-06-25 19:20:43 (1 week ago)	Web bot: denial-of-service flood	DDoS Attack Bad Web Bot
🇫🇷 bigorre.org	2026-06-25 16:36:04 (1 week ago)	Unidentified crawling: not a self-announced bot in user-agent	Bad Web Bot
🇩🇪 pltcldvlpr	2026-06-22 18:29:55 (1 week ago)	Bogus Useragent: 128.1.123.196 - - [22/Jun/2026:20:29:54 +0200] "GET /protocol?id=hb_15_50&offset=13 ... show more Bogus Useragent: 128.1.123.196 - - [22/Jun/2026:20:29:54 +0200] "GET /protocol?id=hb_15_50&offset=1350&seq=1257 HTTP/1.1" 444 0 "-" "Opera/8.18.(X11; Linux i686; sl-SI) Presto/2.9.182 Version/10.00" asn=62610 org="Zenlayer Inc" country=HK ... show less	Bad Web Bot
🇩🇪 Vegascosmetics	2026-06-22 10:00:34 (1 week ago)	(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security	DDoS Attack Hacking Exploited Host
🇩🇪 london2038.com	2026-06-15 08:41:13 (3 weeks ago)	Connection atttempts against closed TCP ports Jun 15 10:40:48 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x0 ... show more Connection atttempts against closed TCP ports Jun 15 10:40:48 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=59374 DPT=443 WINDOW=0 RES=0x00 RST Jun 15 10:40:51 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=59374 DPT=443 WINDOW=0 RES=0x00 RST Jun 15 10:41:12 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=59374 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan
🇺🇸 xmission.com	2026-06-10 22:40:49 (3 weeks ago)	Blocked by UFW (TCP on 80) Source port: 44324 TTL: 43 Packet length: 40 TOS: 0x08 This report (for ... show more Blocked by UFW (TCP on 80) Source port: 44324 TTL: 43 Packet length: 40 TOS: 0x08 This report (for 128.1.123.196) was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan Web App Attack
🇩🇪 london2038.com	2026-06-03 09:13:53 (1 month ago)	Connection atttempts against closed TCP ports Jun 3 11:13:42 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x0 ... show more Connection atttempts against closed TCP ports Jun 3 11:13:42 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=59884 DPT=443 WINDOW=0 RES=0x00 RST Jun 3 11:13:46 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=59884 DPT=443 WINDOW=0 RES=0x00 RST Jun 3 11:13:52 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=59884 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan
🇩🇪 london2038.com	2026-06-02 16:44:58 (1 month ago)	Connection atttempts against closed TCP ports Jun 2 18:44:46 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x0 ... show more Connection atttempts against closed TCP ports Jun 2 18:44:46 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=38146 DPT=443 WINDOW=0 RES=0x00 RST Jun 2 18:44:46 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=38146 DPT=443 WINDOW=0 RES=0x00 RST Jun 2 18:44:46 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=38146 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan
🇩🇪 london2038.com	2026-05-31 06:10:04 (1 month ago)	Connection atttempts against closed TCP ports May 31 08:09:54 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x0 ... show more Connection atttempts against closed TCP ports May 31 08:09:54 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=49278 DPT=443 WINDOW=0 RES=0x00 RST May 31 08:09:57 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=49278 DPT=443 WINDOW=0 RES=0x00 RST May 31 08:10:03 BLOCK SRC=128.1.123.196 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=49278 DPT=443 WINDOW=0 RES=0x00 RST show less	Port Scan

Showing 1 to 15 of 16 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇮🇩 182.9.33.172

🇫🇷 145.239.10.137

🇨🇳 117.14.51.58

🇧🇩 103.198.133.99

🇺🇸 68.169.41.107

🇺🇸 65.49.1.147

🇨🇳 61.184.128.210

🇦🇺 45.134.20.71

🇺🇸 44.200.245.151

🇦🇹 41.66.96.92

🇧🇪 34.38.203.87

🇭🇰 194.187.178.71

🇺🇸 65.49.20.66

🇺🇸 64.62.197.211

🇺🇸 64.62.156.49

🇳🇱 51.158.156.63

🇱🇹 45.227.254.170

🇦🇺 45.134.20.76

🇰🇷 43.133.73.64

🇭🇰 13.70.28.132