AbuseIPDB » 128.1.123.218
128.1.123.218
This IP was reported 11 times. Confidence of
Abuse
is 30% : ?
ISP
Zenlayer Inc
Usage Type
Data Center/Web Hosting/Transit
ASN
AS62610
Domain Name
zenlayer.com
Country
🇩🇪
Germany
City
Frankfurt am Main, Hesse
IP info including ISP, Usage Type, and Location provided
by IPInfo . Updated weekly.
IP Abuse Reports for 128.1.123.218 :
This IP address has been reported a total of
11
times from
5 distinct
sources.
128.1.123.218 was first reported on
June 3rd 2026 , and the most recent report was
5 days ago
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Reporter
IoA Timestamp (UTC)
Comment
Categories
🇩🇪
london2038.com
2026-07-05 14:28:40
(5 days ago)
Connection atttempts against closed TCP ports
Jul 5 16:28:36 BLOCK SRC=128.1.123.218 LEN=40 TOS=0x0 ...
show more
Connection atttempts against closed TCP ports
Jul 5 16:28:36 BLOCK SRC=128.1.123.218 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=55742 DPT=443 WINDOW=0 RES=0x00 RST
Jul 5 16:28:37 BLOCK SRC=128.1.123.218 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=55742 DPT=443 WINDOW=0 RES=0x00 RST
Jul 5 16:28:39 BLOCK SRC=128.1.123.218 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=55742 DPT=443 WINDOW=0 RES=0x00 RST
show less
Port Scan
🇩🇪
london2038.com
2026-07-04 13:43:37
(6 days ago)
Connection atttempts against closed TCP ports
Jul 4 15:43:35 BLOCK SRC=128.1.123.218 LEN=40 TOS=0x0 ...
show more
Connection atttempts against closed TCP ports
Jul 4 15:43:35 BLOCK SRC=128.1.123.218 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=50102 DPT=443 WINDOW=0 RES=0x00 RST
Jul 4 15:43:35 BLOCK SRC=128.1.123.218 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=50102 DPT=443 WINDOW=0 RES=0x00 RST
Jul 4 15:43:36 BLOCK SRC=128.1.123.218 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=50102 DPT=443 WINDOW=0 RES=0x00 RST
show less
Port Scan
🇩🇪
london2038.com
2026-07-03 05:37:29
(1 week ago)
Connection atttempts against closed TCP ports
Jul 3 07:37:05 BLOCK SRC=128.1.123.218 LEN=40 TOS=0x0 ...
show more
Connection atttempts against closed TCP ports
Jul 3 07:37:05 BLOCK SRC=128.1.123.218 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=42830 DPT=443 WINDOW=0 RES=0x00 RST
Jul 3 07:37:08 BLOCK SRC=128.1.123.218 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=42830 DPT=443 WINDOW=0 RES=0x00 RST
Jul 3 07:37:28 BLOCK SRC=128.1.123.218 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=42830 DPT=443 WINDOW=0 RES=0x00 RST
show less
Port Scan
🇺🇸
stechusa
2026-06-29 13:52:34
(1 week ago)
[Askari] | country=DE
Bad Web Bot
DDoS Attack
🇺🇸
stechusa
2026-06-29 13:52:34
(1 week ago)
ELEVATED_THREAT | country=DE | ASN=Zenlayer Inc | First request to deep URL: /catalog/product_compar ...
show more
ELEVATED_THREAT | country=DE | ASN=Zenlayer Inc | First request to deep URL: /catalog/product_compare/add/product/24842/uenc/ahr0chm6ly93 | Request from DE (Germany), outside target markets (US/CA)
show less
Bad Web Bot
DDoS Attack
🇺🇸
kosada.com
2026-06-29 05:05:08
(1 week ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
Hmorrin
2026-06-28 02:16:13
(1 week ago)
Port Scan
🇩🇪
Vegascosmetics
2026-06-23 16:03:13
(2 weeks ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after obfuscated redirect. Vegas Security
DDoS Attack
Hacking
Exploited Host
🇺🇸
kosada.com
2026-06-20 00:07:58
(3 weeks ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇩🇪
london2038.com
2026-06-03 22:15:21
(1 month ago)
Connection atttempts against closed TCP ports
Jun 4 00:15:20 BLOCK SRC=128.1.123.218 LEN=40 TOS=0x0 ...
show more
Connection atttempts against closed TCP ports
Jun 4 00:15:20 BLOCK SRC=128.1.123.218 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=35944 DPT=443 WINDOW=0 RES=0x00 RST
Jun 4 00:15:20 BLOCK SRC=128.1.123.218 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=35944 DPT=443 WINDOW=0 RES=0x00 RST
Jun 4 00:15:20 BLOCK SRC=128.1.123.218 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=35944 DPT=443 WINDOW=0 RES=0x00 RST
show less
Port Scan
🇩🇪
london2038.com
2026-06-03 04:23:56
(1 month ago)
Connection atttempts against closed TCP ports
Jun 3 06:23:54 BLOCK SRC=128.1.123.218 LEN=40 TOS=0x0 ...
show more
Connection atttempts against closed TCP ports
Jun 3 06:23:54 BLOCK SRC=128.1.123.218 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=47722 DPT=443 WINDOW=0 RES=0x00 RST
Jun 3 06:23:54 BLOCK SRC=128.1.123.218 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=47722 DPT=443 WINDOW=0 RES=0x00 RST
Jun 3 06:23:55 BLOCK SRC=128.1.123.218 LEN=40 TOS=0x08 PREC=0x20 TTL=52 ID=0 DF PROTO=TCP SPT=47722 DPT=443 WINDOW=0 RES=0x00 RST
show less
Port Scan
Showing 1 to
11
of 11 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩
Recently Reported IPs: