138.2.221.76
Recent Activity
This IP has received recent abuse reports, which causes the score to increase.
- ISP
- Oracle Corporation
- Usage Type
- Data Center/Web Hosting/Transit
- ASN
- AS31898
- Domain Name
- oracle.com
- Country
- 🇺🇸 United States of America
- City
- Ashburn, Virginia
Abuse Reports
Total reports
75 from
43 distinct
reporters
First reported
Most recent report
Recent reports
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇺🇸 NetVexor |
Attack source identified and submitted via NetVexor BGP Blackhole Network
|
Port Scan Hacking Brute-Force | |
| 🇺🇸 MPL |
tcp ports: 3389,6379 (2 or more attempts)
|
Port Scan | |
| 🇺🇸 HamSammich |
Automated sensor: 1 port 1521 connection/probe attempts over the last 24h (latest 2026-11-12T11:45Z).
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 93 hits on ports [1200, 1524, 1901, 3170, 3478, 5533, 9032, 9600, 10085, 11740] (automated)
|
Port Scan | |
| 🇺🇸 MPL |
tcp port scan (3 or more attempts)
|
Port Scan | |
| Anonymous |
9032/tcp (1 or more attempts)
|
Port Scan | |
| 🇵🇱 mkey |
Source IP from blacklist AbuseIPDB is still actively scanning our network. (6 hits in last hour, last seen 2026-11-12 08:58:17)
|
Port Scan | |
| 🇺🇸 RAP |
2026-11-12 08:01:12 UTC Unauthorized activity to TCP port 3306.
|
Port Scan | |
| 🇫🇷 EDSL |
[SRV-VPN1] Blocked by SysWarden Firewall (Port Scan / Probing)
|
Port Scan | |
| 🇺🇸 MPL |
tcp ports: 3177,51100 (2 or more attempts)
|
Port Scan | |
| 🇭🇰 PingMeMaybe |
Blocked by UFW on hk [10021/tcp]
Source port: 36291
TTL: 243
Packet length: 44
TOS: 0x00
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇨🇿 0x44 |
138.2.221.76 [ 11/Nov/2026 Connection attempt blocked ]
|
Port Scan | |
| 🇫🇷 uthul |
T-Pot honeypot: 81 hits on ports [993, 2082, 2221, 3101, 7547, 8443, 10191, 18087, 20072, 20202] (automated)
|
Port Scan Web App Attack | |
| 🇩🇪 David Ferneding |
Blocked by UFW (TCP on 8888)
Source port: 58926
TTL: 242
Packet length: 44
TOS: 0x00
This report (for 138.2.221.76) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
|
Port Scan | |
| 🇬🇧 Joe-Mark |
Found Blocklist.Net.ua - Reason on blocklist: Unauthorized scanning of hosts . proto=tcp . spt=37658 . dpt=993 . NFTABLES .
|
Port Scan Hacking |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown