JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

138.3.212.204

Recent Activity

Abuse confidence score ?

100% Critical

135 reports

76 reporters · latest 6 hours ago

ISP	Oracle Network Information Services
Usage Type	Data Center/Web Hosting/Transit
ASN	AS31898
Domain Name	oracle.com
Country	🇯🇵 Japan
City	Tokyo, Tokyo

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

Reports Activity

Example preview

Report Categories (Last 60 Days)

Example preview

Top Reporter Countries (Last 60 Days)

Example preview

Account required for the enhanced features Log in Sign up

IP Abuse Reports for 138.3.212.204

Export CSV

This IP address has been reported a total of 135 times from 76 distinct sources. 138.3.212.204 was first reported on July 28th 2026, and the most recent report was 6 hours ago. In the last 60 days, the top reporter locations were: United States of America with 28 reports; Germany with 19 reports; France with 19 reports. The most common categories in these recent reports were: Port Scan 106 times; Hacking 20 times; Brute-Force 11 times; Exploited Host 4 times; Web App Attack 3 times.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇬🇧 sonot	2026-10-05 10:19:30 (6 hours ago)	Blocked by UFW on tunneluk01 [1082/tcp] \| SPT: 55552 \| TTL: 231 \| LEN: 44 \| TOS: 0x00 • Reported by: ... show more Blocked by UFW on tunneluk01 [1082/tcp] \| SPT: 55552 \| TTL: 231 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇳🇱 Maurice	2026-10-05 01:06:13 (16 hours ago)	Honeypot hit: Unauthorized traffic (3 bytes of payload); 1082 [2], 1083 [2], 4080 [2] TCP Reported b ... show more Honeypot hit: Unauthorized traffic (3 bytes of payload); 1082 [2], 1083 [2], 4080 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇫🇷 Kejult	2026-10-04 02:52:55 (1 day ago)	Honeypot Finding: verified TCP multi-port scan/probing; 24 application-level events across 8 target ... show more Honeypot Finding: verified TCP multi-port scan/probing; 24 application-level events across 8 target ports and 24 source port(s). Ports: 5080/service, 1081/service, 1083/service, 1088/service, 1089/service, 1090/service, 3080/service, 9080/service. Sensors: Honeytrap. show less	Port Scan
🇩🇪 bescared	2026-10-03 18:35:42 (1 day ago)	F2B - Malicious activity detected. Excessive port scans. -c23856ef-	Port Scan
🇺🇸 Cherryh4ck	2026-10-03 18:34:52 (1 day ago)	Blocked by UFW [1081/tcp] \| SPT: 52505 \| TTL: 246 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/se ... show more Blocked by UFW [1081/tcp] \| SPT: 52505 \| TTL: 246 \| LEN: 44 \| TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter show less	Port Scan
🇦🇹 Pingger Shikkoken	2026-10-03 18:34:51 (1 day ago)	2026-10-03T18:34:51+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6 ... show more 2026-10-03T18:34:51+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=138.3.212.204 DST=152.53.50.28 LEN=44 TOS=0x00 PREC=0x00 TTL=235 ID=56608 PROTO=TCP SPT=52505 DPT=3080 WINDOW=1025 RES=0x00 SYN URGP=0 2026-10-03T18:35:01+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=138.3.212.204 DST=152.53.50.28 LEN=44 TOS=0x00 PREC=0x00 TTL=235 ID=30509 PROTO=TCP SPT=52489 DPT=1086 WINDOW=1025 RES=0x00 SYN URGP=0 2026-10-03T18:35:32+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT= MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=138.3.212.204 DST=152.53.50.28 LEN=44 TOS=0x00 PREC=0x00 TTL=235 ID=55352 PROTO=TCP SPT=52505 DPT=1083 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Hacking Port Scan
🇳🇱 donarev419	2026-10-03 00:04:10 (2 days ago)	Connection to port 3080 with data transfer. Data preview:	Port Scan Hacking
🇺🇸 MPL	2026-10-02 09:40:08 (3 days ago)	tcp ports: 6080,1084 (2 or more attempts)	Port Scan
🇨🇦 Arpan Sen	2026-10-01 20:37:30 (3 days ago)	Network port/address scan: probed 17 distinct port(s) across 55 host(s); 100% of connections receive ... show more Network port/address scan: probed 17 distinct port(s) across 55 host(s); 100% of connections received no service (SYN, no reply) -- passive network sensor. show less	Port Scan
🇵🇱 sefinek.net	2026-10-01 15:57:33 (4 days ago)	Honeypot hit: Unauthorized traffic (3 bytes of payload); 1090 [2], 4080 [2], 2080 [2] TCP Reported b ... show more Honeypot hit: Unauthorized traffic (3 bytes of payload); 1090 [2], 4080 [2], 2080 [2] TCP Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB show less	Port Scan
🇺🇸 Cyber Crusader	2026-10-01 12:23:17 (4 days ago)	Hundreds of Attempts (at least) to Connect to and Access Firewall Ports	Port Scan Hacking Brute-Force
🇫🇮 6kilowatti	2026-10-01 08:27:46 (4 days ago)	2026-10-01T11:27:46.120806+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18 ... show more 2026-10-01T11:27:46.120806+03:00 6kw kernel: [UFW BLOCK] IN=eth0 OUT= MAC=00:16:3e:b6:e7:09:78:9a:18:bd:57:7e:08:00 SRC=138.3.212.204 DST=5.61.88.83 LEN=44 TOS=0x00 PREC=0x00 TTL=229 ID=38949 PROTO=TCP SPT=43230 DPT=1087 WINDOW=1025 RES=0x00 SYN URGP=0 ... show less	Port Scan
🇦🇺 LiftUp Hosting	2026-09-29 16:51:56 (6 days ago)	Honeypot hit: Unauthorized traffic (3 bytes of payload); 1084 [2], 1089 [2], 4080 [2] TCP	Port Scan
🇫🇷 GabrielJST	2026-09-29 12:08:29 (6 days ago)	Port Scan detected from 138.3.212.204 (JP/Japan/-).	Port Scan
🇩🇪 schuh	2026-09-29 07:50:42 (6 days ago)	29-09-2026:07:50:08UTC [Port Scan] unique_ports:4 ports:7080,1085,3080,1081 (7 packets). SRC=138.3.2 ... show more 29-09-2026:07:50:08UTC [Port Scan] unique_ports:4 ports:7080,1085,3080,1081 (7 packets). SRC=138.3.212.204 TTL=242 PROTO=TCP SPT=48156 DPT=7080 SYN show less	Port Scan

Showing 1 to 15 of 135 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇷 201.139.186.238

🇩🇪 109.160.32.132

🇱🇹 91.224.92.28

🇨🇭 62.133.56.205

🇺🇸 45.132.227.138

🇿🇦 41.76.102.246

🇺🇸 38.64.60.87

🇨🇳 203.83.231.93

🇺🇸 195.184.76.204

🇧🇪 178.51.106.43

🇻🇳 171.231.196.240

🇭🇰 152.32.240.77

🇺🇸 147.185.132.203

🇨🇳 120.48.71.14

🇻🇳 103.161.16.196

🇻🇳 103.60.242.169

🇫🇷 54.36.99.29

🇨🇳 220.202.112.114

🇨🇳 220.202.112.27

🇨🇳 220.179.138.197