138.3.218.227

Neutral Activity There is no recent abuse activity, or the IP address is whitelisted.
Abuse Confidence Score
0% Low Risk
203 reports
34 reporters · latest 6 months ago
ISP
Oracle Network Information Services
Usage Type
Data Center/Web Hosting/Transit
ASN
AS31898
Domain Name
oracle.com
Country
🇯🇵 Japan
City
Tokyo, Tokyo
Log in to view charts and search reports for this IP. Log In

No reports in the last 60 days

138.3.218.227 has been reported 203 times. The most recent report is from .

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Total reports
203 from 34 distinct reporters
First reported
Most recent report
Reporter IoA Timestamp (UTC) Comment Categories
🇫🇷 gooko
SSH brute-force attack detected by fail2ban jail 'sshd'
Brute-Force SSH
🇨🇳 ThreatBook.io
ThreatBook Intelligence: Scanner more details on http://threatbook.io/ip/138.3.218.227
SSH
🇨🇭 pingusurmars
Blocked by UFW on amperetwo [5522/tcp] Source port: 48588 TTL: 252 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇩🇪 acadeova
Blocked by UFW on vps2 [5522/tcp] Source port: 48588 TTL: 253 Packet length: 40 TOS: 0x00 This report was generated by: https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇰🇷 2048
2026-03-28T11:46:40.186059+09:00 no2 sshd[635642]: Connection closed by authenticating user root 138.3.218.227 port 13650 [preauth] ...
Brute-Force SSH
🇩🇪 guldkage
Unauthorized connection attempt detected from IP address 138.3.218.227 to port 22 (ger-03) [g]
Brute-Force Exploited Host
🇩🇪 Private Private
Failed password for root from 138.3.218.227 port 56016 ssh2
Brute-Force SSH
🇬🇧 andypiper
CrowdSec ban for AbuseIPDB Top List
Brute-Force Web App Attack
🇰🇷 2048
2026-03-28T01:44:55.782049+00:00 no3 sshd[2036710]: Connection closed by authenticating user root 138.3.218.227 port 6808 [preauth] ...
Brute-Force SSH
🇬🇧 Deveroonie
2026-03-28T01:35:31.167144+00:00 instance-20241105-1951 sshd[1219517]: Connection closed by authenticating user root 138.3.218.227 port 57792 [preauth] ...
Hacking Brute-Force SSH
🇰🇷 2048
2026-03-28T01:28:14.637013+00:00 no1 sshd[2125678]: Connection closed by authenticating user root 138.3.218.227 port 37054 [preauth] ...
Brute-Force SSH
🇩🇪 banankicks
Unauthorized connection attempt detected from IP address 138.3.218.227 to port 22 (banankicks-server) [X]
Brute-Force Exploited Host
Anonymous
SSH brute force attempt. User: root, Pass: [REDACTED]
Brute-Force SSH
🇬🇧 Deveroonie
2026-03-27T23:24:25.154327+00:00 instance-20241019-1127 sshd[1982729]: Connection closed by authenticating user root 138.3.218.227 port 24718 [preauth] ...
Hacking Brute-Force SSH
🇩🇪 Private Private
Failed password for root from 138.3.218.227 port 55786 ssh2
Brute-Force SSH

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇧🇩 203.190.34.197
🇳🇱 200.138.46.95
🇳🇱 93.123.109.164
🇺🇸 35.150.154.53
🇩🇪 217.181.93.156
🇳🇱 195.178.110.227
🇫🇷 91.231.89.220
🇧🇬 91.191.209.118
🇫🇷 75.119.145.108
🇺🇸 74.82.47.52
🇨🇦 72.141.239.52
🇦🇷 207.191.167.109
🇧🇷 190.115.84.25
🇳🇱 138.226.239.233
🇺🇸 107.20.123.181
🇧🇷 43.157.174.69
🇺🇸 216.73.217.47
🇩🇪 195.63.23.196
🇬🇧 188.240.59.41
🇧🇷 186.200.104.66
feedback