Recent reportsWe have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-11-06 08:45:51.682 [539822] no MAIL in SMTP connection from [138.197.182.154]:56528 I=[193.108.181.150]:587 Ci=539822 D=0.088s X=TLS1.3:TLS_AES_256_GCM_SHA384:256 C=EHLO,STARTTLS
2026-11-06 08:45:52.698 [539824] SMTP call from [138.197.182.154]: ...
show more2026-11-06 08:45:51.682 [539822] no MAIL in SMTP connection from [138.197.182.154]:56528 I=[193.108.181.150]:587 Ci=539822 D=0.088s X=TLS1.3:TLS_AES_256_GCM_SHA384:256 C=EHLO,STARTTLS
2026-11-06 08:45:52.698 [539824] SMTP call from [138.197.182.154]:56544 I=[193.108.181.150]:587 Ci=539824 dropped: too many syntax or protocol errors (last command was "?", NULL)
...
show less
Unsolicited TCP probe(s) to honeypot trap port(s) 445. No production service is offered on these trap ports.
Observed 2 event(s) between 2026-11-06T06:03:53Z and 2026-11-06T06:03:53Z UTC.
2026-11-06T06:03:53Z tcp/445 unsolicited connection, payload b ...
show moreUnsolicited TCP probe(s) to honeypot trap port(s) 445. No production service is offered on these trap ports.
Observed 2 event(s) between 2026-11-06T06:03:53Z and 2026-11-06T06:03:53Z UTC.
2026-11-06T06:03:53Z tcp/445 unsolicited connection, payload bytes omitted.
2026-11-06T06:03:53Z tcp/445 unsolicited connection, payload bytes omitted.
Source IP added to the local ban list.
show less
2026-11-06T06:39:04.722997+01:00 v2201904704787495 postfix/submission/smtpd[180608]: improper command pipelining after CONNECT from unknown[138.197.182.154]: \026\003\003\001\247\001\000\001\243\003\003\277a\215u\370I\334Y\262\225\355A\331\226]\273\2 ...
show more2026-11-06T06:39:04.722997+01:00 v2201904704787495 postfix/submission/smtpd[180608]: improper command pipelining after CONNECT from unknown[138.197.182.154]: \026\003\003\001\247\001\000\001\243\003\003\277a\215u\370I\334Y\262\225\355A\331\226]\273\241{\004+\245\3621\2228\005\265\314\370'\336\336 'l\322E:\250$Q{\231@L\265\221\251\277u\232\241&\345sTz\366\216#\211-\320\2616\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237
2026-11-06T06:39:04.730713+01:00 v2201904704787495 postfix/submission/smtpd[180608]: improper command pipelining after CONNECT from unknown[138.197.182.154]: \026\003\003\001\247\001\000\001\243\003\003\256\363\2054\315\227\022\200\003\264\212\367v\315h\257\251D\271\227[AA\327E\001\214\026\217Dt\357 \324\342xq\223\271&\346\034K\311\246\265v\204\263\270\246\0251\036b\206GC\215<\v8\325\366c\000\212\000\005\000\004\000\a\000\300\000\204\000\272\000A\000\235\300\241\300\235\000=
2026-11-06T06:39:04.738469+01:00 v2201904704787495 postfix/s
...
show less
2026-11-06T04:55:35.539714+01:00 etheria.infra.nyara.cloud postfix/smtpd[1801563]: improper command pipelining after CONNECT from unknown[138.197.182.154]: \026\003\003\001\247\001\000\001\243\003\003\245\030\366\025\226\213\337\233~\300\346\316\t\35 ...
show more2026-11-06T04:55:35.539714+01:00 etheria.infra.nyara.cloud postfix/smtpd[1801563]: improper command pipelining after CONNECT from unknown[138.197.182.154]: \026\003\003\001\247\001\000\001\243\003\003\245\030\366\025\226\213\337\233~\300\346\316\t\352\b-\016L\000*\bDL\020\200\3729\a\216t\205f \264\246\f\334>\203&F\026\245\335\227\275n\227U\f\355\277\300Mdj\233\016\346\314&;\370s5\000\212\000\026\0003\000g\300\236\300\242\000\236\0009\000k\300\237\300\243\000\237
2026-11-06T04:55:35.548861+01:00 etheria.infra.nyara.cloud postfix/smtpd[1801563]: improper command pipelining after CONNECT from unknown[138.197.182.154]: \026\003\003\001\247\001\000\001\243\003\003n\023Zb\325\276\242\206\t\374"\354\317-\351\214-g4\202\264\207\363\340\254\263-V\344\355&= O\004\264\334\033pv\365\023\264\315-#\220\237^0k\213\226\006\026\310\222\234C\344"\205\317\362\207\000\212\000\005\000\004\000\a\000\300\000\204\000\272\000A\000\235\300\241\300\235\000=
2026-11-06T04:55:35.558049+01:00 etheria.infra.nyara.cl
...
show less