This IP address has been reported a total of
16
times from
15 distinct
sources.
3.138.157.158 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Jun 16 08:10:22 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=3. ...
show moreJun 16 08:10:22 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=3.138.157.158, lip=192.168.1.80, session=<KA3J9VdUouIDip2e>
Jun 16 08:10:35 mail dovecot: pop3-login: Disconnected: Too many bad commands (no auth attempts in 0 secs): user=<>, rip=3.138.157.158, lip=192.168.1.80, session=<jvCS9ldUpkkDip2e>
Jun 16 08:11:56 mail dovecot: pop3-login: Disconnected: Too many bad commands (no auth attempts in 0 secs): user=<>, rip=3.138.157.158, lip=192.168.1.80, session=<6lJb+1dUnpoDip2e>
show less
Blocked by UFW on Jellyfin [30000/tcp]
Source port: 16618
TTL: 47
Packet length: 40
TOS: 0x08
This ...
show moreBlocked by UFW on Jellyfin [30000/tcp]
Source port: 16618
TTL: 47
Packet length: 40
TOS: 0x08
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Honeypot [uk-production01]: HTTP/1.1 request on 18184
GET /
User-Agent: visionheight.com/scan Mozil ...
show moreHoneypot [uk-production01]: HTTP/1.1 request on 18184
GET /
User-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip; 18184 [4] TCP
show less
T-Pot honeypot: 23 hits in 15min on port(s) 18184 (P0f/Honeytrap). Port scan / unsolicited connectio ...
show moreT-Pot honeypot: 23 hits in 15min on port(s) 18184 (P0f/Honeytrap). Port scan / unsolicited connection. Automated report.
show less
Jun 16 08:10:22 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=3. ...
show moreJun 16 08:10:22 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=3.138.157.158, lip=192.168.1.80, session=<KA3J9VdUouIDip2e>
Jun 16 08:10:35 mail dovecot: pop3-login: Disconnected: Too many bad commands (no auth attempts in 0 secs): user=<>, rip=3.138.157.158, lip=192.168.1.80, session=<jvCS9ldUpkkDip2e>
Jun 16 08:11:56 mail dovecot: pop3-login: Disconnected: Too many bad commands (no auth attempts in 0 secs): user=<>, rip=3.138.157.158, lip=192.168.1.80, session=<6lJb+1dUnpoDip2e>
show less
2026-06-16T07:10:01.012008+02:00 srv1.renaudna.fr dovecot[1615]: pop3-login: Disconnected: Connectio ...
show more2026-06-16T07:10:01.012008+02:00 srv1.renaudna.fr dovecot[1615]: pop3-login: Disconnected: Connection closed (no auth attempts in 1 secs): user=<>, rip=3.138.157.158, lip=192.168.1.253, session=<32l99FdU9OQDip2e>
2026-06-16T07:10:15.117176+02:00 srv1.renaudna.fr dovecot[1615]: pop3-login: Disconnected: Disconnected: Too many bad commands (no auth attempts in 0 secs): user=<>, rip=3.138.157.158, lip=192.168.1.253, session=<AKVU9VdUBFgDip2e>
2026-06-16T07:11:32.919912+02:00 srv1.renaudna.fr dovecot[1615]: pop3-login: Disconnected: Disconnected: Too many bad commands (no auth attempts in 0 secs): user=<>, rip=3.138.157.158, lip=192.168.1.253, session=<4dH3+VdUuOYDip2e>
...
show less
Honeypot [fc-honeypot]: HTTP/1.1 request on 1521
GET /
User-Agent: visionheight.com/scan Mozilla/5. ...
show moreHoneypot [fc-honeypot]: HTTP/1.1 request on 1521
GET /
User-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36
Accept: */*
Accept-Encoding: gzip; 1521 [1], 1963 [1] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Connection to port 1521 with data transfer.
Data preview: GET / HTTP/1.1
Host: 198.23.188.201:1521
...
show moreConnection to port 1521 with data transfer.
Data preview: GET / HTTP/1.1
Host: 198.23.188.201:1521
User-Agent: visionheight.com/scan Mozilla/5.0 (Macintosh;
show less
Port Scan
Hacking
Showing 1 to
15
of 16 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩