JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.20.129.80

65.20.129.80 was found in our database!

This IP was reported 115 times. Confidence of Abuse is 93%: ?

93%

ISP	Earthlink Telecommunications Equipment Trading & Services DMCC
Usage Type	Fixed Line ISP
ASN	AS203214
Domain Name	earthlink.iq
Country	🇮🇶 Iraq
City	Baghdad, Baghdad

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.20.129.80

Whois 65.20.129.80

IP Abuse Reports for 65.20.129.80:

This IP address has been reported a total of 115 times from 57 distinct sources. 65.20.129.80 was first reported on November 11th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-08-30 11:00:54 (2 days ago)	Email: Login failures from Bad Reputation IP: 65.20.129.80. Threat Score: 6/10 (MEDIUM). Confidence: ... show more Email: Login failures from Bad Reputation IP: 65.20.129.80. Threat Score: 6/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 72%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-30 10:00:59 (2 days ago)	Email: Login failures from Bad Reputation IP: 65.20.129.80. Threat Score: 6.1/10 (MEDIUM). Confidenc ... show more Email: Login failures from Bad Reputation IP: 65.20.129.80. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 72%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-30 09:00:59 (2 days ago)	Email: Login failures from Bad Reputation IP: 65.20.129.80. Threat Score: 6.2/10 (MEDIUM). Confidenc ... show more Email: Login failures from Bad Reputation IP: 65.20.129.80. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 72%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Very Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇦🇹 joe-abuse	2026-08-30 01:34:13 (3 days ago)	Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-08-28 10:30:11 ... show more Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-08-28 10:30:11. Events: 1. Reported by ipdb-security/fitzgerald.eu show less	Brute-Force
🇦🇹 joe-abuse	2026-08-29 01:31:09 (4 days ago)	Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-08-28 10:30:11 ... show more Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-08-28 10:30:11. Events: 1. Reported by ipdb-security/fitzgerald.eu show less	Brute-Force
🇺🇸 ras07	2026-08-28 21:41:01 (4 days ago)	Brute force SMTP/IMAP login attempts.	Brute-Force
🇺🇸 NXTwoThou	2026-08-28 14:02:47 (4 days ago)	IMAP	Brute-Force
Anonymous	2026-08-28 10:50:43 (4 days ago)	2026-08-28T12:50:43.430889+02:00 soli-gate cyrus/imaps[834702]: badlogin: [65.20.129.80] plaintext ( ... show more 2026-08-28T12:50:43.430889+02:00 soli-gate cyrus/imaps[834702]: badlogin: [65.20.129.80] plaintext ([email protected]) [SASL(-13): authentication failure: checkpass failed] ... show less	Brute-Force
🇦🇹 joe-abuse	2026-08-28 10:03:25 (4 days ago)	2026-08-28T12:03:25.326907+02:00 ucs1 dovecot: auth: pam([email protected],65.20.129.8 ... show more 2026-08-28T12:03:25.326907+02:00 ucs1 dovecot: auth: pam([email protected],65.20.129.80,<YbcvkBha245BFIFQ>): unknown user (given password: organisation1) ... show less	Brute-Force
🇬🇧 D3monite	2026-08-28 10:02:01 (4 days ago)	Attempted Brute Force (dovecot)	Brute-Force
🇩🇪 jasperedv.de	2026-08-28 07:06:46 (4 days ago)	Failed IMAP Login - Brutforcing	Email Spam Brute-Force
🇩🇪 FeG Deutschland	2026-08-27 17:02:11 (5 days ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇩🇪 ksol-hostmaster	2026-08-24 17:25:44 (1 week ago)	Aug 24 19:25:43 ksol dovecot[75015]: auth-worker(12014): conn unix:auth-worker (uid=143): auth-worke ... show more Aug 24 19:25:43 ksol dovecot[75015]: auth-worker(12014): conn unix:auth-worker (uid=143): auth-worker<2>: sql(anonymized@email,65.20.129.80,<UIWaRs5Z5dpBFIFQ>): unknown user (given password: I-AM-A-SUCKER-USING-A-WRONG-PASSWORD) ... show less	Brute-Force
🇩🇪 FeG Deutschland	2026-08-21 16:48:05 (1 week ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇿🇦 hostsec_za	2026-08-20 17:05:04 (1 week ago)	IMAP/POP3 Auth Attack. 10 failed logins in 6 hours.	Brute-Force

Showing 1 to 15 of 115 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 216.152.149.244

🇳🇱 195.178.110.22

🇲🇩 188.130.180.2

🇳🇱 185.223.235.15

🇩🇪 165.154.138.3

🇻🇳 152.32.249.95

🇺🇸 104.234.212.10

🇫🇷 91.231.89.70

🇷🇴 80.94.92.234

🇮🇶 65.20.179.251

🇺🇸 64.62.197.230

🇷🇺 37.23.237.52

🇺🇸 24.229.22.106

🇫🇷 5.189.157.90

🇮🇳 223.238.192.64

🇹🇼 198.235.24.126

🇩🇪 193.124.20.253

🇺🇸 169.197.143.248

🇺🇸 162.216.149.170

🇨🇦 159.203.35.156