JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.20.138.3

65.20.138.3 was found in our database!

This IP was reported 2,128 times. Confidence of Abuse is 100%: ?

100%

ISP	Earthlink Telecommunications Equipment Trading & Services DMCC
Usage Type	Fixed Line ISP
ASN	AS203214
Domain Name	earthlink.iq
Country	🇮🇶 Iraq
City	Baghdad, Baghdad

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.20.138.3

Whois 65.20.138.3

IP Abuse Reports for 65.20.138.3:

This IP address has been reported a total of 2,128 times from 371 distinct sources. 65.20.138.3 was first reported on April 9th 2025, and the most recent report was 43 seconds ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 kreativstrecke	2026-06-14 20:56:54 (43 seconds ago)	2026-06-14T22:56:52.152714+02:00 srv02 postfix/submission/smtpd[216514]: warning: unknown[65.20.138. ... show more 2026-06-14T22:56:52.152714+02:00 srv02 postfix/submission/smtpd[216514]: warning: unknown[65.20.138.3]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-06-14T22:56:53.397782+02:00 srv02 postfix/submission/smtpd[216514]: lost connection after AUTH from unknown[65.20.138.3] 2026-06-14T22:56:53.397952+02:00 srv02 postfix/submission/smtpd[216514]: disconnect from unknown[65.20.138.3] ehlo=2 starttls=1 auth=0/1 commands=3/4 ... show less	Brute-Force
🇩🇪 yvoictra	2026-06-14 20:18:25 (39 minutes ago)	2026-06-14T22:18:25.015994+02:00 titan sshd[163117]: Invalid user Supervisor from 65.20.138.3 port 3 ... show more 2026-06-14T22:18:25.015994+02:00 titan sshd[163117]: Invalid user Supervisor from 65.20.138.3 port 37968 ... show less	Brute-Force SSH
🇯🇵 ki3	2026-06-14 20:12:24 (45 minutes ago)	Fail2Ban: Postfix Attack 65.20.138.3 1781467944.0(JST)	Email Spam Brute-Force
🇩🇪 kreativstrecke	2026-06-14 19:54:38 (1 hour ago)	2026-06-14T21:54:37.460133+02:00 srv03 postfix/submission/smtpd[2383691]: warning: unknown[65.20.138 ... show more 2026-06-14T21:54:37.460133+02:00 srv03 postfix/submission/smtpd[2383691]: warning: unknown[65.20.138.3]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force
🇩🇪 samba.org	2026-06-14 19:20:36 (1 hour ago)	spam (f2b h2)	Brute-Force
🇦🇺 foobax	2026-06-14 18:53:27 (2 hours ago)	was unable to negotiate from port 35005	SSH Port Scan
Anonymous	2026-06-14 18:32:19 (2 hours ago)	2026-06-14T19:00:34.051607+02:00 posta.profi-net.cz postfix/smtps/smtpd[40413]: warning: unknown[65. ... show more 2026-06-14T19:00:34.051607+02:00 posta.profi-net.cz postfix/smtps/smtpd[40413]: warning: unknown[65.20.138.3]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-06-14T20:32:18.494897+02:00 posta.profi-net.cz postfix/smtps/smtpd[78223]: warning: unknown[65.20.138.3]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=reditel ... show less	Email Spam Brute-Force Exploited Host
🇩🇪 Paul Smith	2026-06-14 15:49:46 (5 hours ago)	Email Auth Brute force attack 9/8 in last day	Brute-Force
🇳🇱 big-cloud.nl	2026-06-14 13:53:19 (7 hours ago)	Unauthorized SMTP connection attempt	Brute-Force
🇺🇸 factor1	2026-06-14 13:52:26 (7 hours ago)	Fail2ban at sherman Reports Abuse.	Hacking Brute-Force
Anonymous	2026-06-14 13:45:06 (7 hours ago)	2026-06-14 15:44:57.893 [1061414] no host name found for IP address 65.20.138.3 2026-06-14 15:45:04. ... show more 2026-06-14 15:44:57.893 [1061414] no host name found for IP address 65.20.138.3 2026-06-14 15:45:04.176 [1061414] dovecot_login authenticator failed for (ip-104-37-133-100.hosts.zerolag.com) [65.20.138.3]:51267 I=[217.197.86.168]:465 Ci=1061414: 535 Incorrect authentication data 2026-06-14 15:45:04.761 [1061414] no MAIL in SMTP connection from (ip-104-37-133-100.hosts.zerolag.com) [65.20.138.3]:51267 I=[217.197.86.168]:465 Ci=1061414 D=6s X=TLS1.2:ECDHE_SECP256R1__ECDSA_SHA512__AES_256_GCM:256 CV=no C=EHLO,AUTH ... show less	Email Spam
Anonymous	2026-06-14 13:22:38 (7 hours ago)	2026-06-14T15:22:37.458931 biopolis.pcconsultant.it postfix/smtpd[807222]: warning: unknown[65.20.13 ... show more 2026-06-14T15:22:37.458931 biopolis.pcconsultant.it postfix/smtpd[807222]: warning: unknown[65.20.138.3]: SASL LOGIN authentication failed: authentication failure, [email protected] ... show less	Brute-Force
🇺🇦 MakselPr	2026-06-14 12:37:12 (8 hours ago)	Jun 14 15:28:07 mail postfix/smtps/smtpd[345723]: warning: unknown[65.20.138.3]: SASL LOGIN authenti ... show more Jun 14 15:28:07 mail postfix/smtps/smtpd[345723]: warning: unknown[65.20.138.3]: SASL LOGIN authentication failed: (reason unavailable), [email protected] Jun 14 15:37:11 mail postfix/smtps/smtpd[345991]: warning: unknown[65.20.138.3]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force
🇵🇱 TheWojtek	2026-06-14 10:43:12 (10 hours ago)	Jun 14 12:43:12 hq postfix/submission/smtpd[2332532]: warning: unknown[65.20.138.3]: SASL LOGIN auth ... show more Jun 14 12:43:12 hq postfix/submission/smtpd[2332532]: warning: unknown[65.20.138.3]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 ... show less	Brute-Force
🇩🇪 FeG Deutschland	2026-06-14 07:58:10 (12 hours ago)	Mail: - login with unknown user - bruteforce	Brute-Force

Showing 1 to 15 of 2128 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇩🇪 2602:80d:1005::12

🇨🇳 114.55.24.239

🇮🇳 14.102.50.25

🇺🇸 159.89.33.52

🇨🇳 122.144.131.25

🇫🇷 92.103.134.183

🇹🇷 85.111.68.99

🇨🇳 47.110.137.139

🇸🇬 45.197.12.65

🇺🇸 34.174.7.205

🇺🇸 34.127.161.20

🇺🇸 20.64.105.20

🇨🇳 218.89.5.17

🇺🇦 170.168.31.77

🇯🇵 153.121.70.198

🇨🇳 115.190.128.221

🇫🇷 85.217.140.29

🇫🇷 62.171.182.102

🇩🇪 34.159.216.154

🇨🇳 218.71.38.151