JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.20.138.46

65.20.138.46 was found in our database!

This IP was reported 1,825 times. Confidence of Abuse is 100%: ?

100%

ISP	Earthlink Telecommunications Equipment Trading & Services DMCC
Usage Type	Fixed Line ISP
ASN	AS203214
Domain Name	earthlink.iq
Country	🇮🇶 Iraq
City	Baghdad, Baghdad

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.20.138.46

Whois 65.20.138.46

IP Abuse Reports for 65.20.138.46:

This IP address has been reported a total of 1,825 times from 327 distinct sources. 65.20.138.46 was first reported on May 13th 2025, and the most recent report was 1 hour ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇯🇵 alexs039	2026-05-25 14:51:50 (1 week ago)	SSH brute force honeypot Cowrie. nobody/admin	Brute-Force SSH
🇺🇸 brycemaxheimer	2026-05-25 12:50:04 (1 week ago)	Cowrie SSH honeypot: 1 events in 10m window 2026-05-25T12:40:00+00:00. Users tried: root. Commands:	Brute-Force SSH
🇩🇪 kreativstrecke	2026-05-25 11:39:32 (1 week ago)	2026-05-25T12:39:31.376535+01:00 srv03 postfix/smtps/smtpd[1422160]: warning: unknown[65.20.138.46]: ... show more 2026-05-25T12:39:31.376535+01:00 srv03 postfix/smtps/smtpd[1422160]: warning: unknown[65.20.138.46]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=dustin.hillers-fvs 2026-05-25T12:39:31.794286+01:00 srv03 postfix/smtps/smtpd[1422160]: lost connection after AUTH from unknown[65.20.138.46] ... show less	Brute-Force
🇩🇪 kreativstrecke	2026-05-25 11:16:01 (1 week ago)	2026-05-25T12:16:00.004270+01:00 srv03 postfix/submission/smtpd[1411761]: warning: unknown[65.20.138 ... show more 2026-05-25T12:16:00.004270+01:00 srv03 postfix/submission/smtpd[1411761]: warning: unknown[65.20.138.46]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-05-25T12:16:00.943015+01:00 srv03 postfix/submission/smtpd[1411761]: lost connection after AUTH from unknown[65.20.138.46] 2026-05-25T12:16:00.943371+01:00 srv03 postfix/submission/smtpd[1411761]: disconnect from unknown[65.20.138.46] ehlo=2 starttls=1 auth=0/1 commands=3/4 ... show less	Brute-Force
🇫🇷 Efix	2026-05-25 10:01:36 (1 week ago)	Brute-force login attempt on Synology NAS - Auto-detected and banned	Web App Attack
🇹🇷 ferique	2026-05-25 06:56:20 (1 week ago)	Real-time Intercept: SMTP attack. Reference: 2026-05-25 09:56:15.0896 Login failure: 65.20.138.46 SM ... show more Real-time Intercept: SMTP attack. Reference: 2026-05-25 09:56:15.0896 Login failure: 65.20.138.46 SMTP show less	Brute-Force Email Spam
🇵🇱 bmino.pl	2026-05-25 06:39:17 (1 week ago)	Autoban IP(2): 65.20.138.46 - Hostname: Hulum - City: Baghdad - Region: Baghdad - Country: Iraq - Lo ... show more Autoban IP(2): 65.20.138.46 - Hostname: Hulum - City: Baghdad - Region: Baghdad - Country: Iraq - Location: 33.3364,44.4004 - Organization: Earthlink Telecommunications Equipment Trading \u0026 Services DMCC - failed attempts. show less	Brute-Force
🇩🇪 Sparxx	2026-05-25 04:16:18 (1 week ago)	2026-05-25T06:16:17.014889+02:00 srv postfix/submissions/smtpd[2144474]: warning: unknown[65.20.138. ... show more 2026-05-25T06:16:17.014889+02:00 srv postfix/submissions/smtpd[2144474]: warning: unknown[65.20.138.46]: SASL LOGIN authentication failed: (reason unavailable), [email protected] 2026-05-25T06:16:17.534584+02:00 srv postfix/submissions/smtpd[2144474]: lost connection after AUTH from unknown[65.20.138.46] 2026-05-25T06:16:17.535112+02:00 srv postfix/submissions/smtpd[2144474]: disconnect from unknown[65.20.138.46] ehlo=1 auth=0/1 commands=1/2 ... show less	Brute-Force
🇩🇪 Paul Smith	2026-05-25 03:22:53 (1 week ago)	Email Auth Brute force attack 5/5 in last day	Brute-Force
Anonymous	2026-05-25 02:06:24 (1 week ago)	IMAP password guessing	Brute-Force
🇷🇴 iulianh	2026-05-25 01:00:45 (1 week ago)	25,465,587	Brute-Force SSH
🇩🇪 Addereum	2026-05-24 22:56:18 (1 week ago)	[SSH] Honeypot detected 1 failed login attempts from 65.20.138.46 (Iraq) over 0.0 days. Tried userna ... show more [SSH] Honeypot detected 1 failed login attempts from 65.20.138.46 (Iraq) over 0.0 days. Tried usernames: ubnt. show less	Brute-Force SSH
🇹🇷 ferique	2026-05-24 22:28:44 (1 week ago)	Real-time Intercept: SMTP attack. Reference: 2026-05-25 01:28:38.9338 Login failure: 65.20.138.46 SM ... show more Real-time Intercept: SMTP attack. Reference: 2026-05-25 01:28:38.9338 Login failure: 65.20.138.46 SMTP show less	Brute-Force Email Spam
Anonymous	2026-05-24 18:32:26 (1 week ago)	2026-05-24 20:32:13.756 [3550222] no host name found for IP address 65.20.138.46 2026-05-24 20:32:23 ... show more 2026-05-24 20:32:13.756 [3550222] no host name found for IP address 65.20.138.46 2026-05-24 20:32:23.325 [3550222] dovecot_login authenticator failed for ([188.166.179.34]) [65.20.138.46]:50420 I=[217.197.86.168]:465 Ci=3550222: 535 Incorrect authentication data 2026-05-24 20:32:24.281 [3550222] no MAIL in SMTP connection from ([188.166.179.34]) [65.20.138.46]:50420 I=[217.197.86.168]:465 Ci=3550222 D=10s X=TLS1.2:ECDHE_SECP256R1__ECDSA_SHA512__AES_256_GCM:256 CV=no C=EHLO,AUTH ... show less	Email Spam
🇩🇪 eebh.hu	2026-05-24 18:31:03 (1 week ago)	May 23 14:39:52 mail postfix/submission/smtpd[3773600]: warning: unknown[65.20.138.46]: SASL LOGIN a ... show more May 23 14:39:52 mail postfix/submission/smtpd[3773600]: warning: unknown[65.20.138.46]: SASL LOGIN authentication failed: (reason unavailable), [email protected] May 24 10:34:44 mail postfix/smtps/smtpd[4060419]: warning: unknown[65.20.138.46]: SASL LOGIN authentication failed: (reason unavailable), [email protected] May 24 20:31:03 mail postfix/smtps/smtpd[10085]: warning: unknown[65.20.138.46]: SASL LOGIN authentication failed: (reason unavailable), [email protected] ... show less	Brute-Force

Showing 136 to 150 of 1825 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 205.210.31.87

🇺🇸 172.236.96.130

🇨🇦 138.197.147.76

🇺🇸 216.25.89.113

🇧🇷 201.71.192.108

🇮🇩 103.151.140.97

🇨🇩 102.216.240.61

🇩🇪 80.187.80.142

🇺🇸 66.132.172.208

🇧🇷 56.125.227.146

🇵🇭 49.145.216.135

🇳🇱 45.148.10.151

🇺🇸 45.41.131.159

🇬🇧 35.203.211.91

🇧🇪 34.76.178.2

🇺🇸 20.121.123.108

🇹🇼 198.235.24.89

🇺🇸 165.232.53.75

🇻🇳 157.66.47.1

🇩🇪 69.5.169.72