This IP address has been reported a total of
73
times from
39 distinct
sources.
65.20.150.52 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-06-22 03:30:05 ...
show moreAutomated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-06-22 03:30:05. Events: 22. Reported by ipdb-security/fitzgerald.eu
show less
Automated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-06-21 08:30:04 ...
show moreAutomated report from fail2ban on mail.fitzgerald.eu. Jail: dovecot. First seen: 2026-06-21 08:30:04. Events: 9. Reported by ipdb-security/fitzgerald.eu
show less
Suspicious activity detected from IP 65.20.150.52 based on mailserver logs.
Sample logs:
2026-06-18 ...
show moreSuspicious activity detected from IP 65.20.150.52 based on mailserver logs.
Sample logs:
2026-06-18 08:53:34,119 INFO [ImapServer-3148] [ip=172.16.0.182;oip=65.20.150.52;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=3604;] account - Error occurred during authentication: authentication failed for [**]. Reason: LDAP error: - unable to ldap authenticate: invalid credentials.
2026-06-18 08:53:34,119 INFO [ImapServer-3148] [ip=172.16.0.182;oip=65.20.150.52;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=3604;] imap - AUTHENTICATE elapsed=1 (NIO)
2026-06-18 08:53:34,120 INFO [ImapServer-3147] [ip=172.16.0.182;oip=65.20.150.52;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=3603;] imap - authentication failed for [**] (LDAP error: - unable to ldap authenticate: invalid credentials)
2026-06-18 08:53:34,120 INFO [ImapServer-3147] [ip=172.16.0.182;oip=65.20.150.52;via=172.16.0.182(nginx/1.24.0);ua=Zimbra/24.9.7_ZEXTRAS_202410;cid=3
show less
Jun 8 16:02:01 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in ...
show moreJun 8 16:02:01 mail dovecot: imap-login: Disconnected: Connection closed (auth failed, 1 attempts in 3 secs): user=, method=PLAIN, rip=65.20.150.52, lip=X.X.X.X session=
show less
65.20.150.52 (IQ/Iraq/-), 10 distributed imapd attacks on account [cloacked] in the last 900 secs; P ...
show more65.20.150.52 (IQ/Iraq/-), 10 distributed imapd attacks on account [cloacked] in the last 900 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Jun 8 16:58:46 dovecot[557752]: imap-login: Login aborted: Connection closed (auth failed, 1 attempts in 4 secs) (auth_failed): user=[cloacked] metho
show less
Brute-Force
Anonymous
2026-06-08T16:45:07.498951+02:00 soli-gate cyrus/imaps[2015485]: badlogin: [65.20.150.52] plaintext ...
show more2026-06-08T16:45:07.498951+02:00 soli-gate cyrus/imaps[2015485]: badlogin: [65.20.150.52] plaintext ([email protected]) [SASL(-13): authentication failure: checkpass failed]
...
show less
Brute-Force
Showing 1 to
15
of 73 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩