65.20.188.53
Neutral Activity
There is no recent abuse activity, or the IP address is whitelisted.
- ISP
- Earthlink Telecommunications Equipment Trading & Services DMCC
- Usage Type
- Fixed Line ISP
- ASN
- AS203214
- Domain Name
- earthlink.iq
- Country
- 🇮🇶 Iraq
- City
- Karbala, Karbala
No reports in the last 60 days
65.20.188.53 has been reported 74 times. The most recent report is from .
The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.
Abuse Reports
Total reports
74 from
36 distinct
reporters
First reported
Most recent report
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇨🇭 Modules |
Open proxy http://65.20.188.53:9090 (RT:7252ms,Loc:Iraq,ASN:AS203214)
|
Open Proxy | |
| 🇩🇪 Tizian Maxime Weigt |
Incoming DDoS to port 443 (L7 HTTPS Flood) Detected
|
DDoS Attack | |
| 🇦🇺 GreyWatch - Honeypot Intelligence |
ASN: 203214 (HULUMTELE)
Botnet Zombie: This IP has been detected as a botnet zombie | Outbound DDoS attack source | Malicious
|
DDoS Attack Bad Web Bot | |
| 🇷🇺 ago.su |
F2B blocked nginx activity control ddos v2 [otd]
|
DDoS Attack | |
| 🇺🇸 SuperEvilLuke |
Malicious activity detected from 203214 HULUMTELE towards host dash.embotic.xyz (GET HTTP/2) @ 2025-11-04T21:43:56Z (2 occurrences)
|
DDoS Attack Exploited Host | |
| 🇺🇸 SuperEvilLuke |
Malicious activity detected from 203214 HULUMTELE towards host dash.embotic.xyz (GET HTTP/2) @ 2025-11-04T18:40:32Z (15 occurrences)
|
DDoS Attack Exploited Host | |
| 🇨🇭 backslash |
|
DDoS Attack | |
| 🇪🇸 10dencehispahard SL |
WP probing for vulnerabilities
|
Hacking Exploited Host | |
| 🇺🇸 SuperEvilLuke |
Malicious activity detected from 203214 HULUMTELE towards host dash.embotic.xyz (GET HTTP/1.1) @ 2025-10-07T23:55:57Z (4 occurrences)
|
DDoS Attack Exploited Host | |
| 🇫🇷 MatStef132 |
Triggered Cloudflare WAF (l7ddos) from IQ.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36
|
DDoS Attack Bad Web Bot | |
| 🇬🇧 Silly Development |
Malicious activity detected from 203214 HULUMTELE towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025-08-28T12:26:55Z (1 occurrences)
|
DDoS Attack Exploited Host | |
| 🇬🇧 Silly Development |
Malicious activity detected from 203214 HULUMTELE towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025-08-26T14:27:17Z (16 occurrences)
|
DDoS Attack Exploited Host | |
| 🇬🇧 Silly Development |
Malicious activity detected from 203214 HULUMTELE towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025-08-25T22:13:20Z (16 occurrences)
|
DDoS Attack Exploited Host | |
| 🇬🇧 Silly Development |
Malicious activity detected from 203214 HULUMTELE towards host panel.sillydev.co.uk (GET HTTP/2) @ 2025-08-25T04:05:43Z (23 occurrences)
|
DDoS Attack Exploited Host | |
| 🇩🇪 1gz |
|
Bad Web Bot |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown