AbuseIPDB » 65.20.221.48

65.20.221.48 was found in our database!

This IP was reported 143 times. Confidence of Abuse is 100%: ?

100%

ISP	Earthlink Telecommunications Equipment Trading & Services DMCC
Usage Type	Fixed Line ISP
ASN	AS203214
Domain Name	earthlink.iq
Country	Iraq
City	Al Musayyib, Babil

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated biweekly.

Report 65.20.221.48

Whois 65.20.221.48

IP Abuse Reports for 65.20.221.48:

This IP address has been reported a total of 143 times from 76 distinct sources. 65.20.221.48 was first reported on March 31st 2025, and the most recent report was 2 weeks ago.

Old Reports: The most recent abuse report for this IP address is from 2 weeks ago. It is possible that this IP is no longer involved in abusive activities.

Reporter	IoA Timestamp in UTC	Comment	Categories
ThreatBook.io	2025-05-29 23:48:12 (2 weeks ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/65.20.221.48	SSH
Woodie	2025-05-29 04:32:45 (2 weeks ago)	2025-05-29T00:21:56.853999-04:00 debian sshd[3593876]: Failed password for invalid user temp from 65 ... show more2025-05-29T00:21:56.853999-04:00 debian sshd[3593876]: Failed password for invalid user temp from 65.20.221.48 port 49371 ssh2 2025-05-29T00:22:02.036885-04:00 debian sshd[3593983]: Invalid user smmsp from 65.20.221.48 port 38078 2025-05-29T00:22:02.040338-04:00 debian sshd[3593983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.20.221.48 2025-05-29T00:22:03.722985-04:00 debian sshd[3593983]: Failed password for invalid user smmsp from 65.20.221.48 port 38078 ssh2 2025-05-29T00:27:45.737072-04:00 debian sshd[3600982]: Invalid user smmsp from 65.20.221.48 port 45580 ... show less	Brute-Force SSH
JesionZ	2025-05-29 04:20:44 (2 weeks ago)	2025-05-29T06:20:41.820298+02:00 b sshd[1203525]: Invalid user pgsql from 65.20.221.48 port 59480<br ... show more2025-05-29T06:20:41.820298+02:00 b sshd[1203525]: Invalid user pgsql from 65.20.221.48 port 59480 2025-05-29T06:20:41.828081+02:00 b sshd[1203525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.20.221.48 2025-05-29T06:20:43.726530+02:00 b sshd[1203525]: Failed password for invalid user pgsql from 65.20.221.48 port 59480 ssh2 ... show less	Brute-Force SSH
corthorn	2025-05-29 03:42:23 (2 weeks ago)	May 29 05:42:20 vmi1008219 sshd[1099268]: pam_unix(sshd:auth): authentication failure; logname= uid= ... show moreMay 29 05:42:20 vmi1008219 sshd[1099268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.20.221.48 user=mysql May 29 05:42:22 vmi1008219 sshd[1099268]: Failed password for mysql from 65.20.221.48 port 42572 ssh2 ... show less	Brute-Force SSH
ntxg	2025-05-29 01:52:06 (2 weeks ago)	[SSH Server] SSH-Multi login Attempt	Port Scan Brute-Force SSH
corthorn	2025-05-29 01:19:57 (2 weeks ago)	May 29 03:19:56 vmi1008219 sshd[1092110]: Invalid user testing from 65.20.221.48 port 55656 .. ... show moreMay 29 03:19:56 vmi1008219 sshd[1092110]: Invalid user testing from 65.20.221.48 port 55656 ... show less	Brute-Force SSH
qtland Cloud Inc.	2025-05-28 16:37:05 (2 weeks ago)	2025-05-28T17:37:00.095900+01:00 as-southeast-dxn2 sshd[142490]: pam_unix(sshd:auth): authentication ... show more2025-05-28T17:37:00.095900+01:00 as-southeast-dxn2 sshd[142490]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.20.221.48 2025-05-28T17:37:02.784447+01:00 as-southeast-dxn2 sshd[142490]: Failed password for invalid user user1 from 65.20.221.48 port 47210 ssh2 2025-05-28T17:37:04.366861+01:00 as-southeast-dxn2 sshd[142490]: Connection closed by invalid user user1 65.20.221.48 port 47210 [preauth] ... show less	Brute-Force SSH
Woodie	2025-05-28 09:44:47 (2 weeks ago)	2025-05-28T05:36:31.761649-04:00 debian sshd[2389832]: Failed password for invalid user operator fro ... show more2025-05-28T05:36:31.761649-04:00 debian sshd[2389832]: Failed password for invalid user operator from 65.20.221.48 port 49617 ssh2 2025-05-28T05:37:58.492488-04:00 debian sshd[2390933]: Invalid user postgres from 65.20.221.48 port 34059 2025-05-28T05:37:58.496121-04:00 debian sshd[2390933]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.20.221.48 2025-05-28T05:38:00.959721-04:00 debian sshd[2390933]: Failed password for invalid user postgres from 65.20.221.48 port 34059 ssh2 2025-05-28T05:44:46.532030-04:00 debian sshd[2397385]: Invalid user supervisor from 65.20.221.48 port 51177 ... show less	Brute-Force SSH
FeG Deutschland	2025-05-28 07:02:02 (2 weeks ago)	Mail: - login with unknown user - bruteforce	Brute-Force
foobax	2025-05-28 02:04:11 (2 weeks ago)	was attempting to break in as 'spam' from port 33436	Brute-Force SSH
ggb_st	2025-05-27 19:47:35 (2 weeks ago)	2025-05-27T20:16:35.281871+03:00 gogo-server sshd-session[3498922]: pam_unix(sshd:auth): authenticat ... show more2025-05-27T20:16:35.281871+03:00 gogo-server sshd-session[3498922]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.20.221.48 2025-05-27T20:16:37.250552+03:00 gogo-server sshd-session[3498922]: Failed password for invalid user guest from 65.20.221.48 port 60236 ssh2 2025-05-27T22:47:34.739589+03:00 gogo-server sshd-session[3525206]: Invalid user ubnt from 65.20.221.48 port 48731 ... show less	Brute-Force SSH
Anonymous	2025-05-27 19:24:28 (2 weeks ago)	May 28 03:24:23 mail sshd[18705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show moreMay 28 03:24:23 mail sshd[18705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.20.221.48 May 28 03:24:26 mail sshd[18705]: Failed password for invalid user debian from 65.20.221.48 port 42366 ssh2 show less	Brute-Force SSH
Anonymous	2025-05-27 15:09:57 (2 weeks ago)	May 27 23:09:53 mail sshd[8632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 ... show moreMay 27 23:09:53 mail sshd[8632]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=65.20.221.48 May 27 23:09:55 mail sshd[8632]: Failed password for invalid user config from 65.20.221.48 port 34391 ssh2 show less	Brute-Force SSH
yvoictra	2025-05-27 12:13:24 (2 weeks ago)	May 27 14:13:24 medusa sshd[105077]: Invalid user supervisor from 65.20.221.48 port 58085 ...	Brute-Force SSH
ThreatBook.io	2025-05-26 23:37:03 (2 weeks ago)	ThreatBook Intelligence: Zombie,Spam more details on https://threatbook.io/ip/65.20.221.48	SSH

Is this your IP? You may request to takedown any associated reports. We will attempt to verify your ownership. Request Takedown 🚩