JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 65.20.133.209

65.20.133.209 was found in our database!

This IP was reported 145 times. Confidence of Abuse is 73%: ?

73%

ISP	Earthlink Telecommunications Equipment Trading & Services DMCC
Usage Type	Fixed Line ISP
ASN	AS203214
Domain Name	earthlink.iq
Country	🇮🇶 Iraq
City	Baghdad, Baghdad

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 65.20.133.209

Whois 65.20.133.209

IP Abuse Reports for 65.20.133.209:

This IP address has been reported a total of 145 times from 64 distinct sources. 65.20.133.209 was first reported on October 21st 2023, and the most recent report was 4 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 sockominfo	2026-08-29 04:00:53 (4 days ago)	Email: Login failures from Bad Reputation IP: 65.20.133.209. Threat Score: 6.1/10 (MEDIUM). Confiden ... show more Email: Login failures from Bad Reputation IP: 65.20.133.209. Threat Score: 6.1/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-29 03:00:54 (4 days ago)	Email: Login failures from Bad Reputation IP: 65.20.133.209. Threat Score: 6.2/10 (MEDIUM). Confiden ... show more Email: Login failures from Bad Reputation IP: 65.20.133.209. Threat Score: 6.2/10 (MEDIUM). Confidence: 40%. CVSS v3.1: 4.3/10 (Medium). CVSS Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L. Bayesian Probability: 77%. MITRE ATT&CK: T1566 (Phishing). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT. Status: MALICIOUS show less	Hacking Web App Attack
🇮🇩 sockominfo	2026-08-29 02:00:11 (4 days ago)	Email: Login failures from Bad Reputation IP: 65.20.133.209. Threat Score: 5.7/10 (MEDIUM). Reported ... show more Email: Login failures from Bad Reputation IP: 65.20.133.209. Threat Score: 5.7/10 (MEDIUM). Reported by TangerangKota-CSIRT show less	Hacking Web App Attack
🇩🇪 FeG Deutschland	2026-08-26 05:12:13 (1 week ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇵🇾 SecOpsSL	2026-08-25 10:25:16 (1 week ago)	2026-08-25 07:25:16,417 WARN [ImapSSLServer-1737] [ip=192.168.0.25;oip=65.20.133.209;via=192.168.0. ... show more 2026-08-25 07:25:16,417 WARN [ImapSSLServer-1737] [ip=192.168.0.25;oip=65.20.133.209;via=192.168.0.25(nginx/1.20.0);ua=Zimbra/8.8.15_GA_4717;cid=40442;] security - cmd=Auth; [email protected]; protocol=imap; error=authentication failed for [[email protected]], invalid password; show less	Email Spam Brute-Force
🇫🇷 LRob	2026-08-25 08:38:53 (1 week ago)	Unauthorised mail authentication attempt (SMTP/IMAP) \| 2026-08-25 08:38 UTC	Email Spam Brute-Force
🇷🇺 DZBOT	2026-08-24 04:46:41 (1 week ago)	DZBOT: [MTA] NO LOGIN / auth failed	Port Scan Brute-Force
Anonymous	2026-08-23 00:31:02 (1 week ago)	IMAP password guessing	Brute-Force
🇩🇪 FeG Deutschland	2026-08-22 20:48:15 (1 week ago)	Mail: - login with unknown user - bruteforce	Brute-Force
Anonymous	2026-08-21 00:43:25 (1 week ago)	2026-08-20 13:03:34,623 INFO [ImapSSLServer-723] [ip=192.168.1.235;oip=65.20.133.209;via=192.168.1. ... show more 2026-08-20 13:03:34,623 INFO [ImapSSLServer-723] [ip=192.168.1.235;oip=65.20.133.209;via=192.168.1.235(nginx/1.20.0);ua=Zimbra/8.8.15_GA_4717;cid=3880;] imap - authentication failed for [[email protected]] (invalid password) 2026-08-20 13:03:34,623 INFO [ImapSSLServer-723] [ip=192.168.1.235;oip=65.20.133.209;via=192.168.1.235(nginx/1.20.0);ua=Zimbra/8.8.15_GA_4717;cid=3880;] account - Error occurred during authentication: authentication failed for [[email protected]]. Reason: invalid password. 2026-08-21 00:43:24,988 INFO [ImapSSLServer-800] [ip=192.168.1.235;oip=65.20.133.209;via=192.168.1.235(nginx/1.20.0);ua=Zimbra/8.8.15_GA_4717;cid=4594;] account - Error occurred during authentication: authentication failed for [[email protected]]. Reason: invalid password. 2026-08-21 00:43:24,988 INFO [ImapSSLServer-800] [ip=192.168.1.235;oip=65.20.133.209;via=192.168.1.235(nginx/1.20.0);ua=Zimbra/8.8.15_GA_4717;cid=4594;] imap - authentication failed for [[email protected]] (invali ... show less	Brute-Force Web App Attack
🇺🇸 Smee	2026-08-17 11:46:48 (2 weeks ago)	IMAP/SMTP Authentication Failure	Brute-Force
🇺🇸 vestibtech	2026-08-17 11:39:14 (2 weeks ago)	2026-08-17T05:39:13.915290-06:00 Host-KLAX-C dovecot[1269]: imap-login: Disconnected: Connection clo ... show more 2026-08-17T05:39:13.915290-06:00 Host-KLAX-C dovecot[1269]: imap-login: Disconnected: Connection closed (auth failed, 3 attempts in 16 secs): user=<[email protected]>, method=PLAIN, rip=65.20.133.209, lip=185.198.26.44, TLS, session=<PlKWnTxZocZBFIXR> ... show less	Brute-Force
🇩🇪 FeG Deutschland	2026-08-16 12:46:07 (2 weeks ago)	Mail: - login with unknown user - bruteforce	Brute-Force
🇷🇴 clauss	2026-08-15 18:22:11 (2 weeks ago)	IP reached maximum auth failures for a one day block	Brute-Force
Anonymous	2026-08-13 09:24:08 (2 weeks ago)	65.20.133.209 detected on srv01	Brute-Force

Showing 1 to 15 of 145 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 2607:f8b0:400e:c0c::123

🇹🇼 221.120.73.25

🇳🇱 176.65.149.233

🇨🇦 138.197.147.76

🇳🇱 91.92.42.7

🇺🇸 40.77.167.154

🇮🇳 34.100.204.203

🇨🇦 4.204.224.164

🇮🇳 3.108.234.185

🇦🇪 176.204.4.161

🇻🇳 165.154.104.92

🇨🇳 118.249.82.45

🇷🇺 95.215.0.144

🇦🇲 37.157.222.12

🇺🇸 35.202.240.40

🇪🇸 34.175.142.51

🇺🇸 32.192.197.238

🇨🇳 27.155.103.100

🇯🇵 18.183.86.247

🇳🇱 195.178.110.26