150.241.203.217
recordedScript KiddieTourist
Case file
First seen on 2026-10-04T11:32:39Z, most recently active on 2026-10-04T22:05:51Z.
Recorded 2 attack-shaped requests across 1 separate day.
Its traffic attempted to relay mail through this server and was rejected (open-relay/spam probe).
Seen on our mail sensor.
Scored into the "Script Kiddie" level, carrying the badge Tourist.
Routed via AS19318 (Interserver, Inc), an ASN we classify as hosting.
Recorded internally; has not yet crossed the bar for a public listing.
Enrichment
| rDNS | ChpBVh3k.strike.bz |
|---|---|
| ASN | AS19318 — Interserver, Inc |
| ASN type | hosting |
| Country | United States (US) |
| Flags | none observed |
Timeline
- 2026-10-042
Evidence (newest first, up to 50)
| Time (UTC) | Vantage | Site | Class | Status | Evidence |
|---|---|---|---|---|---|
| 2026-10-04T22:05:51Z | 4emx | attempted to relay mail through this server and was rejected (open-relay/spam probe) | attempted to relay mail through this server and was rejected (open-relay/spam probe) | ||
| 2026-10-04T11:32:39Z | 4emx | attempted to relay mail through this server and was rejected (open-relay/spam probe) | attempted to relay mail through this server and was rejected (open-relay/spam probe) |
Not currently correlated with any campaign.
Dispute or removal: [email protected] — reference 150.241.203.217. See /threats/about for the method and the 7-day review window.
card.svg (used as this page's og:image)
