65.20.131.20

recordedScript KiddieTourist

Case file

First seen on 2026-10-07T21:45:32Z, most recently active on 2026-10-07T21:45:32Z.

Recorded 1 attack-shaped request across 1 separate day.

Its traffic tried to log in to a mailbox that does not exist.

Seen on our mail sensor.

Scored into the "Script Kiddie" level, carrying the badge Tourist.

Routed via AS203214 (Hulum Almustakbal Company for Communication Engineering and Services Ltd), an ASN we classify as residential.

Recorded internally; has not yet crossed the bar for a public listing.

Enrichment

rDNSnone
ASNAS203214 — Hulum Almustakbal Company for Communication Engineering and Services Ltd
ASN typeresidential
CountryIraq (IQ)
Flagsnone observed

External references: GreyNoise, Shodan, AbuseIPDB

Timeline

Evidence (newest first, up to 50)

Time (UTC)VantageSiteClassStatusEvidence
2026-10-07T21:45:32Zmail4emxtried to log in to a mailbox that does not existtried to log in to a mailbox that does not exist

Not currently correlated with any campaign.

Dispute or removal: abuse-reports@abuse.servbg.com — reference 65.20.131.20. See /threats/about for the method and the 7-day review window.

card.svg (used as this page's og:image)