← Back to feed

AS203214 Hulum Almustakbal Company for Communication Engineering and Services Ltd

ASN Ended medium
Why this campaign was detected
5 IPs from the same network (Hulum Almustakbal Company for Communication Engineering and Services Ltd, AS203214) were active during overlapping time periods. Temporal correlation across a shared autonomous system suggests infrastructure controlled by the same entity.
Primary ASN
AS203214 · Hulum Almustakbal Company for Communication Engineering and Services Ltd
Subnet
Country
🇮🇶 IQ
Cloud Provider
Member Count
5 IPs
Below average
Total Events
139
Below average by volume
Started / Ended
2026-02-18 18:09 — 2026-04-29 05:31
Attack Types
ssh:bruteforce
MITRE ATT&CK Techniques
Reconnaissance
Credential Access
Command and Control
Member Actors
IP Address Behavior Confidence Flags Events Agents Attack Types Hostname Last Seen
65.20.204.88 credential_harvester 38% 1x OSINT 37 1 ssh:bruteforce 2026-08-16 03:52 evidence →
65.20.134.97 credential_harvester 38% 1x OSINT 37 1 ssh:bruteforce 2026-08-15 02:01 evidence →
65.20.143.45 proxy_abuser 36% 1x OSINT 11 1 ssh:bruteforce 2026-08-14 15:54 evidence →
65.20.237.119 credential_probe 18% 1x OSINT 16 1 ssh:bruteforce 2026-08-16 10:08 evidence →
65.20.146.109 credential_probe 14% 38 1 ssh:bruteforce 2026-08-15 09:54 evidence →
VPN Known VPN or proxy provider
DROP ASN on Spamhaus DROP list
Nx OSINT Corroborated by N external threat feeds
{# Cloudflare Web Analytics — cookieless, public pages only. The context processor withholds the token from authenticated requests. #}