5.26.190.79

recordedScript KiddieTourist

Case file

First seen on 2026-10-07T21:49:50Z, most recently active on 2026-10-07T21:49:50Z.

Recorded 1 attack-shaped request across 1 separate day.

Its traffic attempted to authenticate to the mail server with a wrong password.

Seen on our mail sensor.

Scored into the "Script Kiddie" level, carrying the badge Tourist.

Routed via AS16135 (Turkcell Iletisim Hizmetleri A.s.), an ASN we classify as residential.

Recorded internally; has not yet crossed the bar for a public listing.

Enrichment

rDNSnone
ASNAS16135 — Turkcell Iletisim Hizmetleri A.s.
ASN typeresidential
CountryTürkiye (TR)
Flagsnone observed

External references: GreyNoise, Shodan, AbuseIPDB

Timeline

Evidence (newest first, up to 50)

Time (UTC)VantageSiteClassStatusEvidence
2026-10-07T21:49:50Zmail4emxattempted to authenticate to the mail server with a wrong passwordattempted to authenticate to the mail server with a wrong password

Not currently correlated with any campaign.

Dispute or removal: abuse-reports@abuse.servbg.com — reference 5.26.190.79. See /threats/about for the method and the 7-day review window.

card.svg (used as this page's og:image)