Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
119.235.48.222 has a threat confidence score of 99%. This IP address from India (AS45582, VAINAVI INDUSTIES LTD, INTERNET SERVICE PROVIDER, INDIA) has been observed in 125 honeypot sessions targeting FTP protocols. Detected attack patterns include ftp valid account photo scr deployment. First observed on March 26, 2026, most recently active March 26, 2026.
Detects an automated FTP session performing credential probing, directory discovery, ASCII mode configuration, passive transfer negotiation, and staged upload of a photo_scr payload. This pattern is consistent with scripted web shell or content-stager deployment via compromised FTP credentials.
FTP session where the client uploads files named Photo.scr and Photo.lnk using STOR after entering passive mode.