Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
154.239.87.158 has a threat confidence score of 80%. This IP address from Egypt (AS36992, Etisalat Misr) has been observed in 14 honeypot sessions targeting FTP protocols. First observed on February 25, 2026, most recently active February 25, 2026.
FTP session where a client probes for valid users, attempts authentication, switches to ASCII mode, enters passive mode, and issues an NLST command to retrieve a directory name listing. This sequence reflects authenticated directory enumeration focused on discovering available files or structure without detailed metadata retrieval.