Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
185.139.138.93 has a very high threat confidence level of 84%, originating from Tashkent, Uzbekistan, on the Uzbektelekom Joint Stock Company network (201767). It has been observed across 17 sessions targeting FTP, with detected attack patterns including ftp authenticated upload to reports directory, First observed on February 3, 2026, most recently active February 3, 2026.
FTP session where a client probes for valid users, attempts authentication, negotiates transfer modes (ASCII/Binary), enumerates the /reports directory, and attempts to upload info.zip in passive mode. This sequence reflects an authenticated file placement attempt following directory discovery, consistent with staged content deployment onto a writable path.