Check an IP Address, Domain Name, Subnet, or ASN
41.43.5.111 has a threat confidence score of 70%. This IP address from Egypt (AS8452, TE Data) has been observed in 4 honeypot sessions targeting FTP protocols. First observed on April 14, 2026, most recently active April 19, 2026.
FTP session where a client probes for valid users, attempts authentication, switches to ASCII mode, enters passive mode, and issues an NLST command to retrieve a directory name listing. This sequence reflects authenticated directory enumeration focused on discovering available files or structure without detailed metadata retrieval.
FTP session where a client probes for valid usernames, attempts authentication, switches to ASCII mode, and enters passive mode without performing explicit file listing or transfer operations. This reflects a completed login and session setup sequence, often observed during credential validation or preparatory access prior to further activity.