Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
50.28.84.26 has a threat confidence score of 52%. This IP address from United States (AS32244, Liquid Web, L.L.C) has been observed in 3 honeypot sessions targeting FTP protocols. First observed on March 8, 2026, most recently active March 11, 2026.
FTP session where a client probes for valid usernames, attempts authentication, switches to ASCII mode, and enters passive mode without performing explicit file listing or transfer operations. This reflects a completed login and session setup sequence, often observed during credential validation or preparatory access prior to further activity.