Check an IP Address, Domain Name, Subnet, or ASN
72.255.7.78 has a threat confidence score of 75%. This IP address from Pakistan (AS9541, Cyber Internet Services Pvt Ltd.) has been observed in 10 honeypot sessions targeting FTP protocols. Detected attack patterns include ftp authenticated upload to scripts directory. First observed on April 1, 2026, most recently active April 1, 2026.
FTP session where a client probes for valid users, attempts authentication, switches transfer modes (ASCII/Binary), enumerates the /scripts directory, and attempts to upload info.zip via STOR in passive mode. This sequence reflects an authenticated file placement attempt following directory discovery, consistent with efforts to deploy content onto a remotely accessible scripts path.