CrushFTP Admin Accounts Targeted by Brute-Force Scans

Attempts are attributed to 5.189.139.225, seen probing since February.

Part of the PlainSec briefing for 2026-03-04

Sources

• SANS ISC