IP

170[.]39[.]218[.]2

Confidence: ai extracted
VirusTotal ↗ Shodan ↗ AbuseIPDB ↗

Source Articles 1

GhostAction Returns: Malicious “Security Audit” Workflows Now Mine Credentials from Entire Git Histories
step-security Oct 9, 2026