Attack Report for Observation

Header

Time

2024/03/25, 15:23:58 (GMT)

Transaction ID

2MRSYVA5O1DQKQ4X

Service

ftp

Location

TH (Thailand)

Attacker

152.32.245.196

Classification

Command check

Harm Potential

Not

Description

Ftp command exists check

Content

Client : 152.32.245.196:33936 is connected to ftp://ftp.***********:21
220 ftpsrv Microsoft FTP Service <Version 5.0>.
HELP
Commands may be abbreviated.  Commands are: 

auth	cdup	cwd	dele	feat	
help	list	mdtm	mkd	mlsd	
nlst	noop	opts	pass	pasv	
port	pwd	quit	rest	retr	
rmd	rnfr	rnto	size	stor	
syst	type	user	
FEAT
211-Extensions supported:
 MLST size*;create;modify*;perm;media-type
211 END
USER anonymous
331 OK.
PASS
230 OK.

Client : 152.32.245.196:33936 is disconnected from ftp://ftp.***********:21

All observations are coming from honeypot central database.

Please share your wishes, opinions and suggestions with us:

If you like, you can support
with your donations to us..

Donate