Honeypots.tk

Attack Report for Observation

Header

Time

2024/10/22, 17:50:38 (GMT)

Transaction ID

S4IVZCYBOLIXLQSE

Service

ftp

Location

DE (Germany)

Attacker

185.109.182.98

Classification

Command check

Harm Potential

Not

Description

Ftp command exists check

Content

Client : 185.109.182.98:60923 is connected to ftp://ftp.***********:21
220 ftpsrv Microsoft FTP Service <Version 5.0>.
USER anonymous
331 OK.
PASS flashfxp-user@flashfxp.com
230 OK.
SYST
215 UNIX Type: L8
FEAT
211-Extensions supported:
 MLST size*;create;modify*;perm;media-type
211 END
OPTS MLST size;modify;perm;
451 Sorry.
PWD
257 "/"
CWD /
200 OK.
PWD
257 "/"
PORT 185,109,182,98,237,254
200 Port command successful
MLSD
150 Opening data channel for directory listing of "/"
226 Listing completed.
NOOP
200 OK.
PWD
257 "/"
QUIT
221 Goodbye.
Client : 185.109.182.98:60923 is disconnected from ftp://ftp.***********:21

All observations are coming from honeypot central database.

Please share your wishes, opinions and suggestions with us:

If you like, you can support
with your donations to us..

Donate

honeypots.tk ©2020