Attack Report for Observation

Header

Time

2022/11/16, 21:36:05 (GMT)

Transaction ID

H4FZFWEI2EQOCM32

Service

ftp

Location

US (United States)

Attacker

71.6.146.185

Classification

Command check

Harm Potential

Not

Description

Ftp command exists check

Content

Client : 71.6.146.185:56436 is connected to ftp://ftp.***********:21
220 ftpsrv Microsoft FTP Service <Version 5.0>.
USER anonymous
331 OK.
PASS anonymous@
230 OK.
HELP
Commands may be abbreviated.  Commands are: 

auth	cdup	cwd	dele	feat	
help	list	mdtm	mkd	mlsd	
nlst	noop	opts	pass	pasv	
port	pwd	quit	rest	retr	
rmd	rnfr	rnto	size	stor	
syst	type	user	
FEAT
211-Extensions supported:
 MLST size*;create;modify*;perm;media-type
211 END
AUTH TLS
502 FTP server does not support AUTH command
Client : 71.6.146.185:56436 is disconnected from ftp://ftp.***********:21

All observations are coming from honeypot central database.

Please share your wishes, opinions and suggestions with us:

If you like, you can support
with your donations to us..

Donate