#Software: Microsoft Internet Information Services 10.0 #Version: 1.0 #Date: 2024-09-07 02:54:45 #Fields: date time c-ip cs-username s-ip s-port cs-method cs-uri-stem sc-status sc-win32-status sc-substatus x-session x-fullpath 2024-09-07 02:54:45 172.93.101.108 - 85.215.251.124 21 ControlChannelOpened - - 0 0 b4c1083c-504a-4783-820e-0ddd71cb0f52 - 2024-09-07 02:54:45 172.93.101.108 - 85.215.251.124 21 ControlChannelClosed - - 64 0 b4c1083c-504a-4783-820e-0ddd71cb0f52 - 2024-09-07 02:54:46 172.93.101.108 - 85.215.251.124 21 ControlChannelOpened - - 0 0 eca682ea-20f4-437f-9b26-24141be0de22 - 2024-09-07 02:54:46 172.93.101.108 - 85.215.251.124 21 ControlChannelClosed - - 64 0 eca682ea-20f4-437f-9b26-24141be0de22 - 2024-09-07 04:10:58 172.169.206.199 - 85.215.251.124 21 ControlChannelOpened - - 0 0 f864f74d-40cb-4ed1-b294-5063bdd99648 - 2024-09-07 04:10:58 172.169.206.199 - 85.215.251.124 21 ControlChannelClosed - - 0 0 f864f74d-40cb-4ed1-b294-5063bdd99648 - 2024-09-07 05:18:56 199.45.154.150 - 85.215.251.124 21 ControlChannelOpened - - 0 0 a4e1989e-c402-43d1-9fd2-67dce9dc5034 - 2024-09-07 05:18:57 199.45.154.150 - 85.215.251.124 21 AUTH TLS 534 5 31 a4e1989e-c402-43d1-9fd2-67dce9dc5034 - 2024-09-07 05:18:57 199.45.154.150 - 85.215.251.124 21 AUTH SSL 534 5 31 a4e1989e-c402-43d1-9fd2-67dce9dc5034 - 2024-09-07 05:18:57 199.45.154.150 - 85.215.251.124 21 ControlChannelClosed - - 0 0 a4e1989e-c402-43d1-9fd2-67dce9dc5034 - 2024-09-07 05:29:15 65.49.1.40 - 85.215.251.124 21 ControlChannelOpened - - 0 0 d2143482-1532-4c28-b686-5ed60edd8d06 - 2024-09-07 05:29:15 65.49.1.40 - 85.215.251.124 21 AUTH TLS 534 5 31 d2143482-1532-4c28-b686-5ed60edd8d06 - 2024-09-07 05:29:16 65.49.1.40 - 85.215.251.124 21 AUTH SSL 534 5 31 d2143482-1532-4c28-b686-5ed60edd8d06 - 2024-09-07 05:29:16 65.49.1.40 - 85.215.251.124 21 ControlChannelClosed - - 0 0 d2143482-1532-4c28-b686-5ed60edd8d06 - 2024-09-07 06:28:57 44.220.188.121 - 85.215.251.124 21 ControlChannelOpened - - 0 0 655b3aee-1d60-447b-aa31-42bc24db42eb - 2024-09-07 06:28:57 44.220.188.121 - 85.215.251.124 21 USER anonymous 331 0 0 655b3aee-1d60-447b-aa31-42bc24db42eb - 2024-09-07 06:28:57 44.220.188.121 - 85.215.251.124 21 PASS anonymous@ 530 1326 42 655b3aee-1d60-447b-aa31-42bc24db42eb - 2024-09-07 06:28:57 44.220.188.121 - 85.215.251.124 21 HELP - 214 0 0 655b3aee-1d60-447b-aa31-42bc24db42eb - 2024-09-07 06:28:57 44.220.188.121 - 85.215.251.124 21 ControlChannelClosed - - 0 0 655b3aee-1d60-447b-aa31-42bc24db42eb - 2024-09-07 10:12:57 71.6.134.230 - 85.215.251.124 21 ControlChannelOpened - - 0 0 95712734-6350-4517-90fa-c2afc7b5070a - 2024-09-07 10:12:57 71.6.134.230 - 85.215.251.124 21 AUTH TLS 534 5 31 95712734-6350-4517-90fa-c2afc7b5070a - 2024-09-07 10:12:58 71.6.134.230 - 85.215.251.124 21 AUTH SSL 534 5 31 95712734-6350-4517-90fa-c2afc7b5070a - 2024-09-07 10:12:58 71.6.134.230 - 85.215.251.124 21 ControlChannelClosed - - 0 0 95712734-6350-4517-90fa-c2afc7b5070a - 2024-09-07 11:55:06 147.135.23.106 - 85.215.251.124 21 ControlChannelOpened - - 0 0 b69ffaf3-2e93-4ca5-aded-cfbcf3e06a88 - 2024-09-07 11:55:06 147.135.23.106 - 85.215.251.124 21 USER anonymous 331 0 0 b69ffaf3-2e93-4ca5-aded-cfbcf3e06a88 - 2024-09-07 11:55:06 147.135.23.106 - 85.215.251.124 21 PASS abuse@onyphe.io 530 1326 42 b69ffaf3-2e93-4ca5-aded-cfbcf3e06a88 - 2024-09-07 11:55:07 147.135.23.106 - 85.215.251.124 21 ControlChannelClosed - - 0 0 b69ffaf3-2e93-4ca5-aded-cfbcf3e06a88 - 2024-09-07 12:30:29 104.40.75.97 - 85.215.251.124 21 ControlChannelOpened - - 0 0 beb7f13e-88c2-4019-9d1a-9c9c1d7bebe4 - 2024-09-07 12:30:29 104.40.75.97 - 85.215.251.124 21 AUTH TLS 534 5 31 beb7f13e-88c2-4019-9d1a-9c9c1d7bebe4 - 2024-09-07 12:30:30 104.40.75.97 - 85.215.251.124 21 AUTH SSL 534 5 31 beb7f13e-88c2-4019-9d1a-9c9c1d7bebe4 - 2024-09-07 12:30:30 104.40.75.97 - 85.215.251.124 21 ControlChannelClosed - - 0 0 beb7f13e-88c2-4019-9d1a-9c9c1d7bebe4 - 2024-09-07 12:58:47 5.138.84.226 - 85.215.251.124 21 ControlChannelOpened - - 0 0 710ab812-f8c3-48e1-b3c4-24d9d3b8b173 - 2024-09-07 12:58:47 5.138.84.226 - 85.215.251.124 21 USER login 331 0 0 710ab812-f8c3-48e1-b3c4-24d9d3b8b173 - 2024-09-07 12:58:47 5.138.84.226 - 85.215.251.124 21 PASS *** 530 1326 41 710ab812-f8c3-48e1-b3c4-24d9d3b8b173 - 2024-09-07 12:58:47 5.138.84.226 - 85.215.251.124 21 ControlChannelClosed - - 0 0 710ab812-f8c3-48e1-b3c4-24d9d3b8b173 - 2024-09-07 13:07:48 34.38.220.243 - 85.215.251.124 21 ControlChannelOpened - - 0 0 93aebef7-354d-491e-8ed2-f8765e60c920 - 2024-09-07 13:07:48 34.38.220.243 - 85.215.251.124 21 ControlChannelClosed - - 0 0 93aebef7-354d-491e-8ed2-f8765e60c920 - 2024-09-07 13:07:48 34.38.220.243 - 85.215.251.124 21 ControlChannelOpened - - 0 0 a7b62000-6667-4bdd-8840-91e913b32181 - 2024-09-07 13:07:48 34.38.220.243 - 85.215.251.124 21 USER anonymous 331 0 0 a7b62000-6667-4bdd-8840-91e913b32181 - 2024-09-07 13:07:48 34.38.220.243 - 85.215.251.124 21 PASS anonymous@ 530 1326 42 a7b62000-6667-4bdd-8840-91e913b32181 - 2024-09-07 13:07:48 34.38.220.243 - 85.215.251.124 21 ControlChannelClosed - - 0 0 a7b62000-6667-4bdd-8840-91e913b32181 - 2024-09-07 14:01:17 87.236.176.54 - 85.215.251.124 21 ControlChannelOpened - - 0 0 e56ec853-acb8-4221-bead-fb825536f5e4 - 2024-09-07 14:01:19 87.236.176.54 - 85.215.251.124 21 SYST - 215 0 0 e56ec853-acb8-4221-bead-fb825536f5e4 - 2024-09-07 14:01:21 87.236.176.54 - 85.215.251.124 21 AUTH TLS 534 5 31 e56ec853-acb8-4221-bead-fb825536f5e4 - 2024-09-07 14:01:23 87.236.176.54 - 85.215.251.124 21 QUIT - 221 0 0 e56ec853-acb8-4221-bead-fb825536f5e4 - 2024-09-07 14:01:23 87.236.176.54 - 85.215.251.124 21 ControlChannelClosed - - 0 0 e56ec853-acb8-4221-bead-fb825536f5e4 - 2024-09-07 14:22:26 167.94.146.60 - 85.215.251.124 21 ControlChannelOpened - - 0 0 d81968e4-9d9c-40d0-8138-1a868de389d3 - 2024-09-07 14:22:26 167.94.146.60 - 85.215.251.124 21 AUTH TLS 534 5 31 d81968e4-9d9c-40d0-8138-1a868de389d3 - 2024-09-07 14:22:26 167.94.146.60 - 85.215.251.124 21 AUTH SSL 534 5 31 d81968e4-9d9c-40d0-8138-1a868de389d3 - 2024-09-07 14:22:26 167.94.146.60 - 85.215.251.124 21 ControlChannelClosed - - 0 0 d81968e4-9d9c-40d0-8138-1a868de389d3 - 2024-09-07 14:59:34 193.29.13.21 - 85.215.251.124 21 ControlChannelOpened - - 0 0 202e9395-8e12-4e41-ac2e-36529baec787 - 2024-09-07 14:59:34 193.29.13.21 - 85.215.251.124 21 /*àCookie: mstshash=Administr 500 87 0 202e9395-8e12-4e41-ac2e-36529baec787 - 2024-09-07 14:59:34 193.29.13.21 - 85.215.251.124 21 ControlChannelClosed - - 64 0 202e9395-8e12-4e41-ac2e-36529baec787 - 2024-09-07 15:33:56 57.152.78.110 - 85.215.251.124 21 ControlChannelOpened - - 0 0 9a4120f8-d310-4a34-95bc-1dd49fa99c7c - 2024-09-07 15:33:56 57.152.78.110 - 85.215.251.124 21 - - 451 87 0 9a4120f8-d310-4a34-95bc-1dd49fa99c7c - 2024-09-07 15:33:56 57.152.78.110 - 85.215.251.124 21 ControlChannelClosed - - 0 0 9a4120f8-d310-4a34-95bc-1dd49fa99c7c - 2024-09-07 15:55:07 198.235.24.143 - 85.215.251.124 21 ControlChannelOpened - - 0 0 4b72d2b2-65cd-4074-9b00-42b840339d19 - 2024-09-07 15:55:08 198.235.24.143 - 85.215.251.124 21 AUTH TLS 534 5 31 4b72d2b2-65cd-4074-9b00-42b840339d19 - 2024-09-07 15:55:08 198.235.24.143 - 85.215.251.124 21 ControlChannelClosed - - 0 0 4b72d2b2-65cd-4074-9b00-42b840339d19 - 2024-09-07 16:02:48 37.63.19.226 - 85.215.251.124 21 ControlChannelOpened - - 0 0 86c13c34-7722-4393-b5dc-e757b145fecd - 2024-09-07 16:02:49 37.63.19.226 - 85.215.251.124 21 USER martin 331 0 0 86c13c34-7722-4393-b5dc-e757b145fecd - 2024-09-07 16:02:49 37.63.19.226 - 85.215.251.124 21 PASS *** 530 1326 41 86c13c34-7722-4393-b5dc-e757b145fecd - 2024-09-07 16:02:49 37.63.19.226 - 85.215.251.124 21 ControlChannelClosed - - 0 0 86c13c34-7722-4393-b5dc-e757b145fecd - 2024-09-07 16:03:05 37.63.19.226 - 85.215.251.124 21 ControlChannelOpened - - 0 0 b3a1fc39-f028-434a-9bdc-4d4021ffb779 - 2024-09-07 16:03:05 37.63.19.226 - 85.215.251.124 21 USER alex 331 0 0 b3a1fc39-f028-434a-9bdc-4d4021ffb779 - 2024-09-07 16:03:05 37.63.19.226 - 85.215.251.124 21 PASS *** 530 1326 41 b3a1fc39-f028-434a-9bdc-4d4021ffb779 - 2024-09-07 16:03:05 37.63.19.226 - 85.215.251.124 21 ControlChannelClosed - - 0 0 b3a1fc39-f028-434a-9bdc-4d4021ffb779 - 2024-09-07 16:06:56 37.63.19.226 - 85.215.251.124 21 ControlChannelOpened - - 0 0 28f30734-30fd-4a7c-a889-00fbe8dfab4b - 2024-09-07 16:06:56 37.63.19.226 - 85.215.251.124 21 USER michael 331 0 0 28f30734-30fd-4a7c-a889-00fbe8dfab4b - 2024-09-07 16:06:56 37.63.19.226 - 85.215.251.124 21 PASS *** 530 1326 41 28f30734-30fd-4a7c-a889-00fbe8dfab4b - 2024-09-07 16:06:56 37.63.19.226 - 85.215.251.124 21 ControlChannelClosed - - 0 0 28f30734-30fd-4a7c-a889-00fbe8dfab4b - 2024-09-07 19:49:22 137.74.239.148 - 85.215.251.124 21 ControlChannelOpened - - 0 0 601bff98-9545-48c7-82e4-df52f6adfb74 - 2024-09-07 19:49:25 137.74.239.148 - 85.215.251.124 21 USER anonymous 331 0 0 601bff98-9545-48c7-82e4-df52f6adfb74 - 2024-09-07 19:49:26 137.74.239.148 - 85.215.251.124 21 PASS abuse@onyphe.io 530 1326 42 601bff98-9545-48c7-82e4-df52f6adfb74 - 2024-09-07 19:49:31 137.74.239.148 - 85.215.251.124 21 ControlChannelClosed - - 0 0 601bff98-9545-48c7-82e4-df52f6adfb74 - 2024-09-07 20:48:03 91.238.181.35 - 85.215.251.124 21 ControlChannelOpened - - 0 0 dca085f9-82f9-41b4-9312-57b795ad5762 - 2024-09-07 20:48:03 91.238.181.35 - 85.215.251.124 21 /*àCookie: mstshash=Administr 500 87 0 dca085f9-82f9-41b4-9312-57b795ad5762 - 2024-09-07 20:48:03 91.238.181.35 - 85.215.251.124 21 ControlChannelClosed - - 64 0 dca085f9-82f9-41b4-9312-57b795ad5762 - 2024-09-07 21:15:39 172.93.101.108 - 85.215.251.124 21 ControlChannelOpened - - 0 0 a8eb949c-f010-4045-b69d-4de287f11af5 - 2024-09-07 21:15:39 172.93.101.108 - 85.215.251.124 21 GET http://139.144.63.165/+HTTP/1.1 500 87 0 a8eb949c-f010-4045-b69d-4de287f11af5 - 2024-09-07 21:15:39 172.93.101.108 - 85.215.251.124 21 Host: 139.144.63.165 500 87 0 a8eb949c-f010-4045-b69d-4de287f11af5 - 2024-09-07 21:15:39 172.93.101.108 - 85.215.251.124 21 User-Agent: Go-http-client/1.1 500 87 0 a8eb949c-f010-4045-b69d-4de287f11af5 - 2024-09-07 21:15:39 172.93.101.108 - 85.215.251.124 21 Accept-Encoding: gzip 500 87 0 a8eb949c-f010-4045-b69d-4de287f11af5 - 2024-09-07 21:15:39 172.93.101.108 - 85.215.251.124 21 ++ - 500 87 0 a8eb949c-f010-4045-b69d-4de287f11af5 - 2024-09-07 21:15:39 172.93.101.108 - 85.215.251.124 21 ControlChannelClosed - - 0 0 a8eb949c-f010-4045-b69d-4de287f11af5 - 2024-09-07 21:15:39 172.93.101.108 - 85.215.251.124 21 ControlChannelOpened - - 0 0 a6d82f7d-a6b0-44d3-93bf-fa93287cda4f - 2024-09-07 21:15:39 172.93.101.108 - 85.215.251.124 21 GET http://139.144.63.165/+HTTP/1.1 500 87 0 a6d82f7d-a6b0-44d3-93bf-fa93287cda4f - 2024-09-07 21:15:39 172.93.101.108 - 85.215.251.124 21 Host: 139.144.63.165 500 87 0 a6d82f7d-a6b0-44d3-93bf-fa93287cda4f - 2024-09-07 21:15:39 172.93.101.108 - 85.215.251.124 21 User-Agent: Go-http-client/1.1 500 87 0 a6d82f7d-a6b0-44d3-93bf-fa93287cda4f - 2024-09-07 21:15:39 172.93.101.108 - 85.215.251.124 21 Accept-Encoding: gzip 500 87 0 a6d82f7d-a6b0-44d3-93bf-fa93287cda4f - 2024-09-07 21:15:39 172.93.101.108 - 85.215.251.124 21 ++ - 500 87 0 a6d82f7d-a6b0-44d3-93bf-fa93287cda4f - 2024-09-07 21:15:40 172.93.101.108 - 85.215.251.124 21 ControlChannelClosed - - 0 0 a6d82f7d-a6b0-44d3-93bf-fa93287cda4f - 2024-09-07 22:28:40 45.84.89.3 - 85.215.251.124 21 ControlChannelOpened - - 0 0 a97235f9-95aa-449c-ab1f-26ab5d831f0f - 2024-09-07 22:28:44 45.84.89.3 - 85.215.251.124 21 ControlChannelClosed - - 0 0 a97235f9-95aa-449c-ab1f-26ab5d831f0f -