09-23-2025 07:56 PM - edited 09-23-2025 08:05 PM
Could anyone help to explain what this threat is?
FTP evasion detection (id:30401)
I found this threat in the log, also checked the logs in FTP server, but don't get it.
here is the log from the source IP of this threat in FTP server (Microsoft IIS FTP).
2025-09-16 04:43:54 8.34.210.54 - 10.10.10.31 21 ControlChannelOpened - - 0 0 8bb7b510-d8db-4808-94f0-4177688239fa -
2025-09-16 04:43:54 8.34.210.54 - 10.10.10.31 21 ControlChannelClosed - - 0 0 8bb7b510-d8db-4808-94f0-4177688239fa -
2025-09-16 04:43:55 8.34.210.54 - 10.10.10.31 21 ControlChannelOpened - - 0 0 959e077c-bc84-48c0-bbc1-4ad7af838dc4 -
2025-09-16 04:43:55 8.34.210.54 - 10.10.10.31 21 - - 451 87 0 959e077c-bc84-48c0-bbc1-4ad7af838dc4 -
2025-09-16 04:43:55 8.34.210.54 - 10.10.10.31 21 - - 451 87 0 959e077c-bc84-48c0-bbc1-4ad7af838dc4 -
2025-09-16 04:43:55 8.34.210.54 - 10.10.10.31 21 - - 451 87 0 959e077c-bc84-48c0-bbc1-4ad7af838dc4 -
2025-09-16 04:43:55 8.34.210.54 - 10.10.10.31 21 + - 500 87 0 959e077c-bc84-48c0-bbc1-4ad7af838dc4 -
2025-09-16 04:43:55 8.34.210.54 - 10.10.10.31 21 ControlChannelClosed - - 1292 0 959e077c-bc84-48c0-bbc1-4ad7af838dc4 -
I can not find any info about this threat when I dig the internet.
Thank you!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
