FTP Accesible  (Accessible FTP Report)

Este informe identifica hosts que tienen una instancia de FTP ejecutándose en el puerto 21/TCP al que se puede acceder desde Internet.

FTP no proporciona cifrado (a menos que se utilice FTPS) y puede exponer información confidencial o credenciales del sistema.

Los servidores FTP se consideran un objetivo privilegiado para los ciberdelincuentes, ya que pueden explotarlos, por ejemplo, para propagar malware que infecte los servidores web que dependen de las aplicaciones FTP para las actualizaciones.

Si se logra negociar con éxito una conexión TLS o SSL usando un comando «AUTHTLS» o «AUTHSSL», se mostrarán los contenidos analizados del protocolo de enlace SSL y el certificado SSL.

Si no se logra negociar una conexión FTPS, los campos «auth_tls_response» y «auth_ssl_response» contendrán el error que se devolvió y el contenido de los campos relacionados con SSL estará vacío.

Este reporte no indica indicios de compromiso o ataques desde las IPs en cuestión, sino sólo representa la presencia de un equipo o servicio potencialmente vulnerable y/o expuesto.

Para obtener más información sobre los esfuerzos de escaneo, consulte la página de resumen de escaneo de Internet.

Nombre(s) de archivo: scan_ftp, scan6_ftp

CAMPOS

timestampHora en que se sondeó la IP en UTC+0
ipLa dirección IP del dispositivo en cuestión.
protocolProtocolo en el que se produjo la respuesta (siempre TCP)
portPuerto del que provino la respuesta (21/TCP)
hostnameNombre DNS inverso del dispositivo en cuestión
tagsiempre será ftp
asnASN de donde reside el dispositivo en cuestión
geoPaís donde reside el dispositivo en cuestión
regionEstado/Provincia/Región administrativa donde reside el dispositivo en cuestión
cityCiudad en la que reside el dispositivo en cuestión
naicsCódigo del sistema de clasificación de la industria de América del Norte
sicCódigo del sistema de clasificación industrial estándar
bannerEl banner de inicio de sesión del servicio FTP
handshakeEl protocolo de enlace SSL más alto que podría negociarse (TLSv1.2, TLSv1.1, TLSv1.0, SSLv3)
cipher_suiteEl CipherSuite más alto que se pudo negociar
cert_lengthLongitud de clave de certificado (1024 bits, 2048 bits, etcétera)
subject_common_nameEl nombre común (CN) del certificado SSL
issuer_common_nameEl nombre común (CN) de la entidad que firmó el certificado SSL
cert_issue_dateFecha en que el certificado SSL entró en vigencia
cert_expiration_dateFecha en que caduca el certificado SSL
sha1_fingerprintHuella digital SHA1 del certificado SSL
cert_serial_numberNúmero de serie incrustado en el certificado SSL
ssl_versionNúmero de versión de SSL
signature_algorithmAlgoritmo utilizado para firmar el certificado SSL
key_algorithmAlgoritmo utilizado por la clave
subject_organization_nameNombre de la organización (O) del certificado SSL
subject_organization_unit_nameNombre de la unidad organizativa (OU) del certificado SSL
subject_countryNombre del país (C) del certificado SSL
subject_state_or_province_nameNombre de estado o provincia (ST) del certificado SSL
subject_locality_nameNombre de localidad (L) del certificado SSL
subject_street_addressDirección de la calle del certificado SSL
subject_postal_codeCódigo postal del certificado SSL
subject_surnameApellido (SN) del certificado SSL
subject_given_nameNombre de pila (GN) del certificado SSL
subject_email_addressDirección de correo electrónico del certificado SSL
subject_business_categoryCategoría empresarial del certificado SSL
subject_serial_numberNúmero de serie del certificado SSL
issuer_organization_nameNombre de la organización (O) de la entidad que firmó el certificado SSL
issuer_organization_unit_nameNombre de la unidad organizativa (OU) de la entidad que firmó el certificado SSL
issuer_countryNombre del país (C) de la entidad que firmó el certificado SSL
issuer_state_or_province_nameNombre del estado o provincia (ST) de la entidad que firmó el certificado SSL
issuer_locality_nameNombre de la localidad (L) de la entidad que firmó el certificado SSL
issuer_street_addressDirección postal de la entidad que firmó el certificado SSL
issuer_postal_codeCódigo postal de la entidad que firmó el certificado SSL
issuer_surnameApellido (SN) de la entidad que firmó el certificado SSL
issuer_given_nameNombre (GN) de la entidad que firmó el certificado SSL
issuer_email_addressDirección de correo electrónico de la entidad que firmó el certificado SSL
issuer_business_categoryCategoría empresarial de la entidad que firmó el certificado SSL
issuer_serial_numberNúmero de serie de la entidad que firmó el certificado SSL
sha256_fingerprintHuella digital SHA256 del certificado SSL
sha512_fingerprintHuella digital SHA512 del certificado SSL
md5_fingerprintHuella digital MD5 del certificado SSL
cert_valid¿El certificado SSL es válido o no? (S/N)
self_signed¿El certificado SSL está autofirmado (S/N)?
cert_expired¿Está caducado el certificado SSL (S/N)?
validation_levelEl nivel de validación del certificado SSL: EV, OV o desconocido
auth_tls_responseRespuesta cuando se realiza un intento de autenticación TLS
auth_ssl_responseRespuesta cuando se realiza un intento de autenticación SSL (intento solo si falla el intento de autenticación TLS)

EJEMPLO

"timestamp","ip","protocol","port","hostname","tag","asn","geo","region","city","naics","sic","banner","handshake","cipher_suite","cert_length","subject_common_name","issuer_common_name","cert_issue_date","cert_expiration_date","sha1_fingerprint","cert_serial_number","ssl_version","signature_algorithm","key_algorithm","subject_organization_name","subject_organization_unit_name","subject_country","subject_state_or_province_name","subject_locality_name","subject_street_address","subject_postal_code","subject_surname","subject_given_name","subject_email_address","subject_business_category","subject_serial_number","issuer_organization_name","issuer_organization_unit_name","issuer_country","issuer_state_or_province_name","issuer_locality_name","issuer_street_address","issuer_postal_code","issuer_surname","issuer_given_name","issuer_email_address","issuer_business_category","issuer_serial_number","sha256_fingerprint","sha512_fingerprint","md5_fingerprint","cert_valid","self_signed","cert_expired","validation_level","auth_tls_response","auth_ssl_response"
"2019-03-06 06:37:00","61.126.3.70","tcp",21,"arcus-net.co.jp","ftp",4713,"JP","TOKYO","TOKYO",517311,737401,"220 FTP Server ready.|","TLSv1.2","TLS_RSA_WITH_AES_128_CBC_SHA",2048,"*.bizmw.com","GlobalSign Organization Validation CA - SHA256 - G2","Jan 14 08:04:50 2015 GMT","Jan 14 08:04:50 2020 GMT","D9:98:3F:2E:F9:D1:BE:9A:10:1E:DE:51:2C:C1:DF:01:18:0A:20:65","1121DC7421AB7924C3B1D396AEA3707E9E29",2,"sha256WithRSAEncryption","rsaEncryption","NTT Communications Corporation",,"JP","Tokyo","Minato-ku",,,,,,,,"GlobalSign nv-sa",,"BE",,,,,,,,,,"27:4A:8A:3A:A7:DF:82:D0:43:03:0E:6F:48:30:30:C9:24:77:11:1A:08:EF:F7:B9:74:0C:CE:40:87:03:D2:51","E5:93:8B:72:84:0F:35:52:8E:7A:6C:E3:EF:36:90:4C:F2:86:A7:4D:B2:DD:C0:C6:23:83:18:EF:DD:86:34:92:91:57:22:29:75:45:71:8B:3A:CD:F1:27:A9:CA:5F:70:5E:AC:15:A5:E6:63:FD:6F:BB:C5:E2:45:99:73:E9:E6","D1:A7:BC:96:78:1D:16:D0:24:A8:62:7C:3A:95:5A:4A","N","N","N","OV","234 AUTH TLS successful",
"2019-03-06 06:37:00","62.48.156.65","tcp",21,"dial-62-48-156-65.ptprime.net","ftp",15525,"PT","LISBOA","FRIELAS",0,0,"220-================================================================|        PT Empresas|        Acesso Reservado|        Acesso nao autorizado punido por lei: 109/91; 67/98|    ----------------------------------------------------------------|        HENNES & MAURITZ LDA - 149093|        SITE: PT303 - Cascais Shopping|        MORADA: 
            
             |        NIR: EWS1822940|    ================================================================|220 FTP server ready, 1 active clients of 4 simultaneous clients allowed.|",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"500 Syntax error, command unrecognized.","500 Syntax error, command unrecognized."
"2019-03-06 06:37:00","94.112.255.114","tcp",21,"94.112.255.114.static.b2b.upcbusiness.cz","ftp",6830,"CZ",,"PRAGUE",0,0,"220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------|220-You are user number 1 of 50 allowed.|220-Local time is now 07:37. Server port: 21.|220-This is a private system - No anonymous login|220-IPv6 connections are also welcome on this server.|220 You will be disconnected after 15 minutes of inactivity.|","TLSv1.2","TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",2048,"hook.egolinet.com","Let's Encrypt Authority X3","Jan  8 18:07:41 2018 GMT","Apr  8 18:07:41 2018 GMT","99:2F:FE:EF:11:79:B2:D4:ED:2A:4B:27:01:F0:D3:6E:68:BD:69:4B","041F05472BE2EEF35E7A584230D69401B180",2,"sha256WithRSAEncryption","rsaEncryption",,,,,,,,,,,,,"Lets Encrypt",,"US",,,,,,,,,,"EF:15:DA:C9:B4:03:79:FB:0B:1A:28:85:BC:6D:86:6E:59:A3:5B:4B:EB:DF:66:AF:77:F1:9A:07:0A:D7:FB:D9","7E:08:67:D3:66:C1:10:72:B5:4C:A2:F0:2E:39:A6:4E:FB:54:D4:97:E0:87:A1:54:9E:60:84:E8:FB:75:41:7A:F9:50:21:C9:E5:F5:2C:C8:FE:B5:D5:50:EC:41:A4:F6:2F:7E:CA:51:2E:41:6E:31:50:76:F2:E5:BE:36:91:64","E8:BF:DC:B9:79:4B:52:1C:3C:40:DB:21:D4:2C:AD:C6","Y","N","Y","DV","234 AUTH TLS OK.",
"2019-03-06 06:37:00","218.16.145.135","tcp",21,,"ftp",4134,"CN",,"HEYUAN",518210,0,"220-WARNING!!! Authorised access only, all of your done will be recorded! disconnect IMMEDIATELY if you are not an authorised user!|220 FTP server ready|",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"530 USER and PASS required","530 USER and PASS required"
"2019-03-06 06:37:00","91.121.120.190","tcp",21,"ns2014504.ovh.net","ftp",16276,"FR",,"ROUBAIX",518210,737401,"220 ProFTPD 1.3.4a Server (FTP Maires et Territoires) [::ffff:91.121.120.190]|",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"500 AUTH not understood","500 AUTH not understood"
"2019-03-06 06:37:00","172.104.73.192","tcp",21,"li1683-192.members.linode.com","ftp",63949,"JP","TOKYO","TOKYO",518210,737401,"220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------|220-You are user number 1 of 50 allowed.|220-Local time is now 01:37. Server port: 21.|220-This is a private system - No anonymous login|220-IPv6 connections are also welcome on this server.|220 You will be disconnected after 15 minutes of inactivity.|","TLSv1.2","TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",2048,"jp1.osi60sites.com","cPanel, Inc. Certification Authority","Jun 27 00:00:00 2018 GMT","Jun 27 23:59:59 2019 GMT","A5:59:FF:15:C5:6A:57:67:C3:F6:94:EF:2E:6D:FA:7C:74:B2:AE:22","3ACEA47681317C0A78C9B1BC911CD70A",2,"sha256WithRSAEncryption","rsaEncryption",,"PositiveSSL",,,,,,,,,,,"cPanel, Inc.",,"US","TX","Houston",,,,,,,,"70:C4:DD:D6:DE:F5:6B:3F:41:84:0E:EA:30:A1:A1:9F:1E:7D:54:84:C2:C4:2A:D2:2B:EB:E0:8D:42:27:FC:26","73:C7:A1:10:9A:A9:33:64:32:EE:DE:C9:38:DE:E1:B3:1E:7B:80:C2:FC:EE:88:D1:04:11:8B:9A:47:28:99:38:BE:29:68:08:E4:98:29:3F:00:5C:92:E1:73:56:95:D5:17:9F:44:4E:3A:CF:CB:47:14:6F:A7:E0:FE:1D:FF:7B","89:A3:EE:AF:40:7C:71:09:BA:A2:EF:F2:16:F3:2E:FD","Y","N","N","DV","234 AUTH TLS OK.",
"2019-03-06 06:37:00","180.76.155.120","tcp",21,,"ftp",38365,"CN",,"BEIJING",518210,0,"220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------|220-You are user number 1 of 50 allowed.|220-Local time is now 14:37. Server port: 21.|220-This is a private system - No anonymous login|220-IPv6 connections are also welcome on this server.|220 You will be disconnected after 15 minutes of inactivity.|","TLSv1.2","TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",1024,"180.76.155.120","180.76.155.120","Jan 14 02:11:01 2019 GMT","Oct 13 02:11:01 2028 GMT","68:38:1D:DD:89:63:81:A9:82:71:E5:C5:5E:F2:30:04:0E:11:8A:64","9F02F472C01C2281",2,"sha256WithRSAEncryption","rsaEncryption","BT-PANEL","BT","CN","Guangdong","Dongguan",,,,,"admin@bt.cn",,,"BT-PANEL","BT","CN","Guangdong","Dongguan",,,,,"admin@bt.cn",,,"6F:0B:E2:CA:51:A5:70:09:98:A9:DA:39:51:D1:22:E7:88:2F:D7:AB:D0:9D:B2:C6:04:16:92:3E:83:73:27:F5","D4:3F:EB:88:52:33:E9:09:15:3C:13:61:58:80:B3:2A:6A:B4:1A:04:12:A8:BE:B6:10:DF:3F:58:0B:FA:1A:9B:33:23:D8:B8:2D:97:5D:13:48:D6:94:47:6D:13:76:CD:0C:7A:59:62:05:4A:03:BD:AA:BF:70:34:42:34:51:9B","82:1C:A4:1C:12:CA:37:44:F9:8E:7B:85:3C:F3:58:AE","Y","Y","N","unknown","234 AUTH TLS OK.",
"2019-03-06 06:37:00","185.27.140.79","tcp",21,"srv.easypayments.nl","ftp",60781,"NL","NOORD-BRABANT","EINDHOVEN",518210,0,"220 ProFTPD 1.3.4b Server ready.|","TLSv1.2","TLS_RSA_WITH_RC4_128_SHA",1024,"localhost","localhost","Jul 19 08:56:59 2011 GMT","Dec  3 08:56:59 2038 GMT","77:BC:FD:19:85:6A:A5:62:F7:19:60:4A:04:61:20:93:B0:12:54:05","A59889CE97139A0A",0,"sha1WithRSAEncryption","rsaEncryption","none","none","GB","Someprovince","Sometown",,,,,"webaster@localhost",,,"none","none","GB","Someprovince","Sometown",,,,,"webaster@localhost",,,"8C:C4:68:CB:A7:D0:C5:B8:1A:5C:D2:CC:EB:E7:03:FA:9C:36:2F:72:D1:57:E1:90:33:0F:69:87:EC:58:62:8C","7E:D1:30:25:F1:29:C6:BC:C4:AE:95:62:C3:35:58:FB:6A:BA:DD:A6:12:FA:32:AD:69:58:22:2E:3A:85:7C:B0:C8:E6:BE:EF:98:76:9E:62:02:2E:47:8A:23:14:3C:6E:12:C1:25:7C:41:C8:1A:F7:1A:E6:16:AD:3F:6A:6B:E6","7C:A0:14:BC:E5:17:E4:37:B4:9C:AC:A7:17:CC:FB:C6","Y","Y","N","unknown","234 AUTH TLS successful",
"2019-03-06 06:37:00","158.199.201.149","tcp",21,,"ftp",9597,"JP","TOKYO","TOKYO",518210,0,"220 FTP Server ready.|","TLSv1.0","TLS_RSA_WITH_AES_128_CBC_SHA",2048,"*.secure.ne.jp","GeoTrust RSA CA 2018","Feb 27 00:00:00 2018 GMT","Jul 17 12:00:00 2019 GMT","18:B2:88:69:66:E5:E0:EB:8F:04:69:07:C3:8A:1F:6C:FD:D4:85:D6","04F67A134498AAD63AC3D825A651E51B",2,"sha256WithRSAEncryption","rsaEncryption",,,,,,,,,,,,,"DigiCert Inc","www.digicert.com","US",,,,,,,,,,"EC:E5:37:BF:52:15:73:81:3D:F6:56:E6:90:51:82:4C:EB:9C:55:2D:F1:BB:0F:6C:EF:48:BE:6E:C1:6B:F1:5E","B9:0E:9E:94:82:3C:F1:FA:83:6D:48:E3:C5:70:8C:03:66:81:0F:0B:AF:B5:24:37:7C:7F:06:DA:29:FE:0A:70:C4:CC:42:31:A8:2F:B9:3E:00:39:8D:6B:FE:F3:37:49:65:80:8B:92:78:B5:57:9F:70:01:0A:82:3A:4D:4F:BC","13:01:C0:30:C4:94:65:C4:92:B6:11:08:EB:4A:CE:FF","N","N","N","DV","234 AUTH TLS successful",
"2019-03-06 06:37:00","153.126.216.48","tcp",21,"ik1-344-32044.vs.sakura.ne.jp","ftp",7684,"JP","OSAKA","OSAKA",518210,0,"220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------|220-You are user number 1 of 50 allowed.|220-Local time is now 14:37. Server port: 21.|220-This is a private system - No anonymous login|220-IPv6 connections are also welcome on this server.|220 You will be disconnected after 15 minutes of inactivity.|","TLSv1.2","TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",1024,"153.126.216.48","153.126.216.48","Jul 23 18:42:28 2018 GMT","Jul 14 18:42:28 2019 GMT","38:A0:FF:BD:7B:2E:6E:FB:F8:35:E4:C1:55:C8:CD:D1:96:71:0F:D3","D11002680FB0EA3F",2,"sha256WithRSAEncryption","rsaEncryption","BT-PANEL","BT","CN","Guangdong","Dongguan",,,,,"admin@bt.cn",,,"BT-PANEL","BT","CN","Guangdong","Dongguan",,,,,"admin@bt.cn",,,"96:23:1D:8B:EF:99:D1:C3:AE:AB:BB:98:AA:88:0B:47:5D:24:65:FF:65:AE:00:87:86:82:35:7E:31:F4:1A:00","06:17:DE:8F:6F:64:CA:C0:EF:72:0A:6D:A8:64:7F:76:E4:B2:62:F6:56:AA:5C:0D:C3:DA:6B:93:3A:E3:F9:A7:DC:9C:66:D7:3B:57:16:E9:AA:FA:40:DE:7E:BA:C6:21:C9:21:CE:A6:C5:ED:7F:75:1B:09:CC:C4:42:03:5C:E6","34:90:DA:A4:7E:C1:49:67:DD:B2:7C:54:19:55:8D:8B","Y","Y","N","unknown","234 AUTH TLS OK.",
"2019-03-06 06:37:00","54.37.96.197","tcp",21,"ip197.ip-54-37-96.eu","ftp",16276,"FR",,"ROUBAIX",518210,737401,"220 ProFTPD 1.3.5b Server (Debian) [145.239.14.125]|","TLSv1.2","TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",1024,"teleadmin","teleadmin","Feb 14 19:11:46 2018 GMT","Feb 14 19:11:46 2019 GMT","AA:1E:C8:97:FE:4B:57:93:64:3F:9A:34:FF:47:3B:84:71:F0:BC:48","E90F074CEE37751E",2,"sha256WithRSAEncryption","rsaEncryption","teleadmin","teleadm","fr","france","paris",,,,,"administrateur@teleadmin.com",,,"teleadmin","teleadm","fr","france","paris",,,,,"administrateur@teleadmin.com",,,"74:90:42:AA:E5:B0:BE:12:9C:D2:D3:7E:C6:5F:6D:85:44:89:2B:B1:DD:B6:58:51:46:69:15:A2:5E:25:81:43","47:AC:D9:5E:DE:E5:C5:C9:C7:54:26:B5:9F:81:7C:44:E4:9C:DA:14:82:4E:00:C0:DA:A9:71:28:BE:A0:E9:21:E5:72:33:D7:2F:10:E9:2E:E5:46:DA:44:B6:A7:ED:13:3C:2D:5F:94:B4:51:08:F0:77:77:6C:85:2B:AB:FF:A6","5D:6E:24:58:CF:CD:15:2F:02:7C:98:66:CD:3B:FA:B5","Y","Y","Y","unknown","234 AUTH TLS successful",
"2019-03-06 06:37:00","2.243.117.225","tcp",21,"x2f375e1.dyn.telefonica.de","ftp",6805,"DE","NORDRHEIN-WESTFALEN","ESSEN",517311,737401,"220 FRITZ!Box7490 FTP server ready.|","TLSv1.2","TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",2048,"2f1tyjhuqq0buikb.myfritz.net","2f1tyjhuqq0buikb.myfritz.net","Aug 18 13:13:58 2015 GMT","Jan 15 13:13:58 2038 GMT","AF:F3:58:EA:AD:4A:C4:F1:23:8E:B5:56:98:95:80:C3:B6:49:F9:D7","D7F0DB3F55ED1F5C",2,"sha1WithRSAEncryption","rsaEncryption",,,,,,,,,,,,,,,,,,,,,,,,,"CD:89:F6:55:A1:7B:C6:FB:50:C7:85:27:C0:85:49:6F:8E:79:F2:4A:E7:ED:13:1F:72:F5:6A:63:D3:E5:AA:97","B4:D1:FE:0F:C7:FC:AF:71:86:97:7C:15:2F:72:30:7D:BF:09:6D:D4:83:7E:45:89:5A:65:4B:D1:F3:C5:F2:F9:ED:A5:44:A3:FD:37:52:14:C1:C1:E3:79:5C:40:56:3C:B4:C9:25:6E:91:28:1A:6F:22:81:B0:C5:A4:45:F8:5F","42:DA:E3:37:90:2A:91:10:90:82:A8:79:F9:73:8E:71","Y","Y","N","unknown","234 Authentication method accepted",
"2019-03-06 06:37:00","150.107.109.26","tcp",21,,"ftp",18059,"ID","JAKARTA RAYA","JAKARTA",518210,0,"220 RO DINAS PARIWASATA GROUP E FTP server (MikroTik 6.40.8) ready|",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"500 'AUTH': command not understood","500 'AUTH': command not understood"
"2019-03-06 06:37:00","178.48.133.204","tcp",21,"catv-178-48-133-204.catv.broadband.hu","ftp",6830,"HU","PEST","GODOLLO",518210,0,"220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------|220-You are user number 1 of 10 allowed.|220-Local time is now 08:36. Server port: 21.|220-This server supports FXP transfers|220-IPv6 connections are also welcome on this server.|220 You will be disconnected after 10 minutes of inactivity.|","TLSv1.0","TLS_RSA_WITH_RC4_128_SHA",1024,"192.168.0.227","192.168.0.227","Oct 26 13:03:34 2018 GMT","Oct 26 13:03:34 2019 GMT","1C:49:A3:EB:C3:3B:C6:DD:96:59:16:58:14:39:A6:2B:60:60:E9:FD",00,2,"md5WithRSAEncryption","rsaEncryption",,,,,,,,,,,,,,,,,,,,,,,,,"AC:73:FB:81:E8:0C:48:CD:B3:A2:21:B9:9D:23:96:BB:12:68:A0:A4:C8:99:1B:6C:B5:A8:6B:FA:4B:01:34:3C","E2:5C:1F:1A:C0:A1:42:11:05:84:D5:C2:D4:B0:2F:0C:C0:16:88:B3:D8:F7:61:C6:8D:16:4F:A4:B2:20:06:62:34:5A:D6:1F:F6:02:38:7B:7D:71:51:77:D4:F3:89:EC:6F:12:68:43:6C:5C:84:58:DC:90:FF:A4:8C:A4:AA:59","1A:2B:44:21:4B:DE:E2:D6:F9:11:61:C1:70:7D:F6:EA","Y","Y","N","unknown","234 AUTH TLS OK.",
"2019-03-06 06:37:00","210.150.68.233","tcp",21,,"ftp",2514,"JP","TOKYO","TOKYO",518210,0,"220 210.150.68.233 FTP server ready.|","TLSv1.0","TLS_RSA_WITH_RC4_128_SHA",2048,"hosting.host","hosting.host","May  6 02:14:21 2016 GMT","May  4 02:14:21 2026 GMT","68:49:79:5B:2C:50:7F:E8:44:60:78:BD:A8:1D:A5:A6:21:1D:E3:04","81E87D806A42A019",0,"sha256WithRSAEncryption","rsaEncryption","NTTPC Communications ,Inc","Hosting","JP","Tokyo","Minato-ku",,,,,,,,"NTTPC Communications ,Inc","Hosting","JP","Tokyo","Minato-ku",,,,,,,,"58:94:F8:33:75:90:E4:02:2D:40:5B:E2:FB:0D:34:BE:29:12:B2:ED:5B:CE:24:25:ED:F2:F0:F8:79:5C:8F:72","BC:30:D8:2B:B2:AB:06:AE:84:65:64:5B:4D:D0:31:21:E3:1B:5F:95:AC:DD:62:32:80:9C:23:60:F0:20:B8:12:D3:97:EE:D4:6B:96:05:D1:5A:BF:E5:D9:88:77:18:35:10:0C:EE:A4:27:69:C5:E1:AE:C6:4A:FB:14:BB:85:CF","F4:96:90:C0:85:8D:78:B8:D3:11:0D:9C:7B:A6:C8:06","Y","Y","N","unknown","234 AUTH TLS successful",
"2019-03-06 06:37:00","78.137.97.228","tcp",21,"ip78-137-97-228.pbiaas.com","ftp",51862,"DE","BADEN-WURTTEMBERG","KARLSRUHE",0,0,"220 Welcome|","TLSv1.2","TLS_RSA_WITH_RC4_128_SHA",2048,"gemino.de","gemino.de","Mar 25 10:33:58 2015 GMT","Mar 24 10:33:58 2016 GMT","CE:5A:78:C9:20:6E:0B:FE:A7:9E:D7:88:FA:8E:BA:CD:6D:7A:D6:3A",00,2,"sha1WithRSAEncryption","rsaEncryption","Gemino GmbH","IT","DE","Berlin","Berlin",,,,,"it-admin@gemino.de",,,"Gemino GmbH","IT","DE","Berlin","Berlin",,,,,"it-admin@gemino.de",,,"22:43:27:23:20:89:56:F2:97:8F:F1:B1:B1:83:34:42:D4:47:19:6F:92:AD:25:28:01:D6:AA:0A:4F:27:0C:D4","B1:EC:54:01:EE:DE:A2:C0:A6:1E:9C:43:2A:93:96:BF:EC:EF:AF:5C:82:6C:F0:74:0E:B1:D9:CF:02:53:07:B8:18:8D:69:45:19:A1:98:C9:6C:11:49:CC:85:41:9F:D7:64:D1:5F:C5:CB:A4:5A:21:5C:CE:75:6D:22:F6:DE:72","02:DB:6C:B9:CE:AA:F4:C6:D1:A3:A6:B1:27:0B:27:25","N","Y","Y","unknown","234 Using authentication type TLS"

Fuente: https://www.shadowserver.org/what-we-do/network-reporting/accessible-ftp-report/