"timestamp","ip","protocol","port","hostname","tag","asn","geo","region","city","naics","sic","banner","handshake","cipher_suite","cert_length","subject_common_name","issuer_common_name","cert_issue_date","cert_expiration_date","sha1_fingerprint","cert_serial_number","ssl_version","signature_algorithm","key_algorithm","subject_organization_name","subject_organization_unit_name","subject_country","subject_state_or_province_name","subject_locality_name","subject_street_address","subject_postal_code","subject_surname","subject_given_name","subject_email_address","subject_business_category","subject_serial_number","issuer_organization_name","issuer_organization_unit_name","issuer_country","issuer_state_or_province_name","issuer_locality_name","issuer_street_address","issuer_postal_code","issuer_surname","issuer_given_name","issuer_email_address","issuer_business_category","issuer_serial_number","sha256_fingerprint","sha512_fingerprint","md5_fingerprint","cert_valid","self_signed","cert_expired","validation_level","auth_tls_response","auth_ssl_response"
"2019-03-06 06:37:00","61.126.3.70","tcp",21,"arcus-net.co.jp","ftp",4713,"JP","TOKYO","TOKYO",517311,737401,"220 FTP Server ready.|","TLSv1.2","TLS_RSA_WITH_AES_128_CBC_SHA",2048,"*.bizmw.com","GlobalSign Organization Validation CA - SHA256 - G2","Jan 14 08:04:50 2015 GMT","Jan 14 08:04:50 2020 GMT","D9:98:3F:2E:F9:D1:BE:9A:10:1E:DE:51:2C:C1:DF:01:18:0A:20:65","1121DC7421AB7924C3B1D396AEA3707E9E29",2,"sha256WithRSAEncryption","rsaEncryption","NTT Communications Corporation",,"JP","Tokyo","Minato-ku",,,,,,,,"GlobalSign nv-sa",,"BE",,,,,,,,,,"27:4A:8A:3A:A7:DF:82:D0:43:03:0E:6F:48:30:30:C9:24:77:11:1A:08:EF:F7:B9:74:0C:CE:40:87:03:D2:51","E5:93:8B:72:84:0F:35:52:8E:7A:6C:E3:EF:36:90:4C:F2:86:A7:4D:B2:DD:C0:C6:23:83:18:EF:DD:86:34:92:91:57:22:29:75:45:71:8B:3A:CD:F1:27:A9:CA:5F:70:5E:AC:15:A5:E6:63:FD:6F:BB:C5:E2:45:99:73:E9:E6","D1:A7:BC:96:78:1D:16:D0:24:A8:62:7C:3A:95:5A:4A","N","N","N","OV","234 AUTH TLS successful",
"2019-03-06 06:37:00","62.48.156.65","tcp",21,"dial-62-48-156-65.ptprime.net","ftp",15525,"PT","LISBOA","FRIELAS",0,0,"220-================================================================| PT Empresas| Acesso Reservado| Acesso nao autorizado punido por lei: 109/91; 67/98| ----------------------------------------------------------------| HENNES & MAURITZ LDA - 149093| SITE: PT303 - Cascais Shopping| MORADA: | NIR: EWS1822940| ================================================================|220 FTP server ready, 1 active clients of 4 simultaneous clients allowed.|",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"500 Syntax error, command unrecognized.","500 Syntax error, command unrecognized."
"2019-03-06 06:37:00","94.112.255.114","tcp",21,"94.112.255.114.static.b2b.upcbusiness.cz","ftp",6830,"CZ",,"PRAGUE",0,0,"220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------|220-You are user number 1 of 50 allowed.|220-Local time is now 07:37. Server port: 21.|220-This is a private system - No anonymous login|220-IPv6 connections are also welcome on this server.|220 You will be disconnected after 15 minutes of inactivity.|","TLSv1.2","TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",2048,"hook.egolinet.com","Let's Encrypt Authority X3","Jan 8 18:07:41 2018 GMT","Apr 8 18:07:41 2018 GMT","99:2F:FE:EF:11:79:B2:D4:ED:2A:4B:27:01:F0:D3:6E:68:BD:69:4B","041F05472BE2EEF35E7A584230D69401B180",2,"sha256WithRSAEncryption","rsaEncryption",,,,,,,,,,,,,"Lets Encrypt",,"US",,,,,,,,,,"EF:15:DA:C9:B4:03:79:FB:0B:1A:28:85:BC:6D:86:6E:59:A3:5B:4B:EB:DF:66:AF:77:F1:9A:07:0A:D7:FB:D9","7E:08:67:D3:66:C1:10:72:B5:4C:A2:F0:2E:39:A6:4E:FB:54:D4:97:E0:87:A1:54:9E:60:84:E8:FB:75:41:7A:F9:50:21:C9:E5:F5:2C:C8:FE:B5:D5:50:EC:41:A4:F6:2F:7E:CA:51:2E:41:6E:31:50:76:F2:E5:BE:36:91:64","E8:BF:DC:B9:79:4B:52:1C:3C:40:DB:21:D4:2C:AD:C6","Y","N","Y","DV","234 AUTH TLS OK.",
"2019-03-06 06:37:00","218.16.145.135","tcp",21,,"ftp",4134,"CN",,"HEYUAN",518210,0,"220-WARNING!!! Authorised access only, all of your done will be recorded! disconnect IMMEDIATELY if you are not an authorised user!|220 FTP server ready|",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"530 USER and PASS required","530 USER and PASS required"
"2019-03-06 06:37:00","91.121.120.190","tcp",21,"ns2014504.ovh.net","ftp",16276,"FR",,"ROUBAIX",518210,737401,"220 ProFTPD 1.3.4a Server (FTP Maires et Territoires) [::ffff:91.121.120.190]|",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"500 AUTH not understood","500 AUTH not understood"
"2019-03-06 06:37:00","172.104.73.192","tcp",21,"li1683-192.members.linode.com","ftp",63949,"JP","TOKYO","TOKYO",518210,737401,"220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------|220-You are user number 1 of 50 allowed.|220-Local time is now 01:37. Server port: 21.|220-This is a private system - No anonymous login|220-IPv6 connections are also welcome on this server.|220 You will be disconnected after 15 minutes of inactivity.|","TLSv1.2","TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",2048,"jp1.osi60sites.com","cPanel, Inc. Certification Authority","Jun 27 00:00:00 2018 GMT","Jun 27 23:59:59 2019 GMT","A5:59:FF:15:C5:6A:57:67:C3:F6:94:EF:2E:6D:FA:7C:74:B2:AE:22","3ACEA47681317C0A78C9B1BC911CD70A",2,"sha256WithRSAEncryption","rsaEncryption",,"PositiveSSL",,,,,,,,,,,"cPanel, Inc.",,"US","TX","Houston",,,,,,,,"70:C4:DD:D6:DE:F5:6B:3F:41:84:0E:EA:30:A1:A1:9F:1E:7D:54:84:C2:C4:2A:D2:2B:EB:E0:8D:42:27:FC:26","73:C7:A1:10:9A:A9:33:64:32:EE:DE:C9:38:DE:E1:B3:1E:7B:80:C2:FC:EE:88:D1:04:11:8B:9A:47:28:99:38:BE:29:68:08:E4:98:29:3F:00:5C:92:E1:73:56:95:D5:17:9F:44:4E:3A:CF:CB:47:14:6F:A7:E0:FE:1D:FF:7B","89:A3:EE:AF:40:7C:71:09:BA:A2:EF:F2:16:F3:2E:FD","Y","N","N","DV","234 AUTH TLS OK.",
"2019-03-06 06:37:00","180.76.155.120","tcp",21,,"ftp",38365,"CN",,"BEIJING",518210,0,"220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------|220-You are user number 1 of 50 allowed.|220-Local time is now 14:37. Server port: 21.|220-This is a private system - No anonymous login|220-IPv6 connections are also welcome on this server.|220 You will be disconnected after 15 minutes of inactivity.|","TLSv1.2","TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",1024,"180.76.155.120","180.76.155.120","Jan 14 02:11:01 2019 GMT","Oct 13 02:11:01 2028 GMT","68:38:1D:DD:89:63:81:A9:82:71:E5:C5:5E:F2:30:04:0E:11:8A:64","9F02F472C01C2281",2,"sha256WithRSAEncryption","rsaEncryption","BT-PANEL","BT","CN","Guangdong","Dongguan",,,,,"admin@bt.cn",,,"BT-PANEL","BT","CN","Guangdong","Dongguan",,,,,"admin@bt.cn",,,"6F:0B:E2:CA:51:A5:70:09:98:A9:DA:39:51:D1:22:E7:88:2F:D7:AB:D0:9D:B2:C6:04:16:92:3E:83:73:27:F5","D4:3F:EB:88:52:33:E9:09:15:3C:13:61:58:80:B3:2A:6A:B4:1A:04:12:A8:BE:B6:10:DF:3F:58:0B:FA:1A:9B:33:23:D8:B8:2D:97:5D:13:48:D6:94:47:6D:13:76:CD:0C:7A:59:62:05:4A:03:BD:AA:BF:70:34:42:34:51:9B","82:1C:A4:1C:12:CA:37:44:F9:8E:7B:85:3C:F3:58:AE","Y","Y","N","unknown","234 AUTH TLS OK.",
"2019-03-06 06:37:00","185.27.140.79","tcp",21,"srv.easypayments.nl","ftp",60781,"NL","NOORD-BRABANT","EINDHOVEN",518210,0,"220 ProFTPD 1.3.4b Server ready.|","TLSv1.2","TLS_RSA_WITH_RC4_128_SHA",1024,"localhost","localhost","Jul 19 08:56:59 2011 GMT","Dec 3 08:56:59 2038 GMT","77:BC:FD:19:85:6A:A5:62:F7:19:60:4A:04:61:20:93:B0:12:54:05","A59889CE97139A0A",0,"sha1WithRSAEncryption","rsaEncryption","none","none","GB","Someprovince","Sometown",,,,,"webaster@localhost",,,"none","none","GB","Someprovince","Sometown",,,,,"webaster@localhost",,,"8C:C4:68:CB:A7:D0:C5:B8:1A:5C:D2:CC:EB:E7:03:FA:9C:36:2F:72:D1:57:E1:90:33:0F:69:87:EC:58:62:8C","7E:D1:30:25:F1:29:C6:BC:C4:AE:95:62:C3:35:58:FB:6A:BA:DD:A6:12:FA:32:AD:69:58:22:2E:3A:85:7C:B0:C8:E6:BE:EF:98:76:9E:62:02:2E:47:8A:23:14:3C:6E:12:C1:25:7C:41:C8:1A:F7:1A:E6:16:AD:3F:6A:6B:E6","7C:A0:14:BC:E5:17:E4:37:B4:9C:AC:A7:17:CC:FB:C6","Y","Y","N","unknown","234 AUTH TLS successful",
"2019-03-06 06:37:00","158.199.201.149","tcp",21,,"ftp",9597,"JP","TOKYO","TOKYO",518210,0,"220 FTP Server ready.|","TLSv1.0","TLS_RSA_WITH_AES_128_CBC_SHA",2048,"*.secure.ne.jp","GeoTrust RSA CA 2018","Feb 27 00:00:00 2018 GMT","Jul 17 12:00:00 2019 GMT","18:B2:88:69:66:E5:E0:EB:8F:04:69:07:C3:8A:1F:6C:FD:D4:85:D6","04F67A134498AAD63AC3D825A651E51B",2,"sha256WithRSAEncryption","rsaEncryption",,,,,,,,,,,,,"DigiCert Inc","www.digicert.com","US",,,,,,,,,,"EC:E5:37:BF:52:15:73:81:3D:F6:56:E6:90:51:82:4C:EB:9C:55:2D:F1:BB:0F:6C:EF:48:BE:6E:C1:6B:F1:5E","B9:0E:9E:94:82:3C:F1:FA:83:6D:48:E3:C5:70:8C:03:66:81:0F:0B:AF:B5:24:37:7C:7F:06:DA:29:FE:0A:70:C4:CC:42:31:A8:2F:B9:3E:00:39:8D:6B:FE:F3:37:49:65:80:8B:92:78:B5:57:9F:70:01:0A:82:3A:4D:4F:BC","13:01:C0:30:C4:94:65:C4:92:B6:11:08:EB:4A:CE:FF","N","N","N","DV","234 AUTH TLS successful",
"2019-03-06 06:37:00","153.126.216.48","tcp",21,"ik1-344-32044.vs.sakura.ne.jp","ftp",7684,"JP","OSAKA","OSAKA",518210,0,"220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------|220-You are user number 1 of 50 allowed.|220-Local time is now 14:37. Server port: 21.|220-This is a private system - No anonymous login|220-IPv6 connections are also welcome on this server.|220 You will be disconnected after 15 minutes of inactivity.|","TLSv1.2","TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",1024,"153.126.216.48","153.126.216.48","Jul 23 18:42:28 2018 GMT","Jul 14 18:42:28 2019 GMT","38:A0:FF:BD:7B:2E:6E:FB:F8:35:E4:C1:55:C8:CD:D1:96:71:0F:D3","D11002680FB0EA3F",2,"sha256WithRSAEncryption","rsaEncryption","BT-PANEL","BT","CN","Guangdong","Dongguan",,,,,"admin@bt.cn",,,"BT-PANEL","BT","CN","Guangdong","Dongguan",,,,,"admin@bt.cn",,,"96:23:1D:8B:EF:99:D1:C3:AE:AB:BB:98:AA:88:0B:47:5D:24:65:FF:65:AE:00:87:86:82:35:7E:31:F4:1A:00","06:17:DE:8F:6F:64:CA:C0:EF:72:0A:6D:A8:64:7F:76:E4:B2:62:F6:56:AA:5C:0D:C3:DA:6B:93:3A:E3:F9:A7:DC:9C:66:D7:3B:57:16:E9:AA:FA:40:DE:7E:BA:C6:21:C9:21:CE:A6:C5:ED:7F:75:1B:09:CC:C4:42:03:5C:E6","34:90:DA:A4:7E:C1:49:67:DD:B2:7C:54:19:55:8D:8B","Y","Y","N","unknown","234 AUTH TLS OK.",
"2019-03-06 06:37:00","54.37.96.197","tcp",21,"ip197.ip-54-37-96.eu","ftp",16276,"FR",,"ROUBAIX",518210,737401,"220 ProFTPD 1.3.5b Server (Debian) [145.239.14.125]|","TLSv1.2","TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",1024,"teleadmin","teleadmin","Feb 14 19:11:46 2018 GMT","Feb 14 19:11:46 2019 GMT","AA:1E:C8:97:FE:4B:57:93:64:3F:9A:34:FF:47:3B:84:71:F0:BC:48","E90F074CEE37751E",2,"sha256WithRSAEncryption","rsaEncryption","teleadmin","teleadm","fr","france","paris",,,,,"administrateur@teleadmin.com",,,"teleadmin","teleadm","fr","france","paris",,,,,"administrateur@teleadmin.com",,,"74:90:42:AA:E5:B0:BE:12:9C:D2:D3:7E:C6:5F:6D:85:44:89:2B:B1:DD:B6:58:51:46:69:15:A2:5E:25:81:43","47:AC:D9:5E:DE:E5:C5:C9:C7:54:26:B5:9F:81:7C:44:E4:9C:DA:14:82:4E:00:C0:DA:A9:71:28:BE:A0:E9:21:E5:72:33:D7:2F:10:E9:2E:E5:46:DA:44:B6:A7:ED:13:3C:2D:5F:94:B4:51:08:F0:77:77:6C:85:2B:AB:FF:A6","5D:6E:24:58:CF:CD:15:2F:02:7C:98:66:CD:3B:FA:B5","Y","Y","Y","unknown","234 AUTH TLS successful",
"2019-03-06 06:37:00","2.243.117.225","tcp",21,"x2f375e1.dyn.telefonica.de","ftp",6805,"DE","NORDRHEIN-WESTFALEN","ESSEN",517311,737401,"220 FRITZ!Box7490 FTP server ready.|","TLSv1.2","TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",2048,"2f1tyjhuqq0buikb.myfritz.net","2f1tyjhuqq0buikb.myfritz.net","Aug 18 13:13:58 2015 GMT","Jan 15 13:13:58 2038 GMT","AF:F3:58:EA:AD:4A:C4:F1:23:8E:B5:56:98:95:80:C3:B6:49:F9:D7","D7F0DB3F55ED1F5C",2,"sha1WithRSAEncryption","rsaEncryption",,,,,,,,,,,,,,,,,,,,,,,,,"CD:89:F6:55:A1:7B:C6:FB:50:C7:85:27:C0:85:49:6F:8E:79:F2:4A:E7:ED:13:1F:72:F5:6A:63:D3:E5:AA:97","B4:D1:FE:0F:C7:FC:AF:71:86:97:7C:15:2F:72:30:7D:BF:09:6D:D4:83:7E:45:89:5A:65:4B:D1:F3:C5:F2:F9:ED:A5:44:A3:FD:37:52:14:C1:C1:E3:79:5C:40:56:3C:B4:C9:25:6E:91:28:1A:6F:22:81:B0:C5:A4:45:F8:5F","42:DA:E3:37:90:2A:91:10:90:82:A8:79:F9:73:8E:71","Y","Y","N","unknown","234 Authentication method accepted",
"2019-03-06 06:37:00","150.107.109.26","tcp",21,,"ftp",18059,"ID","JAKARTA RAYA","JAKARTA",518210,0,"220 RO DINAS PARIWASATA GROUP E FTP server (MikroTik 6.40.8) ready|",,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,"500 'AUTH': command not understood","500 'AUTH': command not understood"
"2019-03-06 06:37:00","178.48.133.204","tcp",21,"catv-178-48-133-204.catv.broadband.hu","ftp",6830,"HU","PEST","GODOLLO",518210,0,"220---------- Welcome to Pure-FTPd [privsep] [TLS] ----------|220-You are user number 1 of 10 allowed.|220-Local time is now 08:36. Server port: 21.|220-This server supports FXP transfers|220-IPv6 connections are also welcome on this server.|220 You will be disconnected after 10 minutes of inactivity.|","TLSv1.0","TLS_RSA_WITH_RC4_128_SHA",1024,"192.168.0.227","192.168.0.227","Oct 26 13:03:34 2018 GMT","Oct 26 13:03:34 2019 GMT","1C:49:A3:EB:C3:3B:C6:DD:96:59:16:58:14:39:A6:2B:60:60:E9:FD",00,2,"md5WithRSAEncryption","rsaEncryption",,,,,,,,,,,,,,,,,,,,,,,,,"AC:73:FB:81:E8:0C:48:CD:B3:A2:21:B9:9D:23:96:BB:12:68:A0:A4:C8:99:1B:6C:B5:A8:6B:FA:4B:01:34:3C","E2:5C:1F:1A:C0:A1:42:11:05:84:D5:C2:D4:B0:2F:0C:C0:16:88:B3:D8:F7:61:C6:8D:16:4F:A4:B2:20:06:62:34:5A:D6:1F:F6:02:38:7B:7D:71:51:77:D4:F3:89:EC:6F:12:68:43:6C:5C:84:58:DC:90:FF:A4:8C:A4:AA:59","1A:2B:44:21:4B:DE:E2:D6:F9:11:61:C1:70:7D:F6:EA","Y","Y","N","unknown","234 AUTH TLS OK.",
"2019-03-06 06:37:00","210.150.68.233","tcp",21,,"ftp",2514,"JP","TOKYO","TOKYO",518210,0,"220 210.150.68.233 FTP server ready.|","TLSv1.0","TLS_RSA_WITH_RC4_128_SHA",2048,"hosting.host","hosting.host","May 6 02:14:21 2016 GMT","May 4 02:14:21 2026 GMT","68:49:79:5B:2C:50:7F:E8:44:60:78:BD:A8:1D:A5:A6:21:1D:E3:04","81E87D806A42A019",0,"sha256WithRSAEncryption","rsaEncryption","NTTPC Communications ,Inc","Hosting","JP","Tokyo","Minato-ku",,,,,,,,"NTTPC Communications ,Inc","Hosting","JP","Tokyo","Minato-ku",,,,,,,,"58:94:F8:33:75:90:E4:02:2D:40:5B:E2:FB:0D:34:BE:29:12:B2:ED:5B:CE:24:25:ED:F2:F0:F8:79:5C:8F:72","BC:30:D8:2B:B2:AB:06:AE:84:65:64:5B:4D:D0:31:21:E3:1B:5F:95:AC:DD:62:32:80:9C:23:60:F0:20:B8:12:D3:97:EE:D4:6B:96:05:D1:5A:BF:E5:D9:88:77:18:35:10:0C:EE:A4:27:69:C5:E1:AE:C6:4A:FB:14:BB:85:CF","F4:96:90:C0:85:8D:78:B8:D3:11:0D:9C:7B:A6:C8:06","Y","Y","N","unknown","234 AUTH TLS successful",
"2019-03-06 06:37:00","78.137.97.228","tcp",21,"ip78-137-97-228.pbiaas.com","ftp",51862,"DE","BADEN-WURTTEMBERG","KARLSRUHE",0,0,"220 Welcome|","TLSv1.2","TLS_RSA_WITH_RC4_128_SHA",2048,"gemino.de","gemino.de","Mar 25 10:33:58 2015 GMT","Mar 24 10:33:58 2016 GMT","CE:5A:78:C9:20:6E:0B:FE:A7:9E:D7:88:FA:8E:BA:CD:6D:7A:D6:3A",00,2,"sha1WithRSAEncryption","rsaEncryption","Gemino GmbH","IT","DE","Berlin","Berlin",,,,,"it-admin@gemino.de",,,"Gemino GmbH","IT","DE","Berlin","Berlin",,,,,"it-admin@gemino.de",,,"22:43:27:23:20:89:56:F2:97:8F:F1:B1:B1:83:34:42:D4:47:19:6F:92:AD:25:28:01:D6:AA:0A:4F:27:0C:D4","B1:EC:54:01:EE:DE:A2:C0:A6:1E:9C:43:2A:93:96:BF:EC:EF:AF:5C:82:6C:F0:74:0E:B1:D9:CF:02:53:07:B8:18:8D:69:45:19:A1:98:C9:6C:11:49:CC:85:41:9F:D7:64:D1:5F:C5:CB:A4:5A:21:5C:CE:75:6D:22:F6:DE:72","02:DB:6C:B9:CE:AA:F4:C6:D1:A3:A6:B1:27:0B:27:25","N","Y","Y","unknown","234 Using authentication type TLS",