Search for surrounding entries. Look for USER anonymous , PASS , RETR to determine exploitation. 10.16 1oo 244 ftp server is most consistent with an FTP server running on private IP 10.16.1.100 at port 244 , where 1oo is a corrupted rendering of 100 (due to octal, font, or encoding error). No standard FTP reply code is 244, and 1oo has no valid FTP meaning.
"timestamp": "2024-10-16T??:??:??Z", "src_ip": "10.16.??.??", "dest_port": 244, "protocol": "TCP", "app_proto": "ftp", "banner": "1oo 244 ftp server" 10.16 1oo 244 ftp server
This is a curated technical analysis based on your query. The string "10.16 1oo 244 ftp server" appears to be a fragment of network reconnaissance data, likely from a penetration test, CTF challenge, or log entry. Search for surrounding entries