I baned this IP, why would this apprea in the logs

[DomDis]

Every time I restarted Wingftp I would see this Ip so I banded it and I see this message

[04] Thu, 22 Jun 2023 22:52:57 (0000000) 421 Not logged in, IP 208.115.199.23 is banned permanently.


IP Details For: 208.115.199.23

Decimal:3497248535

Hostname:23-199-115-208.static.reverse.lstn.net

ASN:46475

ISP:Limestone Networks Inc.

Services:Datacenter

Assignment:Likely Static IP

Country:United States

State/Region:Texas

City:Dallas

Latitude:32.7809 (32° 46′ 51.17″ N)

Longitude:-96.8035 (96° 48′ 12.51″ W)

[FTP]

Yes, it blocked that IP and showed that FTP message, that's no problem.

[DomDis]

Yes, it blocked that IP and showed that FTP message, that's no problem.

My worry is that I never saw this IP attempt to log on so why the message ?

[FTP]

The domain logs already told you 208.115.199.23 is the client IP who attempts to log on.

[DomDis]

The domain logs already told you 208.115.199.23 is the client IP who attempts to log on.

Yes but I never saw the log in attempt with user name ... in the logs but never mind I just manually blocked it