FileZilla FTP client large single-session transfer to external host - possible bulk data exfiltration

Duo Tech@duotech

•updated Aug 11, 2026•0•0•4

Detects FileZilla FTP client traffic patterns and large single-session outbound FTP transfers to external hosts above a tuned threshold, weighted more heavily outside business hours, excluding known internal FTP servers/vendors and approved data-transfer partners.