Microsoft-IIS 7.5
tcp/80
The server is accepting NTLM anonymous credentials.
This allows for authentication bypass to access the underlying application.
https://blog.leakix.net/2022/03/bypassing-ntlm-auth-over-http/
Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c655c5c9cca7a3ca80bd2c8c360ae0b01
Server didn't refuse ANONYMOUS NTLM connection Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-10C9162EFW4 MsvAvNbDomainName: 35B1 MsvAvDNSComputerName: WIN-10C9162EFW4.35B1.LOCAL MsvAvDNSDomainName: 35B1.LOCAL MsvAvDNSTreeName: 35B1.LOCAL 200 OK Content-Length: 85 Content-Type: text/html Date: Mon, 04 Nov 2024 15:21:27 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///10.0.0.197/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c655c5c9cb40cb0ad75fbb25e2ae43f39
Server didn't refuse ANONYMOUS NTLM connection Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-9M88XGHGF34 MsvAvNbDomainName: TXG4 MsvAvDNSComputerName: WIN-9M88XGHGF34.TXG4.LOCAL MsvAvDNSDomainName: TXG4.LOCAL MsvAvDNSTreeName: TXG4.LOCAL 200 OK Content-Length: 85 Content-Type: text/html Date: Wed, 09 Oct 2024 11:55:08 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///10.0.0.197/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c655c5c9cc9d8a2ff1bf38cd667993c0d
Server didn't refuse ANONYMOUS NTLM connection Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-AJDNBJHBRDF MsvAvNbDomainName: RKR0 MsvAvDNSComputerName: WIN-AJDNBJHBRDF.RKR0.LOCAL MsvAvDNSDomainName: RKR0.LOCAL MsvAvDNSTreeName: RKR0.LOCAL 200 OK Content-Length: 85 Content-Type: text/html Date: Mon, 29 Jul 2024 08:01:28 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///10.0.0.197/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Open service 129.151.89.233:80 · www.ms.wistonrecruitment.com
2024-12-21 00:27
HTTP/1.1 401 Unauthorized Server: Microsoft-IIS/7.5 Date: Mon, 04 Nov 2024 15:21:27 GMT Content-Type: text/html WWW-Authenticate: NTLM Content-Length: 0
Open service 129.151.89.233:80 · www.ms.wistonrecruitment.com
2024-12-21 00:27
Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-10C9162EFW4 MsvAvNbDomainName: 35B1 MsvAvDNSComputerName: WIN-10C9162EFW4.35B1.LOCAL MsvAvDNSDomainName: 35B1.LOCAL MsvAvDNSTreeName: 35B1.LOCAL 200 OK Content-Length: 85 Content-Type: text/html Date: Mon, 04 Nov 2024 15:21:27 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///10.0.0.197/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Open service 129.151.89.233:80 · www.ms.wistonrecruitment.com
2024-12-19 00:24
Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-10C9162EFW4 MsvAvNbDomainName: 35B1 MsvAvDNSComputerName: WIN-10C9162EFW4.35B1.LOCAL MsvAvDNSDomainName: 35B1.LOCAL MsvAvDNSTreeName: 35B1.LOCAL 200 OK Content-Length: 85 Content-Type: text/html Date: Mon, 04 Nov 2024 15:21:27 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///10.0.0.197/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Open service 129.151.89.233:80 · www.ms.wistonrecruitment.com
2024-12-19 00:24
HTTP/1.1 401 Unauthorized Server: Microsoft-IIS/7.5 Date: Mon, 04 Nov 2024 15:21:27 GMT Content-Type: text/html WWW-Authenticate: NTLM Content-Length: 0
Open service 129.151.89.233:80 · www.ms.wistonrecruitment.com
2024-12-14 05:36
HTTP/1.1 401 Unauthorized Server: Microsoft-IIS/7.5 Date: Mon, 04 Nov 2024 15:21:27 GMT Content-Type: text/html WWW-Authenticate: NTLM Content-Length: 0
Open service 129.151.89.233:80 · www.ms.wistonrecruitment.com
2024-12-14 05:36
Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-10C9162EFW4 MsvAvNbDomainName: 35B1 MsvAvDNSComputerName: WIN-10C9162EFW4.35B1.LOCAL MsvAvDNSDomainName: 35B1.LOCAL MsvAvDNSTreeName: 35B1.LOCAL 200 OK Content-Length: 85 Content-Type: text/html Date: Mon, 04 Nov 2024 15:21:27 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///10.0.0.197/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Open service 129.151.89.233:80 · www.ms.wistonrecruitment.com
2024-12-12 10:12
HTTP/1.1 401 Unauthorized Server: Microsoft-IIS/7.5 Date: Mon, 04 Nov 2024 15:21:27 GMT Content-Type: text/html WWW-Authenticate: NTLM Content-Length: 0
Open service 129.151.89.233:80 · www.ms.wistonrecruitment.com
2024-12-12 10:12
Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-10C9162EFW4 MsvAvNbDomainName: 35B1 MsvAvDNSComputerName: WIN-10C9162EFW4.35B1.LOCAL MsvAvDNSDomainName: 35B1.LOCAL MsvAvDNSTreeName: 35B1.LOCAL 200 OK Content-Length: 85 Content-Type: text/html Date: Mon, 04 Nov 2024 15:21:27 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///10.0.0.197/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Open service 129.151.89.233:80 · www.ms.wistonrecruitment.com
2024-12-02 12:57
HTTP/1.1 401 Unauthorized Server: Microsoft-IIS/7.5 Date: Mon, 04 Nov 2024 15:21:27 GMT Content-Type: text/html WWW-Authenticate: NTLM Content-Length: 0
Open service 129.151.89.233:80 · www.ms.wistonrecruitment.com
2024-12-02 12:57
Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-10C9162EFW4 MsvAvNbDomainName: 35B1 MsvAvDNSComputerName: WIN-10C9162EFW4.35B1.LOCAL MsvAvDNSDomainName: 35B1.LOCAL MsvAvDNSTreeName: 35B1.LOCAL 200 OK Content-Length: 85 Content-Type: text/html Date: Mon, 04 Nov 2024 15:21:27 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///10.0.0.197/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Open service 129.151.89.233:80 · www.ms.wistonrecruitment.com
2024-11-30 10:23
HTTP/1.1 401 Unauthorized Server: Microsoft-IIS/7.5 Date: Mon, 04 Nov 2024 15:21:27 GMT Content-Type: text/html WWW-Authenticate: NTLM Content-Length: 0
Open service 129.151.89.233:80 · www.ms.wistonrecruitment.com
2024-11-30 10:23
Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-10C9162EFW4 MsvAvNbDomainName: 35B1 MsvAvDNSComputerName: WIN-10C9162EFW4.35B1.LOCAL MsvAvDNSDomainName: 35B1.LOCAL MsvAvDNSTreeName: 35B1.LOCAL 200 OK Content-Length: 85 Content-Type: text/html Date: Mon, 04 Nov 2024 15:21:27 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///10.0.0.197/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Open service 129.151.89.233:80 · www.ms.wistonrecruitment.com
2024-11-28 06:44
HTTP/1.1 401 Unauthorized Server: Microsoft-IIS/7.5 Date: Mon, 04 Nov 2024 15:21:27 GMT Content-Type: text/html WWW-Authenticate: NTLM Content-Length: 0
Open service 129.151.89.233:80 · www.ms.wistonrecruitment.com
2024-11-28 06:44
Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-10C9162EFW4 MsvAvNbDomainName: 35B1 MsvAvDNSComputerName: WIN-10C9162EFW4.35B1.LOCAL MsvAvDNSDomainName: 35B1.LOCAL MsvAvDNSTreeName: 35B1.LOCAL 200 OK Content-Length: 85 Content-Type: text/html Date: Mon, 04 Nov 2024 15:21:27 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///10.0.0.197/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Open service 129.151.89.233:80 · www.ms.wistonrecruitment.com
2024-11-20 20:37
HTTP/1.1 401 Unauthorized Server: Microsoft-IIS/7.5 Date: Mon, 04 Nov 2024 15:21:27 GMT Content-Type: text/html WWW-Authenticate: NTLM Content-Length: 0
Open service 129.151.89.233:80 · www.ms.wistonrecruitment.com
2024-11-20 20:37
Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-10C9162EFW4 MsvAvNbDomainName: 35B1 MsvAvDNSComputerName: WIN-10C9162EFW4.35B1.LOCAL MsvAvDNSDomainName: 35B1.LOCAL MsvAvDNSTreeName: 35B1.LOCAL 200 OK Content-Length: 85 Content-Type: text/html Date: Mon, 04 Nov 2024 15:21:27 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///10.0.0.197/pictures/logo.jpg' alt='Loading' height='1' width='1'>