LeakIX - Host 104.168.173.189

Host 104.168.173.189

United States

HOSTWINDS

Software information

Caddy

tcp/80

nginx nginx 1.18.0

tcp/443

Open SMB file sharing detected

Malicious users exploiting this vulnerability may be able to read and/or write information to shared directories.

This may also include IPC services and lead to remote code execution.

IP: 104.168.173.189
Port: 445

First seen 2024-09-11 15:34
Last seen 2024-12-22 00:59
Open for 101 days
- Severity: high
  Fingerprint: 22420ce026fa767de22ea8c3df372350d4001392d4001392d4001392d4001392
```
Found open SMB shares with NT AUTHORITY/ANONYMOUS LOGON
print$
IPC$
```
  Found on 2024-12-22 00:59
Create report

Open service 104.168.173.189:445

2024-12-22 00:59
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 10 hours ago by SmbPlugin
Create report
Open service 104.168.173.189:445

2024-12-20 00:35
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2 days ago by SmbPlugin
Create report
Open service 104.168.173.189:445

2024-12-18 01:49
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-12-18 by SmbPlugin
Create report

Open service 104.168.173.189:443 · 010817.xyz

2024-12-18 00:53

HTTP/1.1 302 Found
Server: nginx/1.18.0
Date: Wed, 18 Dec 2024 00:53:30 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 40
Connection: close
Location: /web/client/login


<a href="/web/client/login">Found</a>.

Found 2024-12-18 by HttpPlugin

Create report

Open service 104.168.173.189:80 · 010817.xyz

2024-12-18 00:53

HTTP/1.1 308 Permanent Redirect
Connection: close
Location: https://010817.xyz:58585/
Server: Caddy
Date: Wed, 18 Dec 2024 00:53:26 GMT
Content-Length: 0

Found 2024-12-18 by HttpPlugin

Create report

Open service 104.168.173.189:445

2024-12-15 23:53
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-12-15 by SmbPlugin
Create report

Open service 104.168.173.189:443 · 010817.xyz

2024-12-14 00:52

HTTP/1.1 302 Found
Server: nginx/1.18.0
Date: Sat, 14 Dec 2024 00:52:43 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 40
Connection: close
Location: /web/client/login


<a href="/web/client/login">Found</a>.

Found 2024-12-14 by HttpPlugin

Create report

Open service 104.168.173.189:80 · 010817.xyz

2024-12-14 00:52

HTTP/1.1 308 Permanent Redirect
Connection: close
Location: https://010817.xyz:58585/
Server: Caddy
Date: Sat, 14 Dec 2024 00:52:40 GMT
Content-Length: 0

Found 2024-12-14 by HttpPlugin

Create report

Open service 104.168.173.189:445

2024-12-14 00:04
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-12-14 by SmbPlugin
Create report
Open service 104.168.173.189:445

2024-12-12 00:58
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-12-12 by SmbPlugin
Create report
Open service 104.168.173.189:445

2024-12-02 01:33
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-12-02 by SmbPlugin
Create report
Open service 104.168.173.189:445

2024-11-30 00:47
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-11-30 by SmbPlugin
Create report
Open service 104.168.173.189:445

2024-11-28 00:36
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-11-28 by SmbPlugin
Create report
Open service 104.168.173.189:445

2024-11-20 11:30
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-11-20 by SmbPlugin
Create report

122700.xyz

Fingerprint:

c1e117ea7fd5a6c5c4ccbf3147be08bca5d5405f9261f0bcff322fdab20138fc

CN:

122700.xyz

Key:

ECDSA-256

Issuer:

Not before:

2024-11-02 05:34

Not after:

2025-01-31 05:34

Domain summary

010817.xyz 3

1 recorded

Host 104.168.173.189

United States

Software information

Open SMB file sharing detected

122700.xyz

Domain summary