LeakIX - Host 109.174.30.41

Host 109.174.30.41

Russia

MTS PJSC

Open SMB file sharing detected

Malicious users exploiting this vulnerability may be able to read and/or write information to shared directories.

This may also include IPC services and lead to remote code execution.

IP: 109.174.30.41
Port: 445

First seen 2022-06-13 20:04
Last seen 2024-09-19 23:42
Open for 829 days
- Severity: high
  Fingerprint: 22420ce026fa767de22ea8c365d2a51d65d2a51d65d2a51d65d2a51d65d2a51d
```
Found open SMB shares with NT AUTHORITY/ANONYMOUS LOGON
IPC$
```
  Found on 2024-09-19 23:42
Create report
SSH is potenitally vulnerable

WARNING: This plugin will generate false positive and is purely informative:

regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)

IP: 109.174.30.41
Port: 22

First seen 2024-07-03 16:59
Last seen 2024-09-10 00:13
Open for 68 days
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb563aa8aacd8f3bb51d8f3bb51d8f3bb51d8f3bb51
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u2
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2024-09-10 00:13
Create report
SSH is potenitally vulnerable

WARNING: This plugin will generate false positive and is purely informative:

regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)

IP: 109.174.30.41
Port: 444

First seen 2024-07-17 03:59
Last seen 2024-09-09 23:15
Open for 54 days
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb563aa8aacd8f3bb51d8f3bb51d8f3bb51d8f3bb51
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u2
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2024-09-09 23:15
Create report

Open service 109.174.30.41:445

2024-09-15 23:48
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-09-15 by SmbPlugin
Create report
Open service 109.174.30.41:444

2024-09-15 20:08
Found 2024-09-15 by SSHOpenPlugin
Create report
Open service 109.174.30.41:22

2024-09-15 19:51
Found 2024-09-15 by SSHOpenPlugin
Create report
Open service 109.174.30.41:445

2024-09-13 23:22
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-09-13 by SmbPlugin
Create report
Open service 109.174.30.41:444

2024-09-13 20:04
Found 2024-09-13 by SSHOpenPlugin
Create report
Open service 109.174.30.41:22

2024-09-13 19:51
Found 2024-09-13 by SSHOpenPlugin
Create report
Open service 109.174.30.41:444

2024-09-12 00:41
Found 2024-09-12 by SSHOpenPlugin
Create report
Open service 109.174.30.41:445

2024-09-11 23:16
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-09-11 by SmbPlugin
Create report
Open service 109.174.30.41:444

2024-09-11 20:18
Found 2024-09-11 by SSHOpenPlugin
Create report
Open service 109.174.30.41:22

2024-09-11 19:57
Found 2024-09-11 by SSHOpenPlugin
Create report
Open service 109.174.30.41:443

2024-09-11 11:03
Found 2024-09-11 by SSHOpenPlugin
Create report
Open service 109.174.30.41:445

2024-09-10 11:06
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-09-10 by SmbPlugin
Create report
Open service 109.174.30.41:22

2024-09-10 00:13
Found 2024-09-10 by SSHOpenPlugin
Create report
Open service 109.174.30.41:444

2024-09-09 23:15
Found 2024-09-09 by SSHOpenPlugin
Create report
Open service 109.174.30.41:22

2024-09-07 22:32
Found 2024-09-07 by SSHOpenPlugin
Create report
Open service 109.174.30.41:444

2024-09-07 22:19
Found 2024-09-07 by SSHOpenPlugin
Create report
Open service 109.174.30.41:22

2024-08-17 23:14
Found 2024-08-17 by SSHOpenPlugin
Create report
Open service 109.174.30.41:444

2024-08-17 23:08
Found 2024-08-17 by SSHOpenPlugin
Create report
Open service 109.174.30.41:22

2024-08-15 23:10
Found 2024-08-15 by SSHOpenPlugin
Create report
Open service 109.174.30.41:444

2024-08-15 21:33
Found 2024-08-15 by SSHOpenPlugin
Create report
Open service 109.174.30.41:22

2024-08-11 23:37
Found 2024-08-11 by SSHOpenPlugin
Create report
Open service 109.174.30.41:444

2024-08-11 23:27
Found 2024-08-11 by SSHOpenPlugin
Create report
Open service 109.174.30.41:22

2024-08-09 23:44
Found 2024-08-09 by SSHOpenPlugin
Create report
Open service 109.174.30.41:444

2024-08-09 23:37
Found 2024-08-09 by SSHOpenPlugin
Create report
Open service 109.174.30.41:22

2024-08-07 23:55
Found 2024-08-07 by SSHOpenPlugin
Create report
Open service 109.174.30.41:444

2024-08-07 23:38
Found 2024-08-07 by SSHOpenPlugin
Create report

Domain summary

No record

Host 109.174.30.41

Russia

Open SMB file sharing detected

SSH is potenitally vulnerable

SSH is potenitally vulnerable

Domain summary