LeakIX - Host 133.167.85.223

Host 133.167.85.223

Japan

SAKURA Internet Inc.

Software information

Microsoft-IIS 10.0

tcp/443

Open SMB file sharing detected

Malicious users exploiting this vulnerability may be able to read and/or write information to shared directories.

This may also include IPC services and lead to remote code execution.

IP: 133.167.85.223
Port: 445

First seen 2022-06-13 20:17
Last seen 2024-12-22 00:59
Open for 922 days
- Severity: high
  Fingerprint: 22420ce026fa767d3962741c23bfd32f75afa13ebf23ba0cd6d858be93e59946
```
Found open SMB shares with Guest login
ADMIN$
C$
IPC$
NETLOGON
NXSVCE
share
SYSVOL
```
  Found on 2024-12-22 00:59
- Severity: high
  Fingerprint: 22420ce026fa767d3962741c23bfd32f75afa13ebf23ba0c33178bb14551cd1e
```
Found open SMB shares with Guest login
ADMIN$
C$
IPC$
NXSVCE
share
```
  Found on 2024-06-29 21:15
Create report

Open service 133.167.85.223:445

2024-12-22 00:59

SMB NTLMSSP handshake results:
Found Windows 10.0 build 14393
NbComputerName: WIN-4IPTM51LAV2
NbDomainName: MIROKU
DNSComputerName: WIN-4IPTM51LAV2.miroku.local
DNSDomainName: miroku.local
DNSTreeName: miroku.local

Found 9 hours ago by SmbPlugin

Create report

Open service 133.167.85.223:445

2024-12-20 00:33

SMB NTLMSSP handshake results:
Found Windows 10.0 build 14393
NbComputerName: WIN-4IPTM51LAV2
NbDomainName: MIROKU
DNSComputerName: WIN-4IPTM51LAV2.miroku.local
DNSDomainName: miroku.local
DNSTreeName: miroku.local

Found 2 days ago by SmbPlugin

Create report

Open service 133.167.85.223:445

2024-12-18 01:47

SMB NTLMSSP handshake results:
Found Windows 10.0 build 14393
NbComputerName: WIN-4IPTM51LAV2
NbDomainName: MIROKU
DNSComputerName: WIN-4IPTM51LAV2.miroku.local
DNSDomainName: miroku.local
DNSTreeName: miroku.local

Found 2024-12-18 by SmbPlugin

Create report

Open service 133.167.85.223:445

2024-12-17 19:37

SMB NTLMSSP handshake results:
Found Windows 10.0 build 14393
NbComputerName: WIN-4IPTM51LAV2
NbDomainName: MIROKU
DNSComputerName: WIN-4IPTM51LAV2.miroku.local
DNSDomainName: miroku.local
DNSTreeName: miroku.local

Found 2024-12-17 by SmbPlugin

Create report

Open service 133.167.85.223:445

2024-12-15 23:44

SMB NTLMSSP handshake results:
Found Windows 10.0 build 14393
NbComputerName: WIN-4IPTM51LAV2
NbDomainName: MIROKU
DNSComputerName: WIN-4IPTM51LAV2.miroku.local
DNSDomainName: miroku.local
DNSTreeName: miroku.local

Found 2024-12-15 by SmbPlugin

Create report

Open service 133.167.85.223:445

2024-12-13 23:58

SMB NTLMSSP handshake results:
Found Windows 10.0 build 14393
NbComputerName: WIN-4IPTM51LAV2
NbDomainName: MIROKU
DNSComputerName: WIN-4IPTM51LAV2.miroku.local
DNSDomainName: miroku.local
DNSTreeName: miroku.local

Found 2024-12-13 by SmbPlugin

Create report

Open service 133.167.85.223:445

2024-12-12 00:24

SMB NTLMSSP handshake results:
Found Windows 10.0 build 14393
NbComputerName: WIN-4IPTM51LAV2
NbDomainName: MIROKU
DNSComputerName: WIN-4IPTM51LAV2.miroku.local
DNSDomainName: miroku.local
DNSTreeName: miroku.local

Found 2024-12-12 by SmbPlugin

Create report

Open service 133.167.85.223:445

2024-12-02 01:17

SMB NTLMSSP handshake results:
Found Windows 10.0 build 14393
NbComputerName: WIN-4IPTM51LAV2
NbDomainName: MIROKU
DNSComputerName: WIN-4IPTM51LAV2.miroku.local
DNSDomainName: miroku.local
DNSTreeName: miroku.local

Found 2024-12-02 by SmbPlugin

Create report

Open service 133.167.85.223:445

2024-11-30 00:37

SMB NTLMSSP handshake results:
Found Windows 10.0 build 14393
NbComputerName: WIN-4IPTM51LAV2
NbDomainName: MIROKU
DNSComputerName: WIN-4IPTM51LAV2.miroku.local
DNSDomainName: miroku.local
DNSTreeName: miroku.local

Found 2024-11-30 by SmbPlugin

Create report

Open service 133.167.85.223:445

2024-11-28 00:22

SMB NTLMSSP handshake results:
Found Windows 10.0 build 14393
NbComputerName: WIN-4IPTM51LAV2
NbDomainName: MIROKU
DNSComputerName: WIN-4IPTM51LAV2.miroku.local
DNSDomainName: miroku.local
DNSTreeName: miroku.local

Found 2024-11-28 by SmbPlugin

Create report

Open service 133.167.85.223:443

2024-11-20 14:13

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Mon, 01 Jul 2024 06:19:15 GMT
Accept-Ranges: bytes
ETag: "885640997ecbda1:0"
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
Date: Wed, 20 Nov 2024 14:13:46 GMT
Connection: close
Content-Length: 703

Page title: IIS Windows Server

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>IIS Windows Server</title>
<style type="text/css">
<!--
body {
	color:#000000;
	background-color:#0072C6;
	margin:0;
}

#container {
	margin-left:auto;
	margin-right:auto;
	text-align:center;
	}

a img {
	border:none;
}

-->
</style>
</head>
<body>
<div id="container">
<a href="http://go.microsoft.com/fwlink/?linkid=66138&amp;clcid=0x409"><img src="iisstart.png" alt="IIS" width="960" height="600" /></a>
</div>
</body>
</html>

Found 2024-11-20 by HttpPlugin

Create report

Fingerprint:

4580d0522e1873867da0e064552cc526d43edc43e1a2a93f6401b60cc7335a07

CN:

WIN-4IPTM51LAV2.miroku.local

Key:

RSA-2048

Issuer:

WIN-4IPTM51LAV2.miroku.local

Not before:

2024-06-30 06:19

Not after:

2024-12-30 06:19

Domain summary

No record

Host 133.167.85.223

Japan

Software information

Open SMB file sharing detected

Domain summary