LeakIX - Host 178.32.144.44

Host 178.32.144.44

France

OVH SAS

Software information

Apache Apache

tcp/80

nginx nginx

tcp/443 tcp/8443

Open SMB file sharing detected

Malicious users exploiting this vulnerability may be able to read and/or write information to shared directories.

This may also include IPC services and lead to remote code execution.

IP: 178.32.144.44
Port: 445

First seen 2022-06-13 20:10
Last seen 2026-01-08 12:31
Open for 1304 days
- Severity: high
  Fingerprint: 22420ce026fa767de22ea8c3df372350d4001392d4001392d4001392d4001392
```
Found open SMB shares with NT AUTHORITY/ANONYMOUS LOGON
print$
IPC$
```
  Found on 2026-01-08 12:31
Create report

Open service 178.32.144.44:445

2026-01-08 12:31
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2 days ago by SmbPlugin
Create report
Open service 178.32.144.44:445

2026-01-01 12:45
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2026-01-01 by SmbPlugin
Create report

Open service 178.32.144.44:80 · servicios.gh-asistencia.com

2025-12-29 23:01

HTTP/1.1 302 Found
Date: Mon, 29 Dec 2025 23:01:39 GMT
Server: Apache
Location: https://panel.gh-asistencia.com/
Content-Length: 216
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://panel.gh-asistencia.com/">here</a>.</p>
</body></html>

Found 2025-12-29 by HttpPlugin

Create report

Open service 178.32.144.44:8443 · servicios.gh-asistencia.com

2025-12-29 23:01

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 29 Dec 2025 23:01:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding
Set-Cookie: iMSCP_Session=iqgurcfhnhh79dgcaclpvfhi50; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Cache-Control: public

Page title: i-MSCP - Multi Server Control Panel / Login

<!DOCTYPE html>
<html>
<head>
    <title>i-MSCP - Multi Server Control Panel / Login</title>
    <meta charset="UTF-8">
    <meta name="robots" content="nofollow, noindex">
    <link rel="shortcut icon" href="/themes/default/assets/images/favicon.ico">
    <link rel="stylesheet" href="/themes/default/assets/css/jquery-ui-black.css?v=2018113000">
    <link rel="stylesheet" href="/themes/default/assets/css/simple.css?v=2018113000">
    <!--[if (IE 7)|(IE 8)]>
    <link href="/themes/default/assets/css/ie78overrides.css?v=2018113000" rel="stylesheet">
    <![endif]-->
    <script>
        imscp_i18n = {"core":{"ok":"Ok","warning":"Warning!","yes":"Yes","no":"No","confirmation_required":"Confirmation required","close":"Close","generate":"Generate","show":"Show","your_new_password":"Your new password","password_generate_alert":"You must first generate a password by clicking the generate button.","password_length":"6"}};
    </script>
    <script src="/themes/default/assets/js/jquery/jquery.js?v=2018113000"></script>
    <script src="/themes/default/assets/js/jquery/jquery-ui.js?v=2018113000"></script>
    <script src="/themes/default/assets/js/imscp.min.js?v=2018113000"></script>
</head>
<body class="black simple">
<div class="wrapper">
    
    <div id="header">
        <div id="logo"><span>internet Multi Server Control Panel</span></div>
        <div id="copyright"><span><a href="https://www.i-mscp.net" target="blank">© 2010-2017 i-MSCP Team<br>All Rights Reserved</a></span></div>
    </div>
    
    <div id="content">
        
        
<div id="login">
    <form name="login" action="index.php" method="post">
        <table>
            <tr>
                <td class="left"><label for="uname">Username</label></td>
                <td class="right"><input type="text" name="uname" id="uname" value=""></td>
            </tr>
            <tr>
                <td class="left"><label for="password">Password</label></td>
                <td class="right"><input type="password" name="upass" id="password" value=""></td>
            </tr>
            <tr>
                <td colspan="2" class="right">
                    
                    <a class="link_as_button" href="lostpassword.php">Lost password</a>
                    
                    <button type="submit" name="Submit" tabindex="3">Login</button>
                </td>
            </tr>
            
        </table>
        <input type="hidden" name="action" value="login">
    </form>
</div>

    </div>
</div>
</body>
</html>

Found 2025-12-29 by HttpPlugin

Create report

Open service 178.32.144.44:443 · servicios.gh-asistencia.com

2025-12-29 23:01

HTTP/1.1 200 OK
Date: Mon, 29 Dec 2025 23:01:39 GMT
Server: nginx
Content-Type: text/html; charset=UTF-8
Vary: Accept-Encoding
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Cache-Control: public
Set-Cookie: iMSCP_Session=7rmlpk9ubcfaabr0ju649ausb6; path=/
Connection: close
Transfer-Encoding: chunked

Page title: i-MSCP - Multi Server Control Panel / Login

<!DOCTYPE html>
<html>
<head>
    <title>i-MSCP - Multi Server Control Panel / Login</title>
    <meta charset="UTF-8">
    <meta name="robots" content="nofollow, noindex">
    <link rel="shortcut icon" href="/themes/default/assets/images/favicon.ico">
    <link rel="stylesheet" href="/themes/default/assets/css/jquery-ui-black.css?v=2018113000">
    <link rel="stylesheet" href="/themes/default/assets/css/simple.css?v=2018113000">
    <!--[if (IE 7)|(IE 8)]>
    <link href="/themes/default/assets/css/ie78overrides.css?v=2018113000" rel="stylesheet">
    <![endif]-->
    <script>
        imscp_i18n = {"core":{"ok":"Ok","warning":"Warning!","yes":"Yes","no":"No","confirmation_required":"Confirmation required","close":"Close","generate":"Generate","show":"Show","your_new_password":"Your new password","password_generate_alert":"You must first generate a password by clicking the generate button.","password_length":"6"}};
    </script>
    <script src="/themes/default/assets/js/jquery/jquery.js?v=2018113000"></script>
    <script src="/themes/default/assets/js/jquery/jquery-ui.js?v=2018113000"></script>
    <script src="/themes/default/assets/js/imscp.min.js?v=2018113000"></script>
</head>
<body class="black simple">
<div class="wrapper">
    
    <div id="header">
        <div id="logo"><span>internet Multi Server Control Panel</span></div>
        <div id="copyright"><span><a href="https://www.i-mscp.net" target="blank">© 2010-2017 i-MSCP Team<br>All Rights Reserved</a></span></div>
    </div>
    
    <div id="content">
        
        
<div id="login">
    <form name="login" action="index.php" method="post">
        <table>
            <tr>
                <td class="left"><label for="uname">Username</label></td>
                <td class="right"><input type="text" name="uname" id="uname" value=""></td>
            </tr>
            <tr>
                <td class="left"><label for="password">Password</label></td>
                <td class="right"><input type="password" name="upass" id="password" value=""></td>
            </tr>
            <tr>
                <td colspan="2" class="right">
                    
                    <a class="link_as_button" href="lostpassword.php">Lost password</a>
                    
                    <button type="submit" name="Submit" tabindex="3">Login</button>
                </td>
            </tr>
            
        </table>
        <input type="hidden" name="action" value="login">
    </form>
</div>

    </div>
</div>
</body>
</html>

Found 2025-12-29 by HttpPlugin

Create report

Open service 178.32.144.44:445

2025-12-29 21:26
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2025-12-29 by SmbPlugin
Create report
Open service 178.32.144.44:445

2025-12-23 23:09
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2025-12-23 by SmbPlugin
Create report
Open service 178.32.144.44:445

2025-12-21 23:24
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2025-12-21 by SmbPlugin
Create report
Open service 178.32.144.44:445

2025-12-20 03:33
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2025-12-20 by SmbPlugin
Create report

panel.gh-asistencia.com

Fingerprint:

c556d6f47b0a1b4757467f615694dd39cb0912909f5a87a06455bd794e6bba27

CN:

panel.gh-asistencia.com

Key:

RSA-2048

Issuer:

R13

Not before:

2025-11-22 22:01

Not after:

2026-02-20 22:01

Domain summary

servicios.gh-asistencia.com 2

1 recorded

Host 178.32.144.44

France

Software information

Open SMB file sharing detected

panel.gh-asistencia.com

Domain summary