LeakIX - Host 192.210.139.174

Host 192.210.139.174

United States

AS-COLOCROSSING

Open SMB file sharing detected

Malicious users exploiting this vulnerability may be able to read and/or write information to shared directories.

This may also include IPC services and lead to remote code execution.

IP: 192.210.139.174
Port: 445

First seen 2024-09-11 07:41
Last seen 2024-12-22 01:00
Open for 101 days
- Severity: high
  Fingerprint: 22420ce026fa767de22ea8c3df372350d4001392d4001392d4001392d4001392
```
Found open SMB shares with NT AUTHORITY/ANONYMOUS LOGON
print$
IPC$
```
  Found on 2024-12-22 01:00
Create report
SSH is potenitally vulnerable

WARNING: This plugin will generate false positive and is purely informative:

regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)

IP: 192.210.139.174
Port: 22

First seen 2024-07-03 17:34
Last seen 2024-11-04 01:10
Open for 123 days
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb583e3d39867420e8d67420e8d67420e8d67420e8d
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.6
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2024-11-04 01:10
Create report

Open service 192.210.139.174:445

2024-12-22 01:00
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 10 hours ago by SmbPlugin
Create report
Open service 192.210.139.174:22

2024-12-21 22:45
Found 13 hours ago by SSHOpenPlugin
Create report
Open service 192.210.139.174:445

2024-12-20 00:31
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2 days ago by SmbPlugin
Create report
Open service 192.210.139.174:22

2024-12-19 22:25
Found 3 days ago by SSHOpenPlugin
Create report
Open service 192.210.139.174:445

2024-12-18 01:42
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-12-18 by SmbPlugin
Create report
Open service 192.210.139.174:22

2024-12-17 23:00
Found 2024-12-17 by SSHOpenPlugin
Create report
Open service 192.210.139.174:445

2024-12-15 23:53
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-12-15 by SmbPlugin
Create report
Open service 192.210.139.174:22

2024-12-15 22:29
Found 2024-12-15 by SSHOpenPlugin
Create report
Open service 192.210.139.174:445

2024-12-14 00:05
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-12-14 by SmbPlugin
Create report
Open service 192.210.139.174:22

2024-12-13 22:26
Found 2024-12-13 by SSHOpenPlugin
Create report
Open service 192.210.139.174:445

2024-12-12 01:04
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-12-12 by SmbPlugin
Create report
Open service 192.210.139.174:22

2024-12-11 22:41
Found 2024-12-11 by SSHOpenPlugin
Create report
Open service 192.210.139.174:445

2024-12-02 01:36
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-12-02 by SmbPlugin
Create report
Open service 192.210.139.174:22

2024-12-01 22:48
Found 2024-12-01 by SSHOpenPlugin
Create report
Open service 192.210.139.174:445

2024-11-30 00:59
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-11-30 by SmbPlugin
Create report
Open service 192.210.139.174:22

2024-11-29 22:28
Found 2024-11-29 by SSHOpenPlugin
Create report
Open service 192.210.139.174:445

2024-11-28 01:00
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-11-28 by SmbPlugin
Create report
Open service 192.210.139.174:22

2024-11-27 22:56
Found 2024-11-27 by SSHOpenPlugin
Create report
Open service 192.210.139.174:445

2024-11-20 14:09
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-11-20 by SmbPlugin
Create report

Domain summary

No record

Host 192.210.139.174

United States

Open SMB file sharing detected

SSH is potenitally vulnerable

Domain summary