Apache 2.4.61
tcp/8081
Malicious users exploiting this vulnerability may be able to read and/or write information to shared directories.
This may also include IPC services and lead to remote code execution.
Severity: high
Fingerprint: 22420ce026fa767de22ea8c3df372350d4001392d4001392d4001392d4001392
Found open SMB shares with NT AUTHORITY/ANONYMOUS LOGON print$ IPC$
Open service 193.123.251.246:445
2024-12-22 01:00
SMB NTLMSSP handshake results: Found non-Windows 6.1 build 0
Open service 193.123.251.246:8081
2024-12-21 23:07
HTTP/1.1 200 OK Date: Sat, 21 Dec 2024 23:07:50 GMT Server: Apache/2.4.61 (Debian) X-Powered-By: PHP/8.2.22 Link: <https://instantlightyear.com/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Open service 193.123.251.246:445
2024-12-20 00:29
SMB NTLMSSP handshake results: Found non-Windows 6.1 build 0
Open service 193.123.251.246:8081
2024-12-19 23:13
HTTP/1.1 200 OK Date: Thu, 19 Dec 2024 23:13:58 GMT Server: Apache/2.4.61 (Debian) X-Powered-By: PHP/8.2.22 Link: <https://instantlightyear.com/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Open service 193.123.251.246:445
2024-12-18 01:44
SMB NTLMSSP handshake results: Found non-Windows 6.1 build 0
Open service 193.123.251.246:8081
2024-12-17 22:57
HTTP/1.1 200 OK Date: Tue, 17 Dec 2024 22:57:42 GMT Server: Apache/2.4.61 (Debian) X-Powered-By: PHP/8.2.22 Link: <https://instantlightyear.com/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Open service 193.123.251.246:8080
2024-12-17 18:47
HTTP/1.1 200 OK cache-control: no-store connection: keep-alive content-length: 2899 content-security-policy: default-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; script-src 'self' 'unsafe-inline'; object-src 'none'; form-action 'self'; frame-ancestors 'self'; content-type: text/html date: Tue, 17 Dec 2024 18:47:24 GMT referrer-policy: same-origin x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Page title: qBittorrent Web 用户界面 <!DOCTYPE html> <html lang="zh"> <head> <meta charset="UTF-8" /> <title>qBittorrent Web 用户界面</title> <link rel="icon" type="image/png" href="images/skin/qbittorrent32.png" /> <link rel="stylesheet" type="text/css" href="css/login.css" /> <script src="scripts/lib/mootools-1.2-core-yc.js"></script> <noscript> <link rel="stylesheet" type="text/css" href="css/noscript.css?v=v4.1.7" /> </noscript> <script> window.onload = function() { $('username').focus(); $('username').select(); }; window.addEvent('domready', function() { $('loginform').addEvent('submit', function(e) { new Event(e).stop(); submitLoginForm(); }); }); function submitLoginForm() { new Request({ url: 'api/v2/auth/login', method: 'post', data: $('loginform').toQueryString(), onComplete: function() { $('password').set('value', ''); }, onFailure: function(xhr) { if (xhr.responseText !== "") { $('error_msg').set('html', xhr.responseText); } else { $('error_msg').set('html', '登录失败,可能是无法连接到 qBttorrent。'); } }, onSuccess: function(text) { if (text == "Ok.") { // Session started. Simply reload page. window.location.reload(); } else { $('error_msg').set('html', '无效的用户名或密码。'); } } }).send(); } </script> </head> <body> <noscript id="noscript"> <h1>JavaScript Required! You must enable JavaScript for the Web UI to work properly</h1> </noscript> <div id="main"> <h1>qBittorrent Web 用户界面</h1> <div id="logo" class="col"> <img src="images/skin/qbittorrent-tray.svg" alt="qBittorrent logo" /> </div> <div id="formplace" class="col"> <form id="loginform" method="post"> <div class="row"> <label for="username">用户名</label><br /> <input type="text" id="username" name="username" /></div> <div class="row"> <label for="password">密码</label><br /> <input type="password" id="password" name="password" /></div> <div class="row"> <input type="submit" id="login" value="登录" /> </div> </form> </div> <div id="error_msg"></div> </div> </body> </html>
Open service 193.123.251.246:445
2024-12-15 23:49
SMB NTLMSSP handshake results: Found non-Windows 6.1 build 0
Open service 193.123.251.246:445
2024-12-14 00:06
SMB NTLMSSP handshake results: Found non-Windows 6.1 build 0
Open service 193.123.251.246:8081
2024-12-13 22:18
HTTP/1.1 200 OK Date: Fri, 13 Dec 2024 22:18:17 GMT Server: Apache/2.4.61 (Debian) X-Powered-By: PHP/8.2.22 Link: <https://instantlightyear.com/wp-json/>; rel="https://api.w.org/" Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
Open service 193.123.251.246:445
2024-12-12 01:03
SMB NTLMSSP handshake results: Found non-Windows 6.1 build 0
Open service 193.123.251.246:445
2024-12-02 01:42
SMB NTLMSSP handshake results: Found non-Windows 6.1 build 0
Open service 193.123.251.246:445
2024-11-30 01:03
SMB NTLMSSP handshake results: Found non-Windows 6.1 build 0
Open service 193.123.251.246:445
2024-11-28 01:06
SMB NTLMSSP handshake results: Found non-Windows 6.1 build 0
Open service 193.123.251.246:445
2024-11-20 09:51
SMB NTLMSSP handshake results: Found non-Windows 6.1 build 0