Host 31.214.157.167
The Netherlands
-
Server accepting anonymous credentials
The server is accepting NTLM anonymous credentials.
This allows for authentication bypass to access the underlying application.
https://blog.leakix.net/2022/03/bypassing-ntlm-auth-over-http/
First seen 2024-09-09 14:09
Last seen 2024-10-17 22:58
Open for 38 days-
Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c655c5c9c957422397ffcfd2c17804d7b
Server didn't refuse ANONYMOUS NTLM connection Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-TXT1247LZ1R MsvAvNbDomainName: 28KD MsvAvDNSComputerName: WIN-TXT1247LZ1R.28KD.LOCAL MsvAvDNSDomainName: 28KD.LOCAL MsvAvDNSTreeName: 28KD.LOCAL 200 OK Content-Length: 89 Content-Type: text/html Date: Wed, 16 Oct 2024 12:18:46 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///31.214.157.167/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Found on 2024-10-17 22:58 -
Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c655c5c9cff4ba82469f7bfa323cdd7ff
Server didn't refuse ANONYMOUS NTLM connection Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-L4O7LPPFHLL MsvAvNbDomainName: BEVJ MsvAvDNSComputerName: WIN-L4O7LPPFHLL.BEVJ.LOCAL MsvAvDNSDomainName: BEVJ.LOCAL MsvAvDNSTreeName: BEVJ.LOCAL 200 OK Content-Length: 89 Content-Type: text/html Date: Fri, 11 Oct 2024 08:05:42 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///31.214.157.167/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Found on 2024-10-13 22:01 -
Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c655c5c9cacd889c738ad6600d615ffcf
Server didn't refuse ANONYMOUS NTLM connection Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-B97PI39TGTK MsvAvNbDomainName: 8N6Q MsvAvDNSComputerName: WIN-B97PI39TGTK.8N6Q.LOCAL MsvAvDNSDomainName: 8N6Q.LOCAL MsvAvDNSTreeName: 8N6Q.LOCAL 200 OK Content-Length: 89 Content-Type: text/html Date: Mon, 07 Oct 2024 11:20:10 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///31.214.157.167/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Found on 2024-10-07 21:12 -
Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c655c5c9c855e5d60d68da3d1095be9bb
Server didn't refuse ANONYMOUS NTLM connection Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-MW23OSZ0ZLA MsvAvNbDomainName: XHLM MsvAvDNSComputerName: WIN-MW23OSZ0ZLA.XHLM.LOCAL MsvAvDNSDomainName: XHLM.LOCAL MsvAvDNSTreeName: XHLM.LOCAL 200 OK Content-Length: 89 Content-Type: text/html Date: Tue, 01 Oct 2024 11:12:28 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///31.214.157.167/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Found on 2024-10-01 20:59 -
Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c655c5c9c322faf3baf73a52bbe9d7f43
Server didn't refuse ANONYMOUS NTLM connection Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-EOGHCBHT900 MsvAvNbDomainName: 67R9 MsvAvDNSComputerName: WIN-EOGHCBHT900.67R9.LOCAL MsvAvDNSDomainName: 67R9.LOCAL MsvAvDNSTreeName: 67R9.LOCAL 200 OK Content-Length: 89 Content-Type: text/html Date: Fri, 27 Sep 2024 14:17:12 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///31.214.157.167/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Found on 2024-09-27 21:00 -
Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c655c5c9c0cb42aa59f5cc3734f467fb3
Server didn't refuse ANONYMOUS NTLM connection Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-O4VJ9F7LGVK MsvAvNbDomainName: 6G6G MsvAvDNSComputerName: WIN-O4VJ9F7LGVK.6G6G.LOCAL MsvAvDNSDomainName: 6G6G.LOCAL MsvAvDNSTreeName: 6G6G.LOCAL 200 OK Content-Length: 89 Content-Type: text/html Date: Tue, 24 Sep 2024 12:00:05 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///31.214.157.167/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Found on 2024-09-25 20:40 -
Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c655c5c9c1ce6c01b1fb112c6a5cd98bf
Server didn't refuse ANONYMOUS NTLM connection Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-11HWOU1E4OC MsvAvNbDomainName: VM7Y MsvAvDNSComputerName: WIN-11HWOU1E4OC.VM7Y.LOCAL MsvAvDNSDomainName: VM7Y.LOCAL MsvAvDNSTreeName: VM7Y.LOCAL 200 OK Content-Length: 89 Content-Type: text/html Date: Tue, 17 Sep 2024 07:29:29 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///31.214.157.167/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Found on 2024-09-23 22:28 -
Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c655c5c9cd77268062013876e7673f237
Server didn't refuse ANONYMOUS NTLM connection Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-ZMIA2O0RN8N MsvAvNbDomainName: 29GR MsvAvDNSComputerName: WIN-ZMIA2O0RN8N.29GR.LOCAL MsvAvDNSDomainName: 29GR.LOCAL MsvAvDNSTreeName: 29GR.LOCAL 200 OK Content-Length: 89 Content-Type: text/html Date: Tue, 10 Sep 2024 09:32:16 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///31.214.157.167/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Found on 2024-09-13 21:24 -
Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c655c5c9cd2d3d1705e364ea074c6e3d3
Server didn't refuse ANONYMOUS NTLM connection Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-Q25MPMOMPN4 MsvAvNbDomainName: PVBH MsvAvDNSComputerName: WIN-Q25MPMOMPN4.PVBH.LOCAL MsvAvDNSDomainName: PVBH.LOCAL MsvAvDNSTreeName: PVBH.LOCAL 200 OK Content-Length: 89 Content-Type: text/html Date: Wed, 04 Sep 2024 07:42:33 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///31.214.157.167/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Found on 2024-09-09 23:28
-
-
Server accepting anonymous credentials
The server is accepting NTLM anonymous credentials.
This allows for authentication bypass to access the underlying application.
https://blog.leakix.net/2022/03/bypassing-ntlm-auth-over-http/
First seen 2024-09-11 22:33
Last seen 2024-10-11 22:07
Open for 29 days-
Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c655c5c9cff4ba82469f7bfa323cdd7ff
Server didn't refuse ANONYMOUS NTLM connection Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-L4O7LPPFHLL MsvAvNbDomainName: BEVJ MsvAvDNSComputerName: WIN-L4O7LPPFHLL.BEVJ.LOCAL MsvAvDNSDomainName: BEVJ.LOCAL MsvAvDNSTreeName: BEVJ.LOCAL 200 OK Content-Length: 89 Content-Type: text/html Date: Fri, 11 Oct 2024 08:05:42 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///31.214.157.167/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Found on 2024-10-11 22:07 -
Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c655c5c9cacd889c738ad6600d615ffcf
Server didn't refuse ANONYMOUS NTLM connection Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-B97PI39TGTK MsvAvNbDomainName: 8N6Q MsvAvDNSComputerName: WIN-B97PI39TGTK.8N6Q.LOCAL MsvAvDNSDomainName: 8N6Q.LOCAL MsvAvDNSTreeName: 8N6Q.LOCAL 200 OK Content-Length: 89 Content-Type: text/html Date: Mon, 07 Oct 2024 11:20:10 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///31.214.157.167/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Found on 2024-10-07 20:16 -
Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c655c5c9c855e5d60d68da3d1095be9bb
Server didn't refuse ANONYMOUS NTLM connection Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-MW23OSZ0ZLA MsvAvNbDomainName: XHLM MsvAvDNSComputerName: WIN-MW23OSZ0ZLA.XHLM.LOCAL MsvAvDNSDomainName: XHLM.LOCAL MsvAvDNSTreeName: XHLM.LOCAL 200 OK Content-Length: 89 Content-Type: text/html Date: Tue, 01 Oct 2024 11:12:28 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///31.214.157.167/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Found on 2024-10-01 22:57 -
Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c655c5c9c322faf3baf73a52bbe9d7f43
Server didn't refuse ANONYMOUS NTLM connection Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-EOGHCBHT900 MsvAvNbDomainName: 67R9 MsvAvDNSComputerName: WIN-EOGHCBHT900.67R9.LOCAL MsvAvDNSDomainName: 67R9.LOCAL MsvAvDNSTreeName: 67R9.LOCAL 200 OK Content-Length: 89 Content-Type: text/html Date: Fri, 27 Sep 2024 14:17:12 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///31.214.157.167/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Found on 2024-09-27 21:26 -
Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c655c5c9c0cb42aa59f5cc3734f467fb3
Server didn't refuse ANONYMOUS NTLM connection Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-O4VJ9F7LGVK MsvAvNbDomainName: 6G6G MsvAvDNSComputerName: WIN-O4VJ9F7LGVK.6G6G.LOCAL MsvAvDNSDomainName: 6G6G.LOCAL MsvAvDNSTreeName: 6G6G.LOCAL 200 OK Content-Length: 89 Content-Type: text/html Date: Tue, 24 Sep 2024 12:00:05 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///31.214.157.167/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Found on 2024-09-25 22:39 -
Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c655c5c9cd77268062013876e7673f237
Server didn't refuse ANONYMOUS NTLM connection Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-ZMIA2O0RN8N MsvAvNbDomainName: 29GR MsvAvDNSComputerName: WIN-ZMIA2O0RN8N.29GR.LOCAL MsvAvDNSDomainName: 29GR.LOCAL MsvAvDNSTreeName: 29GR.LOCAL 200 OK Content-Length: 89 Content-Type: text/html Date: Tue, 10 Sep 2024 09:32:16 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///31.214.157.167/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Found on 2024-09-11 22:33
-