Host 36.64.163.161
Indonesia
Software information
Microsoft-IIS 10.0
tcp/80
-
Open SMB file sharing detected
Malicious users exploiting this vulnerability may be able to read and/or write information to shared directories.
This may also include IPC services and lead to remote code execution.
First seen 2023-05-25 15:25
Last seen 2024-09-19 23:42
Open for 483 days-
Severity: high
Fingerprint: 22420ce026fa767d3962741c23bfd32f75afa13e4680e23e932ac25e518003b7Found open SMB shares with Guest login ADMIN$ C$ clone server D$ EPSON L3250 Series foto ftproot IPC$ print$
Found on 2024-09-19 23:42 -
Severity: high
Fingerprint: 22420ce026fa767d3962741c23bfd32f75afa13e4680e23e932ac25e652e1066Found open SMB shares with Guest login ADMIN$ C$ clone server D$ E$ EPSON L3250 Series foto ftproot IPC$ print$
Found on 2024-07-27 22:57 -
Severity: high
Fingerprint: 22420ce026fa767d3962741c23bfd32f75afa13e4680e23e932ac25ec7e34e44Found open SMB shares with Guest login ADMIN$ C$ clone server D$ foto ftproot IPC$
Found on 2023-11-16 16:52 -
Severity: high
Fingerprint: 22420ce026fa767d3962741c23bfd32f75afa13eb25d195e7201d68994e429faFound open SMB shares with Guest login ADMIN$ C$ D$ E$ foto ftproot H$ I$ IPC$
Found on 2023-06-28 17:45 -
Severity: high
Fingerprint: 22420ce026fa767d3962741c23bfd32f75afa13eb25d195ee3de8da0b6ff3b44Found open SMB shares with Guest login ADMIN$ C$ D$ foto ftproot IPC$
Found on 2023-05-25 15:25
-
-
Open service 36.64.163.161:445
2024-09-15 23:52
SMB NTLMSSP handshake results: Found Windows 10.0 build 19041 NbComputerName: DESKTOP-J9EGMEP NbDomainName: DESKTOP-J9EGMEP DNSComputerName: DESKTOP-J9EGMEP DNSDomainName: DESKTOP-J9EGMEP
Found 2024-09-15 by SmbPluginCreate report
-
Open service 36.64.163.161:445
2024-09-13 23:40
SMB NTLMSSP handshake results: Found Windows 10.0 build 19041 NbComputerName: DESKTOP-J9EGMEP NbDomainName: DESKTOP-J9EGMEP DNSComputerName: DESKTOP-J9EGMEP DNSDomainName: DESKTOP-J9EGMEP
Found 2024-09-13 by SmbPluginCreate report
-
Open service 36.64.163.161:445
2024-09-12 06:06
SMB NTLMSSP handshake results: Found Windows 10.0 build 19041 NbComputerName: DESKTOP-J9EGMEP NbDomainName: DESKTOP-J9EGMEP DNSComputerName: DESKTOP-J9EGMEP DNSDomainName: DESKTOP-J9EGMEP
Found 2024-09-12 by SmbPluginCreate report
-
Open service 36.64.163.161:21
2024-09-12 04:27
220-FileZilla Server version 0.9.39 beta 220-written by Tim Kosse (Tim.Kosse@gmx.de) 220 Please visit http://sourceforge.net/projects/filezilla/ 500 Syntax error, command unrecognized. 500 Syntax error, command unrecognized. 500 Syntax error, command unrecognized. 214-The following commands are recognized: USER PASS QUIT CWD PWD PORT PASV TYPE LIST REST CDUP RETR STOR SIZE DELE RMD MKD RNFR RNTO ABOR SYST NOOP APPE NLST MDTM XPWD XCUP XMKD XRMD NOP EPSV EPRT AUTH ADAT PBSZ PROT FEAT MODE OPTS HELP ALLO MLST MLSD SITE P@SW STRU CLNT MFMT HASH 214 Have a nice day. 500 Syntax error, command unrecognized. 500 Syntax error, command unrecognized.
Found 2024-09-12 by FtpPluginCreate report
-
Open service 36.64.163.161:445
2024-09-11 21:06
SMB NTLMSSP handshake results: Found Windows 10.0 build 19041 NbComputerName: DESKTOP-J9EGMEP NbDomainName: DESKTOP-J9EGMEP DNSComputerName: DESKTOP-J9EGMEP DNSDomainName: DESKTOP-J9EGMEP
Found 2024-09-11 by SmbPluginCreate report
-
Open service 36.64.163.161:80
2024-09-11 09:48
HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Wed, 10 Feb 2021 11:31:29 GMT Accept-Ranges: bytes ETag: "1e152e46a0ffd61:0" Server: Microsoft-IIS/10.0 Date: Wed, 11 Sep 2024 09:48:08 GMT Connection: close Content-Length: 696 Page title: IIS Windows <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> <title>IIS Windows</title> <style type="text/css"> <!-- body { color:#000000; background-color:#0072C6; margin:0; } #container { margin-left:auto; margin-right:auto; text-align:center; } a img { border:none; } --> </style> </head> <body> <div id="container"> <a href="http://go.microsoft.com/fwlink/?linkid=66138&clcid=0x409"><img src="iisstart.png" alt="IIS" width="960" height="600" /></a> </div> </body> </html>Found 2024-09-11 by HttpPluginCreate report
-
Open service 36.64.163.161:445
2024-09-09 20:14
SMB NTLMSSP handshake results: Found Windows 10.0 build 19041 NbComputerName: DESKTOP-J9EGMEP NbDomainName: DESKTOP-J9EGMEP DNSComputerName: DESKTOP-J9EGMEP DNSDomainName: DESKTOP-J9EGMEP
Found 2024-09-09 by SmbPluginCreate report
-
Open service 36.64.163.161:445
2024-09-07 20:15
SMB NTLMSSP handshake results: Found Windows 10.0 build 19041 NbComputerName: DESKTOP-J9EGMEP NbDomainName: DESKTOP-J9EGMEP DNSComputerName: DESKTOP-J9EGMEP DNSDomainName: DESKTOP-J9EGMEP
Found 2024-09-07 by SmbPluginCreate report
-
Open service 36.64.163.161:445
2024-08-17 22:23
SMB NTLMSSP handshake results: Found Windows 10.0 build 19041 NbComputerName: DESKTOP-J9EGMEP NbDomainName: DESKTOP-J9EGMEP DNSComputerName: DESKTOP-J9EGMEP DNSDomainName: DESKTOP-J9EGMEP
Found 2024-08-17 by SmbPluginCreate report
-
Open service 36.64.163.161:445
2024-08-15 19:57
SMB NTLMSSP handshake results: Found Windows 10.0 build 19041 NbComputerName: DESKTOP-J9EGMEP NbDomainName: DESKTOP-J9EGMEP DNSComputerName: DESKTOP-J9EGMEP DNSDomainName: DESKTOP-J9EGMEP
Found 2024-08-15 by SmbPluginCreate report
-
Open service 36.64.163.161:445
2024-08-13 20:41
SMB NTLMSSP handshake results: Found Windows 10.0 build 19041 NbComputerName: DESKTOP-J9EGMEP NbDomainName: DESKTOP-J9EGMEP DNSComputerName: DESKTOP-J9EGMEP DNSDomainName: DESKTOP-J9EGMEP
Found 2024-08-13 by SmbPluginCreate report
-
Open service 36.64.163.161:445
2024-08-11 22:42
SMB NTLMSSP handshake results: Found Windows 10.0 build 19041 NbComputerName: DESKTOP-J9EGMEP NbDomainName: DESKTOP-J9EGMEP DNSComputerName: DESKTOP-J9EGMEP DNSDomainName: DESKTOP-J9EGMEP
Found 2024-08-11 by SmbPluginCreate report
-
Open service 36.64.163.161:445
2024-08-09 20:04
SMB NTLMSSP handshake results: Found Windows 10.0 build 19041 NbComputerName: DESKTOP-J9EGMEP NbDomainName: DESKTOP-J9EGMEP DNSComputerName: DESKTOP-J9EGMEP DNSDomainName: DESKTOP-J9EGMEP
Found 2024-08-09 by SmbPluginCreate report
-
Open service 36.64.163.161:445
2024-08-07 22:50
SMB NTLMSSP handshake results: Found Windows 10.0 build 19041 NbComputerName: DESKTOP-J9EGMEP NbDomainName: DESKTOP-J9EGMEP DNSComputerName: DESKTOP-J9EGMEP DNSDomainName: DESKTOP-J9EGMEP
Found 2024-08-07 by SmbPluginCreate report