LeakIX - Host 37.97.222.139

Host 37.97.222.139

The Netherlands

Signet B.V.

Ubuntu

Software information

nginx nginx 1.10.3

tcp/443 tcp/80

Open SMB file sharing detected

Malicious users exploiting this vulnerability may be able to read and/or write information to shared directories.

This may also include IPC services and lead to remote code execution.

IP: 37.97.222.139
Port: 445

First seen 2022-06-13 20:37
Last seen 2026-01-08 16:32
Open for 1304 days
- Severity: high
  Fingerprint: 22420ce026fa767de22ea8c3df372350d4001392d4001392d4001392d4001392
```
Found open SMB shares with NT AUTHORITY/ANONYMOUS LOGON
print$
IPC$
```
  Found on 2026-01-08 16:32
Create report

Open service 37.97.222.139:445

2026-01-08 16:32
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2026-01-08 by SmbPlugin
Create report

Open service 37.97.222.139:443 · secure.marshallsecurity.nl

2026-01-08 08:52

HTTP/1.1 200 OK
Server: nginx/1.10.3 (Ubuntu)
Date: Thu, 08 Jan 2026 08:52:37 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 9777
Connection: close
Vary: Accept-Encoding
Set-Cookie: website_lang=nl_NL; Path=/
Set-Cookie: website_lang=nl_NL; Path=/
Set-Cookie: session_id=f6b2994872822a7fcba90281a8b4b0ac39c439d7; Expires=Wed, 08-Apr-2026 08:52:37 GMT; Max-Age=7776000; Path=/



  
    <!DOCTYPE html>
        <html lang="nl-NL" data-oe-company-name="Marshall Security Services B.V.">
            <head>
                <meta charset="utf-8"/>
                <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/>
                <meta name="viewport" content="width=device-width, initial-scale=1"/>

                <title></title>
                
                    <link rel="shortcut icon" type="image/x-icon" href="/rainbow_community_theme/static/src/img/favicon.ico"/>
                
            <script type="text/javascript">
                    var odoo = {
                        csrf_token: "401580d08f82965b4891af1f52d422621a92cd5do",
                    };
                </script>

                
            <meta name="description"/>
            <meta name="keywords"/>
            <meta name="generator" content="Odoo"/>

            <meta property="og:title" content="Homepage"/>
            <meta property="og:site_name" content="Marshall Security Services B.V."/>
            

            
            
                
                    <link rel="alternate" hreflang="nl" href="http://secure.marshallsecurity.nl/page/homepage"/>
                
            

            <script type="text/javascript">
                odoo.session_info = {
                    is_superuser: false,
                    is_frontend: true,
                };
            </script>

            
            <link href="/web/content/20678-de7292a/web.assets_common.0.css" rel="stylesheet"/>
            
            <link href="/web/content/23128-cc4b2d7/web.assets_frontend.0.css" rel="stylesheet"/>
            <link href="/web/content/23129-cc4b2d7/web.assets_frontend.1.css" rel="stylesheet"/>
            <link href="/web/content/23130-cc4b2d7/web.assets_frontend.2.css" rel="stylesheet"/>
            <link href="/web/content/23131-cc4b2d7/web.assets_frontend.3.css" rel="stylesheet"/>
            
            
            

            
            <script  type="text/javascript" src="/web/content/20681-de7292a/web.assets_common.js"></script>
            
            <script  type="text/javascript" src="/web/content/23132-cc4b2d7/web.assets_frontend.js"></script>
            
            
            
        
            </head>
            <body>
                
        
        
        
            
                
            
            
                
            
        
        
        
        

        
        <div id="wrapwrap" class="homepage">
            <header>
                <div class="navbar navbar-default navbar-static-top">
                    <div class="container">
                        <div class="navbar-header">
                            <button type="button" class="navbar-toggle" data-toggle="collapse" data-target=".navbar-top-collapse">
                                <span class="sr-only">Navigate aan/uit</span>
<span class="icon-bar"></span>
<span class="icon-bar"></span>
<span class="icon-bar"></span>
                            </button>
                            <a href="/" class="navbar-brand logo">
            <img src="/logo.png" alt="Logo of Marshall Security Services B.V." title="Marshall Security Services B.V."/>
        </a>
    </div>
                        <div class="collapse navbar-collapse navbar-top-collapse">
                            <ul class="nav navbar-nav navbar-right" id="top_menu">
                                
                                    
    <li class="active">
        <a href="/">
            <span>Home</span>
        </a>
    </li>
    

                                
                                    
    <li>
        <a href="/jobs">
            <span>Functies</span>
        </a>
    </li>
    

                                
                                    
    <li>
        <a href="/page/contactus">
            <span>Neem contact op</span>
        </a>
    </li>
    

                                
                                
                                
                            <li class

Found 2026-01-08 by HttpPlugin

Create report

Open service 37.97.222.139:80 · secure.marshallsecurity.nl

2026-01-08 08:52

HTTP/1.1 301 Moved Permanently
Server: nginx/1.10.3 (Ubuntu)
Date: Thu, 08 Jan 2026 08:52:36 GMT
Content-Type: text/html
Content-Length: 194
Connection: close
Location: https://secure.marshallsecurity.nl/

Page title: 301 Moved Permanently

<html>
<head><title>301 Moved Permanently</title></head>
<body bgcolor="white">
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx/1.10.3 (Ubuntu)</center>
</body>
</html>

Found 2026-01-08 by HttpPlugin

Create report

Open service 37.97.222.139:445

2026-01-01 15:24
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2026-01-01 by SmbPlugin
Create report
Open service 37.97.222.139:445

2025-12-29 23:10
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2025-12-29 by SmbPlugin
Create report
Open service 37.97.222.139:445

2025-12-24 01:31
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2025-12-24 by SmbPlugin
Create report
Open service 37.97.222.139:445

2025-12-22 00:08
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2025-12-22 by SmbPlugin
Create report
Open service 37.97.222.139:445

2025-12-20 02:41
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2025-12-20 by SmbPlugin
Create report

secure.marshallsecurity.nl

Fingerprint:

40547ae83abb5ccd30214b221fbc395101083c8cc985e18f85549cffa70a83cb

CN:

secure.marshallsecurity.nl

Key:

RSA-2048

Issuer:

R13

Not before:

2026-01-08 07:53

Not after:

2026-04-08 07:53

Domain summary

secure.marshallsecurity.nl 1

1 recorded

Host 37.97.222.139

The Netherlands

Software information

Open SMB file sharing detected

secure.marshallsecurity.nl

Domain summary