Host 46.105.73.148
France
-
Server accepting anonymous credentials
The server is accepting NTLM anonymous credentials.
This allows for authentication bypass to access the underlying application.
https://blog.leakix.net/2022/03/bypassing-ntlm-auth-over-http/
First seen 2024-02-16 02:12
Last seen 2024-02-19 10:07
Open for 3 days-
Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c655c5c9cc3f5bbcbbb9dddbab2976d81
Server didn't refuse ANONYMOUS NTLM connection Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-DIRLQAL7FPO MsvAvNbDomainName: 3D9Q MsvAvDNSComputerName: WIN-DIRLQAL7FPO.3D9Q.LOCAL MsvAvDNSDomainName: 3D9Q.LOCAL MsvAvDNSTreeName: 3D9Q.LOCAL 200 OK Content-Length: 88 Content-Type: text/html Date: Fri, 16 Feb 2024 18:53:39 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///46.105.73.148/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Found on 2024-02-19 10:07 -
Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c655c5c9cf9e510483856b78e96a7e8a9
Server didn't refuse ANONYMOUS NTLM connection Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-SDZQ1SWDOK3 MsvAvNbDomainName: XF8H MsvAvDNSComputerName: WIN-SDZQ1SWDOK3.XF8H.LOCAL MsvAvDNSDomainName: XF8H.LOCAL MsvAvDNSTreeName: XF8H.LOCAL 200 OK Content-Length: 88 Content-Type: text/html Date: Fri, 16 Feb 2024 01:57:24 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///46.105.73.148/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Found on 2024-02-16 02:12
-
-
Server accepting anonymous credentials
The server is accepting NTLM anonymous credentials.
This allows for authentication bypass to access the underlying application.
https://blog.leakix.net/2022/03/bypassing-ntlm-auth-over-http/
First seen 2024-02-18 00:57-
Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c655c5c9cc3f5bbcbbb9dddbab2976d81
Server didn't refuse ANONYMOUS NTLM connection Found NTLM information: Running Windows 5.2 build 3790 MsvAvNbComputerName: WIN-DIRLQAL7FPO MsvAvNbDomainName: 3D9Q MsvAvDNSComputerName: WIN-DIRLQAL7FPO.3D9Q.LOCAL MsvAvDNSDomainName: 3D9Q.LOCAL MsvAvDNSTreeName: 3D9Q.LOCAL 200 OK Content-Length: 88 Content-Type: text/html Date: Fri, 16 Feb 2024 18:53:39 GMT Server: Microsoft-IIS/7.5 Www-Authenticate: NTLM <img src='file://///46.105.73.148/pictures/logo.jpg' alt='Loading' height='1' width='1'>
Found on 2024-02-18 00:57
-