LeakIX - Host 46.55.216.28

Host 46.55.216.28

Bulgaria

Cifrova Kabelna Korporacia EOOD

Debian

Software information

Apache Apache 2.4.61

tcp/443 tcp/80

Open SMB file sharing detected

Malicious users exploiting this vulnerability may be able to read and/or write information to shared directories.

This may also include IPC services and lead to remote code execution.

IP: 46.55.216.28
Port: 445

First seen 2023-04-11 07:28
Last seen 2024-09-19 23:43
Open for 527 days
- Severity: high
  Fingerprint: 22420ce026fa767de22ea8c3df372350d40013926ab4f6dae8d81bb75ade8f93
```
Found open SMB shares with NT AUTHORITY/ANONYMOUS LOGON
print$
IPC$
Стокови
Документи
Технологични карти
nobody
```
  Found on 2024-09-19 23:43
- Severity: high
  Fingerprint: 22420ce026fa767de22ea8c3df372350d4001392c3a7f027c3a7f027c3a7f027
```
Found open SMB shares with NT AUTHORITY/ANONYMOUS LOGON
print$
IPC$
img
```
  Found on 2023-04-11 07:28
Create report
SSH is potenitally vulnerable

WARNING: This plugin will generate false positive and is purely informative:

regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)

IP: 46.55.216.28
Port: 22

First seen 2024-07-03 16:45
Last seen 2024-08-13 21:22
Open for 41 days
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb563aa8aacd8f3bb51d8f3bb51d8f3bb51d8f3bb51
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_9.2p1 Debian-2+deb12u2
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2024-08-13 21:22
Create report

Open service 46.55.216.28:445

2024-09-15 23:52
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-09-15 by SmbPlugin
Create report
Open service 46.55.216.28:22

2024-09-15 21:18
Found 2024-09-15 by SSHOpenPlugin
Create report
Open service 46.55.216.28:445

2024-09-13 23:37
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-09-13 by SmbPlugin
Create report
Open service 46.55.216.28:22

2024-09-13 21:07
Found 2024-09-13 by SSHOpenPlugin
Create report

Open service 46.55.216.28:443

2024-09-12 05:46

HTTP/1.1 200 OK
Date: Thu, 12 Sep 2024 05:46:55 GMT
Server: Apache/2.4.61 (Debian)
Set-Cookie: DOLSESSID_088706bc7add520007f95e914a760dd8d99c0a82=qmdsvqsvq1a9abo0qpbufu4kk7; path=/; secure; HttpOnly; SameSite=Lax
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: Public, must-revalidate
Pragma: no-cache
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Referrer-Policy: strict-origin
Vary: Accept-Encoding
Content-Length: 6582
Connection: close
Content-Type: text/html; charset=UTF-8

Page title: Потребителско име @ 19.0.1

<!doctype html>
<html lang="bg">
<head>
<meta charset="utf-8">
<meta name="robots" content="noindex,follow">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<meta name="author" content="Dolibarr Development Team">
<meta name="anti-csrf-newtoken" content="38bd84cd0f6838ea94d642b6fad628e6">
<meta name="anti-csrf-currenttoken" content="">
<link rel="shortcut icon" type="image/x-icon" href="/theme/dolibarr_256x256_color.png"/>
<link rel="manifest" href="/theme/eldy/manifest.json.php" />
<title>Потребителско име @ 19.0.1</title>
<!-- Includes CSS for JQuery (Ajax library) -->
<link rel="stylesheet" type="text/css" href="/includes/jquery/css/base/jquery-ui.css?layout=phone&amp;version=19.0.1">
<link rel="stylesheet" type="text/css" href="/includes/jquery/plugins/jnotify/jquery.jnotify-alt.min.css?layout=phone&amp;version=19.0.1">
<link rel="stylesheet" type="text/css" href="/includes/jquery/plugins/select2/dist/css/select2.css?layout=phone&amp;version=19.0.1">
<!-- Includes CSS for font awesome -->
<link rel="stylesheet" type="text/css" href="/theme/common/fontawesome-5/css/all.min.css?layout=phone&amp;version=19.0.1">
<!-- Includes CSS for Dolibarr theme -->
<link rel="stylesheet" type="text/css" href="/theme/eldy/style.css.php?lang=bg_BG&amp;theme=eldy&amp;entity=1&amp;layout=phone&amp;version=19.0.1&amp;revision=30">
<!-- Includes JS for JQuery -->
<script nonce="6acf9fb8" src="/includes/jquery/js/jquery.min.js?layout=phone&amp;version=19.0.1"></script>
<script nonce="6acf9fb8" src="/includes/jquery/js/jquery-ui.min.js?layout=phone&amp;version=19.0.1"></script>
<script nonce="6acf9fb8" src="/includes/jquery/plugins/jnotify/jquery.jnotify.min.js?layout=phone&amp;version=19.0.1"></script>
<script nonce="6acf9fb8" src="/includes/jquery/plugins/select2/dist/js/select2.full.min.js?layout=phone&amp;version=19.0.1"></script>
<script nonce="6acf9fb8" src="/includes/jquery/plugins/multiselect/jquery.multi-select.js?layout=phone&amp;version=19.0.1"></script>
<!-- Includes JS of Dolibarr -->
<script nonce="6acf9fb8" src="/core/js/lib_head.js.php?lang=bg_BG&amp;layout=phone&amp;version=19.0.1"></script>
<!-- Includes JS added by page -->
<script nonce="6acf9fb8" src="/includes/jstz/jstz.min.js?lang=bg_BG"></script>
<script nonce="6acf9fb8" src="/core/js/dst.js?lang=bg_BG"></script>
</head>

<!-- BEGIN PHP TEMPLATE LOGIN.TPL.PHP -->
	<body class="body bodylogin">
	
<script>
$(document).ready(function () {
	/* Set focus on correct field */
	$('#username').focus(); 		// Warning to use this only on visible element
});
</script>

<div class="login_center center" style="background-size: cover; background-position: center center; background-attachment: fixed; background-repeat: no-repeat; background: linear-gradient(0deg, rgb(240,240,240) 52%, rgb(60,70,100) 52.1%);">
<div class="login_vertical_align">


<form id="login" name="login" method="post" action="/index.php?mainmenu=home">

<input type="hidden" name="token" value="38bd84cd0f6838ea94d642b6fad628e6" />
<input type="hidden" name="actionlogin" value="login">
<input type="hidden" name="loginfunction" value="loginfunction" />
<input type="hidden" name="backtopage" value="" />
<!-- Add fields to store and send local user information. This fields are filled by the core/js/dst.js -->
<input type="hidden" name="tz" id="tz" value="" />
<input type="hidden" name="tz_string" id="tz_string" value="" />
<input type="hidden" name="dst_observed" id="dst_observed" value="" />
<input type="hidden" name="dst_first" id="dst_first" value="" />
<input type="hidden" name="dst_second" id="dst_second" value="" />
<input type="hidden" name="screenwidth" id="screenwidth" value="" />
<input type="hidden" name="screenheight" id="screenheight" value="" />
<input type="hidden" name="dol_hide_topmenu" id="dol_hide_topmenu" value="" />
<input type="hidden" name="dol_hide_leftmenu" id="dol_hide_leftmenu" value="" />
<input type="hidden" name="dol_optimize_smallscreen" id="dol_optimize_smallscreen" value="" />
<input type="hidden" name="dol_no_mouse_hover" id="dol_no_mouse_hover"

Found 2024-09-12 by HttpPlugin

Create report

Open service 46.55.216.28:445

2024-09-12 04:04
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-09-12 by SmbPlugin
Create report
Open service 46.55.216.28:22

2024-09-11 21:52
Found 2024-09-11 by SSHOpenPlugin
Create report
Open service 46.55.216.28:22

2024-09-11 04:23
Found 2024-09-11 by SSHOpenPlugin
Create report

Open service 46.55.216.28:80

2024-09-10 17:52

HTTP/1.1 200 OK
Date: Tue, 10 Sep 2024 17:52:33 GMT
Server: Apache/2.4.61 (Debian)
Last-Modified: Thu, 21 Dec 2023 07:20:49 GMT
ETag: "29cd-60cfff0644660"
Accept-Ranges: bytes
Content-Length: 10701
Vary: Accept-Encoding
Connection: close
Content-Type: text/html

Page title: Apache2 Debian Default Page: It works


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
    <title>Apache2 Debian Default Page: It works</title>
    <style type="text/css" media="screen">
  * {
    margin: 0px 0px 0px 0px;
    padding: 0px 0px 0px 0px;
  }

  body, html {
    padding: 3px 3px 3px 3px;

    background-color: #D8DBE2;

    font-family: Verdana, sans-serif;
    font-size: 11pt;
    text-align: center;
  }

  div.main_page {
    position: relative;
    display: table;

    width: 800px;

    margin-bottom: 3px;
    margin-left: auto;
    margin-right: auto;
    padding: 0px 0px 0px 0px;

    border-width: 2px;
    border-color: #212738;
    border-style: solid;

    background-color: #FFFFFF;

    text-align: center;
  }

  div.page_header {
    height: 99px;
    width: 100%;

    background-color: #F5F6F7;
  }

  div.page_header span {
    margin: 15px 0px 0px 50px;

    font-size: 180%;
    font-weight: bold;
  }

  div.page_header img {
    margin: 3px 0px 0px 40px;

    border: 0px 0px 0px;
  }

  div.table_of_contents {
    clear: left;

    min-width: 200px;

    margin: 3px 3px 3px 3px;

    background-color: #FFFFFF;

    text-align: left;
  }

  div.table_of_contents_item {
    clear: left;

    width: 100%;

    margin: 4px 0px 0px 0px;

    background-color: #FFFFFF;

    color: #000000;
    text-align: left;
  }

  div.table_of_contents_item a {
    margin: 6px 0px 0px 6px;
  }

  div.content_section {
    margin: 3px 3px 3px 3px;

    background-color: #FFFFFF;

    text-align: left;
  }

  div.content_section_text {
    padding: 4px 8px 4px 8px;

    color: #000000;
    font-size: 100%;
  }

  div.content_section_text pre {
    margin: 8px 0px 8px 0px;
    padding: 8px 8px 8px 8px;

    border-width: 1px;
    border-style: dotted;
    border-color: #000000;

    background-color: #F5F6F7;

    font-style: italic;
  }

  div.content_section_text p {
    margin-bottom: 6px;
  }

  div.content_section_text ul, div.content_section_text li {
    padding: 4px 8px 4px 16px;
  }

  div.section_header {
    padding: 3px 6px 3px 6px;

    background-color: #8E9CB2;

    color: #FFFFFF;
    font-weight: bold;
    font-size: 112%;
    text-align: center;
  }

  div.section_header_red {
    background-color: #CD214F;
  }

  div.section_header_grey {
    background-color: #9F9386;
  }

  .floating_element {
    position: relative;
    float: left;
  }

  div.table_of_contents_item a,
  div.content_section_text a {
    text-decoration: none;
    font-weight: bold;
  }

  div.table_of_contents_item a:link,
  div.table_of_contents_item a:visited,
  div.table_of_contents_item a:active {
    color: #000000;
  }

  div.table_of_contents_item a:hover {
    background-color: #000000;

    color: #FFFFFF;
  }

  div.content_section_text a:link,
  div.content_section_text a:visited,
   div.content_section_text a:active {
    background-color: #DCDFE6;

    color: #000000;
  }

  div.content_section_text a:hover {
    background-color: #000000;

    color: #DCDFE6;
  }

  div.validator {
  }
    </style>
  </head>
  <body>
    <div class="main_page">
      <div class="page_header floating_element">
        <img src="/icons/openlogo-75.png" alt="Debian Logo" class="floating_element"/>
        <span class="floating_element">
          Apache2 Debian Default Page
        </span>
      </div>
<!--      <div class="table_of_contents floating_element">
        <div class="section_header section_header_grey">
          TABLE OF CONTENTS
        </div>
        <div class="table_of_contents_item floating_element">
          <a href="#about">About</a>
        </div>
        <div class="table_of_contents_item floating_element">
          <a href="#changes">Changes</a>
        </div>
        <div class="table_of_contents_item floating_element">
          <a href="#scope">Scope</a>
        </div>
        <div class="table_of_contents_item floating_element">
          <a hr

Found 2024-09-10 by HttpPlugin

Create report

Open service 46.55.216.28:22

2024-09-09 21:17
Found 2024-09-09 by SSHOpenPlugin
Create report
Open service 46.55.216.28:22

2024-09-07 21:13
Found 2024-09-07 by SSHOpenPlugin
Create report
Open service 46.55.216.28:22

2024-08-17 21:15
Found 2024-08-17 by SSHOpenPlugin
Create report
Open service 46.55.216.28:22

2024-08-15 21:19
Found 2024-08-15 by SSHOpenPlugin
Create report
Open service 46.55.216.28:22

2024-08-13 21:22
Found 2024-08-13 by SSHOpenPlugin
Create report
Open service 46.55.216.28:22

2024-08-11 20:47
Found 2024-08-11 by SSHOpenPlugin
Create report
Open service 46.55.216.28:22

2024-08-09 20:06
Found 2024-08-09 by SSHOpenPlugin
Create report
Open service 46.55.216.28:22

2024-08-07 22:43
Found 2024-08-07 by SSHOpenPlugin
Create report

erp.ranex.bg

Fingerprint:

72f754ad931799cf2ea523483b537f62771460fcb3f2c1fae5ae8ef71650fd1b

CN:

erp.ranex.bg

Key:

ECDSA-256

Issuer:

Not before:

2024-08-23 00:15

Not after:

2024-11-21 00:15

Domain summary

No record

Host 46.55.216.28

Bulgaria

Software information

Open SMB file sharing detected

SSH is potenitally vulnerable

erp.ranex.bg

Domain summary