LeakIX - Host 52.32.30.124

Host 52.32.30.124

United States

AMAZON-02

Software information

Microsoft-IIS 10.0

tcp/80

Server accepting anonymous credentials

The server is accepting NTLM anonymous credentials.

This allows for authentication bypass to access the underlying application.

https://blog.leakix.net/2022/03/bypassing-ntlm-auth-over-http/

IP: 52.32.30.124
Port: 80
URL: http://52.32.30.124

First seen 2024-10-29 11:51
Last seen 2024-12-13 21:39
Open for 45 days

Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c98a4427a456bf2746401211501ebfdb0

Server didn't refuse ANONYMOUS NTLM connection
Found NTLM information:
Running Windows 10.0 build 20348
MsvAvNbComputerName: WIN-URO1DX1QKKE
MsvAvNbDomainName: SJGK
MsvAvDNSComputerName: WIN-URO1DX1QKKE.SJGK.LOCAL
MsvAvDNSDomainName: SJGK.LOCAL
MsvAvDNSTreeName: SJGK.LOCAL

200 OK
Content-Length: 0
Content-Type: text/html
Date: Wed, 20 Nov 2024 18:36:51 GMT
Server: Microsoft-IIS/10.0
Www-Authenticate: NTLM

Found on 2024-12-13 21:39

Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c98a4427a3c81a6319e99dec4e2fd4cd0

Server didn't refuse ANONYMOUS NTLM connection
Found NTLM information:
Running Windows 10.0 build 20348
MsvAvNbComputerName: WIN-P5AZPE61V3J
MsvAvNbDomainName: DSVZ
MsvAvDNSComputerName: WIN-P5AZPE61V3J.DSVZ.LOCAL
MsvAvDNSDomainName: DSVZ.LOCAL
MsvAvDNSTreeName: DSVZ.LOCAL

200 OK
Content-Length: 0
Content-Type: text/html
Date: Wed, 09 Oct 2024 12:38:44 GMT
Server: Microsoft-IIS/10.0
Www-Authenticate: NTLM

Found on 2024-11-17 22:46

Create report

Open service 52.32.30.124:80

2024-12-13 21:39

Found NTLM information:
Running Windows 10.0 build 20348
MsvAvNbComputerName: WIN-URO1DX1QKKE
MsvAvNbDomainName: SJGK
MsvAvDNSComputerName: WIN-URO1DX1QKKE.SJGK.LOCAL
MsvAvDNSDomainName: SJGK.LOCAL
MsvAvDNSTreeName: SJGK.LOCAL

200 OK
Content-Length: 0
Content-Type: text/html
Date: Wed, 20 Nov 2024 18:36:51 GMT
Server: Microsoft-IIS/10.0
Www-Authenticate: NTLM

Found 2024-12-13 by HttpNTLM

Create report

Open service 52.32.30.124:80

2024-12-13 21:39

HTTP/1.1 401 Unauthorized
Content-Type: text/html
Server: Microsoft-IIS/10.0
Date: Wed, 20 Nov 2024 18:36:51 GMT
WWW-Authenticate: Negotiate
WWW-Authenticate: NTLM
Content-Length: 1264

Page title: 401 - Unauthorized: Access is denied due to invalid credentials.

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
<title>401 - Unauthorized: Access is denied due to invalid credentials.</title>
<style type="text/css">
<!--
body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}
fieldset{padding:0 15px 10px 15px;} 
h1{font-size:2.4em;margin:0;color:#FFF;}
h2{font-size:1.7em;margin:0;color:#CC0000;} 
h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} 
#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;
background-color:#555555;}
#content{margin:0 0 0 2%;position:relative;}
.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}
-->
</style>
</head>
<body>
<div id="header"><h1>Server Error</h1></div>
<div id="content">
 <div class="content-container"><fieldset>
  <h2>401 - Unauthorized: Access is denied due to invalid credentials.</h2>
  <h3>You do not have permission to view this directory or page using the credentials that you supplied.</h3>
 </fieldset></div>
</div>
</body>
</html>

Found 2024-12-13 by HttpPlugin

Create report

Open service 52.32.30.124:80

2024-12-11 21:47

HTTP/1.1 401 Unauthorized
Content-Type: text/html
Server: Microsoft-IIS/10.0
Date: Wed, 20 Nov 2024 18:36:51 GMT
WWW-Authenticate: Negotiate
WWW-Authenticate: NTLM
Content-Length: 1264

Page title: 401 - Unauthorized: Access is denied due to invalid credentials.

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
<title>401 - Unauthorized: Access is denied due to invalid credentials.</title>
<style type="text/css">
<!--
body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}
fieldset{padding:0 15px 10px 15px;} 
h1{font-size:2.4em;margin:0;color:#FFF;}
h2{font-size:1.7em;margin:0;color:#CC0000;} 
h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} 
#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;
background-color:#555555;}
#content{margin:0 0 0 2%;position:relative;}
.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}
-->
</style>
</head>
<body>
<div id="header"><h1>Server Error</h1></div>
<div id="content">
 <div class="content-container"><fieldset>
  <h2>401 - Unauthorized: Access is denied due to invalid credentials.</h2>
  <h3>You do not have permission to view this directory or page using the credentials that you supplied.</h3>
 </fieldset></div>
</div>
</body>
</html>

Found 2024-12-11 by HttpPlugin

Create report

Open service 52.32.30.124:80

2024-12-11 21:47

Found NTLM information:
Running Windows 10.0 build 20348
MsvAvNbComputerName: WIN-URO1DX1QKKE
MsvAvNbDomainName: SJGK
MsvAvDNSComputerName: WIN-URO1DX1QKKE.SJGK.LOCAL
MsvAvDNSDomainName: SJGK.LOCAL
MsvAvDNSTreeName: SJGK.LOCAL

200 OK
Content-Length: 0
Content-Type: text/html
Date: Wed, 20 Nov 2024 18:36:51 GMT
Server: Microsoft-IIS/10.0
Www-Authenticate: NTLM

Found 2024-12-11 by HttpNTLM

Create report

Open service 52.32.30.124:80

2024-12-01 23:41

Found NTLM information:
Running Windows 10.0 build 20348
MsvAvNbComputerName: WIN-URO1DX1QKKE
MsvAvNbDomainName: SJGK
MsvAvDNSComputerName: WIN-URO1DX1QKKE.SJGK.LOCAL
MsvAvDNSDomainName: SJGK.LOCAL
MsvAvDNSTreeName: SJGK.LOCAL

200 OK
Content-Length: 0
Content-Type: text/html
Date: Wed, 20 Nov 2024 18:36:51 GMT
Server: Microsoft-IIS/10.0
Www-Authenticate: NTLM

Found 2024-12-01 by HttpNTLM

Create report

Open service 52.32.30.124:80

2024-12-01 23:41

HTTP/1.1 401 Unauthorized
Content-Type: text/html
Server: Microsoft-IIS/10.0
Date: Wed, 20 Nov 2024 18:36:51 GMT
WWW-Authenticate: Negotiate
WWW-Authenticate: NTLM
Content-Length: 1264

Page title: 401 - Unauthorized: Access is denied due to invalid credentials.

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
<title>401 - Unauthorized: Access is denied due to invalid credentials.</title>
<style type="text/css">
<!--
body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}
fieldset{padding:0 15px 10px 15px;} 
h1{font-size:2.4em;margin:0;color:#FFF;}
h2{font-size:1.7em;margin:0;color:#CC0000;} 
h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} 
#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;
background-color:#555555;}
#content{margin:0 0 0 2%;position:relative;}
.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}
-->
</style>
</head>
<body>
<div id="header"><h1>Server Error</h1></div>
<div id="content">
 <div class="content-container"><fieldset>
  <h2>401 - Unauthorized: Access is denied due to invalid credentials.</h2>
  <h3>You do not have permission to view this directory or page using the credentials that you supplied.</h3>
 </fieldset></div>
</div>
</body>
</html>

Found 2024-12-01 by HttpPlugin

Create report

Open service 52.32.30.124:80

2024-11-29 22:04

HTTP/1.1 401 Unauthorized
Content-Type: text/html
Server: Microsoft-IIS/10.0
Date: Wed, 20 Nov 2024 18:36:51 GMT
WWW-Authenticate: Negotiate
WWW-Authenticate: NTLM
Content-Length: 1264

Page title: 401 - Unauthorized: Access is denied due to invalid credentials.

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/>
<title>401 - Unauthorized: Access is denied due to invalid credentials.</title>
<style type="text/css">
<!--
body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}
fieldset{padding:0 15px 10px 15px;} 
h1{font-size:2.4em;margin:0;color:#FFF;}
h2{font-size:1.7em;margin:0;color:#CC0000;} 
h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} 
#header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:"trebuchet MS", Verdana, sans-serif;color:#FFF;
background-color:#555555;}
#content{margin:0 0 0 2%;position:relative;}
.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}
-->
</style>
</head>
<body>
<div id="header"><h1>Server Error</h1></div>
<div id="content">
 <div class="content-container"><fieldset>
  <h2>401 - Unauthorized: Access is denied due to invalid credentials.</h2>
  <h3>You do not have permission to view this directory or page using the credentials that you supplied.</h3>
 </fieldset></div>
</div>
</body>
</html>

Found 2024-11-29 by HttpPlugin

Create report

Open service 52.32.30.124:80

2024-11-29 22:04

Found NTLM information:
Running Windows 10.0 build 20348
MsvAvNbComputerName: WIN-URO1DX1QKKE
MsvAvNbDomainName: SJGK
MsvAvDNSComputerName: WIN-URO1DX1QKKE.SJGK.LOCAL
MsvAvDNSDomainName: SJGK.LOCAL
MsvAvDNSTreeName: SJGK.LOCAL

200 OK
Content-Length: 0
Content-Type: text/html
Date: Wed, 20 Nov 2024 18:36:51 GMT
Server: Microsoft-IIS/10.0
Www-Authenticate: NTLM

Found 2024-11-29 by HttpNTLM

Create report

Domain summary

No record