LeakIX - Host 72.55.172.46

Host 72.55.172.46

Canada

IWEB-AS

Software information

Microsoft-IIS 10.0

tcp/443 tcp/80

Open SMB file sharing detected

Malicious users exploiting this vulnerability may be able to read and/or write information to shared directories.

This may also include IPC services and lead to remote code execution.

IP: 72.55.172.46
Port: 445

First seen 2022-06-13 20:22
Last seen 2024-06-15 20:39
Open for 733 days
- Severity: high
  Fingerprint: 22420ce026fa767d3962741c23bfd32f75afa13ebf23ba0cbf23ba0cbf23ba0c
```
Found open SMB shares with Guest login
ADMIN$
C$
IPC$
```
  Found on 2024-06-15 20:39
Create report

Open service 72.55.172.46:445

2024-06-15 20:39

SMB NTLMSSP handshake results:
Found Windows 10.0 build 14393
NbComputerName: CL-T100-147CN
NbDomainName: CL-T100-147CN
DNSComputerName: cl-t100-147cn
DNSDomainName: cl-t100-147cn

Found 20 minutes ago by SmbPlugin

Create report

Open service 72.55.172.46:80

2024-06-14 06:08

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://72.55.172.46/
Server: Microsoft-IIS/10.0
X-FRAME-OPTIONS: SAMEORIGIN
X-Powered-By: ASP.NET
Date: Fri, 14 Jun 2024 06:08:01 GMT
Connection: close
Content-Length: 144

Page title: Document Moved

<head><title>Document Moved</title></head>
<body><h1>Object Moved</h1>This document may be found <a HREF="https://72.55.172.46/">here</a></body>

Found 2 days ago by HttpPlugin

Create report

Open service 72.55.172.46:443

2024-06-14 05:05

HTTP/1.1 301 Moved Permanently
Location: https://www.cottagesincanada.com/
Server: Microsoft-IIS/10.0
X-FRAME-OPTIONS: SAMEORIGIN
X-Powered-By: ASP.NET
Date: Fri, 14 Jun 2024 05:05:43 GMT
Connection: close
Content-Length: 0

Found 2 days ago by HttpPlugin

Create report

Open service 72.55.172.46:445

2024-06-11 21:01

SMB NTLMSSP handshake results:
Found Windows 10.0 build 14393
NbComputerName: CL-T100-147CN
NbDomainName: CL-T100-147CN
DNSComputerName: cl-t100-147cn
DNSDomainName: cl-t100-147cn

Found 2024-06-11 by SmbPlugin

Create report

Open service 72.55.172.46:445

2024-06-09 21:18

SMB NTLMSSP handshake results:
Found Windows 10.0 build 14393
NbComputerName: CL-T100-147CN
NbDomainName: CL-T100-147CN
DNSComputerName: cl-t100-147cn
DNSDomainName: cl-t100-147cn

Found 2024-06-09 by SmbPlugin

Create report

Open service 72.55.172.46:445

2024-06-07 22:16

SMB NTLMSSP handshake results:
Found Windows 10.0 build 14393
NbComputerName: CL-T100-147CN
NbDomainName: CL-T100-147CN
DNSComputerName: cl-t100-147cn
DNSDomainName: cl-t100-147cn

Found 2024-06-07 by SmbPlugin

Create report

Open service 72.55.172.46:445

2024-06-05 22:03

SMB NTLMSSP handshake results:
Found Windows 10.0 build 14393
NbComputerName: CL-T100-147CN
NbDomainName: CL-T100-147CN
DNSComputerName: cl-t100-147cn
DNSDomainName: cl-t100-147cn

Found 2024-06-05 by SmbPlugin

Create report

Open service 72.55.172.46:445

2024-06-03 21:56

SMB NTLMSSP handshake results:
Found Windows 10.0 build 14393
NbComputerName: CL-T100-147CN
NbDomainName: CL-T100-147CN
DNSComputerName: cl-t100-147cn
DNSDomainName: cl-t100-147cn

Found 2024-06-03 by SmbPlugin

Create report

Open service 72.55.172.46:445

2024-06-01 21:31

SMB NTLMSSP handshake results:
Found Windows 10.0 build 14393
NbComputerName: CL-T100-147CN
NbDomainName: CL-T100-147CN
DNSComputerName: cl-t100-147cn
DNSDomainName: cl-t100-147cn

Found 2024-06-01 by SmbPlugin

Create report

Open service 72.55.172.46:445

2024-05-31 20:40

SMB NTLMSSP handshake results:
Found Windows 10.0 build 14393
NbComputerName: CL-T100-147CN
NbDomainName: CL-T100-147CN
DNSComputerName: cl-t100-147cn
DNSDomainName: cl-t100-147cn

Found 2024-05-31 by SmbPlugin

Create report

Open service 72.55.172.46:80

2024-05-31 00:12

HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://72.55.172.46/
Server: Microsoft-IIS/10.0
X-FRAME-OPTIONS: SAMEORIGIN
X-Powered-By: ASP.NET
Date: Fri, 31 May 2024 00:12:12 GMT
Connection: close
Content-Length: 144

Page title: Document Moved

<head><title>Document Moved</title></head>
<body><h1>Object Moved</h1>This document may be found <a HREF="https://72.55.172.46/">here</a></body>

Found 2024-05-31 by HttpPlugin

Create report

Open service 72.55.172.46:443

2024-05-30 13:09

HTTP/1.1 301 Moved Permanently
Location: https://www.cottagesincanada.com/
Server: Microsoft-IIS/10.0
X-FRAME-OPTIONS: SAMEORIGIN
X-Powered-By: ASP.NET
Date: Thu, 30 May 2024 13:09:13 GMT
Connection: close
Content-Length: 0

Found 2024-05-30 by HttpPlugin

Create report

Open service 72.55.172.46:445

2024-05-29 20:10

SMB NTLMSSP handshake results:
Found Windows 10.0 build 14393
NbComputerName: CL-T100-147CN
NbDomainName: CL-T100-147CN
DNSComputerName: cl-t100-147cn
DNSDomainName: cl-t100-147cn

Found 2024-05-29 by SmbPlugin

Create report

Open service 72.55.172.46:445

2024-05-28 23:38

SMB NTLMSSP handshake results:
Found Windows 10.0 build 14393
NbComputerName: CL-T100-147CN
NbDomainName: CL-T100-147CN
DNSComputerName: cl-t100-147cn
DNSDomainName: cl-t100-147cn

Found 2024-05-28 by SmbPlugin

Create report

Open service 72.55.172.46:443

2024-05-28 06:55

HTTP/1.1 301 Moved Permanently
Location: https://www.cottagesincanada.com/
Server: Microsoft-IIS/10.0
X-FRAME-OPTIONS: SAMEORIGIN
X-Powered-By: ASP.NET
Date: Tue, 28 May 2024 06:55:25 GMT
Connection: close
Content-Length: 0

Found 2024-05-28 by HttpPlugin

Create report

Open service 72.55.172.46:445

2024-05-27 23:57

SMB NTLMSSP handshake results:
Found Windows 10.0 build 14393
NbComputerName: CL-T100-147CN
NbDomainName: CL-T100-147CN
DNSComputerName: cl-t100-147cn
DNSDomainName: cl-t100-147cn

Found 2024-05-27 by SmbPlugin

Create report

Open service 72.55.172.46:445

2024-05-27 21:01

SMB NTLMSSP handshake results:
Found Windows 10.0 build 14393
NbComputerName: CL-T100-147CN
NbDomainName: CL-T100-147CN
DNSComputerName: cl-t100-147cn
DNSDomainName: cl-t100-147cn

Found 2024-05-27 by SmbPlugin

Create report

sbmrpubinternet.comapp.chaletsauquebec.comapp.cottagesincanada.comapp.gitesauquebec.comchaletsauquebec.comcottagesincanada.comgitesauquebec.comnutritionnistefrancineallard.careparationrefrigerateur.comssmgimmobilier.comwww.chaletsauquebec.comwww.cottagesincanada.comwww.gitesauquebec.comwww.nutritionnistefrancineallard.cawww.reparationrefrigerateur.comwww.ssmgimmobilier.com

Fingerprint:

374a568f7b9e369ed244fdda9bddcfd4e13a7069aa51d8638cc689ee635ee8a4

CN:

sbmrpubinternet.com

Key:

RSA-2048

Issuer:

GoGetSSL RSA DV CA

Not before:

2023-10-09 00:00

Not after:

2024-11-08 23:59

Domain summary

No record

Host 72.55.172.46

Canada

Software information

Open SMB file sharing detected

Domain summary