Microsoft-HTTPAPI 2.0
tcp/443
The server is accepting NTLM anonymous credentials.
This allows for authentication bypass to access the underlying application.
https://blog.leakix.net/2022/03/bypassing-ntlm-auth-over-http/
Fingerprint: 40fea8e6a9bd2c3671ce48dbe86f199c98a4427ac47cf13ac5f5843f4faaa8e8
Server didn't refuse ANONYMOUS NTLM connection Found NTLM information: Running Windows 10.0 build 20348 MsvAvNbComputerName: IZFSL4R17WMAPFZ MsvAvNbDomainName: IZFSL4R17WMAPFZ MsvAvDNSComputerName: iZfsl4r17wmapfZ MsvAvDNSDomainName: iZfsl4r17wmapfZ 200 OK Cache-Control: no-cache,no-store,must-revalidate Content-Length: 692 Content-Type: text/html Date: Tue, 23 Apr 2024 17:23:57 GMT Etag: "1d398fda23e0cb4" Expires: 0 Last-Modified: Mon, 29 Jan 2018 20:35:24 GMT Pragma: no-cache Server: Microsoft-HTTPAPI/2.0 <!DOCTYPE html><html lang="en"><head><base href="/"><meta http-equiv="content-type" content="text/html; charset=UTF-8"><meta http-equiv="cache-control" content="no-cache"/><meta http-equiv="pragma" content="no-cache"/><meta http-equiv="expires" content="0"/><meta charset="utf-8"><title>Microsoft Project "Honolulu"</title><link href="styles.61bf3fd7cdb028f02759.bundle.css" rel="stylesheet"/></head><body><sme-root></sme-root><script type="text/javascript" src="inline.f8eba59e386a52f844ce.bundle.js"></script><script type="text/javascript" src="scripts.426be67476d5a3947566.bundle.js"></script><script type="text/javascript" src="main.bdfc20073b682c35f1a4.bundle.js"></script></body></html>
Open service 8.217.190.238:443
2024-12-21 23:14
HTTP/1.1 401 Unauthorized Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 WWW-Authenticate: Negotiate WWW-Authenticate: NTLM Date: Sat, 21 Dec 2024 23:14:57 GMT Connection: close
Open service 8.217.190.238:443
2024-12-21 23:14
Found NTLM information: Running Windows 10.0 build 20348 MsvAvNbComputerName: IZFSL4R17WMAPFZ MsvAvNbDomainName: IZFSL4R17WMAPFZ MsvAvDNSComputerName: iZfsl4r17wmapfZ MsvAvDNSDomainName: iZfsl4r17wmapfZ 200 OK Cache-Control: no-cache,no-store,must-revalidate Content-Length: 692 Content-Type: text/html Date: Sat, 21 Dec 2024 23:14:58 GMT Etag: "1d398fda23e0cb4" Expires: 0 Last-Modified: Mon, 29 Jan 2018 20:35:24 GMT Pragma: no-cache Server: Microsoft-HTTPAPI/2.0 <!DOCTYPE html><html lang="en"><head><base href="/"><meta http-equiv="content-type" content="text/html; charset=UTF-8"><meta http-equiv="cache-control" content="no-cache"/><meta http-equiv="pragma" content="no-cache"/><meta http-equiv="expires" content="0"/><meta charset="utf-8"><title>Microsoft Project "Honolulu"</title><link href="styles.61bf3fd7cdb028f02759.bundle.css" rel="stylesheet"/></head><body><sme-root></sme-root><script type="text/javascript" src="inline.f8eba59e386a52f844ce.bundle.js"></script><script type="text/javascript" src="scripts.426be67476d5a3947566.bundle.js"></script><script type="text/javascript" src="main.bdfc20073b682c35f1a4.bundle.js"></script></body></html>
Open service 8.217.190.238:443
2024-12-19 23:09
HTTP/1.1 401 Unauthorized Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 WWW-Authenticate: Negotiate WWW-Authenticate: NTLM Date: Thu, 19 Dec 2024 23:10:01 GMT Connection: close
Open service 8.217.190.238:443
2024-12-19 23:09
Found NTLM information: Running Windows 10.0 build 20348 MsvAvNbComputerName: IZFSL4R17WMAPFZ MsvAvNbDomainName: IZFSL4R17WMAPFZ MsvAvDNSComputerName: iZfsl4r17wmapfZ MsvAvDNSDomainName: iZfsl4r17wmapfZ 200 OK Cache-Control: no-cache,no-store,must-revalidate Content-Length: 692 Content-Type: text/html Date: Thu, 19 Dec 2024 23:10:04 GMT Etag: "1d398fda23e0cb4" Expires: 0 Last-Modified: Mon, 29 Jan 2018 20:35:24 GMT Pragma: no-cache Server: Microsoft-HTTPAPI/2.0 <!DOCTYPE html><html lang="en"><head><base href="/"><meta http-equiv="content-type" content="text/html; charset=UTF-8"><meta http-equiv="cache-control" content="no-cache"/><meta http-equiv="pragma" content="no-cache"/><meta http-equiv="expires" content="0"/><meta charset="utf-8"><title>Microsoft Project "Honolulu"</title><link href="styles.61bf3fd7cdb028f02759.bundle.css" rel="stylesheet"/></head><body><sme-root></sme-root><script type="text/javascript" src="inline.f8eba59e386a52f844ce.bundle.js"></script><script type="text/javascript" src="scripts.426be67476d5a3947566.bundle.js"></script><script type="text/javascript" src="main.bdfc20073b682c35f1a4.bundle.js"></script></body></html>
Open service 8.217.190.238:443
2024-12-17 22:41
HTTP/1.1 401 Unauthorized Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 WWW-Authenticate: Negotiate WWW-Authenticate: NTLM Date: Tue, 17 Dec 2024 22:41:50 GMT Connection: close
Open service 8.217.190.238:443
2024-12-17 22:41
Found NTLM information: Running Windows 10.0 build 20348 MsvAvNbComputerName: IZFSL4R17WMAPFZ MsvAvNbDomainName: IZFSL4R17WMAPFZ MsvAvDNSComputerName: iZfsl4r17wmapfZ MsvAvDNSDomainName: iZfsl4r17wmapfZ 200 OK Cache-Control: no-cache,no-store,must-revalidate Content-Length: 692 Content-Type: text/html Date: Tue, 17 Dec 2024 22:41:53 GMT Etag: "1d398fda23e0cb4" Expires: 0 Last-Modified: Mon, 29 Jan 2018 20:35:24 GMT Pragma: no-cache Server: Microsoft-HTTPAPI/2.0 <!DOCTYPE html><html lang="en"><head><base href="/"><meta http-equiv="content-type" content="text/html; charset=UTF-8"><meta http-equiv="cache-control" content="no-cache"/><meta http-equiv="pragma" content="no-cache"/><meta http-equiv="expires" content="0"/><meta charset="utf-8"><title>Microsoft Project "Honolulu"</title><link href="styles.61bf3fd7cdb028f02759.bundle.css" rel="stylesheet"/></head><body><sme-root></sme-root><script type="text/javascript" src="inline.f8eba59e386a52f844ce.bundle.js"></script><script type="text/javascript" src="scripts.426be67476d5a3947566.bundle.js"></script><script type="text/javascript" src="main.bdfc20073b682c35f1a4.bundle.js"></script></body></html>
Open service 8.217.190.238:443
2024-12-15 21:11
HTTP/1.1 401 Unauthorized Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 WWW-Authenticate: Negotiate WWW-Authenticate: NTLM Date: Sun, 15 Dec 2024 21:11:36 GMT Connection: close
Open service 8.217.190.238:443
2024-12-15 21:11
Found NTLM information: Running Windows 10.0 build 20348 MsvAvNbComputerName: IZFSL4R17WMAPFZ MsvAvNbDomainName: IZFSL4R17WMAPFZ MsvAvDNSComputerName: iZfsl4r17wmapfZ MsvAvDNSDomainName: iZfsl4r17wmapfZ 200 OK Cache-Control: no-cache,no-store,must-revalidate Content-Length: 692 Content-Type: text/html Date: Sun, 15 Dec 2024 21:11:39 GMT Etag: "1d398fda23e0cb4" Expires: 0 Last-Modified: Mon, 29 Jan 2018 20:35:24 GMT Pragma: no-cache Server: Microsoft-HTTPAPI/2.0 <!DOCTYPE html><html lang="en"><head><base href="/"><meta http-equiv="content-type" content="text/html; charset=UTF-8"><meta http-equiv="cache-control" content="no-cache"/><meta http-equiv="pragma" content="no-cache"/><meta http-equiv="expires" content="0"/><meta charset="utf-8"><title>Microsoft Project "Honolulu"</title><link href="styles.61bf3fd7cdb028f02759.bundle.css" rel="stylesheet"/></head><body><sme-root></sme-root><script type="text/javascript" src="inline.f8eba59e386a52f844ce.bundle.js"></script><script type="text/javascript" src="scripts.426be67476d5a3947566.bundle.js"></script><script type="text/javascript" src="main.bdfc20073b682c35f1a4.bundle.js"></script></body></html>
Open service 8.217.190.238:443
2024-12-13 21:11
HTTP/1.1 401 Unauthorized Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 WWW-Authenticate: Negotiate WWW-Authenticate: NTLM Date: Fri, 13 Dec 2024 21:11:06 GMT Connection: close
Open service 8.217.190.238:443
2024-12-13 21:11
Found NTLM information: Running Windows 10.0 build 20348 MsvAvNbComputerName: IZFSL4R17WMAPFZ MsvAvNbDomainName: IZFSL4R17WMAPFZ MsvAvDNSComputerName: iZfsl4r17wmapfZ MsvAvDNSDomainName: iZfsl4r17wmapfZ 200 OK Cache-Control: no-cache,no-store,must-revalidate Content-Length: 692 Content-Type: text/html Date: Fri, 13 Dec 2024 21:11:10 GMT Etag: "1d398fda23e0cb4" Expires: 0 Last-Modified: Mon, 29 Jan 2018 20:35:24 GMT Pragma: no-cache Server: Microsoft-HTTPAPI/2.0 <!DOCTYPE html><html lang="en"><head><base href="/"><meta http-equiv="content-type" content="text/html; charset=UTF-8"><meta http-equiv="cache-control" content="no-cache"/><meta http-equiv="pragma" content="no-cache"/><meta http-equiv="expires" content="0"/><meta charset="utf-8"><title>Microsoft Project "Honolulu"</title><link href="styles.61bf3fd7cdb028f02759.bundle.css" rel="stylesheet"/></head><body><sme-root></sme-root><script type="text/javascript" src="inline.f8eba59e386a52f844ce.bundle.js"></script><script type="text/javascript" src="scripts.426be67476d5a3947566.bundle.js"></script><script type="text/javascript" src="main.bdfc20073b682c35f1a4.bundle.js"></script></body></html>
Open service 8.217.190.238:443
2024-12-11 21:13
HTTP/1.1 401 Unauthorized Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 WWW-Authenticate: Negotiate WWW-Authenticate: NTLM Date: Wed, 11 Dec 2024 21:13:27 GMT Connection: close
Open service 8.217.190.238:443
2024-12-11 21:13
Found NTLM information: Running Windows 10.0 build 20348 MsvAvNbComputerName: IZFSL4R17WMAPFZ MsvAvNbDomainName: IZFSL4R17WMAPFZ MsvAvDNSComputerName: iZfsl4r17wmapfZ MsvAvDNSDomainName: iZfsl4r17wmapfZ 200 OK Cache-Control: no-cache,no-store,must-revalidate Content-Length: 692 Content-Type: text/html Date: Wed, 11 Dec 2024 21:13:28 GMT Etag: "1d398fda23e0cb4" Expires: 0 Last-Modified: Mon, 29 Jan 2018 20:35:24 GMT Pragma: no-cache Server: Microsoft-HTTPAPI/2.0 <!DOCTYPE html><html lang="en"><head><base href="/"><meta http-equiv="content-type" content="text/html; charset=UTF-8"><meta http-equiv="cache-control" content="no-cache"/><meta http-equiv="pragma" content="no-cache"/><meta http-equiv="expires" content="0"/><meta charset="utf-8"><title>Microsoft Project "Honolulu"</title><link href="styles.61bf3fd7cdb028f02759.bundle.css" rel="stylesheet"/></head><body><sme-root></sme-root><script type="text/javascript" src="inline.f8eba59e386a52f844ce.bundle.js"></script><script type="text/javascript" src="scripts.426be67476d5a3947566.bundle.js"></script><script type="text/javascript" src="main.bdfc20073b682c35f1a4.bundle.js"></script></body></html>
Open service 8.217.190.238:443
2024-12-01 21:19
HTTP/1.1 401 Unauthorized Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 WWW-Authenticate: Negotiate WWW-Authenticate: NTLM Date: Sun, 01 Dec 2024 21:19:25 GMT Connection: close
Open service 8.217.190.238:443
2024-12-01 21:19
Found NTLM information: Running Windows 10.0 build 20348 MsvAvNbComputerName: IZFSL4R17WMAPFZ MsvAvNbDomainName: IZFSL4R17WMAPFZ MsvAvDNSComputerName: iZfsl4r17wmapfZ MsvAvDNSDomainName: iZfsl4r17wmapfZ 200 OK Cache-Control: no-cache,no-store,must-revalidate Content-Length: 692 Content-Type: text/html Date: Sun, 01 Dec 2024 21:19:29 GMT Etag: "1d398fda23e0cb4" Expires: 0 Last-Modified: Mon, 29 Jan 2018 20:35:24 GMT Pragma: no-cache Server: Microsoft-HTTPAPI/2.0 <!DOCTYPE html><html lang="en"><head><base href="/"><meta http-equiv="content-type" content="text/html; charset=UTF-8"><meta http-equiv="cache-control" content="no-cache"/><meta http-equiv="pragma" content="no-cache"/><meta http-equiv="expires" content="0"/><meta charset="utf-8"><title>Microsoft Project "Honolulu"</title><link href="styles.61bf3fd7cdb028f02759.bundle.css" rel="stylesheet"/></head><body><sme-root></sme-root><script type="text/javascript" src="inline.f8eba59e386a52f844ce.bundle.js"></script><script type="text/javascript" src="scripts.426be67476d5a3947566.bundle.js"></script><script type="text/javascript" src="main.bdfc20073b682c35f1a4.bundle.js"></script></body></html>
Open service 8.217.190.238:443
2024-11-29 22:32
HTTP/1.1 401 Unauthorized Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 WWW-Authenticate: Negotiate WWW-Authenticate: NTLM Date: Fri, 29 Nov 2024 22:32:58 GMT Connection: close
Open service 8.217.190.238:443
2024-11-29 22:32
Found NTLM information: Running Windows 10.0 build 20348 MsvAvNbComputerName: IZFSL4R17WMAPFZ MsvAvNbDomainName: IZFSL4R17WMAPFZ MsvAvDNSComputerName: iZfsl4r17wmapfZ MsvAvDNSDomainName: iZfsl4r17wmapfZ 200 OK Cache-Control: no-cache,no-store,must-revalidate Content-Length: 692 Content-Type: text/html Date: Fri, 29 Nov 2024 22:33:02 GMT Etag: "1d398fda23e0cb4" Expires: 0 Last-Modified: Mon, 29 Jan 2018 20:35:24 GMT Pragma: no-cache Server: Microsoft-HTTPAPI/2.0 <!DOCTYPE html><html lang="en"><head><base href="/"><meta http-equiv="content-type" content="text/html; charset=UTF-8"><meta http-equiv="cache-control" content="no-cache"/><meta http-equiv="pragma" content="no-cache"/><meta http-equiv="expires" content="0"/><meta charset="utf-8"><title>Microsoft Project "Honolulu"</title><link href="styles.61bf3fd7cdb028f02759.bundle.css" rel="stylesheet"/></head><body><sme-root></sme-root><script type="text/javascript" src="inline.f8eba59e386a52f844ce.bundle.js"></script><script type="text/javascript" src="scripts.426be67476d5a3947566.bundle.js"></script><script type="text/javascript" src="main.bdfc20073b682c35f1a4.bundle.js"></script></body></html>
Open service 8.217.190.238:443
2024-11-27 21:40
HTTP/1.1 401 Unauthorized Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 WWW-Authenticate: Negotiate WWW-Authenticate: NTLM Date: Wed, 27 Nov 2024 21:40:39 GMT Connection: close
Open service 8.217.190.238:443
2024-11-27 21:40
Found NTLM information: Running Windows 10.0 build 20348 MsvAvNbComputerName: IZFSL4R17WMAPFZ MsvAvNbDomainName: IZFSL4R17WMAPFZ MsvAvDNSComputerName: iZfsl4r17wmapfZ MsvAvDNSDomainName: iZfsl4r17wmapfZ 200 OK Cache-Control: no-cache,no-store,must-revalidate Content-Length: 692 Content-Type: text/html Date: Wed, 27 Nov 2024 21:40:43 GMT Etag: "1d398fda23e0cb4" Expires: 0 Last-Modified: Mon, 29 Jan 2018 20:35:24 GMT Pragma: no-cache Server: Microsoft-HTTPAPI/2.0 <!DOCTYPE html><html lang="en"><head><base href="/"><meta http-equiv="content-type" content="text/html; charset=UTF-8"><meta http-equiv="cache-control" content="no-cache"/><meta http-equiv="pragma" content="no-cache"/><meta http-equiv="expires" content="0"/><meta charset="utf-8"><title>Microsoft Project "Honolulu"</title><link href="styles.61bf3fd7cdb028f02759.bundle.css" rel="stylesheet"/></head><body><sme-root></sme-root><script type="text/javascript" src="inline.f8eba59e386a52f844ce.bundle.js"></script><script type="text/javascript" src="scripts.426be67476d5a3947566.bundle.js"></script><script type="text/javascript" src="main.bdfc20073b682c35f1a4.bundle.js"></script></body></html>