LeakIX - Host 85.158.232.148

Host 85.158.232.148

Switzerland

Sunrise GmbH

Open SMB file sharing detected

Malicious users exploiting this vulnerability may be able to read and/or write information to shared directories.

This may also include IPC services and lead to remote code execution.

IP: 85.158.232.148
Port: 445

First seen 2024-11-16 01:19
Last seen 2024-12-22 00:59
Open for 35 days
- Severity: high
  Fingerprint: 22420ce026fa767de22ea8c3684f1643f9e824d06b1fad126b1fad126b1fad12
```
Found open SMB shares with NT AUTHORITY/ANONYMOUS LOGON
http
print$
IPC$
```
  Found on 2024-12-22 00:59
Create report

Open service 85.158.232.148:445

2024-12-22 00:59
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 10 hours ago by SmbPlugin
Create report
Open service 85.158.232.148:445

2024-12-20 00:34
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2 days ago by SmbPlugin
Create report
Open service 85.158.232.148:445

2024-12-18 01:43
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-12-18 by SmbPlugin
Create report
Open service 85.158.232.148:445

2024-12-15 23:49
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-12-15 by SmbPlugin
Create report
Open service 85.158.232.148:445

2024-12-14 00:05
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-12-14 by SmbPlugin
Create report
Open service 85.158.232.148:445

2024-12-12 01:04
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-12-12 by SmbPlugin
Create report
Open service 85.158.232.148:445

2024-12-02 01:40
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-12-02 by SmbPlugin
Create report
Open service 85.158.232.148:445

2024-11-30 01:01
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-11-30 by SmbPlugin
Create report
Open service 85.158.232.148:445

2024-11-28 01:05
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-11-28 by SmbPlugin
Create report
Open service 85.158.232.148:445

2024-11-20 12:45
```
SMB NTLMSSP handshake results:
Found non-Windows 6.1 build 0
```
Found 2024-11-20 by SmbPlugin
Create report

Domain summary

No record

Host 85.158.232.148

Switzerland

Open SMB file sharing detected

Domain summary