[Armada/US-East] #opencanary Samba Access Summary for May 3

[toce@infosec.exchange]

[Armada/US-East] #opencanary Samba Access Summary for May 3

This OpenCanary received 4 file sample(s) yesterday.

File hashes seen:
► 3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71 : 4 file(s)
https://www.virustotal.com/gui/file/3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71

List of Usernames:
administrator: 21025 occurrence(s)
admin: 11447 occurrence(s)
hp: 8979 occurrence(s)
gsd: 200 occurrence(s)
thi: 152 occurrence(s)
huyen: 152 occurrence(s)
mukesh: 148 occurrence(s)
thanh: 137 occurrence(s)
cao: 100 occurrence(s)
justice: 91 occurrence(s)
pt: 83 occurrence(s)
pt-pc_administrator: 82 occurrence(s)
pc: 82 occurrence(s)
user-pc_attend_user: 44 occurrence(s)
user: 17 occurrence(s)
guest: 15 occurrence(s)
user-pc_administrator: 14 occurrence(s)
172.16.1.14_admin: 7 occurrence(s)
vinnytroia: occurrence(s)
for: 1 occurrence(s)
__________: 1 occurrence(s)
message: occurrence(s)
message: occurrence(s)
message: occurrence(s)
message: occurrence(s)
message: occurrence(s)
message: occurrence(s)
message: occurrence(s)
message: occurrence(s)
message: occurrence(s)

List of IP Addresses:
202.58.95.xxx: 33321 occurrence(s)
112.135.180.xxx: 1337 occurrence(s)
103.138.4.xxx: 1316 occurrence(s)
186.10.23.xxx: 1033 occurrence(s)
182.234.146.xxx: 1015 occurrence(s)
115.84.113.xxx: 998 occurrence(s)
46.217.60.xxx: 893 occurrence(s)
113.182.89.xxx: 842 occurrence(s)
113.160.196.xxx: 699 occurrence(s)
14.181.17.xxx: 498 occurrence(s)
58.27.232.xxx: 377 occurrence(s)
114.92.61.xxx: 342 occurrence(s)
152.200.195.xxx: 274 occurrence(s)
110.5.76.xxx: 259 occurrence(s)
223.95.97.xxx: 255 occurrence(s)
202.70.66.xxx: 206 occurrence(s)
154.192.131.xxx: 183 occurrence(s)
113.182.159.xxx: 177 occurrence(s)
122.170.8.xxx: 174 occurrence(s)
186.189.204.xxx: 155 occurrence(s)
200.91.234.xxx: 154 occurrence(s)
186.10.74.xxx: 144 occurrence(s)
203.92.41.xxx: 132 occurrence(s)
113.53.91.xxx: 119 occurrence(s)
117.205.146.xxx: 101 occurrence(s)
103.158.127.xxx: 98 occurrence(s)
136.232.203.xxx: 88 occurrence(s)
113.160.206.xxx: 71 occurrence(s)
49.229.50.xxx: 66 occurrence(s)
201.187.98.xxx: 66 occurrence(s)
197.10.135.xxx: 66 occurrence(s)
103.105.224.xxx: 50 occurrence(s)
196.188.104.xxx: 45 occurrence(s)
61.5.129.xxx: 44 occurrence(s)
115.84.253.xxx: 44 occurrence(s)
115.84.224.xxx: 44 occurrence(s)
111.92.61.xxx: 44 occurrence(s)
103.206.130.xxx: 44 occurrence(s)
36.236.131.xxx: 43 occurrence(s)
190.14.237.xxx: 42 occurrence(s)
111.92.45.xxx: 38 occurrence(s)
125.16.137.xxx: 34 occurrence(s)
202.53.6.xxx: 33 occurrence(s)
67.158.52.xxx: 22 occurrence(s)
61.2.38.xxx: 22 occurrence(s)
61.169.211.xxx: 22 occurrence(s)
59.92.71.xxx: 22 occurrence(s)
49.47.196.xxx: 22 occurrence(s)
49.248.155.xxx: 22 occurrence(s)
49.231.235.xxx: 22 occurrence(s)
45.246.35.xxx: 22 occurrence(s)
45.118.157.xxx: 22 occurrence(s)
41.209.126.xxx: 22 occurrence(s)
27.107.47.xxx: 22 occurrence(s)
220.164.77.xxx: 22 occurrence(s)
210.79.132.xxx: 22 occurrence(s)
206.204.134.xxx: 22 occurrence(s)
202.88.244.xxx: 22 occurrence(s)
202.88.237.xxx: 22 occurrence(s)
201.218.180.xxx: 22 occurrence(s)
201.144.203.xxx: 22 occurrence(s)
196.205.87.xxx: 22 occurrence(s)
186.10.24.xxx: 22 occurrence(s)
183.141.34.xxx: 22 occurrence(s)
171.248.154.xxx: 22 occurrence(s)
165.225.124.xxx: 22 occurrence(s)
150.129.60.xxx: 22 occurrence(s)
14.194.49.xxx: 22 occurrence(s)
139.135.156.xxx: 22 occurrence(s)
125.24.73.xxx: 22 occurrence(s)
125.209.111.xxx: 22 occurrence(s)
124.123.120.xxx: 22 occurrence(s)
124.105.67.xxx: 22 occurrence(s)
124.105.235.xxx: 22 occurrence(s)
124.104.144.xxx: 22 occurrence(s)
122.187.35.xxx: 22 occurrence(s)
122.177.98.xxx: 22 occurrence(s)
120.61.210.xxx: 22 occurrence(s)
117.254.165.xxx: 22 occurrence(s)
117.253.132.xxx: 22 occurrence(s)
117.251.16.xxx: 22 occurrence(s)
117.242.117.xxx: 22 occurrence(s)
117.218.245.xxx: 22 occurrence(s)
117.207.56.xxx: 22 occurrence(s)
117.206.141.xxx: 22 occurrence(s)
117.204.142.xxx: 22 occurrence(s)
117.141.135.xxx: 22 occurrence(s)
103.82.191.xxx: 22 occurrence(s)
103.53.45.xxx: 22 occurrence(s)
103.178.76.xxx: 22 occurrence(s)
103.175.30.xxx: 22 occurrence(s)
111.248.38.xxx: 21 occurrence(s)
36.77.72.xxx: 19 occurrence(s)
156.209.109.xxx: 19 occurrence(s)
124.43.13.xxx: 16 occurrence(s)
123.25.108.xxx: 16 occurrence(s)
213.230.127.xxx: 12 occurrence(s)
182.65.255.xxx: 12 occurrence(s)
58.82.235.xxx: 11 occurrence(s)
58.27.226.xxx: 11 occurrence(s)
49.249.2.xxx: 11 occurrence(s)
42.96.51.xxx: 11 occurrence(s)
223.233.127.xxx: 11 occurrence(s)
196.202.71.xxx: 11 occurrence(s)
189.195.249.xxx: 11 occurrence(s)
187.237.165.xxx: 11 occurrence(s)
187.235.253.xxx: 11 occurrence(s)
187.235.252.xxx: 11 occurrence(s)
182.234.159.xxx: 11 occurrence(s)
118.213.135.xxx: 11 occurrence(s)
117.242.21.xxx: 11 occurrence(s)
103.89.233.xxx: 11 occurrence(s)
103.6.4.xxx: 11 occurrence(s)
103.155.56.xxx: 11 occurrence(s)
103.149.104.xxx: 11 occurrence(s)
197.255.224.xxx: 10 occurrence(s)
210.213.116.xxx: 8 occurrence(s)
124.109.48.xxx: 8 occurrence(s)
111.92.42.xxx: 6 occurrence(s)
95.216.11.xxx: 5 occurrence(s)
210.212.65.xxx: 5 occurrence(s)
181.174.229.xxx: 5 occurrence(s)
125.20.110.xxx: 5 occurrence(s)
98.96.193.xxx: 3 occurrence(s)
89.248.172.xxx: 3 occurrence(s)
87.122.68.xxx: 3 occurrence(s)
86.54.31.xxx: 3 occurrence(s)
35.216.197.xxx: 3 occurrence(s)
95.86.164.xxx: 2 occurrence(s)
89.43.201.xxx: 2 occurrence(s)
85.198.135.xxx: 2 occurrence(s)
80.250.58.xxx: 2 occurrence(s)
70.120.225.xxx: 2 occurrence(s)
5.20.243.xxx: 2 occurrence(s)
43.224.245.xxx: 2 occurrence(s)
39.172.79.xxx: 2 occurrence(s)
219.240.233.xxx: 2 occurrence(s)
2.63.202.xxx: 2 occurrence(s)
2.50.177.xxx: 2 occurrence(s)
197.44.42.xxx: 2 occurrence(s)
188.163.97.xxx: 2 occurrence(s)
186.123.182.xxx: 2 occurrence(s)
181.25.138.xxx: 2 occurrence(s)
177.220.176.xxx: 2 occurrence(s)
165.16.112.xxx: 2 occurrence(s)
14.191.238.xxx: 2 occurrence(s)
14.185.137.xxx: 2 occurrence(s)
14.174.120.xxx: 2 occurrence(s)
136.232.56.xxx: 2 occurrence(s)
136.232.196.xxx: 2 occurrence(s)
124.240.200.xxx: 2 occurrence(s)
117.254.176.xxx: 2 occurrence(s)
113.53.59.xxx: 2 occurrence(s)
113.28.192.xxx: 2 occurrence(s)
112.135.195.xxx: 2 occurrence(s)
109.197.230.xxx: 2 occurrence(s)
109.165.63.xxx: 2 occurrence(s)
103.96.129.xxx: 2 occurrence(s)
103.95.42.xxx: 2 occurrence(s)
102.33.155.xxx: 2 occurrence(s)
101.99.15.xxx: 2 occurrence(s)
1.1.220.xxx: 2 occurrence(s)
64.225.75.xxx: 1 occurrence(s)
35.240.50.xxx: 1 occurrence(s)
35.240.36.xxx: 1 occurrence(s)
35.187.71.xxx: 1 occurrence(s)
34.76.72.xxx: 1 occurrence(s)
34.140.249.xxx: 1 occurrence(s)
34.140.130.xxx: 1 occurrence(s)
194.187.251.xxx: 1 occurrence(s)
173.239.203.xxx: 1 occurrence(s)
164.90.228.xxx: 1 occurrence(s)
109.105.210.xxx: 1 occurrence(s)
104.199.68.xxx: 1 occurrence(s)

List of Computers:
️ null: 31763 occurrence(s)
️ windows: 7 occurrence(s)
️ shodan: 6 occurrence(s)
️ fmnews-int3: 6 occurrence(s)
️ finland: 5 occurrence(s)
️ abuse_xmco_fr: 3 occurrence(s)
️ solaris-main: 1 occurrence(s)
️ scanner: 1 occurrence(s)