[Armada/US-East] #opencanary Samba Access Summary for Apr 29
-
[Armada/US-East] #opencanary Samba Access Summary for Apr 29
This OpenCanary received 28 file sample(s) yesterday.
File hashes seen:
► 3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71 : 28 file(s)
https://www.virustotal.com/gui/file/3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71List of Usernames:
administrator: 10633 occurrence(s)
admin: 5226 occurrence(s)
hp: 4789 occurrence(s)
alianet: 1646 occurrence(s)
thanh: 236 occurrence(s)
cyberart: 226 occurrence(s)
admins: 156 occurrence(s)
thi: 138 occurrence(s)
pc1: 124 occurrence(s)
huyen: 118 occurrence(s)
gsd: 107 occurrence(s)
zc_domain: 87 occurrence(s)
serveripark: 87 occurrence(s)
amtextile_domain: 87 occurrence(s)
bohadmin: 82 occurrence(s)
zc_caoxf: 43 occurrence(s)
cao: 16 occurrence(s)
vinnytroia: occurrence(s)
message: occurrence(s)
message: occurrence(s)
message: occurrence(s)
message: occurrence(s)
message: occurrence(s)
message: occurrence(s)List of IP Addresses:
202.58.95.xxx: 11547 occurrence(s)
103.155.168.xxx: 7569 occurrence(s)
103.182.228.xxx: 1313 occurrence(s)
113.183.240.xxx: 867 occurrence(s)
39.36.251.xxx: 436 occurrence(s)
160.120.177.xxx: 386 occurrence(s)
113.22.84.xxx: 359 occurrence(s)
1.22.230.xxx: 278 occurrence(s)
125.120.205.xxx: 259 occurrence(s)
164.77.210.xxx: 220 occurrence(s)
115.84.113.xxx: 210 occurrence(s)
218.205.64.xxx: 209 occurrence(s)
36.91.72.xxx: 174 occurrence(s)
125.164.37.xxx: 153 occurrence(s)
186.10.74.xxx: 110 occurrence(s)
115.84.224.xxx: 110 occurrence(s)
154.192.131.xxx: 108 occurrence(s)
59.92.86.xxx: 103 occurrence(s)
186.10.23.xxx: 66 occurrence(s)
152.200.195.xxx: 63 occurrence(s)
118.68.51.xxx: 56 occurrence(s)
186.67.106.xxx: 55 occurrence(s)
115.75.37.xxx: 48 occurrence(s)
222.127.97.xxx: 46 occurrence(s)
193.227.16.xxx: 45 occurrence(s)
202.53.6.xxx: 44 occurrence(s)
201.187.98.xxx: 44 occurrence(s)
139.5.157.xxx: 44 occurrence(s)
139.167.216.xxx: 44 occurrence(s)
139.135.156.xxx: 44 occurrence(s)
117.7.107.xxx: 44 occurrence(s)
111.92.62.xxx: 44 occurrence(s)
103.37.83.xxx: 44 occurrence(s)
119.95.15.xxx: 43 occurrence(s)
14.161.144.xxx: 29 occurrence(s)
62.103.64.xxx: 25 occurrence(s)
89.33.222.xxx: 22 occurrence(s)
85.95.178.xxx: 22 occurrence(s)
59.89.215.xxx: 22 occurrence(s)
58.69.149.xxx: 22 occurrence(s)
49.249.85.xxx: 22 occurrence(s)
49.249.148.xxx: 22 occurrence(s)
49.145.199.xxx: 22 occurrence(s)
39.144.59.xxx: 22 occurrence(s)
36.226.220.xxx: 22 occurrence(s)
31.163.111.xxx: 22 occurrence(s)
203.160.167.xxx: 22 occurrence(s)
202.88.244.xxx: 22 occurrence(s)
202.65.138.xxx: 22 occurrence(s)
2.135.121.xxx: 22 occurrence(s)
197.254.236.xxx: 22 occurrence(s)
196.202.71.xxx: 22 occurrence(s)
189.190.183.xxx: 22 occurrence(s)
187.18.66.xxx: 22 occurrence(s)
186.67.186.xxx: 22 occurrence(s)
186.10.24.xxx: 22 occurrence(s)
182.253.169.xxx: 22 occurrence(s)
171.235.182.xxx: 22 occurrence(s)
152.230.27.xxx: 22 occurrence(s)
124.106.67.xxx: 22 occurrence(s)
119.93.111.xxx: 22 occurrence(s)
117.244.41.xxx: 22 occurrence(s)
117.232.102.xxx: 22 occurrence(s)
117.219.17.xxx: 22 occurrence(s)
117.217.131.xxx: 22 occurrence(s)
117.216.139.xxx: 22 occurrence(s)
111.92.23.xxx: 22 occurrence(s)
103.75.84.xxx: 22 occurrence(s)
103.194.89.xxx: 22 occurrence(s)
103.179.233.xxx: 22 occurrence(s)
103.163.112.xxx: 22 occurrence(s)
201.218.180.xxx: 21 occurrence(s)
14.226.1.xxx: 19 occurrence(s)
189.154.15.xxx: 12 occurrence(s)
65.140.82.xxx: 11 occurrence(s)
59.182.234.xxx: 11 occurrence(s)
49.249.2.xxx: 11 occurrence(s)
36.156.195.xxx: 11 occurrence(s)
222.127.152.xxx: 11 occurrence(s)
202.79.29.xxx: 11 occurrence(s)
202.142.145.xxx: 11 occurrence(s)
190.181.26.xxx: 11 occurrence(s)
183.81.19.xxx: 11 occurrence(s)
120.28.148.xxx: 11 occurrence(s)
119.14.0.xxx: 11 occurrence(s)
210.212.65.xxx: 10 occurrence(s)
125.20.39.xxx: 10 occurrence(s)
110.39.189.xxx: 10 occurrence(s)
103.105.224.xxx: 10 occurrence(s)
156.201.76.xxx: 8 occurrence(s)
123.200.3.xxx: 8 occurrence(s)
117.251.18.xxx: 8 occurrence(s)
125.20.110.xxx: 5 occurrence(s)
71.6.199.xxx: 3 occurrence(s)
89.188.179.xxx: 2 occurrence(s)
70.120.225.xxx: 2 occurrence(s)
60.243.101.xxx: 2 occurrence(s)
37.203.96.xxx: 2 occurrence(s)
220.136.32.xxx: 2 occurrence(s)
202.150.141.xxx: 2 occurrence(s)
200.21.57.xxx: 2 occurrence(s)
196.189.232.xxx: 2 occurrence(s)
186.167.81.xxx: 2 occurrence(s)
183.245.54.xxx: 2 occurrence(s)
182.66.255.xxx: 2 occurrence(s)
180.171.147.xxx: 2 occurrence(s)
147.235.217.xxx: 2 occurrence(s)
143.44.162.xxx: 2 occurrence(s)
14.179.57.xxx: 2 occurrence(s)
14.176.131.xxx: 2 occurrence(s)
137.97.228.xxx: 2 occurrence(s)
125.19.139.xxx: 2 occurrence(s)
103.170.202.xxx: 2 occurrence(s)
103.101.119.xxx: 2 occurrence(s)
35.240.121.xxx: 1 occurrence(s)
34.78.6.xxx: 1 occurrence(s)
34.76.117.xxx: 1 occurrence(s)
34.34.178.xxx: 1 occurrence(s)
178.162.204.xxx: 1 occurrence(s)
165.227.173.xxx: 1 occurrence(s)
146.190.103.xxx: 1 occurrence(s)List of Computers:
️ null: 12500 occurrence(s)
️ windows: 3 occurrence(s)
️ shodan: 3 occurrence(s)
️ scanner: 1 occurrence(s)
-
R relay@relay.infosec.exchange shared this topic