[Armada/US-East] #opencanary Samba Access Summary for Apr 22
-
[Armada/US-East] #opencanary Samba Access Summary for Apr 22
This OpenCanary received 16 file sample(s) yesterday.
File hashes seen:
► 3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71 : 16 file(s)
https://www.virustotal.com/gui/file/3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71List of Usernames:
administrator: 11089 occurrence(s)
admin: 4749 occurrence(s)
hp: 3977 occurrence(s)
pc1k: 553 occurrence(s)
gsd: 207 occurrence(s)
sk: 87 occurrence(s)
iip: 87 occurrence(s)
huan: 82 occurrence(s)
guest: 6 occurrence(s)
message: occurrence(s)
message: occurrence(s)
message: occurrence(s)
message: occurrence(s)
message: occurrence(s)
message: occurrence(s)List of IP Addresses:
202.58.95.xxx: 11863 occurrence(s)
46.217.32.xxx: 1829 occurrence(s)
46.217.63.xxx: 1323 occurrence(s)
115.84.113.xxx: 888 occurrence(s)
103.146.235.xxx: 880 occurrence(s)
113.183.191.xxx: 602 occurrence(s)
14.232.164.xxx: 442 occurrence(s)
113.183.86.xxx: 420 occurrence(s)
160.120.177.xxx: 407 occurrence(s)
152.200.195.xxx: 397 occurrence(s)
202.79.60.xxx: 361 occurrence(s)
61.152.89.xxx: 347 occurrence(s)
113.161.220.xxx: 259 occurrence(s)
106.4.252.xxx: 249 occurrence(s)
117.141.76.xxx: 136 occurrence(s)
62.103.64.xxx: 134 occurrence(s)
203.92.41.xxx: 132 occurrence(s)
103.62.155.xxx: 114 occurrence(s)
201.187.98.xxx: 110 occurrence(s)
154.192.131.xxx: 104 occurrence(s)
111.92.119.xxx: 94 occurrence(s)
124.43.16.xxx: 93 occurrence(s)
186.10.74.xxx: 88 occurrence(s)
113.190.42.xxx: 85 occurrence(s)
182.72.123.xxx: 63 occurrence(s)
49.249.85.xxx: 55 occurrence(s)
117.206.6.xxx: 54 occurrence(s)
186.10.23.xxx: 44 occurrence(s)
102.186.95.xxx: 44 occurrence(s)
103.62.153.xxx: 42 occurrence(s)
202.70.66.xxx: 36 occurrence(s)
117.252.80.xxx: 34 occurrence(s)
14.142.27.xxx: 33 occurrence(s)
202.153.35.xxx: 25 occurrence(s)
90.3.222.xxx: 22 occurrence(s)
83.171.112.xxx: 22 occurrence(s)
77.82.184.xxx: 22 occurrence(s)
59.99.155.xxx: 22 occurrence(s)
59.182.229.xxx: 22 occurrence(s)
5.141.25.xxx: 22 occurrence(s)
49.234.184.xxx: 22 occurrence(s)
36.70.158.xxx: 22 occurrence(s)
222.127.152.xxx: 22 occurrence(s)
202.88.244.xxx: 22 occurrence(s)
202.53.6.xxx: 22 occurrence(s)
201.96.108.xxx: 22 occurrence(s)
201.22.227.xxx: 22 occurrence(s)
200.111.11.xxx: 22 occurrence(s)
200.109.232.xxx: 22 occurrence(s)
197.27.221.xxx: 22 occurrence(s)
195.69.218.xxx: 22 occurrence(s)
187.204.89.xxx: 22 occurrence(s)
186.67.106.xxx: 22 occurrence(s)
182.69.21.xxx: 22 occurrence(s)
177.250.48.xxx: 22 occurrence(s)
171.247.187.xxx: 22 occurrence(s)
14.191.74.xxx: 22 occurrence(s)
139.5.157.xxx: 22 occurrence(s)
125.63.98.xxx: 22 occurrence(s)
124.6.163.xxx: 22 occurrence(s)
124.106.225.xxx: 22 occurrence(s)
124.105.67.xxx: 22 occurrence(s)
124.104.144.xxx: 22 occurrence(s)
122.52.201.xxx: 22 occurrence(s)
117.255.159.xxx: 22 occurrence(s)
117.219.123.xxx: 22 occurrence(s)
117.205.93.xxx: 22 occurrence(s)
116.97.165.xxx: 22 occurrence(s)
110.227.212.xxx: 22 occurrence(s)
103.41.100.xxx: 22 occurrence(s)
103.134.46.xxx: 22 occurrence(s)
103.109.176.xxx: 22 occurrence(s)
187.136.108.xxx: 21 occurrence(s)
61.0.206.xxx: 20 occurrence(s)
201.218.180.xxx: 20 occurrence(s)
41.228.162.xxx: 19 occurrence(s)
36.77.78.xxx: 19 occurrence(s)
187.139.189.xxx: 19 occurrence(s)
49.249.2.xxx: 11 occurrence(s)
222.124.139.xxx: 11 occurrence(s)
220.135.223.xxx: 11 occurrence(s)
203.170.67.xxx: 11 occurrence(s)
202.142.145.xxx: 11 occurrence(s)
201.134.103.xxx: 11 occurrence(s)
186.67.186.xxx: 11 occurrence(s)
183.87.12.xxx: 11 occurrence(s)
182.70.117.xxx: 11 occurrence(s)
181.115.157.xxx: 11 occurrence(s)
159.242.227.xxx: 11 occurrence(s)
119.93.103.xxx: 11 occurrence(s)
117.240.78.xxx: 11 occurrence(s)
103.159.183.xxx: 11 occurrence(s)
1.197.254.xxx: 11 occurrence(s)
190.71.96.xxx: 10 occurrence(s)
103.105.224.xxx: 10 occurrence(s)
5.62.43.xxx: 8 occurrence(s)
35.216.228.xxx: 3 occurrence(s)
35.216.140.xxx: 3 occurrence(s)
93.179.67.xxx: 2 occurrence(s)
70.120.225.xxx: 2 occurrence(s)
61.224.92.xxx: 2 occurrence(s)
60.243.57.xxx: 2 occurrence(s)
58.152.215.xxx: 2 occurrence(s)
182.239.89.xxx: 2 occurrence(s)
176.88.81.xxx: 2 occurrence(s)
14.232.155.xxx: 2 occurrence(s)
136.239.180.xxx: 2 occurrence(s)
122.227.18.xxx: 2 occurrence(s)
113.161.7.xxx: 2 occurrence(s)
103.207.168.xxx: 2 occurrence(s)
103.179.109.xxx: 2 occurrence(s)
35.241.211.xxx: 1 occurrence(s)
35.187.98.xxx: 1 occurrence(s)
35.187.65.xxx: 1 occurrence(s)
146.190.242.xxx: 1 occurrence(s)List of Computers:
️ null: 11367 occurrence(s)
️ abuse_xmco_fr: 6 occurrence(s)
️ windows: 2 occurrence(s) -
R relay@relay.infosec.exchange shared this topic