[Armada/US-East] #opencanary Samba Access Summary for Apr 18

[toce@infosec.exchange]

[Armada/US-East] #opencanary Samba Access Summary for Apr 18

This OpenCanary received 10 file sample(s) yesterday.

File hashes seen:
► 3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71 : 7 file(s)
https://www.virustotal.com/gui/file/3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71
► e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 : 3 file(s)
https://www.virustotal.com/gui/file/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

List of Usernames:
administrator: 8571 occurrence(s)
hp: 4791 occurrence(s)
admin: 4773 occurrence(s)
gsd: 304 occurrence(s)
user: 94 occurrence(s)
admins: 94 occurrence(s)
aasta_domain: 94 occurrence(s)
smb-enumerator: 8 occurrence(s)
17367891: 5 occurrence(s)
cloudjas: 2 occurrence(s)
message: occurrence(s)
message: occurrence(s)
message: occurrence(s)
message: occurrence(s)

List of IP Addresses:
202.58.95.xxx: 12250 occurrence(s)
201.138.153.xxx: 3830 occurrence(s)
115.84.113.xxx: 1516 occurrence(s)
196.189.185.xxx: 577 occurrence(s)
122.187.86.xxx: 506 occurrence(s)
186.10.74.xxx: 487 occurrence(s)
221.180.206.xxx: 274 occurrence(s)
115.242.222.xxx: 206 occurrence(s)
103.158.127.xxx: 176 occurrence(s)
117.209.136.xxx: 145 occurrence(s)
195.250.85.xxx: 141 occurrence(s)
113.185.82.xxx: 113 occurrence(s)
77.29.150.xxx: 85 occurrence(s)
154.192.131.xxx: 58 occurrence(s)
202.60.110.xxx: 57 occurrence(s)
202.88.237.xxx: 52 occurrence(s)
124.104.144.xxx: 44 occurrence(s)
111.92.23.xxx: 44 occurrence(s)
139.5.157.xxx: 38 occurrence(s)
90.3.222.xxx: 22 occurrence(s)
58.69.122.xxx: 22 occurrence(s)
42.116.162.xxx: 22 occurrence(s)
41.33.212.xxx: 22 occurrence(s)
210.212.104.xxx: 22 occurrence(s)
201.187.98.xxx: 22 occurrence(s)
200.111.47.xxx: 22 occurrence(s)
200.111.11.xxx: 22 occurrence(s)
193.95.3.xxx: 22 occurrence(s)
186.67.106.xxx: 22 occurrence(s)
182.234.159.xxx: 22 occurrence(s)
117.243.59.xxx: 22 occurrence(s)
111.28.249.xxx: 22 occurrence(s)
111.240.85.xxx: 22 occurrence(s)
103.185.243.xxx: 22 occurrence(s)
122.187.49.xxx: 20 occurrence(s)
118.171.214.xxx: 19 occurrence(s)
103.44.107.xxx: 12 occurrence(s)
91.190.80.xxx: 11 occurrence(s)
61.0.226.xxx: 11 occurrence(s)
49.249.2.xxx: 11 occurrence(s)
182.70.117.xxx: 11 occurrence(s)
14.194.49.xxx: 11 occurrence(s)
117.204.23.xxx: 11 occurrence(s)
109.165.187.xxx: 11 occurrence(s)
103.221.81.xxx: 11 occurrence(s)
80.227.233.xxx: 10 occurrence(s)
123.168.237.xxx: 8 occurrence(s)
45.84.107.xxx: 7 occurrence(s)
146.70.179.xxx: 5 occurrence(s)
122.52.201.xxx: 5 occurrence(s)
2.59.22.xxx: 3 occurrence(s)
94.187.170.xxx: 2 occurrence(s)
78.37.107.xxx: 2 occurrence(s)
178.220.229.xxx: 2 occurrence(s)
165.49.68.xxx: 2 occurrence(s)
14.139.154.xxx: 2 occurrence(s)
125.228.248.xxx: 2 occurrence(s)
113.160.185.xxx: 2 occurrence(s)
112.28.77.xxx: 2 occurrence(s)
1.169.105.xxx: 2 occurrence(s)
35.240.121.xxx: 1 occurrence(s)
35.205.166.xxx: 1 occurrence(s)
34.77.127.xxx: 1 occurrence(s)
34.76.133.xxx: 1 occurrence(s)
34.62.172.xxx: 1 occurrence(s)
192.42.116.xxx: 1 occurrence(s)

List of Computers:
️ null: 11686 occurrence(s)
️ smbenumerator: 8 occurrence(s)
️ cares: 5 occurrence(s)
️ windows: 3 occurrence(s)
️ shodan: 3 occurrence(s)
️ yongacc: 2 occurrence(s)