CIVHUB

1683 bookmarks
Newest
History: 24.112.104.119 FEMA1617701.fema.net observed this one on 2 different ip addresses
History: 24.112.104.119 FEMA1617701.fema.net observed this one on 2 different ip addresses

Port 80 (HTTP): The HTTP server could be serving a web application or dashboard for monitoring or management. Port 5985 (WinRM): This service allows for remote management of Windows machines, which could be used for administrative tasks. Port 5537 (Custom TCP): This could be a specific application service that requires communication over TCP, possibly related to the web application. Port 445 (SMB): This port is used for file sharing and printer services, which might be necessary for the application to access shared resources. Port 3389 (RDP): Remote Desktop access could be enabled for administrators to manage the server directly. Port 135 (Endpoint Mapper): This service helps in locating the ports used by other services, facilitating communication between applications.

·shodan.io·
History: 24.112.104.119 FEMA1617701.fema.net observed this one on 2 different ip addresses
216.15.21.215 FEMAF162930.fema.net fema potentially this is DOGE controlled and has a bridged connection ie this is its external ip address, when you rdp in you are bridged to the internal ip address and on the fed network. self-signed cert implies internal
216.15.21.215 FEMAF162930.fema.net fema potentially this is DOGE controlled and has a bridged connection ie this is its external ip address, when you rdp in you are bridged to the internal ip address and on the fed network. self-signed cert implies internal
Ports open: 3389, 5985
216-15-21-215.s3541.c3-0.161-cbr1.lnh-161.md.cable.rcncustomer.com
FEMAF162930.fema.net
·shodan.io·
216.15.21.215 FEMAF162930.fema.net fema potentially this is DOGE controlled and has a bridged connection ie this is its external ip address, when you rdp in you are bridged to the internal ip address and on the fed network. self-signed cert implies internal