LeakIX - Host novationsys.com

Domain novationsys.com

United States

MICROSOFT-CORP-MSN-AS-BLOCK

Ubuntu

Software information

Apache Apache 2.4.52

tcp/443 tcp/80

Apache Apache 2.4.37

tcp/443 tcp/80

Microsoft-HTTPAPI 2.0

tcp/443

OpenSSL OpenSSL 1.1.1k

tcp/443 tcp/80

ScreenConnect 24.2.25.9295-1313536157

tcp/443

nginx nginx

tcp/443 tcp/80

ConnectWise ScreenConnect is vulnerable
The following ConnectWise ScreenConnect is publicly accessible and is vulnerable :

It is critical to update to a safe version as soon as possible since a vulnerability allow remote attackers to create administrative users on the service. Those vulnerabilities are currently used in ransomware campaign and could damage your network.

Reference:

https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8

https://www.cvedetails.com/cve/CVE-2025-14265
IP: 136.53.64.169
Domain: connect.novationsys.com
Port: 443
URL: https://connect.novationsys.com

First seen 2025-12-12 17:53
Last seen 2026-02-02 00:19
Open for 51 days
- Severity: high
  Fingerprint: 0aef249104a4b7b066cfd6b81114f6b21114f6b21114f6b21114f6b21114f6b2
```
Found ConnectWise ScreenConnect version: 24.2.25.9295-1313536157
Affected by CVE-2025-14265
```
  Found on 2026-02-02 00:19
- Severity: high
  Fingerprint: 0aef249104a4b7b0fb0c9834b9a0e20c7af8ab567af8ab567af8ab567af8ab56
```
Found vulnerable ConnectWise ScreenConnect
Version: 24.2.25.9295-1313536157
Affected by CVE-2025-14265
```
  Found on 2026-01-02 23:19
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.224.189.40
Domain: www.novationsys.com
Port: 80
URL: http://www.novationsys.com

First seen 2022-09-08 02:51
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb05c45fba
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://novationsystems@dev.azure.com/novationsystems/novation-bootstrap/_git/novation-bootstrap
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
```
  Found on 2022-09-08 02:51
  
  294 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.224.189.40
Domain: novationsys.com
Port: 443
URL: https://novationsys.com

First seen 2022-09-08 02:51
Last seen 2022-09-08 02:51
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176423f3e94deca55e3faca55e3faca55e3fa
```
Found 2 files trough .DS_Store spidering:

/assets
/saveredirect
```
  Found on 2022-09-08 02:51
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.224.189.74
Domain: www.novationsys.com
Port: 443
URL: https://www.novationsys.com

First seen 2022-09-08 02:51
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb05c45fba
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://novationsystems@dev.azure.com/novationsystems/novation-bootstrap/_git/novation-bootstrap
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
```
  Found on 2022-09-08 02:51
  
  294 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.224.189.40
Domain: novationsys.com
Port: 80
URL: http://novationsys.com

First seen 2022-09-08 02:51
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176423f3e94deca55e3faca55e3faca55e3fa
```
Found 2 files trough .DS_Store spidering:

/assets
/saveredirect
```
  Found on 2022-09-08 02:51
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.224.189.40
Domain: www.novationsys.com
Port: 80
URL: http://www.novationsys.com

First seen 2022-09-08 02:51
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176423f3e94deca55e3faca55e3faca55e3fa
```
Found 2 files trough .DS_Store spidering:

/assets
/saveredirect
```
  Found on 2022-09-08 02:51
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.224.189.40
Domain: novationsys.com
Port: 80
URL: http://novationsys.com

First seen 2022-09-08 02:51
Last seen 2022-09-08 02:51
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb05c45fba
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://novationsystems@dev.azure.com/novationsystems/novation-bootstrap/_git/novation-bootstrap
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
```
  Found on 2022-09-08 02:51
  
  294 Bytes
Create report
MacOS file listing through .DS_Store file

.DS_Store” is an abbreviation for “Desktop Services Store”. These files are created automatically by Apples “Finder” software (which is part of their OS).

They store information about the files within a folder, including display options of folders, such as icon positions and view settings.

It may happen that .DS_Store files inadvertently leak filenames such as database backups or private administration panels.

IP: 13.224.189.74
Domain: www.novationsys.com
Port: 443
URL: https://www.novationsys.com

First seen 2022-09-08 02:51
- Severity: low
  Fingerprint: 5f32cf5d6962f09c7cf176427cf176423f3e94deca55e3faca55e3faca55e3fa
```
Found 2 files trough .DS_Store spidering:

/assets
/saveredirect
```
  Found on 2022-09-08 02:51
Create report
Git configuration and history exposed

The following URL (usually /.git/config) is publicly accessible and is leaking source code and repository configuration.

IP: 13.224.189.98
Domain: novationsys.com
Port: 443
URL: https://novationsys.com

First seen 2022-09-08 02:51
- Severity: high
  Fingerprint: 2580fa947178c88602b1737db148c044baa2727ab8135b5bbc521bbb05c45fba
```
[core]
	repositoryformatversion = 0
	filemode = false
	bare = false
	logallrefupdates = true
	ignorecase = true
[remote "origin"]
	url = https://novationsystems@dev.azure.com/novationsystems/novation-bootstrap/_git/novation-bootstrap
	fetch = +refs/heads/*:refs/remotes/origin/*
[gc]
	auto = 0
```
  Found on 2022-09-08 02:51
  
  294 Bytes
Create report

Open service 136.53.64.169:443 · connect.novationsys.com

2026-01-22 22:29

HTTP/1.1 200 OK
Cache-Control: private
Content-Length: 169735
Content-Type: text/html; charset=utf-8
Server: ScreenConnect/24.2.25.9295-1313536157 Microsoft-HTTPAPI/2.0
P3P: CP="NON CUR OUR STP STA PRE"
Date: Thu, 22 Jan 2026 22:29:05 GMT
Connection: close



<!DOCTYPE html>
<html>
<head><meta http-equiv="X-UA-Compatible" content="IE=edge" /><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no" />
	<script>

		function setTaggedSessionInfo(tag, taggedSessionInfo) {
			var oldTaggedSessionInfo = window._taggedSessionInfos[tag];
			window._taggedSessionInfos[tag] = taggedSessionInfo;

			if (!oldTaggedSessionInfo || taggedSessionInfo.SessionID != oldTaggedSessionInfo.SessionID || taggedSessionInfo.Code != oldTaggedSessionInfo.Code)
				SC.livedata.notifyDirty();
		}

		// backwards compatibility with extensions
		function setTaggedSessionID(tag, sessionID) {
			window.setTaggedSessionInfo(tag, { SessionID: sessionID });
		}

		function getTaggedSessionInfo(tag) {
			return window._taggedSessionInfos[tag];
		}
		
		function getSessionInfo() {
			var liveData = SC.livedata.get();
			return liveData && liveData.ResponseInfoMap && liveData.ResponseInfoMap['GuestSessionInfo']
		}

	</script>
<script src="Script.ashx?__Cache=cf21dc4f-04ac-4b66-99b1-a854e134c880" id="defaultScript"></script>
<script src="Scripts/SC.polyfill.ts?ScriptImportType=NoModule&amp;__Cache=1b686751-a013-476a-a03d-7530d0c898f3" nomodule="nomodule"></script>
<script src="Scripts/SC.main.ts?ScriptImportType=NoModule&amp;__Cache=5f46c8de-9521-47ea-86b6-c09dd7f65b69" nomodule="nomodule"></script>
<script src="Scripts/SC.main.ts?ScriptImportType=Classic&amp;__Cache=5f46c8de-9521-47ea-86b6-c09dd7f65b69"></script>
<link href="App_Themes/SolidWithNovationGreen/AccentNovationGreen.css?__Cache=4bf1422b-ffe5-42f5-a707-2f8e3c6e2f7e" type="text/css" rel="stylesheet" /><link href="App_Themes/SolidWithNovationGreen/Default.css?__Cache=4566b62d-44cb-488e-8bf4-6573ee34835b" type="text/css" rel="stylesheet" /><link href="FavIcon.axd?__Cache=86a6c8b7-888a-4072-9c4b-47c5b0365ee3" rel="shortcut icon" />
<script>SC.util.mergeIntoContext({"focusedControlID":null,"userName":"","userDisplayName":"","isUserAuthenticated":false,"antiForgeryToken":"vKccil0TQYazdltuwDNl2DIrKw/dGG+iz3w1i67RsdYBAABtA2I3CcItQg==","isUserAdministrator":false,"canManageSharedToolbox":false,"pageBaseFileName":"Guest","notifyActivityFrequencyMilliseconds":600000,"loginAfterInactivityMilliseconds":36000000,"canChangePassword":false,"controlPanelUrl":null,"pageType":"GuestPage","processType":2,"userAgentOverride":null,"sessionTypeInfos":[],"imports":{"SC.editor":"Scripts/SC.editor.ts?ScriptImportType=EsModule\u0026__Cache=6d6cb603-b1c7-4f66-8af6-a6dd69fda7d0"}});</script>
<link href="App_Extensions/20173114-38b3-4ad3-948b-45f0f447f07c/Style.css" type="text/css" rel="stylesheet" />
<script>SC.extension.addInitializeProc('44d2c8bf-282f-4ffe-bce3-eb63e4b84c02', function (extensionContext) {
// If Custom Theme Manager extension is enabled, add help link to extension options dropdown

var customThemeManagerExtensionId = extensionContext.baseUrl.split("/").slice(-2)[0];
var customThemeManagerHelpLink = "https://help.screenconnect.com/Extension:Custom_Theme_Manager";

// Object.keys will retrieve the keys in order of when they were added
var colorElementPrefixToCssPropertyMap = SC.util.combineObjects.apply(null, ['PrimaryColor', 'SecondaryColor', 'OddSessionRowColor', 'EvenSessionRowColor', 'HeaderBackgroundColor', 'NavigationPanelBackgroundColor', 'MasterPanelBackgroundColor', 'UnacknowledgedMessageDotColor'].map(function (_) {
	return {
		[_]: _.charAt(0).toLowerCase() + _.slice(1),
	};
}));

SC.event.addGlobalHandler(SC.event.QueryCommandButtonState, function (eventArgs) {
	if (eventArgs.commandName == 'EditExtensionSettings')
		if (eventArgs.commandContext.extensionInfo.ExtensionID == customThemeManagerExtensionId && eventArgs.commandElement._commandName == "EditExtensionSettings")
			SC.ui.addElement(
				eventArgs.target.parentElement,
				"A",
				{ href: "#", _commandName: 'ShowHelpLink_' + customThemeManagerExtensionId, innerHTML: 'Help' }
			);
});

SC.event.addGlobalHandler(SC.event.ExecuteCommand, function (eventArgs) {
	if (eventArgs.commandName == 'S

Found 2026-01-22 by HttpPlugin

Create report

Open service 18.188.129.210:80 · project.novationsys.com

2026-01-22 08:23

HTTP/1.1 301 Moved Permanently
Date: Thu, 22 Jan 2026 08:23:48 GMT
Server: Apache/2.4.52 (Ubuntu)
Content-Type: text/html; charset=utf-8
Location: https://project.novationsys.com/
X-Frame-Options: SAMEORIGIN
Content-Length: 0
Connection: close

Found 2026-01-22 by HttpPlugin

Create report

Open service 18.188.129.210:443 · project.novationsys.com

2026-01-22 08:23

HTTP/1.1 302 Found
Date: Thu, 22 Jan 2026 08:23:29 GMT
Server: Apache/2.4.52 (Ubuntu)
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
Content-Type: text/html; charset=utf-8
Location: https://project.novationsys.com/login?back_url=https%3A%2F%2Fproject.novationsys.com%2F
Cache-Control: no-cache
Vary: Accept-Encoding
Content-Security-Policy: default-src 'self' https://*.chargebee.com https://openproject-docs.s3.eu-central-1.amazonaws.com; base-uri 'self'; font-src 'self' https://*.chargebee.com data: 'self'; form-action 'self' https://*.chargebee.com https://openproject-docs.s3.eu-central-1.amazonaws.com; frame-src https://releases.openproject.com/v1/check.svg https://*.chargebee.com 'self'; frame-ancestors 'self'; img-src * data: blob:; script-src 'self' https://*.chargebee.com js.chargebee.com 'nonce-I3VNAIMipBbSB8UxUXZGjw=='; script-src-attr 'none'; style-src 'self' https://*.chargebee.com 'unsafe-inline'; object-src https://releases.openproject.com/v1/check.svg; connect-src 'self' https://*.chargebee.com https://start.openproject.com; media-src 'self' https://*.chargebee.com https://openproject-docs.s3.eu-central-1.amazonaws.com
X-Request-Id: 405acada-133b-43cc-be51-3eaeb62ced74
X-Runtime: 0.008466
Strict-Transport-Security: max-age=63072000; includeSubDomains
Content-Length: 0
Set-Cookie: _open_project_session=656b9dbe5f2d730e5184aae67df4cc5f; path=/; secure; HttpOnly
Connection: close

Found 2026-01-22 by HttpPlugin