Microsoft-HTTPAPI 2.0
tcp/8040
ScreenConnect 24.1.9.8915-3222996157
tcp/8040
The following ConnectWise ScreenConnect is publicly accessible and is vulnerable :
It is critical to update to a safe version as soon as possible since a vulnerability allow remote attackers to create administrative users on the service. Those vulnerabilities are currently used in ransomware campaign and could damage your network.
Reference:
Severity: critical
Fingerprint: 0aef249104a4b7b068d399e6a933d6dca933d6dca933d6dca933d6dca933d6dc
Found vulnerable ConnectWise ScreenConnect: Affected by CW-2024-02-20
Open service 149.135.36.80:8040
2024-12-22 00:27
HTTP/1.1 302 Found Cache-Control: private Content-Length: 134 Content-Type: text/html; charset=utf-8 Location: /SetupWizard.aspx Server: ScreenConnect/24.1.9.8915-3222996157 Microsoft-HTTPAPI/2.0 Date: Sun, 22 Dec 2024 00:27:31 GMT Connection: close Page title: Object moved <html><head><title>Object moved</title></head><body> <h2>Object moved to <a href="/SetupWizard.aspx">here</a>.</h2> </body></html>
Open service 149.135.36.80:8040
2024-12-20 00:16
HTTP/1.1 302 Found Cache-Control: private Content-Length: 134 Content-Type: text/html; charset=utf-8 Location: /SetupWizard.aspx Server: ScreenConnect/24.1.9.8915-3222996157 Microsoft-HTTPAPI/2.0 Date: Fri, 20 Dec 2024 00:16:12 GMT Connection: close Page title: Object moved <html><head><title>Object moved</title></head><body> <h2>Object moved to <a href="/SetupWizard.aspx">here</a>.</h2> </body></html>
Open service 149.135.36.80:8040
2024-12-18 00:37
HTTP/1.1 302 Found Cache-Control: private Content-Length: 134 Content-Type: text/html; charset=utf-8 Location: /SetupWizard.aspx Server: ScreenConnect/24.1.9.8915-3222996157 Microsoft-HTTPAPI/2.0 Date: Wed, 18 Dec 2024 00:37:19 GMT Connection: close Page title: Object moved <html><head><title>Object moved</title></head><body> <h2>Object moved to <a href="/SetupWizard.aspx">here</a>.</h2> </body></html>
Open service 149.135.36.80:8040
2024-12-15 22:56
HTTP/1.1 302 Found Cache-Control: private Content-Length: 134 Content-Type: text/html; charset=utf-8 Location: /SetupWizard.aspx Server: ScreenConnect/24.1.9.8915-3222996157 Microsoft-HTTPAPI/2.0 Date: Sun, 15 Dec 2024 22:56:10 GMT Connection: close Page title: Object moved <html><head><title>Object moved</title></head><body> <h2>Object moved to <a href="/SetupWizard.aspx">here</a>.</h2> </body></html>
Open service 149.135.36.80:8040
2024-12-13 21:50
HTTP/1.1 302 Found Cache-Control: private Content-Length: 134 Content-Type: text/html; charset=utf-8 Location: /SetupWizard.aspx Server: ScreenConnect/24.1.9.8915-3222996157 Microsoft-HTTPAPI/2.0 Date: Fri, 13 Dec 2024 21:50:22 GMT Connection: close Page title: Object moved <html><head><title>Object moved</title></head><body> <h2>Object moved to <a href="/SetupWizard.aspx">here</a>.</h2> </body></html>
Open service 149.135.36.80:8040
2024-12-11 21:34
HTTP/1.1 302 Found Cache-Control: private Content-Length: 134 Content-Type: text/html; charset=utf-8 Location: /SetupWizard.aspx Server: ScreenConnect/24.1.9.8915-3222996157 Microsoft-HTTPAPI/2.0 Date: Wed, 11 Dec 2024 21:34:30 GMT Connection: close Page title: Object moved <html><head><title>Object moved</title></head><body> <h2>Object moved to <a href="/SetupWizard.aspx">here</a>.</h2> </body></html>
Open service 149.135.36.80:8040
2024-12-02 00:07
HTTP/1.1 302 Found Cache-Control: private Content-Length: 134 Content-Type: text/html; charset=utf-8 Location: /SetupWizard.aspx Server: ScreenConnect/24.1.9.8915-3222996157 Microsoft-HTTPAPI/2.0 Date: Mon, 02 Dec 2024 00:07:50 GMT Connection: close Page title: Object moved <html><head><title>Object moved</title></head><body> <h2>Object moved to <a href="/SetupWizard.aspx">here</a>.</h2> </body></html>
Open service 149.135.36.80:8040
2024-11-30 00:50
HTTP/1.1 302 Found Cache-Control: private Content-Length: 134 Content-Type: text/html; charset=utf-8 Location: /SetupWizard.aspx Server: ScreenConnect/24.1.9.8915-3222996157 Microsoft-HTTPAPI/2.0 Date: Sat, 30 Nov 2024 00:50:41 GMT Connection: close Page title: Object moved <html><head><title>Object moved</title></head><body> <h2>Object moved to <a href="/SetupWizard.aspx">here</a>.</h2> </body></html>
Open service 149.135.36.80:8040
2024-11-27 23:41
HTTP/1.1 302 Found Cache-Control: private Content-Length: 134 Content-Type: text/html; charset=utf-8 Location: /SetupWizard.aspx Server: ScreenConnect/24.1.9.8915-3222996157 Microsoft-HTTPAPI/2.0 Date: Wed, 27 Nov 2024 23:41:17 GMT Connection: close Page title: Object moved <html><head><title>Object moved</title></head><body> <h2>Object moved to <a href="/SetupWizard.aspx">here</a>.</h2> </body></html>