Apache
tcp/443 tcp/80
The following Sophos firewall is publicly accessible and looks out-dated :
It is critical to update to a safe version as soon as possible since multiple CVEs allow remote attackers to DoS or achieve RCE (Remote code execution) on the firewall. Those vulnerabilities are currently used in ransomware campaign and could damage your network.
Reference:
Severity: critical
Fingerprint: 0b25d4f0a9de5b4d45769e527b15558e7b15558e7b15558e7b15558e7b15558e
Found SOPHOS firewall user portal Vulnerable to CVE-2022-1040
Open service 182.93.91.148:80
2024-03-03 12:55
HTTP/1.1 403 Forbidden Date: Sun, 03 Mar 2024 12:55:13 GMT Server: Apache Content-Length: 199 Connection: close Content-Type: text/html; charset=iso-8859-1 Page title: 403 Forbidden <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>403 Forbidden</title> </head><body> <h1>Forbidden</h1> <p>You don't have permission to access this resource.</p> </body></html>
Open service 182.93.91.148:443
2024-03-02 22:13
HTTP/1.1 403 Forbidden Date: Sat, 02 Mar 2024 22:13:52 GMT Server: Apache Content-Length: 199 Connection: close Content-Type: text/html; charset=iso-8859-1 Page title: 403 Forbidden <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>403 Forbidden</title> </head><body> <h1>Forbidden</h1> <p>You don't have permission to access this resource.</p> </body></html>