LeakIX - Host 213.29.61.91

Host 213.29.61.91

Czechia

T-Mobile Czech Republic a.s.

Software information

Sophos Firewall

tcp/443

xxxx

tcp/443

Sophos firewall outdated
The following Sophos firewall is publicly accessible and looks out-dated :

It is critical to update to a safe version as soon as possible since multiple CVEs allow remote attackers to DoS or achieve RCE (Remote code execution) on the firewall. Those vulnerabilities are currently used in ransomware campaign and could damage your network.

Reference:

https://www.cvedetails.com/cve/CVE-2022-1040
IP: 213.29.61.91
Port: 443
URL: https://213.29.61.91

First seen 2024-10-29 01:28
Last seen 2024-12-22 00:43
Open for 53 days
- Severity: critical
  Fingerprint: 0b25d4f0a9de5b4d45769e527b15558e7b15558e7b15558e7b15558e7b15558e
```
Found SOPHOS firewall user portal
Vulnerable to CVE-2022-1040
```
  Found on 2024-12-22 00:43
Create report

Open service 213.29.61.91:443

2024-12-22 00:43

HTTP/1.1 302 Found
Date: Sun, 22 Dec 2024 01:29:43 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Location: https://213.29.61.91/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Tue, 21 Jan 2025 01:29:43 GMT
Content-Length: 244
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://213.29.61.91/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found 8 hours ago by HttpPlugin

Create report

Open service 213.29.61.91:443

2024-12-22 00:43
```
Found SOPHOS firewall user portal
```
Found 8 hours ago by SophosPlugin
Create report

Open service 213.29.61.91:443 · ds216msx.direct.quickconnect.to

2024-12-21 00:55

HTTP/1.1 302 Found
Date: Sat, 21 Dec 2024 01:41:44 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Location: https://ds216msx.direct.quickconnect.to/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Mon, 20 Jan 2025 01:41:44 GMT
Content-Length: 263
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://ds216msx.direct.quickconnect.to/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found one day ago by HttpPlugin

Create report

Open service 213.29.61.91:443 · ds216msx.direct.quickconnect.to

2024-12-21 00:55
```
Found SOPHOS firewall user portal
```
Found one day ago by SophosPlugin
Create report
Open service 213.29.61.91:443 · regnum-software.direct.quickconnect.to

2024-12-20 21:52
```
Found SOPHOS firewall user portal
```
Found one day ago by SophosPlugin
Create report

Open service 213.29.61.91:443 · regnum-software.direct.quickconnect.to

2024-12-20 21:52

HTTP/1.1 302 Found
Date: Fri, 20 Dec 2024 22:38:49 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Location: https://regnum-software.direct.quickconnect.to/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Sun, 19 Jan 2025 22:38:49 GMT
Content-Length: 270
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://regnum-software.direct.quickconnect.to/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found one day ago by HttpPlugin

Create report

Open service 213.29.61.91:443

2024-12-20 00:49

HTTP/1.1 302 Found
Date: Fri, 20 Dec 2024 01:36:05 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Location: https://213.29.61.91/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Sun, 19 Jan 2025 01:36:05 GMT
Content-Length: 244
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://213.29.61.91/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found 2 days ago by HttpPlugin

Create report

Open service 213.29.61.91:443

2024-12-20 00:49
```
Found SOPHOS firewall user portal
```
Found 2 days ago by SophosPlugin
Create report

Open service 213.29.61.91:443 · ds216msx.direct.quickconnect.to

2024-12-19 03:03

HTTP/1.1 302 Found
Date: Thu, 19 Dec 2024 03:50:32 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Location: https://ds216msx.direct.quickconnect.to/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Sat, 18 Jan 2025 03:50:32 GMT
Content-Length: 263
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://ds216msx.direct.quickconnect.to/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found 2024-12-19 by HttpPlugin

Create report

Open service 213.29.61.91:443 · ds216msx.direct.quickconnect.to

2024-12-19 03:03
```
Found SOPHOS firewall user portal
```
Found 2024-12-19 by SophosPlugin
Create report
Open service 213.29.61.91:443 · regnum-software.direct.quickconnect.to

2024-12-18 18:09
```
Found SOPHOS firewall user portal
```
Found 2024-12-18 by SophosPlugin
Create report

Open service 213.29.61.91:443 · regnum-software.direct.quickconnect.to

2024-12-18 18:09

HTTP/1.1 302 Found
Date: Wed, 18 Dec 2024 18:56:12 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Location: https://regnum-software.direct.quickconnect.to/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Fri, 17 Jan 2025 18:56:12 GMT
Content-Length: 270
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://regnum-software.direct.quickconnect.to/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found 2024-12-18 by HttpPlugin

Create report

Open service 213.29.61.91:443

2024-12-18 01:23

HTTP/1.1 302 Found
Date: Wed, 18 Dec 2024 02:09:51 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Location: https://213.29.61.91/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Fri, 17 Jan 2025 02:09:51 GMT
Content-Length: 244
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://213.29.61.91/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found 2024-12-18 by HttpPlugin

Create report

Open service 213.29.61.91:443

2024-12-18 01:23
```
Found SOPHOS firewall user portal
```
Found 2024-12-18 by SophosPlugin
Create report
Open service 213.29.61.91:443

2024-12-15 23:59
```
Found SOPHOS firewall user portal
```
Found 2024-12-15 by SophosPlugin
Create report

Open service 213.29.61.91:443

2024-12-15 23:59

HTTP/1.1 302 Found
Date: Mon, 16 Dec 2024 00:46:07 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Location: https://213.29.61.91/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Wed, 15 Jan 2025 00:46:07 GMT
Content-Length: 244
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://213.29.61.91/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found 2024-12-15 by HttpPlugin

Create report

Open service 213.29.61.91:443 · ds216msx.direct.quickconnect.to

2024-12-15 13:29

HTTP/1.1 302 Found
Date: Sun, 15 Dec 2024 14:16:24 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Location: https://ds216msx.direct.quickconnect.to/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Tue, 14 Jan 2025 14:16:24 GMT
Content-Length: 263
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://ds216msx.direct.quickconnect.to/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found 2024-12-15 by HttpPlugin

Create report

Open service 213.29.61.91:443 · ds216msx.direct.quickconnect.to

2024-12-15 13:29
```
Found SOPHOS firewall user portal
```
Found 2024-12-15 by SophosPlugin
Create report
Open service 213.29.61.91:443 · regnum-software.direct.quickconnect.to

2024-12-14 13:33
```
Found SOPHOS firewall user portal
```
Found 2024-12-14 by SophosPlugin
Create report

Open service 213.29.61.91:443 · regnum-software.direct.quickconnect.to

2024-12-14 13:33

HTTP/1.1 302 Found
Date: Sat, 14 Dec 2024 14:20:12 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Location: https://regnum-software.direct.quickconnect.to/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Mon, 13 Jan 2025 14:20:12 GMT
Content-Length: 270
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://regnum-software.direct.quickconnect.to/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found 2024-12-14 by HttpPlugin

Create report

Open service 213.29.61.91:443

2024-12-13 23:44

HTTP/1.1 302 Found
Date: Sat, 14 Dec 2024 00:31:23 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Location: https://213.29.61.91/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Mon, 13 Jan 2025 00:31:23 GMT
Content-Length: 244
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://213.29.61.91/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found 2024-12-13 by HttpPlugin

Create report

Open service 213.29.61.91:443

2024-12-13 23:44
```
Found SOPHOS firewall user portal
```
Found 2024-12-13 by SophosPlugin
Create report
Open service 213.29.61.91:443

2024-12-12 00:44
```
Found SOPHOS firewall user portal
```
Found 2024-12-12 by SophosPlugin
Create report

Open service 213.29.61.91:443

2024-12-12 00:44

HTTP/1.1 302 Found
Date: Thu, 12 Dec 2024 01:30:40 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Location: https://213.29.61.91/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Sat, 11 Jan 2025 01:30:40 GMT
Content-Length: 244
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://213.29.61.91/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found 2024-12-12 by HttpPlugin

Create report

Open service 213.29.61.91:443

2024-12-02 01:08
```
Found SOPHOS firewall user portal
```
Found 2024-12-02 by SophosPlugin
Create report

Open service 213.29.61.91:443

2024-12-02 01:08

HTTP/1.1 302 Found
Date: Mon, 02 Dec 2024 01:54:13 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Location: https://213.29.61.91/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Wed, 01 Jan 2025 01:54:13 GMT
Content-Length: 244
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://213.29.61.91/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found 2024-12-02 by HttpPlugin

Create report

Open service 213.29.61.91:443

2024-11-30 00:13

HTTP/1.1 302 Found
Date: Sat, 30 Nov 2024 00:59:09 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Location: https://213.29.61.91/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Mon, 30 Dec 2024 00:59:09 GMT
Content-Length: 244
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://213.29.61.91/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found 2024-11-30 by HttpPlugin

Create report

Open service 213.29.61.91:443

2024-11-30 00:13
```
Found SOPHOS firewall user portal
```
Found 2024-11-30 by SophosPlugin
Create report

Open service 213.29.61.91:443

2024-11-28 00:30

HTTP/1.1 302 Found
Date: Thu, 28 Nov 2024 01:15:38 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Location: https://213.29.61.91/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Sat, 28 Dec 2024 01:15:38 GMT
Content-Length: 244
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://213.29.61.91/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found 2024-11-28 by HttpPlugin

Create report

Open service 213.29.61.91:443

2024-11-28 00:30
```
Found SOPHOS firewall user portal
```
Found 2024-11-28 by SophosPlugin
Create report
Open service 213.29.61.91:443

2024-11-20 14:04
```
Found SOPHOS firewall user portal
```
Found 2024-11-20 by SophosPlugin
Create report

Open service 213.29.61.91:443

2024-11-20 14:04

HTTP/1.1 302 Found
Date: Wed, 20 Nov 2024 14:49:09 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Location: https://213.29.61.91/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Fri, 20 Dec 2024 14:49:09 GMT
Content-Length: 244
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://213.29.61.91/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found 2024-11-20 by HttpPlugin

Create report

Fingerprint:

3b54703072624d4d4808ec4e8f4678f8c46892720df990f127d0ffa8499e87a4

CN:

SophosApplianceCertificate_C190A246DVMPG38

Key:

RSA-2048

Issuer:

Sophos_CA_C190A246DVMPG38

Not before:

2015-08-01 00:00

Not after:

2036-12-31 23:59

Domain summary

ds216msx.direct.quickconnect.to 5 regnum-software.direct.quickconnect.to 5

2 recorded

Host 213.29.61.91

Czechia

Software information

Sophos firewall outdated

Domain summary