Microsoft-HTTPAPI 2.0
tcp/8040
Microsoft-IIS 10.0
tcp/80
ScreenConnect 23.9.10.8817-2675707759
tcp/8040
The following ConnectWise ScreenConnect is publicly accessible and is vulnerable :
It is critical to update to a safe version as soon as possible since a vulnerability allow remote attackers to create administrative users on the service. Those vulnerabilities are currently used in ransomware campaign and could damage your network.
Reference:
Severity: critical
Fingerprint: 0aef249104a4b7b068d399e6a933d6dca933d6dca933d6dca933d6dca933d6dc
Found vulnerable ConnectWise ScreenConnect: Affected by CW-2024-02-20
Open service 217.76.59.143:8040
2024-12-21 23:59
HTTP/1.1 302 Found Cache-Control: private Content-Length: 134 Content-Type: text/html; charset=utf-8 Location: /SetupWizard.aspx Server: ScreenConnect/23.9.10.8817-2675707759 Microsoft-HTTPAPI/2.0 Date: Sat, 21 Dec 2024 23:59:05 GMT Connection: close Page title: Object moved <html><head><title>Object moved</title></head><body> <h2>Object moved to <a href="/SetupWizard.aspx">here</a>.</h2> </body></html>
Open service 217.76.59.143:8040
2024-12-19 23:15
HTTP/1.1 302 Found Cache-Control: private Content-Length: 134 Content-Type: text/html; charset=utf-8 Location: /SetupWizard.aspx Server: ScreenConnect/23.9.10.8817-2675707759 Microsoft-HTTPAPI/2.0 Date: Thu, 19 Dec 2024 23:15:30 GMT Connection: close Page title: Object moved <html><head><title>Object moved</title></head><body> <h2>Object moved to <a href="/SetupWizard.aspx">here</a>.</h2> </body></html>
Open service 217.76.59.143:8040
2024-12-18 00:05
HTTP/1.1 302 Found Cache-Control: private Content-Length: 134 Content-Type: text/html; charset=utf-8 Location: /SetupWizard.aspx Server: ScreenConnect/23.9.10.8817-2675707759 Microsoft-HTTPAPI/2.0 Date: Wed, 18 Dec 2024 00:05:27 GMT Connection: close Page title: Object moved <html><head><title>Object moved</title></head><body> <h2>Object moved to <a href="/SetupWizard.aspx">here</a>.</h2> </body></html>
Open service 217.76.59.143:8040
2024-12-15 23:07
HTTP/1.1 302 Found Cache-Control: private Content-Length: 134 Content-Type: text/html; charset=utf-8 Location: /SetupWizard.aspx Server: ScreenConnect/23.9.10.8817-2675707759 Microsoft-HTTPAPI/2.0 Date: Sun, 15 Dec 2024 23:07:59 GMT Connection: close Page title: Object moved <html><head><title>Object moved</title></head><body> <h2>Object moved to <a href="/SetupWizard.aspx">here</a>.</h2> </body></html>
Open service 217.76.59.143:8040
2024-12-13 23:09
HTTP/1.1 302 Found Cache-Control: private Content-Length: 134 Content-Type: text/html; charset=utf-8 Location: /SetupWizard.aspx Server: ScreenConnect/23.9.10.8817-2675707759 Microsoft-HTTPAPI/2.0 Date: Fri, 13 Dec 2024 23:09:17 GMT Connection: close Page title: Object moved <html><head><title>Object moved</title></head><body> <h2>Object moved to <a href="/SetupWizard.aspx">here</a>.</h2> </body></html>
Open service 217.76.59.143:8040
2024-12-11 23:55
HTTP/1.1 302 Found Cache-Control: private Content-Length: 134 Content-Type: text/html; charset=utf-8 Location: /SetupWizard.aspx Server: ScreenConnect/23.9.10.8817-2675707759 Microsoft-HTTPAPI/2.0 Date: Wed, 11 Dec 2024 23:55:49 GMT Connection: close Page title: Object moved <html><head><title>Object moved</title></head><body> <h2>Object moved to <a href="/SetupWizard.aspx">here</a>.</h2> </body></html>
Open service 217.76.59.143:8040
2024-12-02 00:24
HTTP/1.1 302 Found Cache-Control: private Content-Length: 134 Content-Type: text/html; charset=utf-8 Location: /SetupWizard.aspx Server: ScreenConnect/23.9.10.8817-2675707759 Microsoft-HTTPAPI/2.0 Date: Mon, 02 Dec 2024 00:24:11 GMT Connection: close Page title: Object moved <html><head><title>Object moved</title></head><body> <h2>Object moved to <a href="/SetupWizard.aspx">here</a>.</h2> </body></html>
Open service 217.76.59.143:8040
2024-11-29 22:44
HTTP/1.1 302 Found Cache-Control: private Content-Length: 134 Content-Type: text/html; charset=utf-8 Location: /SetupWizard.aspx Server: ScreenConnect/23.9.10.8817-2675707759 Microsoft-HTTPAPI/2.0 Date: Fri, 29 Nov 2024 22:44:15 GMT Connection: close Page title: Object moved <html><head><title>Object moved</title></head><body> <h2>Object moved to <a href="/SetupWizard.aspx">here</a>.</h2> </body></html>
Open service 217.76.59.143:8040
2024-11-27 22:41
HTTP/1.1 302 Found Cache-Control: private Content-Length: 134 Content-Type: text/html; charset=utf-8 Location: /SetupWizard.aspx Server: ScreenConnect/23.9.10.8817-2675707759 Microsoft-HTTPAPI/2.0 Date: Wed, 27 Nov 2024 22:41:50 GMT Connection: close Page title: Object moved <html><head><title>Object moved</title></head><body> <h2>Object moved to <a href="/SetupWizard.aspx">here</a>.</h2> </body></html>
Open service 217.76.59.143:80
2024-11-20 10:44
HTTP/1.1 200 OK Content-Type: text/html Last-Modified: Mon, 24 Jan 2022 13:44:42 GMT Accept-Ranges: bytes ETag: "081e8a2811d81:0" Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 20 Nov 2024 10:44:55 GMT Connection: close Content-Length: 342 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <meta META HTTP-EQUIV=Refresh CONTENT="0; URL=/WCC2/" /> <title></title> </head> <body> <script> window.navigate("/WCC2/"); </script> </body> </html>
Open service 217.76.59.143:8040
2024-11-20 10:09
HTTP/1.1 302 Found Cache-Control: private Content-Length: 134 Content-Type: text/html; charset=utf-8 Location: /SetupWizard.aspx Server: ScreenConnect/23.9.10.8817-2675707759 Microsoft-HTTPAPI/2.0 Date: Wed, 20 Nov 2024 10:09:45 GMT Connection: close Page title: Object moved <html><head><title>Object moved</title></head><body> <h2>Object moved to <a href="/SetupWizard.aspx">here</a>.</h2> </body></html>