LeakIX - Host 41.193.147.120

Host 41.193.147.120

South Africa

Vox-Telecom

Software information

Sophos Firewall

tcp/8443

xxxx

tcp/8443

Sophos firewall outdated
The following Sophos firewall is publicly accessible and looks out-dated :

It is critical to update to a safe version as soon as possible since multiple CVEs allow remote attackers to DoS or achieve RCE (Remote code execution) on the firewall. Those vulnerabilities are currently used in ransomware campaign and could damage your network.

Reference:

https://www.cvedetails.com/cve/CVE-2022-1040
IP: 41.193.147.120
Port: 8443
URL: https://41.193.147.120:8443

First seen 2023-10-24 03:50
Last seen 2024-11-24 00:16
Open for 396 days
- Severity: critical
  Fingerprint: 0b25d4f0a9de5b4d45769e527b15558e7b15558e7b15558e7b15558e7b15558e
```
Found SOPHOS firewall user portal
Vulnerable to CVE-2022-1040
```
  Found on 2024-11-24 00:16
Create report
SSH is potenitally vulnerable

WARNING: This plugin will generate false positive and is purely informative:

regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)

IP: 41.193.147.120
Port: 22

First seen 2024-07-03 20:29
Last seen 2024-11-23 21:33
Open for 143 days
- Severity: info
  Fingerprint: 3f43e0ebb5dce37ab8b59eb5ffe8ab2b0c11d8260c11d8260c11d8260c11d826
```
Found potentially vulnerable SSH version:
SSH-2.0-OpenSSH_4.3
WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
```
  Found on 2024-11-23 21:33
Create report

Open service 41.193.147.120:8443

2024-11-20 00:27

HTTP/1.1 302 Found
Date: Wed, 20 Nov 2024 00:27:30 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
Location: https://41.193.147.120/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Fri, 20 Dec 2024 00:27:30 GMT
Content-Length: 246
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://41.193.147.120/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found 2024-11-20 by HttpPlugin

Create report

Open service 41.193.147.120:8443

2024-11-20 00:27
```
Found SOPHOS firewall user portal
```
Found 2024-11-20 by SophosPlugin
Create report
Open service 41.193.147.120:22

2024-11-19 21:34
Found 2024-11-19 by SSHOpenPlugin
Create report

Open service 41.193.147.120:8443

2024-11-18 00:19

HTTP/1.1 302 Found
Date: Mon, 18 Nov 2024 00:19:18 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
Location: https://41.193.147.120/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Wed, 18 Dec 2024 00:19:18 GMT
Content-Length: 246
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://41.193.147.120/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found 2024-11-18 by HttpPlugin

Create report

Open service 41.193.147.120:8443

2024-11-18 00:19
```
Found SOPHOS firewall user portal
```
Found 2024-11-18 by SophosPlugin
Create report
Open service 41.193.147.120:22

2024-11-17 21:44
Found 2024-11-17 by SSHOpenPlugin
Create report

Open service 41.193.147.120:8443

2024-11-16 01:05

HTTP/1.1 302 Found
Date: Sat, 16 Nov 2024 01:05:40 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
Location: https://41.193.147.120/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Mon, 16 Dec 2024 01:05:40 GMT
Content-Length: 246
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://41.193.147.120/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found 2024-11-16 by HttpPlugin

Create report

Open service 41.193.147.120:8443

2024-11-16 01:05
```
Found SOPHOS firewall user portal
```
Found 2024-11-16 by SophosPlugin
Create report
Open service 41.193.147.120:22

2024-11-15 23:12
Found 2024-11-15 by SSHOpenPlugin
Create report
Open service 41.193.147.120:8443

2024-11-02 02:04
```
Found SOPHOS firewall user portal
```
Found 2024-11-02 by SophosPlugin
Create report

Open service 41.193.147.120:8443

2024-11-02 02:04

HTTP/1.1 302 Found
Date: Sat, 02 Nov 2024 02:04:23 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
Location: https://41.193.147.120/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Mon, 02 Dec 2024 02:04:23 GMT
Content-Length: 246
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://41.193.147.120/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found 2024-11-02 by HttpPlugin

Create report

Open service 41.193.147.120:22

2024-11-01 23:44
Found 2024-11-01 by SSHOpenPlugin
Create report
Open service 41.193.147.120:8443

2024-10-31 23:25
```
Found SOPHOS firewall user portal
```
Found 2024-10-31 by SophosPlugin
Create report

Open service 41.193.147.120:8443

2024-10-31 23:25

HTTP/1.1 302 Found
Date: Thu, 31 Oct 2024 23:26:06 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
Location: https://41.193.147.120/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Sat, 30 Nov 2024 23:26:06 GMT
Content-Length: 246
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://41.193.147.120/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found 2024-10-31 by HttpPlugin

Create report

Open service 41.193.147.120:22

2024-10-31 21:32
Found 2024-10-31 by SSHOpenPlugin
Create report

Open service 41.193.147.120:8443

2024-10-30 00:16

HTTP/1.1 302 Found
Date: Wed, 30 Oct 2024 00:16:37 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
Location: https://41.193.147.120/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Fri, 29 Nov 2024 00:16:37 GMT
Content-Length: 246
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://41.193.147.120/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found 2024-10-30 by HttpPlugin

Create report

Open service 41.193.147.120:8443

2024-10-30 00:16
```
Found SOPHOS firewall user portal
```
Found 2024-10-30 by SophosPlugin
Create report
Open service 41.193.147.120:22

2024-10-29 21:36
Found 2024-10-29 by SSHOpenPlugin
Create report

Open service 41.193.147.120:8443

2024-10-21 22:00

HTTP/1.1 302 Found
Date: Mon, 21 Oct 2024 22:00:51 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
Location: https://41.193.147.120/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Wed, 20 Nov 2024 22:00:51 GMT
Content-Length: 246
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://41.193.147.120/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found 2024-10-21 by HttpPlugin

Create report

Open service 41.193.147.120:8443

2024-10-21 22:00
```
Found SOPHOS firewall user portal
```
Found 2024-10-21 by SophosPlugin
Create report
Open service 41.193.147.120:22

2024-10-21 20:41
Found 2024-10-21 by SSHOpenPlugin
Create report

Open service 41.193.147.120:8443

2024-10-19 21:10

HTTP/1.1 302 Found
Date: Sat, 19 Oct 2024 21:10:32 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
Location: https://41.193.147.120/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Mon, 18 Nov 2024 21:10:32 GMT
Content-Length: 246
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://41.193.147.120/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found 2024-10-19 by HttpPlugin

Create report

Open service 41.193.147.120:8443

2024-10-19 21:10
```
Found SOPHOS firewall user portal
```
Found 2024-10-19 by SophosPlugin
Create report
Open service 41.193.147.120:22

2024-10-19 20:14
Found 2024-10-19 by SSHOpenPlugin
Create report

Open service 41.193.147.120:8443

2024-10-17 23:38

HTTP/1.1 302 Found
Date: Thu, 17 Oct 2024 23:38:10 GMT
Server: xxxx
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
Location: https://41.193.147.120/userportal/webpages/myaccount/login.jsp
Cache-Control: max-age=2592000
Expires: Sat, 16 Nov 2024 23:38:10 GMT
Content-Length: 246
Connection: close
Content-Type: text/html; charset=iso-8859-1

Page title: 302 Found

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>302 Found</title>
</head><body>
<h1>Found</h1>
<p>The document has moved <a href="https://41.193.147.120/userportal/webpages/myaccount/login.jsp">here</a>.</p>
</body></html>

Found 2024-10-17 by HttpPlugin

Create report

Open service 41.193.147.120:8443

2024-10-17 23:38
```
Found SOPHOS firewall user portal
```
Found 2024-10-17 by SophosPlugin
Create report
Open service 41.193.147.120:22

2024-10-17 21:59
Found 2024-10-17 by SSHOpenPlugin
Create report

Fingerprint:

55330ccc1607a56de2ee8e2b3aecaf45ceae37051c76d0ac5725eea59158c764

CN:

SophosApplianceCertificate_C12616022722-JSDONM

Key:

RSA-2048

Issuer:

Daytona

Not before:

2015-08-01 00:00

Not after:

2036-12-31 23:59

Domain summary

No record

Host 41.193.147.120

South Africa

Software information

Sophos firewall outdated

SSH is potenitally vulnerable

Domain summary