Host 5.160.172.181
Iran
Software information
Sophos Firewall
tcp/8443
xxxx
tcp/8443
-
Sophos firewall outdated
The following Sophos firewall is publicly accessible and looks out-dated :
It is critical to update to a safe version as soon as possible since multiple CVEs allow remote attackers to DoS or achieve RCE (Remote code execution) on the firewall. Those vulnerabilities are currently used in ransomware campaign and could damage your network.
Reference:
First seen 2023-10-24 05:39
Last seen 2024-05-22 20:39
Open for 211 days-
Severity: critical
Fingerprint: 0b25d4f0a9de5b4d45769e527b15558e7b15558e7b15558e7b15558e7b15558eFound SOPHOS firewall user portal Vulnerable to CVE-2022-1040
Found on 2024-05-22 20:39
-
-
Open service 5.160.172.181:8443
2024-05-22 20:39
Found SOPHOS firewall user portal
Found 11 hours ago by SophosPluginCreate report
-
Open service 5.160.172.181:8443
2024-05-22 20:39
HTTP/1.1 302 Found Date: Wed, 22 May 2024 20:44:13 GMT Server: xxxx X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Location: https://5.160.172.181/userportal/webpages/myaccount/login.jsp Cache-Control: max-age=2592000 Expires: Fri, 21 Jun 2024 20:44:13 GMT Content-Length: 245 Connection: close Content-Type: text/html; charset=iso-8859-1 Page title: 302 Found <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>Found</h1> <p>The document has moved <a href="https://5.160.172.181/userportal/webpages/myaccount/login.jsp">here</a>.</p> </body></html>
Found 11 hours ago by HttpPluginCreate report
-
Open service 5.160.172.181:8443
2024-05-12 18:47
HTTP/1.1 302 Found Date: Sun, 12 May 2024 18:52:18 GMT Server: xxxx X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Location: https://5.160.172.181/userportal/webpages/myaccount/login.jsp Cache-Control: max-age=2592000 Expires: Tue, 11 Jun 2024 18:52:18 GMT Content-Length: 245 Connection: close Content-Type: text/html; charset=iso-8859-1 Page title: 302 Found <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>Found</h1> <p>The document has moved <a href="https://5.160.172.181/userportal/webpages/myaccount/login.jsp">here</a>.</p> </body></html>
Found 2024-05-12 by HttpPluginCreate report
-
Open service 5.160.172.181:8443
2024-05-12 18:47
Found SOPHOS firewall user portal
Found 2024-05-12 by SophosPluginCreate report
-
Open service 5.160.172.181:8443
2024-05-08 13:04
Found SOPHOS firewall user portal
Found 2024-05-08 by SophosPluginCreate report
-
Open service 5.160.172.181:8443
2024-05-08 13:04
HTTP/1.1 302 Found Date: Wed, 08 May 2024 13:08:38 GMT Server: xxxx X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Location: https://5.160.172.181/userportal/webpages/myaccount/login.jsp Cache-Control: max-age=2592000 Expires: Fri, 07 Jun 2024 13:08:38 GMT Content-Length: 245 Connection: close Content-Type: text/html; charset=iso-8859-1 Page title: 302 Found <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>Found</h1> <p>The document has moved <a href="https://5.160.172.181/userportal/webpages/myaccount/login.jsp">here</a>.</p> </body></html>
Found 2024-05-08 by HttpPluginCreate report
-
Open service 5.160.172.181:8443
2024-04-30 19:06
HTTP/1.1 302 Found Date: Tue, 30 Apr 2024 19:11:04 GMT Server: xxxx X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Location: https://5.160.172.181/userportal/webpages/myaccount/login.jsp Cache-Control: max-age=2592000 Expires: Thu, 30 May 2024 19:11:04 GMT Content-Length: 245 Connection: close Content-Type: text/html; charset=iso-8859-1 Page title: 302 Found <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>Found</h1> <p>The document has moved <a href="https://5.160.172.181/userportal/webpages/myaccount/login.jsp">here</a>.</p> </body></html>
Found 2024-04-30 by HttpPluginCreate report
-
Open service 5.160.172.181:8443
2024-04-30 19:06
Found SOPHOS firewall user portal
Found 2024-04-30 by SophosPluginCreate report
-
Open service 5.160.172.181:8443
2024-04-28 18:17
Found SOPHOS firewall user portal
Found 2024-04-28 by SophosPluginCreate report
-
Open service 5.160.172.181:8443
2024-04-28 18:17
HTTP/1.1 302 Found Date: Sun, 28 Apr 2024 18:21:25 GMT Server: xxxx X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Location: https://5.160.172.181/userportal/webpages/myaccount/login.jsp Cache-Control: max-age=2592000 Expires: Tue, 28 May 2024 18:21:25 GMT Content-Length: 245 Connection: close Content-Type: text/html; charset=iso-8859-1 Page title: 302 Found <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>302 Found</title> </head><body> <h1>Found</h1> <p>The document has moved <a href="https://5.160.172.181/userportal/webpages/myaccount/login.jsp">here</a>.</p> </body></html>
Found 2024-04-28 by HttpPluginCreate report