LeakIX - Host 52.27.170.239

Host 52.27.170.239

United States

AMAZON-02

Exposed GoAnywhere MFT administration interface

Exposed GoAnywhere MFT are subject to an unfixed 0day RCE and should be considered unsafe when made public.

IP: 52.27.170.239
Port: 8001
URL: https://52.27.170.239:8001

First seen 2022-11-19 11:32
Last seen 2024-09-01 19:57
Open for 652 days

Severity: critical
Fingerprint: b1a07937af044f4619de6baafb4635b9fb4635b9fb4635b9fb4635b9fb4635b9
```
Found vulnerable GoAnywhere MFT:
Affected by CVE-2024-0204
```
Found on 2024-09-01 19:57
Severity: critical
Fingerprint: b1a07937af044f4619de6baab5894bf3b5894bf3b5894bf3b5894bf3b5894bf3
```
Found vulnerable GoAnywhere MFT:
Affected by CVE-2023-0669
```
Found on 2024-01-11 05:46

Fingerprint: b1a07937a2043ad77ce9e52bcf7c9d76a8cc3f8505c08e70a1b7b4ce55f18a78

Server: Apache-Coyote/1.1
Set-Cookie: RSESSIONID=8A9363755B6D4BBA602A707FE5B0DAE0; Path=/; Secure; HttpOnly
Location: /goanywhere
Content-Type: text/html;charset=UTF-8
Content-Length: 0
Date: Tue, 10 Jan 2023 07:50:04 GMT
Connection: close

Found on 2023-01-10 07:49

Fingerprint: b1a07937a2043ad77ce9e52bd9b3818b4b2d8f7e1b10b7c5a77cb02d6e44f749

Server: Apache-Coyote/1.1
Set-Cookie: RSESSIONID=67AA9CDAFDE5E758FBEE57252C9E15FE; Path=/; Secure; HttpOnly
Location: /goanywhere
Content-Type: text/html;charset=UTF-8
Content-Length: 0
Date: Thu, 05 Jan 2023 21:34:42 GMT
Connection: close

Found on 2023-01-05 21:34

Fingerprint: b1a07937a2043ad77ce9e52b7740ced02d7d7c6f18687462984d49b01118b24a

Server: Apache-Coyote/1.1
Set-Cookie: RSESSIONID=720ECCCC11159A81B26652335990ABA8; Path=/; Secure; HttpOnly
Location: /goanywhere
Content-Type: text/html;charset=UTF-8
Content-Length: 0
Date: Thu, 08 Dec 2022 22:34:30 GMT
Connection: close

Found on 2022-12-08 22:34

Fingerprint: b1a07937a2043ad77ce9e52b189b3020f9421a3f8587e0d215f6f7a07de4697a

Server: Apache-Coyote/1.1
Set-Cookie: RSESSIONID=A81E2495F5CD80D30FDF4B5354B6C77C; Path=/; Secure; HttpOnly
Location: /goanywhere
Content-Type: text/html;charset=UTF-8
Content-Length: 0
Date: Sat, 19 Nov 2022 11:32:12 GMT
Connection: close

Found on 2022-11-19 11:32

Create report

Exposed GoAnywhere MFT administration interface

Exposed GoAnywhere MFT are subject to an unfixed 0day RCE and should be considered unsafe when made public.

IP: 52.27.170.239
Port: 8000
URL: http://52.27.170.239:8000

First seen 2022-11-24 04:19
Last seen 2024-02-01 17:49
Open for 434 days

Severity: critical
Fingerprint: b1a07937af044f4619de6baafb4635b9fb4635b9fb4635b9fb4635b9fb4635b9
```
Found vulnerable GoAnywhere MFT:
Affected by CVE-2024-0204
```
Found on 2024-02-01 17:49
Severity: critical
Fingerprint: b1a07937af044f4619de6baab5894bf3b5894bf3b5894bf3b5894bf3b5894bf3
```
Found vulnerable GoAnywhere MFT:
Affected by CVE-2023-0669
```
Found on 2024-01-06 22:35

Fingerprint: b1a07937a2043ad77ce9e52b3baf8161bb692f4ccc10d2db16a32b5b44eb01e7

Server: Apache-Coyote/1.1
Set-Cookie: RSESSIONID=2D8AC87A6C7799F334A04F4BDC6FC1D1; Path=/; HttpOnly
Location: /goanywhere
Content-Type: text/html;charset=UTF-8
Content-Length: 0
Date: Thu, 19 Jan 2023 13:44:51 GMT
Connection: close

Found on 2023-01-19 13:44

Fingerprint: b1a07937a2043ad77ce9e52ba779a08450eaaf4b8b2753defe797a14114d3a76

Server: Apache-Coyote/1.1
Set-Cookie: RSESSIONID=A62109DABD67393F68256299DA94DC7F; Path=/; HttpOnly
Location: /goanywhere
Content-Type: text/html;charset=UTF-8
Content-Length: 0
Date: Thu, 05 Jan 2023 12:43:06 GMT
Connection: close

Found on 2023-01-05 12:43

Fingerprint: b1a07937a2043ad77ce9e52b5f620656512e06257e238150214845aec0c5fc18

Server: Apache-Coyote/1.1
Set-Cookie: RSESSIONID=DEC2100B136BCEB6120205A92367CA06; Path=/; HttpOnly
Location: /goanywhere
Content-Type: text/html;charset=UTF-8
Content-Length: 0
Date: Mon, 02 Jan 2023 05:06:06 GMT
Connection: close

Found on 2023-01-02 05:06

Fingerprint: b1a07937a2043ad77ce9e52ba6a614a6fbfb42f55c392680077a025e3a0c0c48

Server: Apache-Coyote/1.1
Set-Cookie: RSESSIONID=4CC6C48A571C810C29E5A2EC116941D7; Path=/; HttpOnly
Location: /goanywhere
Content-Type: text/html;charset=UTF-8
Content-Length: 0
Date: Thu, 24 Nov 2022 04:19:10 GMT
Connection: close

Found on 2022-11-24 04:19

Create report

Domain summary

No record