logo

511,000+ End-of-Life IIS Instances Found Online, Raising Security Risks

ID: bc8ffb3b-2994-5d63-ac77-7e4a45bc02a0

STIX ID: report--bc8ffb3b-2994-5d63-ac77-7e4a45bc02a0

Feed Name: GBHackers

Threat Score
70/100

Date Published: 2026-03-23

Date Updated: 2026-07-21

Author: Divya

...
...

Shadowserver researchers identified 511,000+ internet-facing End-of-Life Microsoft IIS servers (over 227,000 beyond Extended Security Updates), concentrated mainly in China and the United States, creating a wide, unpatched attack surface; Shadowserver has updated its Vulnerable HTTP reports and dashboards to tag these hosts as 'eol-iis' and 'eos-iis' to help owners and national CERTs remediate the risk.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.