GeneralInformation

Hostnames	alm.dma.geonomix.kz
Domains	geonomix.kz
Country	Kazakhstan
City	Taldykorgan
Organization	Taldykorgan
ISP	JSC Kazakhtelecom
ASN	AS9198

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

OpenPorts

80 443 10050

80 / tcp

1584412971 | 2025-03-15T11:52:35.301288

Hashes

hash

1795613295

http.dom_hash

1239617585

http.html_hash

1584412971

http.server_hash

-1786963686

http.title_hash

1522695184

301 Moved Permanently

HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0
Date: Sat, 15 Mar 2025 11:52:37 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://map.almobl.kz

Vulnerabilities

443 / tcp

1741675827 | 2025-03-31T05:45:03.962913

Hashes

hash

-1397540929

http.dom_hash

1239617585

http.html_hash

1741675827

http.server_hash

-1786963686

http.title_hash

1433208809

502 Bad Gateway

HTTP/1.1 502 Bad Gateway
Server: nginx/1.18.0
Date: Mon, 31 Mar 2025 05:45:13 GMT
Content-Type: text/html
Content-Length: 559
Connection: keep-alive

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:33:b7:bc:3a:b0:e5:1f:3c:e9:9a:8d:07:2c:09:43:1e:50
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Mar 27 23:22:14 2025 GMT
            Not After : Jun 25 23:22:13 2025 GMT
        Subject: CN=alm.dma.geonomix.kz
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:bb:cf:f2:f5:b2:91:c7:c2:f0:b4:77:ac:2e:be:
                    95:b6:12:d3:13:63:bc:02:38:df:a8:a8:cb:1d:6a:
                    c5:b2:06:66:0c:95:72:34:9b:eb:ac:a5:8b:21:20:
                    a7:7a:65:f6:a8:f4:3a:db:ac:3c:56:77:9d:ea:5f:
                    b4:10:18:97:92:f5:cc:15:a4:d9:ae:0f:61:0b:78:
                    75:cd:a5:06:56:4e:59:f7:56:fa:04:57:30:b2:20:
                    c2:0e:06:d4:d6:35:ec:33:6a:5e:89:7b:02:c8:50:
                    a6:65:c0:ff:d6:77:b3:27:e1:f0:0a:84:ed:65:2f:
                    ea:1f:6a:9d:bf:ef:b7:88:ee:7e:ee:a4:dd:56:1e:
                    cb:37:42:23:d5:69:35:18:ae:c4:2c:f0:c6:9b:a7:
                    21:8b:ab:fc:95:69:d5:59:f9:b9:7a:ef:87:25:d9:
                    1c:d0:dc:29:af:63:e2:73:73:83:1e:53:c2:32:e7:
                    65:db:bf:25:3f:de:bf:d7:2e:93:a6:50:0e:4b:15:
                    0b:9c:87:25:a1:f2:3e:5a:26:29:c5:c6:0e:41:7b:
                    0d:75:67:af:95:a6:f9:4a:f6:ba:d5:06:4c:c2:5c:
                    29:b9:ac:21:2e:d7:90:dc:99:3e:07:6e:67:ff:49:
                    dd:10:02:d2:6a:09:c2:87:0d:7b:29:a5:43:ff:81:
                    cc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                F4:CD:23:AE:BC:A3:B8:DE:3C:4B:8E:8C:FE:5D:47:05:26:EB:47:5E
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:alm.dma.geonomix.kz
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            X509v3 CRL Distribution Points: 
                Full Name:
                  URI:http://r11.c.lencr.org/81.crl
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Mar 28 00:20:45.126 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:5C:27:ED:0E:9E:55:A0:E9:4A:E4:A0:3D:
                                07:CA:4E:3F:8E:4A:19:8E:17:0B:9E:39:06:C7:BE:59:
                                F9:96:EE:12:02:20:3D:DA:9E:5F:2B:65:55:2A:90:56:
                                1D:52:B5:F5:AA:A3:4A:16:4A:75:38:1B:D6:4D:86:46:
                                E5:13:72:91:0D:72
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 0D:E1:F2:30:2B:D3:0D:C1:40:62:12:09:EA:55:2E:FC:
                                47:74:7C:B1:D7:E9:30:EF:0E:42:1E:B4:7E:4E:AA:34
                    Timestamp : Mar 28 00:20:47.124 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:D7:77:F0:32:91:05:39:3A:EB:D6:1A:
                                59:F9:EE:32:77:D2:EA:C6:6F:EE:EA:0D:A3:32:AE:9F:
                                78:B6:1B:5F:88:02:20:6F:CB:33:40:A6:4C:8A:97:0F:
                                F1:20:45:82:5C:E2:E5:86:62:93:00:35:9F:7C:1A:AB:
                                52:08:B3:28:B7:F3:E9
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        b6:42:7f:1d:60:83:1f:a8:4a:a2:58:1c:0e:1b:d3:1e:dc:ee:
        88:25:7a:55:eb:a8:a7:8f:bc:fa:d6:bd:83:50:d7:d2:21:6c:
        17:d5:c4:14:d2:ea:0c:be:df:43:8b:33:b4:ab:b6:64:44:f2:
        c9:b7:cb:56:e1:5b:54:2c:fe:4b:cc:af:42:ab:e5:bb:4d:4d:
        40:0e:70:e1:e0:eb:57:7d:05:d1:22:21:52:04:de:87:69:2d:
        e7:5d:11:a3:31:25:56:ec:8a:f3:58:9e:37:49:00:eb:10:3e:
        f3:fe:4c:7a:b0:cb:9e:05:9b:95:7c:cb:70:44:a1:5b:c6:e6:
        d8:6f:fb:6d:d7:2d:0c:7f:3d:5c:66:16:96:6b:f0:6f:02:a0:
        4a:c1:7f:b5:cc:a6:77:7b:4f:cf:71:bf:f4:81:48:ea:61:da:
        09:87:8c:8f:f3:d7:7b:1f:12:e2:d2:dc:08:21:d4:57:b5:cb:
        7e:13:ba:ac:3d:af:52:93:45:62:35:b6:44:0f:ac:55:ed:5b:
        ac:73:6c:e7:69:6b:b9:4c:8d:1d:ce:7c:d6:a7:b6:b1:9b:a9:
        c3:b3:f5:7f:f4:ea:bd:28:36:c9:c4:84:e8:b5:70:15:47:f0:
        c0:85:69:90:42:b8:57:cc:a9:15:2d:23:99:ab:3a:26:c1:47:
        61:bb:22:fb

Vulnerabilities

178.91.28.226

Last Seen: 2025-03-31

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

80 / tcp

1584412971 | 2025-03-15T11:52:35.301288

Hashes

nginx1.18.0

443 / tcp

1741675827 | 2025-03-31T05:45:03.962913

Hashes

nginx1.18.0

Products

Pricing

Contact Us

178.91.28.226

Last Seen: 2025-03-31

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Latest CVSS

OpenPorts

80 / tcp 1584412971 | 2025-03-15T11:52:35.301288

Hashes

nginx1.18.0

443 / tcp 1741675827 | 2025-03-31T05:45:03.962913

Hashes

nginx1.18.0

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

1584412971 | 2025-03-15T11:52:35.301288

443 / tcp

1741675827 | 2025-03-31T05:45:03.962913