GeneralInformation

Hostnames	forms-peogo.gov.bf
Domains	forms-peogo.gov.bf
Country	Burkina Faso
City	Ouagadougou
Organization	Agence Nationale de Promotion des TIC (ANPTIC)
ISP	Agence Nationale de Promotion des TIC (ANPTIC)
ASN	AS327871

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

2019(1)

CVE-2019-20372

5.3NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.

OpenPorts

80 443 8080

80 / tcp

188253173 | 2025-03-21T16:51:58.080198

Hashes

hash

1490105862

http.dom_hash

-1435011624

http.html_hash

188253173

http.server_hash

532903735

http.title_hash

-1449824703

Error

HTTP/1.1 502 Bad Gateway
Date: Fri, 21 Mar 2025 16:51:57 GMT
Server: nginx/1.16.1
Content-Type: text/html; charset=UTF-8
Content-Length: 494
ETag: "5d52d17f-1ee"

Vulnerabilities

3 1

443 / tcp

188253173 | 2025-03-17T06:11:24.220184

Hashes

hash

344025499

http.dom_hash

-1435011624

http.html_hash

188253173

http.server_hash

532903735

http.title_hash

-1449824703

Error

HTTP/1.1 502 Bad Gateway
Date: Mon, 17 Mar 2025 06:11:24 GMT
Server: nginx/1.16.1
Content-Type: text/html; charset=UTF-8
Content-Length: 494
ETag: "5d52d17f-1ee"

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:5f:ea:47:8a:af:9e:1d:6e:34:1c:d8:15:18:ef:f9:7b:a8
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Mar  1 03:04:51 2025 GMT
            Not After : May 30 03:04:50 2025 GMT
        Subject: CN=forms-peogo.gov.bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e9:0f:66:1d:8d:92:79:fc:41:e2:9e:c2:1a:c6:
                    d7:d4:c7:7e:36:e6:a3:08:60:fa:34:3b:70:18:49:
                    cc:62:5b:f0:b8:24:34:06:79:5a:4f:d8:03:40:aa:
                    fe:10:91:8e:d3:70:22:12:b9:21:e2:d7:04:d2:98:
                    21:8c:da:67:37:78:a4:eb:0c:da:99:43:0d:42:21:
                    f4:39:18:de:7a:3b:60:20:dd:a1:5e:a9:62:e8:19:
                    ca:f3:d9:63:0d:e8:0b:67:ae:58:e3:a2:ed:69:ae:
                    3e:88:00:99:a0:1e:d2:66:c1:99:25:26:53:03:6f:
                    8b:8f:45:5f:d3:80:78:3b:f9:1b:6c:de:69:b0:a3:
                    41:2f:a1:47:19:ae:1b:24:be:e0:f9:4b:a0:86:38:
                    34:3c:80:ba:2e:5f:41:8b:c2:d4:48:d2:9b:2c:11:
                    44:8b:e1:ad:e0:0a:48:0b:b8:d1:b4:94:2e:8d:35:
                    17:42:a5:45:4e:ed:75:d5:63:1a:bd:05:6e:5a:21:
                    b8:6d:0d:85:7a:51:35:69:0d:69:fc:fb:c5:e4:de:
                    90:b6:8e:1d:11:68:1e:b3:aa:d1:c2:30:d0:01:4b:
                    6d:9e:41:da:e6:97:fb:4e:ad:d7:d8:4b:ab:2c:7c:
                    fe:fe:3d:86:1e:dc:d1:3a:1a:e0:c3:f6:f7:d8:71:
                    fb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                E0:5A:32:57:CB:EF:CA:DB:B7:D5:21:E5:9D:BC:D2:D7:D7:B6:84:63
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:forms-peogo.gov.bf
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Mar  1 04:03:21.694 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:F2:CA:EE:37:01:51:C4:7B:CD:8C:6F:
                                D1:C6:68:47:01:29:89:0E:FD:70:C3:6C:B9:CA:5E:CF:
                                4D:DB:F4:DD:4A:02:20:5D:E2:B2:BD:F5:C4:7C:F6:B1:
                                4D:E6:99:4C:E2:5B:92:B7:D7:72:33:F5:62:33:72:EB:
                                5C:89:0F:12:0F:2E:29
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Mar  1 04:03:21.693 2025 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:6B:AA:42:D8:7C:B1:72:EC:FB:DB:EE:F1:
                                2E:99:84:B6:41:F8:64:3B:73:5C:21:3F:8E:3F:6F:F6:
                                BE:34:DB:57:02:20:10:71:C1:A7:D9:3D:3F:20:16:14:
                                71:87:6D:CE:FC:8B:AB:3C:41:C5:71:A5:FB:06:0C:DB:
                                DD:0D:9E:27:8E:09
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        54:00:06:da:ff:ee:ea:c9:83:41:48:4d:26:d7:c9:a5:95:b5:
        59:b4:39:21:f9:7d:6f:aa:92:d1:22:dc:7d:f9:3c:77:d6:b4:
        d4:27:11:3c:a6:06:58:a7:ec:63:65:f5:31:70:59:54:e5:15:
        e2:74:f0:bd:4f:b0:d4:c2:8e:4b:78:8a:e4:ff:fd:f9:ec:2f:
        6f:69:25:e5:a7:81:13:36:15:7f:cb:e3:66:56:d3:05:a5:2a:
        8e:a8:d4:3b:c7:eb:6f:8e:ce:b0:b5:4d:65:25:47:58:c2:73:
        ce:81:b6:e2:75:9f:b7:9c:97:f4:6a:37:8f:6f:ee:f9:a7:8c:
        ad:03:2a:45:41:54:41:16:e5:24:ad:a2:9a:08:6c:2f:09:62:
        97:83:37:6f:e4:da:fd:e4:4a:4a:47:2d:c5:c1:de:9b:cf:f5:
        5e:e4:03:fe:19:76:4a:40:cf:3f:47:cd:ad:24:de:44:aa:86:
        38:ef:e9:8a:71:95:39:93:03:65:b0:c8:fa:33:b9:73:54:a3:
        4f:32:9b:ad:54:b4:8c:bb:88:fb:5e:cc:c1:28:ea:7a:4c:72:
        72:9d:2f:64:3e:ae:0f:cb:10:ff:e3:3b:a9:52:47:b1:d7:15:
        9a:86:c9:e4:b5:2b:d3:c2:6b:dd:c0:ec:71:bc:8d:b7:71:82:
        72:92:44:7f

Vulnerabilities

3 1

8080 / tcp

188253173 | 2025-03-19T17:16:05.713851

Hashes

hash

709210691

http.dom_hash

-1435011624

http.html_hash

188253173

http.server_hash

532903735

http.title_hash

-1449824703

Error

HTTP/1.1 502 Bad Gateway
Server: nginx/1.16.1
Date: Wed, 19 Mar 2025 17:16:05 GMT
Content-Type: text/html
Content-Length: 494
Connection: keep-alive
ETag: "5d52d17f-1ee"

Vulnerabilities

3 1

196.13.207.43

Last Seen: 2025-03-21

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

80 / tcp

188253173 | 2025-03-21T16:51:58.080198

Hashes

nginx1.16.1

443 / tcp

188253173 | 2025-03-17T06:11:24.220184

Hashes

nginx1.16.1

8080 / tcp

188253173 | 2025-03-19T17:16:05.713851

Hashes

nginx1.16.1

Products

Pricing

Contact Us

196.13.207.43

Last Seen: 2025-03-21

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 443 Port 8080 Latest CVSS

OpenPorts

80 / tcp 188253173 | 2025-03-21T16:51:58.080198

Hashes

nginx1.16.1

443 / tcp 188253173 | 2025-03-17T06:11:24.220184

Hashes

nginx1.16.1

8080 / tcp 188253173 | 2025-03-19T17:16:05.713851

Hashes

nginx1.16.1

Products

Pricing

Contact Us

Vulnerabilities

80 / tcp

188253173 | 2025-03-21T16:51:58.080198

443 / tcp

188253173 | 2025-03-17T06:11:24.220184

8080 / tcp

188253173 | 2025-03-19T17:16:05.713851