GeneralInformation

Hostnames	kma.go.ke autodiscover.kma.go.ke mail.kma.go.ke
Domains	kma.go.ke
Country	Kenya
City	Nairobi
Organization	Kenyan Post & Telecommunications Company / Telkom Kenya Ltd
ISP	Kenyan Post & Telecommunications Company / Telkom Kenya Ltd
ASN	AS12455
Operating System	Windows (build 10.0.14393)

WebTechnologies

DMS

Koha23.0501000

Ecommerce

Abicart

JavaScript libraries

jQuery3.6.0

Programming languages

Perl

UI frameworks

Bootstrap

Web frameworks

Microsoft ASP.NET

Webmail

Outlook Web App15.1.2507

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

25 80 161 443 587 1433 8085 8086

-1087364871 | 2024-11-11T22:19:49.141210

25 / tcp

220 EXCH-SVR-02.KMA-HQ.go.ke Microsoft ESMTP MAIL Service ready at Tue, 12 Nov 2024 01:19:38 +0300
250-EXCH-SVR-02.KMA-HQ.go.ke Hello [192.168.1.2]
250-SIZE 37748736
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-STARTTLS
250-X-ANONYMOUSTLS
250-AUTH NTLM
250-X-EXPS GSSAPI NTLM
250-8BITMIME
250-BINARYMIME
250-CHUNKING
250 XRDST

SMTP NTLM Info:
  OS: Windows 10 (version 1607)/Windows Server 2016 (version 1607)
  OS Build: 10.0.14393
  Target Name: KMA-HQ
  NetBIOS Domain Name: KMA-HQ
  NetBIOS Computer Name: EXCH-SVR-02
  DNS Domain Name: KMA-HQ.go.ke
  DNS Tree Name: KMA-HQ.go.ke
  FQDN: EXCH-SVR-02.KMA-HQ.go.ke

819126370 | 2024-11-11T18:51:56.684177

80 / tcp

HTTP/1.1 401 Unauthorized
Date: Mon, 11 Nov 2024 17:56:27 GMT
Server: cisco-IOS
Connection: close
Accept-Ranges: none
WWW-Authenticate: Basic realm="level_15 or view_access"

178445087 | 2024-11-11T21:36:06.211646

161 / udp

SNMP:
  Versions:
    3
  Engineid Format: mac
  Engine Boots: 54
  Engineid Data: 1c:df:0f:e0:57:20
  Enterprise: 9
  Engine Time: 2 days, 4:31:12

-1877563308 | 2024-11-11T21:25:12.103728

443 / tcp

Outlook

HTTP/1.1 200 OK
Cache-Control: no-cache, no-store
Pragma: no-cache
Content-Type: text/html; charset=utf-8
Expires: -1
Server: Microsoft-IIS/10.0
request-id: 03a1d2aa-e593-4320-9c67-9dca4545ba25
X-Frame-Options: SAMEORIGIN
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Mon, 11 Nov 2024 21:25:09 GMT
Content-Length: 58707


Microsoft Exchange:
  Name: Exchange Server 2016 CU23 Apr24HU
  Build Number: 15.1.2507.39
  Build Date: April 23, 2024

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:db:0f:65:8b:4c:1d:f4:63:c9:f7:1d:18:cd:1f:52:cf:87
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R10
        Validity
            Not Before: Sep 23 10:06:11 2024 GMT
            Not After : Dec 22 10:06:10 2024 GMT
        Subject: CN=kma.go.ke
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:86:af:91:6d:ca:f2:f2:d8:04:8f:e9:5f:7a:c8:
                    d0:05:2a:23:80:d8:86:3b:1c:02:09:27:c6:1a:36:
                    4c:c7:ea:8e:c9:65:d5:ea:74:16:be:26:86:36:69:
                    3b:ae:f1:9d:85:0b:c5:a3:4a:d4:ab:76:15:f0:ab:
                    aa:d2:a9:5e:1d:9c:0b:09:67:84:40:70:ea:a5:e7:
                    bb:6d:83:95:71:00:76:b8:2c:c3:9f:ab:5d:07:1f:
                    67:97:20:6d:24:e4:9e:44:73:04:1d:65:17:ae:ab:
                    14:40:7b:d2:18:41:16:04:08:69:3e:d1:db:03:ae:
                    e2:4b:67:00:68:6b:84:1e:c3:39:43:bb:28:f1:6b:
                    c8:02:38:46:59:0a:15:fc:dd:68:a1:a0:83:cc:83:
                    33:8e:a8:bf:a2:0a:ad:0b:48:93:c9:e5:b4:74:df:
                    82:19:80:2e:27:1d:4c:c1:c0:85:0c:d6:79:07:d9:
                    2f:ea:5b:d9:29:6f:70:8a:09:80:3f:11:61:66:b3:
                    f7:a3:16:dc:a2:7f:d5:9c:c2:02:fe:bc:ac:a3:3b:
                    3c:c2:28:8f:b6:8f:aa:c0:de:37:38:af:fe:17:95:
                    66:21:51:85:72:c6:05:66:9d:35:34:f9:f7:3a:dd:
                    56:cf:dd:98:6f:0d:a2:d8:90:6d:89:67:4a:5d:c8:
                    a7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                85:A9:C1:D5:E7:AC:F5:AF:54:4D:4F:DB:AD:35:11:87:C7:58:20:59
            X509v3 Authority Key Identifier: 
                BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8
            Authority Information Access: 
                OCSP - URI:http://r10.o.lencr.org
                CA Issuers - URI:http://r10.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:autodiscover.kma.go.ke, DNS:kma.go.ke, DNS:mail.kma.go.ke
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : EE:CD:D0:64:D5:DB:1A:CE:C5:5C:B7:9D:B4:CD:13:A2:
                                32:87:46:7C:BC:EC:DE:C3:51:48:59:46:71:1F:B5:9B
                    Timestamp : Sep 23 11:04:42.211 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:6A:5D:0D:F9:A0:B8:19:22:BF:23:31:38:
                                83:50:02:9B:0F:7E:77:8E:E2:07:AC:94:59:E0:7D:FB:
                                91:21:EA:C9:02:20:1D:E3:AE:09:E7:61:52:D8:E6:9E:
                                4D:EE:39:D1:6F:3B:14:E2:E1:22:65:63:B6:A2:2D:82:
                                89:46:9D:09:C3:21
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Sep 23 11:04:42.212 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:C0:8E:27:B7:D3:0D:CD:B6:CF:5D:1A:
                                2F:38:A3:5D:95:C8:3C:83:92:2B:0E:F8:89:73:A2:0A:
                                7E:1B:78:1F:C0:02:20:59:DD:47:2F:90:52:50:FB:DB:
                                11:41:28:19:9F:28:B6:F3:5E:20:B4:B2:F9:6D:55:F1:
                                8D:45:08:FC:AE:21:72
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        2c:c1:45:21:ae:e9:aa:e4:1b:b3:10:fc:35:13:4e:67:ca:03:
        0b:5c:00:be:67:f1:6e:45:81:dc:b1:c2:67:bf:5a:88:92:a1:
        ea:10:6c:05:0a:fb:b4:43:cd:4d:00:6e:86:2e:ab:25:0e:04:
        0c:19:54:aa:d7:0f:65:34:4a:2e:be:5f:2b:d5:1d:1f:98:dc:
        9f:c4:35:cb:49:84:2b:92:09:6f:6e:b0:67:24:50:de:f8:9f:
        ed:81:b4:49:2c:36:0b:1c:05:fa:ca:0b:fc:7c:1a:13:84:9c:
        be:fa:5b:65:5f:0a:27:e9:68:59:2d:04:a3:f1:a7:a3:d9:71:
        8d:98:34:1c:4a:8d:ca:f3:ea:6b:29:97:ee:18:74:7f:9a:e5:
        6f:ea:10:b3:44:46:4b:aa:5f:fc:c7:f9:09:f5:cd:84:7a:55:
        f9:b4:45:96:4b:80:0d:00:b6:2a:3a:0f:6b:3e:1f:79:1d:cf:
        a3:da:0e:12:40:ad:ba:dd:81:a5:12:6d:de:3c:e8:25:48:96:
        e7:aa:a1:20:16:c8:70:40:0a:bb:a4:17:a6:2f:bb:27:ac:31:
        7e:76:54:a3:28:74:e9:36:f5:eb:ea:32:bb:9f:39:3d:71:de:
        7a:fb:20:bf:8d:84:86:a8:cb:03:3a:cb:26:9d:aa:08:ea:9c:
        6b:29:1e:da

1343625310 | 2024-11-11T16:04:53.341596

587 / tcp

220 EXCH-SVR-02.KMA-HQ.go.ke Microsoft ESMTP MAIL Service ready at Mon, 11 Nov 2024 19:04:42 +0300
250-EXCH-SVR-02.KMA-HQ.go.ke Hello [192.168.1.2]
250-SIZE 37748736
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-STARTTLS
250-AUTH GSSAPI NTLM
250-8BITMIME
250-BINARYMIME
250 CHUNKING

SMTP NTLM Info:
  OS: Windows 10 (version 1607)/Windows Server 2016 (version 1607)
  OS Build: 10.0.14393
  Target Name: KMA-HQ
  NetBIOS Domain Name: KMA-HQ
  NetBIOS Computer Name: EXCH-SVR-02
  DNS Domain Name: KMA-HQ.go.ke
  DNS Tree Name: KMA-HQ.go.ke
  FQDN: EXCH-SVR-02.KMA-HQ.go.ke

1866007652 | 2024-10-27T18:52:42.691683

1433 / tcp

\x04\x01\x00J\x00\x00\x01\x00\xad6\x00\x01\x04\x02\x00\x00\x16M\x00i\x00c\x00r\x00o\x00s\x00o\x00f\x00t\x00 \x00S\x00Q\x00L\x00 \x00S\x00e\x00r\x00v\x00e\x00r\x00\x00\x00\x00\x00\t\x00\x05w\xfd\x00\x00\x00\x00\x00\x00\x00\x00

-1622044850 | 2024-11-04T19:12:08.528222

8085 / tcp

HTTP/1.1 200 OK
Date: Mon, 04 Nov 2024 19:12:08 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 18903
Content-Type: text/html; charset=utf-8
Samesite: Lax
X-Frame-Options: SAMEORIGIN
Set-Cookie: CGISESSID=1102388bd808cdccd7ae0c3b9f802a11; path=/; HttpOnly; SameSite=Lax
Vary: Accept-Encoding,User-Agent










<!DOCTYPE html>
<!-- TEMPLATE FILE: auth.tt -->









<html lang="en">
<head>

<title>
    
    
    Log in to Koha
    
    
    
    
     &rsaquo; Koha
</title>




















































































<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />


    <style id="antiClickjack">body{display:none !important;}</style>


<link rel="shortcut icon" href="https://kma.go.ke/wp-content/uploads/2021/05/cropped-KENYA-MARITIME-AUTHORITY-LOGO-2-768x533.png.webp" type="image/x-icon" />


    <link href="/intranet-tmpl/lib/jquery/jquery-ui-1.13.1.min_23.0501000.css" rel="stylesheet" type="text/css">

<link href="/intranet-tmpl/lib/bootstrap/bootstrap.min_23.0501000.css" rel="stylesheet" type="text/css">
<link rel="stylesheet" type="text/css" href="/intranet-tmpl/lib/bootstrap/bootstrap-theme.min_23.0501000.css">
<link rel="stylesheet" type="text/css" href="/intranet-tmpl/lib/font-awesome/css/font-awesome.min_23.0501000.css">
<link type="text/css" rel="stylesheet" href="/intranet-tmpl/lib/datatables/datatables.min_23.0501000.css">
<link href="/intranet-tmpl/prog/css/print_23.0501000.css" rel="stylesheet" type="text/css" media="print">




    <link href="/intranet-tmpl/prog/css/staff-global_23.0501000.css" rel="stylesheet" type="text/css">


<!-- local colors -->




<script>
var Koha = {};

    var CAN_user_parameters_manage_column_config = 0;

</script>


<script src="/intranet-tmpl/js/Gettext_23.0501000.js"></script>
<script src="/intranet-tmpl/js/i18n_23.0501000.js"></script>


    <link rel="stylesheet" type="text/css" href="/intranet-tmpl/prog/css/login_23.0501000.css">

<style>body {

background: linear-gradient(to bottom,#ebeff5 65%,#211c53 100%);

}</style>







</head>
<body id="main_auth" class="main_main-auth">

<div class="main container-fluid">

<div id="login">
<h1><a href="http://koha-community.org">Koha</a></h1>
<div id="login_instructions"><p><b><center><img src="https://kma.go.ke/wp-content/uploads/2021/05/cropped-KENYA-MARITIME-AUTHORITY-LOGO-2-768x533.png.webp" height="50" width="50"><font color="navy-blue" size="3"> Kenya Maritime Authority Resource Centre Management System</font>

  <hr>
<img src="https://blog.flamingtext.com/blog/2019/05/28/flamingtext_com_1559016309_767465469.gif" border="0">
  </center></b></p></div>















    <!-- login prompt time-->
    
    

    <form action="/cgi-bin/koha/mainpage.pl" method="post" name="loginform" id="loginform">
        <input type="hidden" name="koha_login_context" value="intranet" />
    
    <p><label for="userid">Username:</label>
    <input type="text" name="userid" id="userid" class="input focus" value="" size="20" tabindex="1" autocomplete="off" />
    </p>
    <p><label for="password">Password:</label>
    <input type="password" name="password" id="password" class="input" value="" size="20" tabindex="2" autocomplete="off" />
    </p>

    

    <!-- <p><label><input name="rememberme" type="checkbox" id="rememberme" value="forever" tabindex="3" />Remember me</label></p> -->

    <p class="submit"><input id="submit-button" type="submit" class="btn btn-primary" value="Log in" tabindex="4" /></p>
    </form>

    





<!--<ul> -->
<!--	<li><a href="/cgi-bin/koha/lostpassword.pl" title="Password lost and found">Lost your password?</a></li> -->
<!-- </ul> -->

</div>


<!-- the main div is closed in intranet-bottom.inc -->



        </div>

    <span id="audio-alert"></span>
    
        






    <script>
       if (self === top) {
           var antiClickjack = document.getElementById("antiClickjack");
           antiClickjack.parentNode.removeChild(antiClickjack);
       } else {
           top.location = self.location;
       }
    </script>


<script src="/intranet-tmpl/lib/jquery/jquery-3.6.0.min_23.0501000.js"></script>
<script src="/intranet-tmpl/lib/jquery/jquery-migrate-3.3.2.min_23.0501000.js"></script>
<script src="/intranet-tmpl/lib/jquery/jquery-ui-1.13.1.min_23.0501000.js"></script>
<script src="/intranet-tmpl/lib/shortcut/shortcut_23.0501000.js"></script>
<script src="/intranet-tmpl/lib/js-cookie/js.cookie-2.2.1.min_23.0501000.js"></script>
<script src="/intranet-tmpl/lib/jquery/plugins/jquery.highlight-3_23.0501000.js"></script>
<script src="/intranet-tmpl/lib/bootstrap/bootstrap.min_23.0501000.js"></script>
<script src="/intranet-tmpl/lib/jquery/plugins/jquery.validate.min_23.0501000.js"></script>
<!-- koha core js -->
<script src="/intranet-tmpl/prog/js/staff-global_23.0501000.js"></script>




<script src="/intranet-tmpl/lib/dayjs/dayjs.min_23.0501000.js"></script>
<script src="/intranet-tmpl/lib/dayjs/plugin/utc_23.0501000.js"></script>
<script src="/intranet-tmpl/li

-489642079 | 2024-11-07T18:56:38.500873

8086 / tcp

KMA RESOURCE CENTRE catalog

HTTP/1.1 200 OK
Date: Thu, 07 Nov 2024 18:56:38 GMT
Server: Apache/2.4.41 (Ubuntu)
Cache-Control: no-cache
Pragma: no-cache
Content-Length: 24273
Content-Type: text/html; charset=UTF-8
Content-Script-Type: text/javascript
Content-Style-Type: text/css
X-Frame-Options: SAMEORIGIN
Set-Cookie: CGISESSID=6199fbcaf034877e53a4f1bb005b9ee1; path=/; HttpOnly; SameSite=Lax
Vary: Accept-Encoding,User-Agent

197.156.146.210

Last Seen: 2024-11-11

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-1087364871 | 2024-11-11T22:19:49.141210
25 / tcp

Microsoft Exchange smtpd

819126370 | 2024-11-11T18:51:56.684177
80 / tcp

Cisco IOS http config

178445087 | 2024-11-11T21:36:06.211646
161 / udp

ciscoSystems

-1877563308 | 2024-11-11T21:25:12.103728
443 / tcp

Outlook Web App

1343625310 | 2024-11-11T16:04:53.341596
587 / tcp

Microsoft Exchange smtpd

1866007652 | 2024-10-27T18:52:42.691683
1433 / tcp

MS-SQL Server 2000 SP1+8.0.528.0

-1622044850 | 2024-11-04T19:12:08.528222
8085 / tcp

Apache httpd2.4.41

-489642079 | 2024-11-07T18:56:38.500873
8086 / tcp

Products

Pricing

Contact Us

197.156.146.210

Last Seen: 2024-11-11

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 8085 Latest CVSS

OpenPorts

-1087364871 | 2024-11-11T22:19:49.141210 25 / tcp

Microsoft Exchange smtpd

819126370 | 2024-11-11T18:51:56.684177 80 / tcp

Cisco IOS http config

178445087 | 2024-11-11T21:36:06.211646 161 / udp

ciscoSystems

-1877563308 | 2024-11-11T21:25:12.103728 443 / tcp

Outlook Web App

1343625310 | 2024-11-11T16:04:53.341596 587 / tcp

Microsoft Exchange smtpd

1866007652 | 2024-10-27T18:52:42.691683 1433 / tcp

MS-SQL Server 2000 SP1+8.0.528.0

-1622044850 | 2024-11-04T19:12:08.528222 8085 / tcp

Apache httpd2.4.41

-489642079 | 2024-11-07T18:56:38.500873 8086 / tcp

Products

Pricing

Contact Us

Vulnerabilities

-1087364871 | 2024-11-11T22:19:49.141210
25 / tcp

819126370 | 2024-11-11T18:51:56.684177
80 / tcp

178445087 | 2024-11-11T21:36:06.211646
161 / udp

-1877563308 | 2024-11-11T21:25:12.103728
443 / tcp

1343625310 | 2024-11-11T16:04:53.341596
587 / tcp

1866007652 | 2024-10-27T18:52:42.691683
1433 / tcp

-1622044850 | 2024-11-04T19:12:08.528222
8085 / tcp

-489642079 | 2024-11-07T18:56:38.500873
8086 / tcp