nginx
tcp/443 tcp/80
WARNING: This plugin will generate false positive and is purely informative:
regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)
Severity: info
Fingerprint: 3f43e0ebb5dce37ab8b59eb53ea6237e8f56bf578f56bf578f56bf578f56bf57
Found potentially vulnerable SSH version: SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.13 WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
GraphQL introspection enabled at /api/graphql
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d603073f8703073f8703073f8703073f8703073f87
GraphQL introspection enabled at /api/graphql Detected: GitLab
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d603073f8703073f8703073f8703073f8703073f87
GraphQL introspection enabled at /api/graphql Detected: GitLab
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
GraphQL introspection enabled at /api/graphql
Open service 111.223.52.40:80
2026-01-26 15:07
HTTP/1.1 301 Moved Permanently Server: nginx Date: Mon, 26 Jan 2026 15:07:41 GMT Content-Type: text/html Content-Length: 162 Connection: close Location: https://gitlab.belusys.com:443/ Page title: 301 Moved Permanently <html> <head><title>301 Moved Permanently</title></head> <body> <center><h1>301 Moved Permanently</h1></center> <hr><center>nginx</center> </body> </html>
Open service 111.223.52.40:22
2026-01-22 17:13
Open service 111.223.52.40:443
2026-01-22 16:14
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 22 Jan 2026 16:14:06 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://111.223.52.40/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KFK7R1CFNCFW8494ME7SCWH0","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KFK7R1CFNCFW8494ME7SCWH0
X-Runtime: 0.034046
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://111.223.52.40/users/sign_in">redirected</a>.</body></html>
Open service 111.223.52.40:443 · gitlab.belusys.com
2026-01-09 08:39
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 09 Jan 2026 08:39:26 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://gitlab.belusys.com/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KEGYJ5T0VBYDZHQG21764QQW","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KEGYJ5T0VBYDZHQG21764QQW
X-Runtime: 0.034163
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://gitlab.belusys.com/users/sign_in">redirected</a>.</body></html>
Open service 111.223.52.40:443
2026-01-08 14:45
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 08 Jan 2026 14:45:32 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://111.223.52.40/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KEF13T6G0XW6H32FTCFJX45J","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KEF13T6G0XW6H32FTCFJX45J
X-Runtime: 0.018678
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://111.223.52.40/users/sign_in">redirected</a>.</body></html>
Open service 111.223.52.40:443 · gitlab.belusys.com
2026-01-02 08:47
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 02 Jan 2026 08:47:59 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://gitlab.belusys.com/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KDYY8SZGT69NJHTY18KSGPSX","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KDYY8SZGT69NJHTY18KSGPSX
X-Runtime: 0.014754
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://gitlab.belusys.com/users/sign_in">redirected</a>.</body></html>
Open service 111.223.52.40:22
2026-01-01 18:48
Open service 111.223.52.40:443
2026-01-01 17:16
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 01 Jan 2026 17:16:33 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://111.223.52.40/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KDX8ZA5RJAA116EJ5AWVPGWN","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KDX8ZA5RJAA116EJ5AWVPGWN
X-Runtime: 0.041842
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://111.223.52.40/users/sign_in">redirected</a>.</body></html>
Open service 111.223.52.40:22
2025-12-24 01:31
Open service 111.223.52.40:443 · gitlab.belusys.com
2025-12-22 21:32
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 22 Dec 2025 21:32:58 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://gitlab.belusys.com/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KD3ZNMJ817ABJ6ZAFEVYQ8MD","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KD3ZNMJ817ABJ6ZAFEVYQ8MD
X-Runtime: 0.014858
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://gitlab.belusys.com/users/sign_in">redirected</a>.</body></html>