nginx
tcp/443
The following Gitlab instance is publicly accessible and looks out-dated :
It is critical to update to a safe version as soon as possible to avoid account takeover.
Severity is mitigated by the need of a valid email address.
Reference:
Severity: high
Fingerprint: db64c48d331961cce5776b3a892edddd892edddd892edddd892edddd892edddd
Found vulnerable Gitlab instance Affected by CVE-2023-7028
WARNING: This plugin will generate false positive and is purely informative:
regreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems (CVE-2024-6387)
Severity: info
Fingerprint: 3f43e0ebb5dce37ab8b59eb583e3d39d05f5693405f5693405f5693405f56934
Found potentially vulnerable SSH version: SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.3 WARNING, RISK IS ESTIMATED FALSE POSITIVE ARE LIKELY
The following Gitlab instance is publicly accessible and looks out-dated :
It is critical to update to a safe version as soon as possible to avoid account takeover.
Severity is mitigated by the need of a valid email address.
Reference:
Severity: high
Fingerprint: db64c48d331961cce5776b3a892edddd892edddd892edddd892edddd892edddd
Found vulnerable Gitlab instance Affected by CVE-2023-7028
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d603073f8703073f8703073f8703073f8703073f87
GraphQL introspection enabled at /api/graphql Detected: GitLab
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
GraphQL introspection enabled at /api/graphql
GraphQL introspection is enabled.
This could leak to data leak if not properly configured.
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d603073f8703073f8703073f8703073f8703073f87
GraphQL introspection enabled at /api/graphql Detected: GitLab
Severity: medium
Fingerprint: c2db3a1c40d490db2337d3d62337d3d62337d3d62337d3d62337d3d62337d3d6
GraphQL introspection enabled at /api/graphql
Open service 185.189.27.25:443 · git.dariel.kz
2026-01-10 00:47
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 10 Jan 2026 00:47:14 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 101
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://git.dariel.kz/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KEJNY8WKG0RHEGDK8KNVGD15","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KEJNY8WKG0RHEGDK8KNVGD15
X-Runtime: 0.028386
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://git.dariel.kz/users/sign_in">redirected</a>.</body></html>
Open service 185.189.27.25:443 · git.dariel.kz
2026-01-09 13:54
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 09 Jan 2026 13:54:47 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 101
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://git.dariel.kz/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KEHGKKJK8BSTA1CAJ39K6QSZ","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KEHGKKJK8BSTA1CAJ39K6QSZ
X-Runtime: 0.060858
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://git.dariel.kz/users/sign_in">redirected</a>.</body></html>
Open service 185.189.27.25:23
2026-01-08 18:25
Open service 185.189.27.25:443
2026-01-08 15:17
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 08 Jan 2026 15:17:26 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 101
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://185.189.27.25/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KEF2Y7QD1TPKMZBMAX5KPBZH","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KEF2Y7QD1TPKMZBMAX5KPBZH
X-Runtime: 0.063277
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://185.189.27.25/users/sign_in">redirected</a>.</body></html>
Open service 185.189.27.25:443
2026-01-08 12:34
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 08 Jan 2026 12:34:04 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 101
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://185.189.27.25/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KEESK38MYDXFEJ7B2VEH0CYD","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KEESK38MYDXFEJ7B2VEH0CYD
X-Runtime: 0.104398
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://185.189.27.25/users/sign_in">redirected</a>.</body></html>
Open service 185.189.27.25:443 · git.dariel.kz
2026-01-02 19:16
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 02 Jan 2026 19:16:31 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 101
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://git.dariel.kz/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KE027P662VAWYCB7C48VVRFE","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KE027P662VAWYCB7C48VVRFE
X-Runtime: 0.071156
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://git.dariel.kz/users/sign_in">redirected</a>.</body></html>
Open service 185.189.27.25:443 · git.dariel.kz
2026-01-02 07:50
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 02 Jan 2026 07:50:49 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 101
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://git.dariel.kz/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KDYV045R8X2JZB2A35DXV23N","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KDYV045R8X2JZB2A35DXV23N
X-Runtime: 0.027878
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://git.dariel.kz/users/sign_in">redirected</a>.</body></html>
Open service 185.189.27.25:23
2026-01-01 17:48
Open service 185.189.27.25:443
2026-01-01 16:01
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 01 Jan 2026 16:01:12 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 101
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://185.189.27.25/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KDX4NAV6F9R7MHP6R6N7BYF2","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KDX4NAV6F9R7MHP6R6N7BYF2
X-Runtime: 0.028624
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://185.189.27.25/users/sign_in">redirected</a>.</body></html>
Open service 185.189.27.25:443
2026-01-01 13:28
HTTP/1.1 302 Found
Server: nginx
Date: Thu, 01 Jan 2026 13:28:22 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 101
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://185.189.27.25/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KDWVXFW3ANMG5A0K3P64JD06","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KDWVXFW3ANMG5A0K3P64JD06
X-Runtime: 0.072740
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://185.189.27.25/users/sign_in">redirected</a>.</body></html>
Open service 185.189.27.25:23
2025-12-30 02:41
Open service 185.189.27.25:443
2025-12-30 00:31
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 30 Dec 2025 00:31:29 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 101
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://185.189.27.25/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KDPANHBH9T1AMFMW3M75AZYZ","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KDPANHBH9T1AMFMW3M75AZYZ
X-Runtime: 0.033505
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://185.189.27.25/users/sign_in">redirected</a>.</body></html>
Open service 185.189.27.25:443
2025-12-29 22:06
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 29 Dec 2025 22:06:59 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 101
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://185.189.27.25/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KDP2CY1Q71XYHPD6Q8HYA2HS","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KDP2CY1Q71XYHPD6Q8HYA2HS
X-Runtime: 0.051763
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://185.189.27.25/users/sign_in">redirected</a>.</body></html>
Open service 185.189.27.25:23
2025-12-23 21:21
Open service 185.189.27.25:443 · git.dariel.kz
2025-12-23 08:58
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 23 Dec 2025 08:58:42 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 101
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://git.dariel.kz/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KD56X7ED3Q65R98V09QMD346","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KD56X7ED3Q65R98V09QMD346
X-Runtime: 0.069712
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://git.dariel.kz/users/sign_in">redirected</a>.</body></html>
Open service 185.189.27.25:443 · git.dariel.kz
2025-12-23 06:37
HTTP/1.1 302 Found
Server: nginx
Date: Tue, 23 Dec 2025 06:37:13 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 101
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://git.dariel.kz/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KD4YT5SPC6N93D43PM2EWM7S","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KD4YT5SPC6N93D43PM2EWM7S
X-Runtime: 0.035217
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://git.dariel.kz/users/sign_in">redirected</a>.</body></html>
Open service 185.189.27.25:443
2025-12-22 04:29
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 22 Dec 2025 04:29:51 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 101
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://185.189.27.25/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KD2547PXY1J5AG2TRM9T7AF3","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KD2547PXY1J5AG2TRM9T7AF3
X-Runtime: 0.028170
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://185.189.27.25/users/sign_in">redirected</a>.</body></html>
Open service 185.189.27.25:443
2025-12-22 03:33
HTTP/1.1 302 Found
Server: nginx
Date: Mon, 22 Dec 2025 03:33:09 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 101
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://185.189.27.25/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KD21WD8MKCTP65MXDJ494N0E","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KD21WD8MKCTP65MXDJ494N0E
X-Runtime: 0.071410
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://185.189.27.25/users/sign_in">redirected</a>.</body></html>
Open service 185.189.27.25:23
2025-12-22 02:12
Open service 185.189.27.25:443 · git.dariel.kz
2025-12-21 06:13
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 21 Dec 2025 06:13:19 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 101
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://git.dariel.kz/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KCZRMZXZXYY5CZ9R2F4X72A0","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KCZRMZXZXYY5CZ9R2F4X72A0
X-Runtime: 0.028375
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://git.dariel.kz/users/sign_in">redirected</a>.</body></html>
Open service 185.189.27.25:443 · git.dariel.kz
2025-12-21 05:39
HTTP/1.1 302 Found
Server: nginx
Date: Sun, 21 Dec 2025 05:39:37 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 101
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://git.dariel.kz/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KCZPQ98D0TAM7N20RTX9XAZG","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KCZPQ98D0TAM7N20RTX9XAZG
X-Runtime: 0.028933
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://git.dariel.kz/users/sign_in">redirected</a>.</body></html>
Open service 185.189.27.25:443
2025-12-20 04:21
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 20 Dec 2025 04:21:17 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 101
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://185.189.27.25/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KCWZV4C9XE00GKNX2EHNFA0Z","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KCWZV4C9XE00GKNX2EHNFA0Z
X-Runtime: 0.085421
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://185.189.27.25/users/sign_in">redirected</a>.</body></html>
Open service 185.189.27.25:443
2025-12-20 03:25
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 20 Dec 2025 03:25:10 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 101
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://185.189.27.25/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KCWWMBFDW7SBSFFHD7EWV88Z","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KCWWMBFDW7SBSFFHD7EWV88Z
X-Runtime: 0.077578
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://185.189.27.25/users/sign_in">redirected</a>.</body></html>
Open service 185.189.27.25:23
2025-12-20 00:44
Open service 185.189.27.25:443 · git.dariel.kz
2025-12-19 07:44
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 19 Dec 2025 07:44:31 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 101
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://git.dariel.kz/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KCTS2HA25R4QVF6RP7PA69AA","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KCTS2HA25R4QVF6RP7PA69AA
X-Runtime: 0.042747
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://git.dariel.kz/users/sign_in">redirected</a>.</body></html>
Open service 185.189.27.25:443 · git.dariel.kz
2025-12-19 05:18
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 19 Dec 2025 05:18:06 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 101
Connection: close
Cache-Control: no-cache
Content-Security-Policy:
Location: https://git.dariel.kz/users/sign_in
Permissions-Policy: interest-cohort=()
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gitlab-Meta: {"correlation_id":"01KCTGPEJ8Y5CSER9QMJX1QGYE","version":"1"}
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 01KCTGPEJ8Y5CSER9QMJX1QGYE
X-Runtime: 0.074624
X-Ua-Compatible: IE=edge
X-Xss-Protection: 1; mode=block
Strict-Transport-Security: max-age=63072000
Referrer-Policy: strict-origin-when-cross-origin
<html><body>You are being <a href="https://git.dariel.kz/users/sign_in">redirected</a>.</body></html>