GeneralInformation

Country	China
City	Shanghai
Organization	CHINANET Shanghai province network
ISP	China Telecom (Group)
ASN	AS4812

WebTechnologies

JavaScript frameworks

Vue.js

Network storage

Synology DiskStation

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

21 22 3306 3702 5000 5357 8092

21 / tcp

997942135 | 2025-02-16T11:01:36.327289

220 HanNAS FTP server ready.
230 Guest login ok, access restrictions apply.
214- The following commands are recognized (* =>'s unimplemented).
   USER    LPRT    MODE    MSOM*   RNTO    SITE    RMD     SIZE    AUTH 
   PASS    EPRT    RETR    MSAM*   ABOR    SYST    XRMD    MDTM    PBSZ 
   ACCT*   PASV    STOR    MRSQ*   DELE    STAT    PWD     MLST    PROT 
   SMNT*   LPSV    APPE    MRCP*   CWD     HELP    XPWD    MLSD    CCC 
   REIN*   EPSV    MLFL*   ALLO    XCWD    NOOP    CDUP    MFMT 
   QUIT    TYPE    MAIL*   REST    LIST    MKD     XCUP    FEAT 
   PORT    STRU    MSND*   RNFR    NLST    XMKD    STOU    OPTS 
214 Direct comments to ftp-bugs@HanNAS.
211- Extensions supported:
 AUTH TLS
 PBSZ
 PROT
 CCC
 SIZE
 MDTM
 REST STREAM
 MFMT
 TVFS
 MLST modify*;type*;unique*;size*;UNIX.mode*;UNIX.owner*;UNIX.group*;
 MLSD modify*;type*;unique*;size*;UNIX.mode*;UNIX.owner*;UNIX.group*;
 UTF8
211 End.

22 / tcp

-316095108 | 2025-02-08T11:31:42.445114

SSH-2.0-OpenSSH_8.2
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQCkmQC5rcZ+PG/LBMKKcDbgI0dFnANih9/dZUhcRW6Jvkca
j+ZWLJoxni7Qygb0PcBr9KU3r9sao+NilXGR5LX6RDwWoFEofUkkstSVPX7SCpJyzuuC6/goHPSp
7hRywv2RMu5dXf7KcENSjmhyWuuSrRFcF3/25WwM8mlUCMC5yJ6rgwkutgco1lx+Nd/09R7cou+H
UiM/6oRbz70yKBJsC3ZJivfddHa8c/klHq9EquksSgDNS1PJBzZ9jkn4PiSi2X7zXXVg++lmv17E
53nkEBhFsOOvp6HIulhdU1ZDSormgJsWv88CpAcT6rp1MFSbczxLFvXAiTu3tSFxiyjWC2YP4CVL
ZhMrSBShY+9MZVgOqIsTdrcHveJfSZh47s/hppJmo8pqmiHLO7fkSs/RLt5bpBK7WRldhkF3sf2J
AdlzX2VBDFfW2yfqlPWUfM7EM7j/v3BznNWcfiCOF1ifCRS0+TJSwfL10EiN/r73LBuMchGQR8iF
GBFf45UgWHs=
Fingerprint: 1e:31:97:9c:4f:05:d4:6e:8f:3f:ce:e4:11:6b:5d:17

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2021-28041 8 moreCVE-2020-15778 CVE-2020-12062 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

3306 / tcp

-1600451551 | 2025-02-04T09:46:17.059878

MariaDB:
  Error Message: Host '224.44.109.174' is not allowed to connect to this MariaDB server
  Error Code: 1130

3702 / udp

-689548668 | 2025-02-16T12:26:17.349376

<?xml version="1.0" encoding="UTF-8"?>
<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope" xmlns:pub="http://schemas.microsoft.com/windows/pub/2005/07" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoap.org/ws/2005/04/discovery" xmlns:wsdp="http://schemas.xmlsoap.org/ws/2006/02/devprof" xmlns:wsx="http://schemas.xmlsoap.org/ws/2004/09/mex" xmlns:un0="http://schemas.microsoft.com/windows/pnpx/2005/10"><soap:Header><wsa:To>http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous</wsa:To><wsa:Action>http://schemas.xmlsoap.org/ws/2005/04/discovery/ProbeMatches</wsa:Action><wsa:MessageID>urn:uuid:7c225c4e-9314-49ca-b669-143b1b3f80f6</wsa:MessageID><wsa:RelatesTo>18930069-880c-41b3-886c-4ae76fac6b47</wsa:RelatesTo><wsd:AppSequence InstanceId="1739635869" SequenceId="urn:uuid:ec7e015c-6d6f-4e17-a572-5763896a140a" MessageNumber="805"/></soap:Header><soap:Body><wsd:ProbeMatches><wsd:ProbeMatch><wsa:EndpointReference><wsa:Address>urn:uuid:46765031-3ea3-4030-94b8-e019c2726bd5</wsa:Address></wsa:EndpointReference><wsd:Types>wsdp:Device pub:Computer</wsd:Types><wsd:XAddrs>http://HanNAS:5357/46765031-3ea3-4030-94b8-e019c2726bd5</wsd:XAddrs><wsd:MetadataVersion>2</wsd:MetadataVersion></wsd:ProbeMatch></wsd:ProbeMatches></soap:Body></soap:Envelope>

5000 / tcp

-292262234 | 2025-02-20T07:20:06.103832

Hashes

hash

2070133430

http.dom_hash

1220332598

http.favicon.hash

163207293

http.html_hash

-292262234

http.server_hash

-1340961475

http.title_hash

1427922680

HanNAS - Synology NAS

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 20 Feb 2025 07:20:05 GMT
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Accept-Encoding
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Content-Security-Policy: base-uri 'self';  connect-src data: ws: wss: http: https:; default-src 'self' 'unsafe-eval' data: blob: https://*.synology.com https://www.synology.cn/ https://help.synology.cn/; font-src 'self' data: https://*.googleapis.com https://*.gstatic.com; form-action 'self'; frame-ancestors 'self'; frame-src 'self' data: blob: https://*.synology.com https://*.synology.cn http://*.synology.com http://*.synology.cn http://global.synologydownload.com https://global.synologydownload.com; img-src 'self' data: blob: https://*.google.com https://*.googleapis.com http://*.googlecode.com https://*.gstatic.com https://global.download.synology.com; media-src 'self' data: about: https://*.synology.com https://help.synology.cn;  script-src 'self' 'unsafe-eval' data: blob: https://maps.google.com https://maps.googleapis.com https://ajax.googleapis.com https://help.synology.com https://help.synology.cn; style-src 'self' 'unsafe-inline' https://*.googleapis.com;


Synology DiskStation Manager (DSM):
  Version: 7.2.1-69057
  Hostname: HanNAS

5357 / tcp

-171534721 | 2025-02-22T09:31:03.268001

Hashes

hash

-748229624

http.dom_hash

1239617585

http.html_hash

-171534721

http.server_hash

-1340961475

http.title_hash

1433208809

502 Bad Gateway

HTTP/1.1 502 Bad Gateway
Server: nginx
Date: Sat, 22 Feb 2025 09:31:03 GMT
Content-Type: text/html
Content-Length: 552
Connection: keep-alive
Keep-Alive: timeout=20

8092 / tcp

1311248428 | 2025-02-08T22:40:52.892621

Hashes

hash

797094556

http.dom_hash

-1688639027

http.favicon.hash

305155559

http.html_hash

1311248428

http.server_hash

-1786963686

百度网盘｜Synology

HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sat, 08 Feb 2025 22:40:52 GMT
Content-Type: text/html
Content-Length: 669
Last-Modified: Wed, 17 Jan 2024 11:58:36 GMT
Connection: keep-alive
ETag: "65a7c0ec-29d"
Accept-Ranges: bytes

CVE-2023-44487 CVE-2021-23017 CVE-2021-3618

116.231.51.184

Last Seen: 2025-02-22

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

21 / tcp

997942135 | 2025-02-16T11:01:36.327289

22 / tcp

-316095108 | 2025-02-08T11:31:42.445114

OpenSSH8.2

3306 / tcp

-1600451551 | 2025-02-04T09:46:17.059878

MariaDB

3702 / udp

-689548668 | 2025-02-16T12:26:17.349376

5000 / tcp

-292262234 | 2025-02-20T07:20:06.103832

Hashes

nginx

5357 / tcp

-171534721 | 2025-02-22T09:31:03.268001

Hashes

nginx

8092 / tcp

1311248428 | 2025-02-08T22:40:52.892621

Hashes

nginx1.18.0

Products

Pricing

Contact Us

116.231.51.184

Last Seen: 2025-02-22

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 22 Port 8092 Latest CVSS

OpenPorts

21 / tcp 997942135 | 2025-02-16T11:01:36.327289

22 / tcp -316095108 | 2025-02-08T11:31:42.445114

OpenSSH8.2

3306 / tcp -1600451551 | 2025-02-04T09:46:17.059878

MariaDB

3702 / udp -689548668 | 2025-02-16T12:26:17.349376

5000 / tcp -292262234 | 2025-02-20T07:20:06.103832

Hashes

nginx

5357 / tcp -171534721 | 2025-02-22T09:31:03.268001

Hashes

nginx

8092 / tcp 1311248428 | 2025-02-08T22:40:52.892621

Hashes

nginx1.18.0

Products

Pricing

Contact Us

Vulnerabilities

21 / tcp

997942135 | 2025-02-16T11:01:36.327289

22 / tcp

-316095108 | 2025-02-08T11:31:42.445114

3306 / tcp

-1600451551 | 2025-02-04T09:46:17.059878

3702 / udp

-689548668 | 2025-02-16T12:26:17.349376

5000 / tcp

-292262234 | 2025-02-20T07:20:06.103832

5357 / tcp

-171534721 | 2025-02-22T09:31:03.268001

8092 / tcp

1311248428 | 2025-02-08T22:40:52.892621