GeneralInformation

Hostnames	novatek.synology.me
Domains	synology.me
Country	Korea, Republic of
City	Seoul
Organization	Korea Telecom
ISP	Korea Telecom
ASN	AS4766

WebTechnologies

Issue trackers

Redmine

JavaScript frameworks

Prototype1.7.2

ExtJS

JavaScript libraries

jQuery1.11.1

Network storage

Synology DiskStation

Programming languages

Ruby

Web frameworks

Ruby on Rails

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

22 80 443 548 1194 1701 2121 3001 3307 5000 5001 5005 5006 5353 30002

1498498026 | 2024-12-25T11:23:01.873902

22 / tcp

SSH-2.0-OpenSSH_7.4
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQC+J4jyI/zxpMAG5DXCF5TeX2o17Elz8ZzR9WZmyhud5IGj
aRGa2Tlt+LrDMM5yA7ih3QYzJCRw1zLWV4D7jjhg3xwDZyeg3jx2V+VpVokzC3xFmYtqeO5b6E1H
U/yjLq9aPmMvwPdISGz2009xvHwxxl8yniZwcwQyOGHeCrZgPhTzvAkZKVdDdiUAAbuoc7wCzFLp
a+KLNfJzvWJvfxxBTKLh5UKYXv+WD1RFfOxikZSOsg1YV9bcuggGVqimt82j+IwqS0qjGP63p9PY
4CnEvdQrLHFGyY2aAdIZ298LRuCdNv+mqeewMV5LX4EnlPl5OdrIwcdEZDG5Vb7c64Pz
Fingerprint: 5e:86:a4:78:bb:b1:1e:dc:b6:c8:20:86:b7:af:d8:dc

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1

Server Host Key Algorithms:
	ssh-rsa
	rsa-sha2-512
	rsa-sha2-256
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 13 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2017-15906 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

-955965624 | 2024-12-21T12:23:57.328996

80 / tcp

Hello! Welcome to Synology Web Station!

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 21 Dec 2024 12:23:57 GMT
Content-Type: text/html
Content-Length: 1474
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Accept-Encoding
Last-Modified: Fri, 01 Apr 2022 01:51:10 GMT
ETag: "62465a8e-5c2"
Accept-Ranges: bytes

-955965624 | 2024-12-30T19:50:21.712886

443 / tcp

Hello! Welcome to Synology Web Station!

HTTP/1.1 200 OK
Server: nginx
Date: Mon, 30 Dec 2024 19:50:21 GMT
Content-Type: text/html
Content-Length: 1474
Connection: keep-alive
Keep-Alive: timeout=20
Last-Modified: Fri, 01 Apr 2022 01:51:10 GMT
ETag: "62465a8e-5c2"
Accept-Ranges: bytes

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:1f:79:7d:bd:e9:69:00:d2:1e:97:92:0c:44:13:80:74:9a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Nov 17 08:22:36 2024 GMT
            Not After : Feb 15 08:22:35 2025 GMT
        Subject: CN=novatek.synology.me
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ad:09:40:c1:d9:21:b1:30:7d:bb:73:00:8d:d5:
                    f2:17:64:27:45:7f:d6:7e:f7:44:f7:cb:39:d0:b0:
                    09:59:c1:8b:14:1c:53:fe:f2:4d:b3:70:02:bf:f4:
                    2e:65:17:4a:e9:e9:aa:89:43:51:5e:31:1b:a4:15:
                    84:19:cd:c1:37:f1:67:17:19:bd:5a:21:9e:e0:93:
                    64:56:9a:86:1a:ac:10:26:3d:4f:f0:ab:fb:55:95:
                    74:ac:d6:49:e0:a7:d2:72:09:de:1a:b5:4a:d3:77:
                    39:4d:bd:35:b8:0b:e5:e2:a2:08:74:1c:b4:fe:8c:
                    20:de:a0:14:f4:d9:18:3c:3f:1a:4a:ea:ad:eb:76:
                    d6:89:15:ed:87:c0:9b:31:e5:ff:8b:8d:54:24:c5:
                    47:46:8b:e4:22:93:f5:4d:cb:64:47:07:f8:05:fc:
                    72:f0:d7:a8:55:c4:2c:2d:d8:a8:fd:c5:5d:fc:ff:
                    cc:4d:f3:54:19:ec:9f:a1:16:3c:a7:90:b0:51:d5:
                    43:8a:4f:fa:4b:5a:81:ee:5a:d2:1b:b5:81:86:cd:
                    21:ed:b7:d8:a3:e4:50:28:12:2d:e2:dc:ce:da:31:
                    4f:83:e2:65:e6:90:13:54:4c:30:fc:e3:3a:b1:35:
                    87:62:3d:58:3d:45:98:b5:bb:fa:5d:e8:49:37:37:
                    9d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                15:08:46:9B:63:B5:45:F6:CC:63:56:87:B5:95:BA:8C:96:82:70:92
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:novatek.synology.me
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Nov 17 09:21:06.700 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:6B:A4:45:65:AF:FC:DE:D2:76:41:BC:10:
                                DA:DF:38:E7:19:25:AD:44:99:E8:B5:B6:6B:9E:AB:4E:
                                C2:BE:5E:91:02:20:3F:5F:18:61:0D:99:58:F9:C3:66:
                                3B:E7:B0:79:FA:9A:0E:FA:37:85:8A:04:AF:0C:86:36:
                                82:6D:41:80:12:EA
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Nov 17 09:21:08.767 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:19:AB:1B:D7:6A:19:47:DC:37:44:FA:2E:
                                39:A8:2C:1B:4C:F9:39:8C:F6:C1:01:90:7C:C0:BA:03:
                                BE:A3:A2:C7:02:20:5B:29:6B:F2:8A:92:5D:19:4C:33:
                                AA:D2:69:18:30:19:DF:98:70:C9:D1:F0:42:1E:CD:CC:
                                E9:34:70:AD:13:84
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        02:31:d2:ac:97:e7:05:78:70:bd:a8:a3:67:9f:f1:b9:59:36:
        de:37:7e:5d:a0:5a:c7:c2:ef:87:fe:81:8e:f6:ed:5b:d2:37:
        c7:1d:7c:ca:5e:5b:f5:d8:11:ed:9c:cc:63:94:25:08:ea:f5:
        f0:ac:84:8d:76:5f:04:b0:c9:8f:25:1f:d7:1d:a3:ef:1f:5f:
        2d:71:56:75:d3:83:07:bd:24:32:12:83:0b:3e:1c:db:f7:10:
        62:c7:c0:c5:2c:18:5a:32:cb:9c:e9:62:cb:38:66:9e:47:7a:
        b0:8b:9b:1a:c6:98:54:f3:24:d0:ed:7d:59:ca:b7:c0:7e:cd:
        50:28:8c:0f:cb:4e:01:24:6a:10:03:d3:2c:2e:f5:dc:14:78:
        1e:f1:7f:2f:29:e7:c2:d0:5e:23:34:e6:22:5c:8e:55:0b:fd:
        95:b3:f9:a5:26:b6:08:c1:3a:e1:8d:90:6a:1c:0c:59:30:44:
        a0:28:fb:36:ea:5e:7f:8e:36:36:c7:25:61:30:fc:46:24:d7:
        23:37:dd:6f:fa:b4:1f:30:64:95:a2:83:15:97:1e:15:7c:f1:
        75:9c:d1:c9:97:3c:bf:86:7c:6d:a2:d7:89:54:55:0e:40:23:
        af:e7:e2:7c:8b:2a:a2:8b:8d:20:03:2b:84:b9:ba:7f:ad:7b:
        2c:77:55:2a

-476400434 | 2025-01-06T18:27:19.843727

548 / tcp

AFP:
  Server Name: Novatek_S
  UTF-8 Server Name: Novatek_S
  Machine Type: Netatalk3.1.8
  Network Addresses:
    192.168.0.25
  AFP Versions:
    AFP2.2
    AFP3.1
    AFP3.2
    AFP3.3
    AFP3.4
    AFPX03
  UAMs:
    Cleartxt Passwrd
    DHCAST128
    DHX2
  Server Signature: 6c341ed46d7756400c852f016d80e38d
  Server Flags:
    Flag Hex: 0x8f79
    Super Client: True
    UUIDs: True
    UTF-8 Server Name: True
    Open Directory: True
    Reconnect: False
    Server Notifications: True
    TCP/IP: True
    Server Signature: True
    Server Messages: True
    Password Saving Prohibited: False
    Password Changing: False
    Copy File: True

-813786773 | 2024-12-19T09:15:42.377830

1194 / udp

@\xaeD\x1c9\xea/\x1c\xd2\x00\x00\x00\x00\x00

-2129060956 | 2024-12-19T18:12:12.838867

1701 / udp

\xc8\x02\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x01

100100865 | 2024-12-26T22:07:37.093962

2121 / tcp

220 Novatek_S FTP server ready.
530 Login incorrect.
214- The following commands are recognized (* =>'s unimplemented).
   USER    LPRT    MODE    MSOM*   RNTO    SITE    RMD     SIZE    AUTH 
   PASS    EPRT    RETR    MSAM*   ABOR    SYST    XRMD    MDTM    PBSZ 
   ACCT*   PASV    STOR    MRSQ*   DELE    STAT    PWD     MLST    PROT 
   SMNT*   LPSV    APPE    MRCP*   CWD     HELP    XPWD    MLSD    CCC 
   REIN*   EPSV    MLFL*   ALLO    XCWD    NOOP    CDUP    MFMT 
   QUIT    TYPE    MAIL*   REST    LIST    MKD     XCUP    FEAT 
   PORT    STRU    MSND*   RNFR    NLST    XMKD    STOU    OPTS 
214 Direct comments to ftp-bugs@Novatek_S.
211- Extensions supported:
 AUTH TLS
 PBSZ
 PROT
 CCC
 SIZE
 MDTM
 REST STREAM
 MFMT
 TVFS
 MLST
 MLSD
 UTF8
211 End.

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:1f:79:7d:bd:e9:69:00:d2:1e:97:92:0c:44:13:80:74:9a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Nov 17 08:22:36 2024 GMT
            Not After : Feb 15 08:22:35 2025 GMT
        Subject: CN=novatek.synology.me
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ad:09:40:c1:d9:21:b1:30:7d:bb:73:00:8d:d5:
                    f2:17:64:27:45:7f:d6:7e:f7:44:f7:cb:39:d0:b0:
                    09:59:c1:8b:14:1c:53:fe:f2:4d:b3:70:02:bf:f4:
                    2e:65:17:4a:e9:e9:aa:89:43:51:5e:31:1b:a4:15:
                    84:19:cd:c1:37:f1:67:17:19:bd:5a:21:9e:e0:93:
                    64:56:9a:86:1a:ac:10:26:3d:4f:f0:ab:fb:55:95:
                    74:ac:d6:49:e0:a7:d2:72:09:de:1a:b5:4a:d3:77:
                    39:4d:bd:35:b8:0b:e5:e2:a2:08:74:1c:b4:fe:8c:
                    20:de:a0:14:f4:d9:18:3c:3f:1a:4a:ea:ad:eb:76:
                    d6:89:15:ed:87:c0:9b:31:e5:ff:8b:8d:54:24:c5:
                    47:46:8b:e4:22:93:f5:4d:cb:64:47:07:f8:05:fc:
                    72:f0:d7:a8:55:c4:2c:2d:d8:a8:fd:c5:5d:fc:ff:
                    cc:4d:f3:54:19:ec:9f:a1:16:3c:a7:90:b0:51:d5:
                    43:8a:4f:fa:4b:5a:81:ee:5a:d2:1b:b5:81:86:cd:
                    21:ed:b7:d8:a3:e4:50:28:12:2d:e2:dc:ce:da:31:
                    4f:83:e2:65:e6:90:13:54:4c:30:fc:e3:3a:b1:35:
                    87:62:3d:58:3d:45:98:b5:bb:fa:5d:e8:49:37:37:
                    9d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                15:08:46:9B:63:B5:45:F6:CC:63:56:87:B5:95:BA:8C:96:82:70:92
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:novatek.synology.me
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Nov 17 09:21:06.700 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:6B:A4:45:65:AF:FC:DE:D2:76:41:BC:10:
                                DA:DF:38:E7:19:25:AD:44:99:E8:B5:B6:6B:9E:AB:4E:
                                C2:BE:5E:91:02:20:3F:5F:18:61:0D:99:58:F9:C3:66:
                                3B:E7:B0:79:FA:9A:0E:FA:37:85:8A:04:AF:0C:86:36:
                                82:6D:41:80:12:EA
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Nov 17 09:21:08.767 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:19:AB:1B:D7:6A:19:47:DC:37:44:FA:2E:
                                39:A8:2C:1B:4C:F9:39:8C:F6:C1:01:90:7C:C0:BA:03:
                                BE:A3:A2:C7:02:20:5B:29:6B:F2:8A:92:5D:19:4C:33:
                                AA:D2:69:18:30:19:DF:98:70:C9:D1:F0:42:1E:CD:CC:
                                E9:34:70:AD:13:84
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        02:31:d2:ac:97:e7:05:78:70:bd:a8:a3:67:9f:f1:b9:59:36:
        de:37:7e:5d:a0:5a:c7:c2:ef:87:fe:81:8e:f6:ed:5b:d2:37:
        c7:1d:7c:ca:5e:5b:f5:d8:11:ed:9c:cc:63:94:25:08:ea:f5:
        f0:ac:84:8d:76:5f:04:b0:c9:8f:25:1f:d7:1d:a3:ef:1f:5f:
        2d:71:56:75:d3:83:07:bd:24:32:12:83:0b:3e:1c:db:f7:10:
        62:c7:c0:c5:2c:18:5a:32:cb:9c:e9:62:cb:38:66:9e:47:7a:
        b0:8b:9b:1a:c6:98:54:f3:24:d0:ed:7d:59:ca:b7:c0:7e:cd:
        50:28:8c:0f:cb:4e:01:24:6a:10:03:d3:2c:2e:f5:dc:14:78:
        1e:f1:7f:2f:29:e7:c2:d0:5e:23:34:e6:22:5c:8e:55:0b:fd:
        95:b3:f9:a5:26:b6:08:c1:3a:e1:8d:90:6a:1c:0c:59:30:44:
        a0:28:fb:36:ea:5e:7f:8e:36:36:c7:25:61:30:fc:46:24:d7:
        23:37:dd:6f:fa:b4:1f:30:64:95:a2:83:15:97:1e:15:7c:f1:
        75:9c:d1:c9:97:3c:bf:86:7c:6d:a2:d7:89:54:55:0e:40:23:
        af:e7:e2:7c:8b:2a:a2:8b:8d:20:03:2b:84:b9:ba:7f:ad:7b:
        2c:77:55:2a

-1246004407 | 2024-12-25T13:36:42.481302

3001 / tcp

HTTP/1.1 400 Bad Request
Connection: close

96795729 | 2024-12-24T23:56:08.294865

3307 / tcp

MariaDB:
  Error Message: Host '224.22.219.217' is not allowed to connect to this MariaDB server
  Error Code: 1130

1486236175 | 2024-12-24T05:18:53.003679

5000 / tcp

Novatek_S - Synology DiskStation

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 24 Dec 2024 05:18:52 GMT
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Accept-Encoding
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Content-Security-Policy: base-uri 'self';  connect-src ws: wss: *; default-src 'self' 'unsafe-eval' data: blob: https://*.synology.com https://www.synology.cn/; font-src 'self' data: https://*.googleapis.com https://*.gstatic.com; form-action 'self'; frame-ancestors 'self' https://gofile.me http://gofile.me; frame-src 'self' data: blob: https://*.synology.com https://www.synology.cn/; img-src 'self' data: blob: https://*.google.com https://*.googleapis.com http://*.googlecode.com https://*.gstatic.com; media-src 'self' data: about:;  script-src 'self' 'unsafe-eval' data: blob: https://*.synology.com https://www.synology.cn/ https://*.google.com https://*.googleapis.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com;
Set-Cookie: id=;expires=Thu, 01-Jan-1970 00:00:01 GMT;path=/


Synology DiskStation Manager (DSM):
  Version: 6.2.4-25556
  Hostname: Novatek_S

-987392359 | 2024-12-27T06:30:26.967121

5001 / tcp

Novatek_S - Synology DiskStation

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 27 Dec 2024 06:30:26 GMT
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Content-Security-Policy: base-uri 'self';  connect-src ws: wss: *; default-src 'self' 'unsafe-eval' data: blob: https://*.synology.com https://www.synology.cn/; font-src 'self' data: https://*.googleapis.com https://*.gstatic.com; form-action 'self'; frame-ancestors 'self' https://gofile.me http://gofile.me; frame-src 'self' data: blob: https://*.synology.com https://www.synology.cn/; img-src 'self' data: blob: https://*.google.com https://*.googleapis.com http://*.googlecode.com https://*.gstatic.com; media-src 'self' data: about:;  script-src 'self' 'unsafe-eval' data: blob: https://*.synology.com https://www.synology.cn/ https://*.google.com https://*.googleapis.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com;
Set-Cookie: id=;expires=Thu, 01-Jan-1970 00:00:01 GMT;path=/


Synology DiskStation Manager (DSM):
  Version: 6.2.4-25556
  Hostname: Novatek_S

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:1f:79:7d:bd:e9:69:00:d2:1e:97:92:0c:44:13:80:74:9a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Nov 17 08:22:36 2024 GMT
            Not After : Feb 15 08:22:35 2025 GMT
        Subject: CN=novatek.synology.me
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ad:09:40:c1:d9:21:b1:30:7d:bb:73:00:8d:d5:
                    f2:17:64:27:45:7f:d6:7e:f7:44:f7:cb:39:d0:b0:
                    09:59:c1:8b:14:1c:53:fe:f2:4d:b3:70:02:bf:f4:
                    2e:65:17:4a:e9:e9:aa:89:43:51:5e:31:1b:a4:15:
                    84:19:cd:c1:37:f1:67:17:19:bd:5a:21:9e:e0:93:
                    64:56:9a:86:1a:ac:10:26:3d:4f:f0:ab:fb:55:95:
                    74:ac:d6:49:e0:a7:d2:72:09:de:1a:b5:4a:d3:77:
                    39:4d:bd:35:b8:0b:e5:e2:a2:08:74:1c:b4:fe:8c:
                    20:de:a0:14:f4:d9:18:3c:3f:1a:4a:ea:ad:eb:76:
                    d6:89:15:ed:87:c0:9b:31:e5:ff:8b:8d:54:24:c5:
                    47:46:8b:e4:22:93:f5:4d:cb:64:47:07:f8:05:fc:
                    72:f0:d7:a8:55:c4:2c:2d:d8:a8:fd:c5:5d:fc:ff:
                    cc:4d:f3:54:19:ec:9f:a1:16:3c:a7:90:b0:51:d5:
                    43:8a:4f:fa:4b:5a:81:ee:5a:d2:1b:b5:81:86:cd:
                    21:ed:b7:d8:a3:e4:50:28:12:2d:e2:dc:ce:da:31:
                    4f:83:e2:65:e6:90:13:54:4c:30:fc:e3:3a:b1:35:
                    87:62:3d:58:3d:45:98:b5:bb:fa:5d:e8:49:37:37:
                    9d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                15:08:46:9B:63:B5:45:F6:CC:63:56:87:B5:95:BA:8C:96:82:70:92
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:novatek.synology.me
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Nov 17 09:21:06.700 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:6B:A4:45:65:AF:FC:DE:D2:76:41:BC:10:
                                DA:DF:38:E7:19:25:AD:44:99:E8:B5:B6:6B:9E:AB:4E:
                                C2:BE:5E:91:02:20:3F:5F:18:61:0D:99:58:F9:C3:66:
                                3B:E7:B0:79:FA:9A:0E:FA:37:85:8A:04:AF:0C:86:36:
                                82:6D:41:80:12:EA
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Nov 17 09:21:08.767 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:19:AB:1B:D7:6A:19:47:DC:37:44:FA:2E:
                                39:A8:2C:1B:4C:F9:39:8C:F6:C1:01:90:7C:C0:BA:03:
                                BE:A3:A2:C7:02:20:5B:29:6B:F2:8A:92:5D:19:4C:33:
                                AA:D2:69:18:30:19:DF:98:70:C9:D1:F0:42:1E:CD:CC:
                                E9:34:70:AD:13:84
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        02:31:d2:ac:97:e7:05:78:70:bd:a8:a3:67:9f:f1:b9:59:36:
        de:37:7e:5d:a0:5a:c7:c2:ef:87:fe:81:8e:f6:ed:5b:d2:37:
        c7:1d:7c:ca:5e:5b:f5:d8:11:ed:9c:cc:63:94:25:08:ea:f5:
        f0:ac:84:8d:76:5f:04:b0:c9:8f:25:1f:d7:1d:a3:ef:1f:5f:
        2d:71:56:75:d3:83:07:bd:24:32:12:83:0b:3e:1c:db:f7:10:
        62:c7:c0:c5:2c:18:5a:32:cb:9c:e9:62:cb:38:66:9e:47:7a:
        b0:8b:9b:1a:c6:98:54:f3:24:d0:ed:7d:59:ca:b7:c0:7e:cd:
        50:28:8c:0f:cb:4e:01:24:6a:10:03:d3:2c:2e:f5:dc:14:78:
        1e:f1:7f:2f:29:e7:c2:d0:5e:23:34:e6:22:5c:8e:55:0b:fd:
        95:b3:f9:a5:26:b6:08:c1:3a:e1:8d:90:6a:1c:0c:59:30:44:
        a0:28:fb:36:ea:5e:7f:8e:36:36:c7:25:61:30:fc:46:24:d7:
        23:37:dd:6f:fa:b4:1f:30:64:95:a2:83:15:97:1e:15:7c:f1:
        75:9c:d1:c9:97:3c:bf:86:7c:6d:a2:d7:89:54:55:0e:40:23:
        af:e7:e2:7c:8b:2a:a2:8b:8d:20:03:2b:84:b9:ba:7f:ad:7b:
        2c:77:55:2a

1512856075 | 2025-01-05T01:59:48.903478

5005 / tcp

404 Not Found

HTTP/1.1 404 Not Found
Date: Sun, 05 Jan 2025 01:59:48 GMT
Server: Apache
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

1512856075 | 2025-01-06T02:44:33.569018

5006 / tcp

404 Not Found

HTTP/1.1 404 Not Found
Date: Mon, 06 Jan 2025 02:44:32 GMT
Server: Apache
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:1f:79:7d:bd:e9:69:00:d2:1e:97:92:0c:44:13:80:74:9a
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=US, O=Let's Encrypt, CN=R11
        Validity
            Not Before: Nov 17 08:22:36 2024 GMT
            Not After : Feb 15 08:22:35 2025 GMT
        Subject: CN=novatek.synology.me
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ad:09:40:c1:d9:21:b1:30:7d:bb:73:00:8d:d5:
                    f2:17:64:27:45:7f:d6:7e:f7:44:f7:cb:39:d0:b0:
                    09:59:c1:8b:14:1c:53:fe:f2:4d:b3:70:02:bf:f4:
                    2e:65:17:4a:e9:e9:aa:89:43:51:5e:31:1b:a4:15:
                    84:19:cd:c1:37:f1:67:17:19:bd:5a:21:9e:e0:93:
                    64:56:9a:86:1a:ac:10:26:3d:4f:f0:ab:fb:55:95:
                    74:ac:d6:49:e0:a7:d2:72:09:de:1a:b5:4a:d3:77:
                    39:4d:bd:35:b8:0b:e5:e2:a2:08:74:1c:b4:fe:8c:
                    20:de:a0:14:f4:d9:18:3c:3f:1a:4a:ea:ad:eb:76:
                    d6:89:15:ed:87:c0:9b:31:e5:ff:8b:8d:54:24:c5:
                    47:46:8b:e4:22:93:f5:4d:cb:64:47:07:f8:05:fc:
                    72:f0:d7:a8:55:c4:2c:2d:d8:a8:fd:c5:5d:fc:ff:
                    cc:4d:f3:54:19:ec:9f:a1:16:3c:a7:90:b0:51:d5:
                    43:8a:4f:fa:4b:5a:81:ee:5a:d2:1b:b5:81:86:cd:
                    21:ed:b7:d8:a3:e4:50:28:12:2d:e2:dc:ce:da:31:
                    4f:83:e2:65:e6:90:13:54:4c:30:fc:e3:3a:b1:35:
                    87:62:3d:58:3d:45:98:b5:bb:fa:5d:e8:49:37:37:
                    9d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                15:08:46:9B:63:B5:45:F6:CC:63:56:87:B5:95:BA:8C:96:82:70:92
            X509v3 Authority Key Identifier: 
                C5:CF:46:A4:EA:F4:C3:C0:7A:6C:95:C4:2D:B0:5E:92:2F:26:E3:B9
            Authority Information Access: 
                OCSP - URI:http://r11.o.lencr.org
                CA Issuers - URI:http://r11.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:novatek.synology.me
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Nov 17 09:21:06.700 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:6B:A4:45:65:AF:FC:DE:D2:76:41:BC:10:
                                DA:DF:38:E7:19:25:AD:44:99:E8:B5:B6:6B:9E:AB:4E:
                                C2:BE:5E:91:02:20:3F:5F:18:61:0D:99:58:F9:C3:66:
                                3B:E7:B0:79:FA:9A:0E:FA:37:85:8A:04:AF:0C:86:36:
                                82:6D:41:80:12:EA
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Nov 17 09:21:08.767 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:19:AB:1B:D7:6A:19:47:DC:37:44:FA:2E:
                                39:A8:2C:1B:4C:F9:39:8C:F6:C1:01:90:7C:C0:BA:03:
                                BE:A3:A2:C7:02:20:5B:29:6B:F2:8A:92:5D:19:4C:33:
                                AA:D2:69:18:30:19:DF:98:70:C9:D1:F0:42:1E:CD:CC:
                                E9:34:70:AD:13:84
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        02:31:d2:ac:97:e7:05:78:70:bd:a8:a3:67:9f:f1:b9:59:36:
        de:37:7e:5d:a0:5a:c7:c2:ef:87:fe:81:8e:f6:ed:5b:d2:37:
        c7:1d:7c:ca:5e:5b:f5:d8:11:ed:9c:cc:63:94:25:08:ea:f5:
        f0:ac:84:8d:76:5f:04:b0:c9:8f:25:1f:d7:1d:a3:ef:1f:5f:
        2d:71:56:75:d3:83:07:bd:24:32:12:83:0b:3e:1c:db:f7:10:
        62:c7:c0:c5:2c:18:5a:32:cb:9c:e9:62:cb:38:66:9e:47:7a:
        b0:8b:9b:1a:c6:98:54:f3:24:d0:ed:7d:59:ca:b7:c0:7e:cd:
        50:28:8c:0f:cb:4e:01:24:6a:10:03:d3:2c:2e:f5:dc:14:78:
        1e:f1:7f:2f:29:e7:c2:d0:5e:23:34:e6:22:5c:8e:55:0b:fd:
        95:b3:f9:a5:26:b6:08:c1:3a:e1:8d:90:6a:1c:0c:59:30:44:
        a0:28:fb:36:ea:5e:7f:8e:36:36:c7:25:61:30:fc:46:24:d7:
        23:37:dd:6f:fa:b4:1f:30:64:95:a2:83:15:97:1e:15:7c:f1:
        75:9c:d1:c9:97:3c:bf:86:7c:6d:a2:d7:89:54:55:0e:40:23:
        af:e7:e2:7c:8b:2a:a2:8b:8d:20:03:2b:84:b9:ba:7f:ad:7b:
        2c:77:55:2a

-936094217 | 2025-01-04T21:04:08.516113

5353 / udp

mDNS:
  services:
    445/tcp smb:
      Name=Novatek_S
      Address=192.168.0.25 fe80::211:32ff:fea2:f6a4
    548/tcp afpovertcp:
      Name=Novatek_S
      Address=192.168.0.25 fe80::211:32ff:fea2:f6a4
    2121/tcp ftp:
      Name=Novatek_S
      Address=192.168.0.25 fe80::211:32ff:fea2:f6a4
    5000/tcp http:
      vendor=Synology
      model=DS218+
      serial=18C1PCN389116
      version_major=6
      version_minor=2
      version_build=25556
      admin_port=5000
      secure_admin_port=5001
      mac_address=00:11:32:a2:f6:a4
      Name=Novatek_S
      Address=192.168.0.25 fe80::211:32ff:fea2:f6a4
    5005/tcp webdav:
      Name=Novatek_S
      Address=192.168.0.25 fe80::211:32ff:fea2:f6a4
    5006/tcp webdavs:
      Name=Novatek_S
      Address=192.168.0.25 fe80::211:32ff:fea2:f6a4
    device-info:
      model=Xserve
      Name=Novatek_S
      Address=192.168.0.25 fe80::211:32ff:fea2:f6a4
  answers:
    PTR:
      _webdavs._tcp.local
      _webdav._tcp.local
      _smb._tcp.local
      _ftp._tcp.local
      _http._tcp.local
      _afpovertcp._tcp.local
      _device-info._tcp.local

MAC Addresses

00:11:32:A2:F6:A4
    OUI: 00:11:32
    Organization: Synology Incorporated
    Assignment: MA-L
    Registration Date: 2004-04-25

750350492 | 2024-12-10T14:17:15.382458

30002 / tcp

Redmine

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 10 Dec 2024 14:17:15 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
ETag: W/"1e6095e0aee6c81891940f8a70dee922"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: _redmine_session=M0pIcmZYR2VhZ3pCWGsrWlVWSWNYZDFtbi9ZR2RITzRZTmhneDNnR0hMaGtPUzZPQi9EQXp5ZE92WkdFMnBpZTJPT2FLRzhxVGw1bnY5WUR6T3ErZk1SMktJdlhMa09xMU9jQTR2R3hSTmVsQ0FvYWxDbUg1SUh2Rkx6TThnRCtpMmZlRGs5eVg0S2lrS09qK0psdVFsMmc0Y1lKcGlBYWROeGF5NU16QTVMYXZpUVJ4Q3Q1VVlSU01GUXN2VVBJLS1DYURJcE1RU3dNcFc4ci9WOGRRdzRBPT0%3D--262176fae0104f9d6bdf67a35cbe6c0e9c066317; path=/; HttpOnly
X-Request-Id: e991560e-43c6-4f5f-8f2c-81347e1c7b35
X-Runtime: 0.422183

CVE-2020-11023 CVE-2020-11022 CVE-2019-11358 CVE-2015-9251

175.208.152.40

Last Seen: 2025-01-06

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1498498026 | 2024-12-25T11:23:01.873902
22 / tcp

OpenSSH7.4

-955965624 | 2024-12-21T12:23:57.328996
80 / tcp

nginx

-955965624 | 2024-12-30T19:50:21.712886
443 / tcp

nginx

-476400434 | 2025-01-06T18:27:19.843727
548 / tcp

Netatalk3.1.8

-813786773 | 2024-12-19T09:15:42.377830
1194 / udp

-2129060956 | 2024-12-19T18:12:12.838867
1701 / udp

100100865 | 2024-12-26T22:07:37.093962
2121 / tcp

-1246004407 | 2024-12-25T13:36:42.481302
3001 / tcp

96795729 | 2024-12-24T23:56:08.294865
3307 / tcp

MariaDB

1486236175 | 2024-12-24T05:18:53.003679
5000 / tcp

nginx

-987392359 | 2024-12-27T06:30:26.967121
5001 / tcp

nginx

1512856075 | 2025-01-05T01:59:48.903478
5005 / tcp

1512856075 | 2025-01-06T02:44:33.569018
5006 / tcp

-936094217 | 2025-01-04T21:04:08.516113
5353 / udp

mDNS

750350492 | 2024-12-10T14:17:15.382458
30002 / tcp

nginx

Products

Pricing

Contact Us

175.208.152.40

Last Seen: 2025-01-06

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 22 Port 30002 Latest CVSS

OpenPorts

1498498026 | 2024-12-25T11:23:01.873902 22 / tcp

-955965624 | 2024-12-21T12:23:57.328996 80 / tcp

-955965624 | 2024-12-30T19:50:21.712886 443 / tcp

-476400434 | 2025-01-06T18:27:19.843727 548 / tcp

-813786773 | 2024-12-19T09:15:42.377830 1194 / udp

-2129060956 | 2024-12-19T18:12:12.838867 1701 / udp

100100865 | 2024-12-26T22:07:37.093962 2121 / tcp

-1246004407 | 2024-12-25T13:36:42.481302 3001 / tcp

96795729 | 2024-12-24T23:56:08.294865 3307 / tcp

1486236175 | 2024-12-24T05:18:53.003679 5000 / tcp

-987392359 | 2024-12-27T06:30:26.967121 5001 / tcp

1512856075 | 2025-01-05T01:59:48.903478 5005 / tcp

1512856075 | 2025-01-06T02:44:33.569018 5006 / tcp

-936094217 | 2025-01-04T21:04:08.516113 5353 / udp

750350492 | 2024-12-10T14:17:15.382458 30002 / tcp

Products

Pricing

Contact Us

Vulnerabilities

1498498026 | 2024-12-25T11:23:01.873902
22 / tcp

-955965624 | 2024-12-21T12:23:57.328996
80 / tcp

-955965624 | 2024-12-30T19:50:21.712886
443 / tcp

-476400434 | 2025-01-06T18:27:19.843727
548 / tcp

-813786773 | 2024-12-19T09:15:42.377830
1194 / udp

-2129060956 | 2024-12-19T18:12:12.838867
1701 / udp

100100865 | 2024-12-26T22:07:37.093962
2121 / tcp

-1246004407 | 2024-12-25T13:36:42.481302
3001 / tcp

96795729 | 2024-12-24T23:56:08.294865
3307 / tcp

1486236175 | 2024-12-24T05:18:53.003679
5000 / tcp

-987392359 | 2024-12-27T06:30:26.967121
5001 / tcp

1512856075 | 2025-01-05T01:59:48.903478
5005 / tcp

1512856075 | 2025-01-06T02:44:33.569018
5006 / tcp

-936094217 | 2025-01-04T21:04:08.516113
5353 / udp

750350492 | 2024-12-10T14:17:15.382458
30002 / tcp