GeneralInformation

Hostnames	yusuinas2.synology.me
Domains	synology.me
Country	China
City	Shanghai
Organization	CHINANET SHANGHAI PROVINCE NETWORK
ISP	China Telecom (Group)
ASN	AS4812
Operating System	Synology DiskStation Manager (DSM) 7.0.1-42218

WebTechnologies

JavaScript frameworks

Vue.js

ExtJS

Network storage

Synology DiskStation

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

137 3702 5000 5001 5357 49153

137 / udp

-915698281 | 2024-12-30T11:09:55.452994

NetBIOS Response:
  Server Name: YUSUI2
  MAC Address: 00:00:00:00:00:00
  Names:
    YUSUI2 <0x0>
    YUSUI2 <0x3>
    YUSUI2 <0x20>
    WORKGROUP <0x0>
    WORKGROUP <0x1e>
  Additional Interfaces:
    192.168.31.3

3702 / udp

1399892796 | 2025-01-08T16:46:46.727532

<?xml version="1.0" encoding="UTF-8"?>
<soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope" xmlns:pub="http://schemas.microsoft.com/windows/pub/2005/07" xmlns:wsa="http://schemas.xmlsoap.org/ws/2004/08/addressing" xmlns:wsd="http://schemas.xmlsoap.org/ws/2005/04/discovery" xmlns:wsdp="http://schemas.xmlsoap.org/ws/2006/02/devprof" xmlns:wsx="http://schemas.xmlsoap.org/ws/2004/09/mex" xmlns:un0="http://schemas.microsoft.com/windows/pnpx/2005/10"><soap:Header><wsa:To>http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous</wsa:To><wsa:Action>http://schemas.xmlsoap.org/ws/2005/04/discovery/ProbeMatches</wsa:Action><wsa:MessageID>urn:uuid:47557bc5-95f8-4ff6-a21c-df9277c64ccd</wsa:MessageID><wsa:RelatesTo>18930069-880c-41b3-886c-4ae76fac6b47</wsa:RelatesTo><wsd:AppSequence InstanceId="1733085080" SequenceId="urn:uuid:3f083793-cce6-4a0f-bf40-4ff5edb1a07c" MessageNumber="12371"/></soap:Header><soap:Body><wsd:ProbeMatches><wsd:ProbeMatch><wsa:EndpointReference><wsa:Address>urn:uuid:22c32b63-f095-4bf3-9f4b-e57972f79563</wsa:Address></wsa:EndpointReference><wsd:Types>wsdp:Device pub:Computer</wsd:Types><wsd:XAddrs>http://Yusui2:5357/22c32b63-f095-4bf3-9f4b-e57972f79563</wsd:XAddrs><wsd:MetadataVersion>2</wsd:MetadataVersion></wsd:ProbeMatch></wsd:ProbeMatches></soap:Body></soap:Envelope>

5000 / tcp

-1279568438 | 2025-01-05T15:44:29.877597

Hashes

hash

-1368750540

http.dom_hash

-846517695

http.favicon.hash

163207293

http.html_hash

-1279568438

http.server_hash

-1340961475

http.title_hash

-910524925

Yusui2 - Synology NAS

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 Jan 2025 15:44:29 GMT
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Accept-Encoding
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Content-Security-Policy: base-uri 'self';  connect-src data: ws: wss: *; default-src 'self' 'unsafe-eval' data: blob: https://*.synology.com https://www.synology.cn/ https://help.synology.cn/; font-src 'self' data: https://*.googleapis.com https://*.gstatic.com; form-action 'self'; frame-ancestors 'self' https://gofile.me http://gofile.me; frame-src 'self' data: blob: https://*.synology.com https://*.synology.cn http://*.synology.com http://*.synology.cn; img-src 'self' data: blob: https://*.google.com https://*.googleapis.com http://*.googlecode.com https://*.gstatic.com; media-src 'self' data: about: https://*.synology.com https://help.synology.cn;  script-src 'self' 'unsafe-eval' data: blob: https://*.synology.com https://www.synology.cn/ https://help.synology.cn https://*.google.com https://*.googleapis.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com;


Synology DiskStation Manager (DSM):
  Version: 7.0.1-42218
  Hostname: Yusui2

CVE-2022-27626 CVE-2022-27625 CVE-2022-27624 CVE-2022-27623 CVE-2022-27616 11 moreCVE-2024-0854 CVE-2023-2729 CVE-2023-0142 CVE-2022-27622 CVE-2022-22680 CVE-2022-22679 CVE-2022-3576 CVE-2021-43929 CVE-2021-43927 CVE-2021-43926 CVE-2021-43925

5001 / tcp

-1279568438 | 2025-01-10T02:08:20.054090

Hashes

hash

298187693

http.dom_hash

-846517695

http.favicon.hash

163207293

http.html_hash

-1279568438

http.server_hash

-1340961475

http.title_hash

-910524925

Yusui2 - Synology NAS

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 10 Jan 2025 02:08:19 GMT
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Content-Security-Policy: base-uri 'self';  connect-src data: ws: wss: *; default-src 'self' 'unsafe-eval' data: blob: https://*.synology.com https://www.synology.cn/ https://help.synology.cn/; font-src 'self' data: https://*.googleapis.com https://*.gstatic.com; form-action 'self'; frame-ancestors 'self' https://gofile.me http://gofile.me; frame-src 'self' data: blob: https://*.synology.com https://*.synology.cn http://*.synology.com http://*.synology.cn; img-src 'self' data: blob: https://*.google.com https://*.googleapis.com http://*.googlecode.com https://*.gstatic.com; media-src 'self' data: about: https://*.synology.com https://help.synology.cn;  script-src 'self' 'unsafe-eval' data: blob: https://*.synology.com https://www.synology.cn/ https://help.synology.cn https://*.google.com https://*.googleapis.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com;


Synology DiskStation Manager (DSM):
  Version: 7.0.1-42218
  Hostname: Yusui2

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:46:83:06:f2:77:57:6a:85:07:32:45:da:bc:0a:3f:c9:02
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E5
        Validity
            Not Before: Dec 30 01:10:57 2024 GMT
            Not After : Mar 30 01:10:56 2025 GMT
        Subject: CN=yusuinas2.synology.me
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:e7:d4:19:c1:d4:80:1b:d7:1e:cc:53:48:69:be:
                    c6:88:e2:2d:e2:64:d6:97:08:a4:57:9b:ee:e1:14:
                    fa:25:57:9a:ae:1b:c8:7e:5e:f2:ce:5f:78:f2:fa:
                    98:e5:a1:40:e3:58:f9:2e:81:e0:e9:b1:c9:cd:55:
                    66:1d:2c:76:a3
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                F9:07:D6:EE:7F:ED:34:C1:BB:9E:53:FE:95:0C:64:77:82:69:D9:41
            X509v3 Authority Key Identifier: 
                9F:2B:5F:CF:3C:21:4F:9D:04:B7:ED:2B:2C:C4:C6:70:8B:D2:D7:0D
            Authority Information Access: 
                OCSP - URI:http://e5.o.lencr.org
                CA Issuers - URI:http://e5.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:*.yusuinas2.synology.me, DNS:yusuinas2.synology.me
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : DE:85:81:D7:50:24:7C:6B:CD:CB:AF:56:37:C5:E7:81:
                                C6:4C:E4:6E:D6:17:63:9F:8F:34:A7:26:C9:E2:BD:37
                    Timestamp : Dec 30 02:09:27.870 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:4E:43:23:EC:D7:C1:40:E7:80:0D:9F:7A:
                                D3:D0:F1:B8:E3:0C:ED:64:CA:17:28:C1:00:33:DF:BA:
                                2F:49:4B:05:02:20:5A:33:B2:8B:F2:DD:F5:E1:36:43:
                                84:E8:E7:A8:DE:10:09:8F:1D:45:09:C1:C8:2E:6C:D6:
                                75:02:0E:C8:88:89
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4:
                                16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22
                    Timestamp : Dec 30 02:09:28.103 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:4D:3F:9F:25:1D:AC:33:FC:53:1A:34:5B:
                                50:39:BF:0E:C3:67:31:54:2F:C5:CF:9A:3D:4E:6E:57:
                                2D:BE:01:83:02:20:73:79:B5:EB:3F:06:FD:92:AA:D3:
                                84:B4:9F:5B:F4:8E:6D:7C:96:9A:85:59:08:BD:31:B2:
                                7A:2A:8F:25:6A:58
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:65:02:30:30:a3:6e:87:59:79:9b:73:47:e8:ae:ba:4a:08:
        13:c2:e3:ff:68:b7:46:1d:41:46:72:93:64:f2:d6:6f:92:c8:
        ad:b8:8c:cc:00:64:28:5b:26:a3:56:5e:47:4a:66:50:02:31:
        00:ae:1a:4b:2f:67:fb:49:24:9d:6d:2f:c5:6b:12:88:ef:00:
        8c:4d:88:43:ad:8d:d3:46:f8:00:fe:ec:51:11:20:36:83:d6:
        19:41:81:3d:35:c4:88:c2:72:b0:8a:ef:99

5357 / tcp

-171534721 | 2025-01-02T21:53:54.092581

Hashes

hash

-704351828

http.dom_hash

1239617585

http.html_hash

-171534721

http.server_hash

-1340961475

http.title_hash

1433208809

502 Bad Gateway

HTTP/1.1 502 Bad Gateway
Server: nginx
Date: Thu, 02 Jan 2025 21:53:53 GMT
Content-Type: text/html
Content-Length: 552
Connection: keep-alive
Keep-Alive: timeout=20

180.158.28.187

Last Seen: 2025-01-10

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

137 / udp

-915698281 | 2024-12-30T11:09:55.452994

3702 / udp

1399892796 | 2025-01-08T16:46:46.727532

5000 / tcp

-1279568438 | 2025-01-05T15:44:29.877597

Hashes

nginx

5001 / tcp

-1279568438 | 2025-01-10T02:08:20.054090

Hashes

nginx

5357 / tcp

-171534721 | 2025-01-02T21:53:54.092581

Hashes

nginx

Products

Pricing

Contact Us

180.158.28.187

Last Seen: 2025-01-10

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 5000 Port 5001 Latest CVSS

OpenPorts

137 / udp -915698281 | 2024-12-30T11:09:55.452994

3702 / udp 1399892796 | 2025-01-08T16:46:46.727532

5000 / tcp -1279568438 | 2025-01-05T15:44:29.877597

Hashes

nginx

5001 / tcp -1279568438 | 2025-01-10T02:08:20.054090

Hashes

nginx

5357 / tcp -171534721 | 2025-01-02T21:53:54.092581

Hashes

nginx

Products

Pricing

Contact Us

Vulnerabilities

137 / udp

-915698281 | 2024-12-30T11:09:55.452994

3702 / udp

1399892796 | 2025-01-08T16:46:46.727532

5000 / tcp

-1279568438 | 2025-01-05T15:44:29.877597

5001 / tcp

-1279568438 | 2025-01-10T02:08:20.054090

5357 / tcp

-171534721 | 2025-01-02T21:53:54.092581