GeneralInformation

Hostnames	130.red-2-136-139.staticip.rima-tde.net rurquiza.synology.me
Domains	rima-tde.net synology.me
Country	Spain
City	Madrid
Organization	TELEFONICA DE ESPANA S.A.U.
ISP	TELEFONICA DE ESPANA S.A.U.
ASN	AS3352

WebTechnologies

JavaScript frameworks

Vue.js

Network storage

Synology DiskStation

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

53 443 445 500 5000 5001 5005 5007 5357 7001

1927140995 | 2025-01-12T00:18:02.526401

443 / tcp

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 12 Jan 2025 00:13:07 GMT
Content-Type: text/html
Content-Length: 494
Last-Modified: Thu, 19 Dec 2024 23:21:35 GMT
Connection: keep-alive
Keep-Alive: timeout=20
ETag: "6764aa7f-1ee"
Cache-Control: no-cache
Accept-Ranges: bytes

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:eb:35:5a:1c:de:b1:ff:a8:02:95:7f:00:29:5a:c0:4f:29
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E6
        Validity
            Not Before: Dec 23 02:15:04 2024 GMT
            Not After : Mar 23 02:15:03 2025 GMT
        Subject: CN=rurquiza.synology.me
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:9c:1d:12:af:df:ff:ba:e9:00:38:27:6f:f6:c0:
                    f3:e8:1b:29:c1:98:bc:9e:e3:6e:62:12:92:88:d3:
                    7b:5c:de:bb:16:05:2c:d2:d2:c9:fb:1c:52:eb:6a:
                    bf:ab:a0:1c:c5:53:12:65:23:90:cf:7a:f2:a8:9d:
                    95:f7:50:fb:08
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                71:A2:00:E1:B6:3E:9A:90:0D:30:E9:85:8B:D8:E0:06:25:A0:4D:C6
            X509v3 Authority Key Identifier: 
                93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2
            Authority Information Access: 
                OCSP - URI:http://e6.o.lencr.org
                CA Issuers - URI:http://e6.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:*.rurquiza.synology.me, DNS:rurquiza.synology.me
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Dec 23 03:13:34.875 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:48:7C:5A:B8:7F:14:37:4B:E4:B1:79:1D:
                                5B:2C:10:CF:43:7E:F0:43:00:7E:CA:0E:1E:84:A5:E4:
                                4D:B8:6D:54:02:20:7A:D2:AB:C6:5B:9B:DA:7A:E8:88:
                                FF:15:1D:CD:8B:CF:80:81:14:6F:FA:CA:98:13:6D:6E:
                                0D:47:97:23:EF:FE
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Dec 23 03:13:34.893 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:3E:A2:42:83:35:88:C0:39:62:43:A3:7D:
                                3D:26:7D:06:33:07:DF:4B:1E:F1:17:3F:3C:43:54:ED:
                                10:CC:8D:F6:02:21:00:FC:4A:23:AF:9A:7F:C3:76:B6:
                                0C:FA:14:52:48:8A:2E:FF:57:1B:BC:16:0D:AE:E3:33:
                                EE:1F:9E:D0:7A:58:35
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:64:02:30:4e:e0:d3:9b:84:9c:a5:a9:9d:c1:1b:cb:f1:8f:
        81:8a:e6:9e:22:37:b1:91:34:a1:e6:f4:2c:7c:60:84:3b:10:
        23:5b:aa:49:45:a5:da:3a:8f:9e:3e:35:12:fc:47:6f:02:30:
        38:c3:5c:41:66:46:41:52:20:7b:fb:7d:39:39:75:9c:d6:f6:
        8b:82:57:89:a7:ae:e0:f6:ee:c9:6e:fd:64:b1:9f:3b:cc:af:
        37:74:7e:58:e5:c5:1e:8a:77:45:42:21

1982580709 | 2025-01-07T23:55:11.977177

445 / tcp

SMB Status:
  Authentication: enabled
  SMB Version: 1
  OS: Windows 6.1
  Software: Samba 4.15.13
  Capabilities: dfs, extended-security, infolevel-passthru, large-files, large-readx, large-writex, level2-oplocks, lock-and-read, nt-find, nt-smb, nt-status, raw-mode, rpc-remote-api, unicode, unix

493206403 | 2025-01-16T05:01:32.034462

500 / udp

VPN (IKE)

Initiator SPI: 637a637966793165
Responder SPI: 6f647a7571616764
Next Payload: Notification (N)
Version: 1.0
Exchange Type: Informational
Flags:
    Encryption:     False
    Commit:         False
    Authentication: False
Message ID: 00000000
Length: 40

1758763250 | 2025-01-18T03:54:25.312658

5000 / tcp

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 18 Jan 2025 03:54:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Cache-control: no-store

1975061768 | 2025-01-02T22:29:23.856691

5001 / tcp

Auditus Server

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 02 Jan 2025 22:29:23 GMT
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Accept-Encoding
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Content-Security-Policy: base-uri 'self';  connect-src data: ws: wss: http: https:; default-src 'self' 'unsafe-eval' data: blob: https://*.synology.com https://www.synology.cn/ https://help.synology.cn/; font-src 'self' data: https://*.googleapis.com https://*.gstatic.com; form-action 'self'; frame-ancestors 'self'; frame-src 'self' data: blob: https://*.synology.com https://*.synology.cn http://*.synology.com http://*.synology.cn http://global.synologydownload.com https://global.synologydownload.com; img-src 'self' data: blob: https://*.google.com https://*.googleapis.com http://*.googlecode.com https://*.gstatic.com https://global.download.synology.com; media-src 'self' data: about: https://*.synology.com https://help.synology.cn;  script-src 'self' 'unsafe-eval' data: blob: https://maps.google.com https://maps.googleapis.com https://ajax.googleapis.com https://help.synology.com https://help.synology.cn; style-src 'self' 'unsafe-inline' https://*.googleapis.com;


Synology DiskStation Manager (DSM):
  Version: 7.2.1-69057
  Hostname: NAS
  Custom Login Title: Auditus Server

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:eb:35:5a:1c:de:b1:ff:a8:02:95:7f:00:29:5a:c0:4f:29
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E6
        Validity
            Not Before: Dec 23 02:15:04 2024 GMT
            Not After : Mar 23 02:15:03 2025 GMT
        Subject: CN=rurquiza.synology.me
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:9c:1d:12:af:df:ff:ba:e9:00:38:27:6f:f6:c0:
                    f3:e8:1b:29:c1:98:bc:9e:e3:6e:62:12:92:88:d3:
                    7b:5c:de:bb:16:05:2c:d2:d2:c9:fb:1c:52:eb:6a:
                    bf:ab:a0:1c:c5:53:12:65:23:90:cf:7a:f2:a8:9d:
                    95:f7:50:fb:08
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                71:A2:00:E1:B6:3E:9A:90:0D:30:E9:85:8B:D8:E0:06:25:A0:4D:C6
            X509v3 Authority Key Identifier: 
                93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2
            Authority Information Access: 
                OCSP - URI:http://e6.o.lencr.org
                CA Issuers - URI:http://e6.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:*.rurquiza.synology.me, DNS:rurquiza.synology.me
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Dec 23 03:13:34.875 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:48:7C:5A:B8:7F:14:37:4B:E4:B1:79:1D:
                                5B:2C:10:CF:43:7E:F0:43:00:7E:CA:0E:1E:84:A5:E4:
                                4D:B8:6D:54:02:20:7A:D2:AB:C6:5B:9B:DA:7A:E8:88:
                                FF:15:1D:CD:8B:CF:80:81:14:6F:FA:CA:98:13:6D:6E:
                                0D:47:97:23:EF:FE
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Dec 23 03:13:34.893 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:3E:A2:42:83:35:88:C0:39:62:43:A3:7D:
                                3D:26:7D:06:33:07:DF:4B:1E:F1:17:3F:3C:43:54:ED:
                                10:CC:8D:F6:02:21:00:FC:4A:23:AF:9A:7F:C3:76:B6:
                                0C:FA:14:52:48:8A:2E:FF:57:1B:BC:16:0D:AE:E3:33:
                                EE:1F:9E:D0:7A:58:35
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:64:02:30:4e:e0:d3:9b:84:9c:a5:a9:9d:c1:1b:cb:f1:8f:
        81:8a:e6:9e:22:37:b1:91:34:a1:e6:f4:2c:7c:60:84:3b:10:
        23:5b:aa:49:45:a5:da:3a:8f:9e:3e:35:12:fc:47:6f:02:30:
        38:c3:5c:41:66:46:41:52:20:7b:fb:7d:39:39:75:9c:d6:f6:
        8b:82:57:89:a7:ae:e0:f6:ee:c9:6e:fd:64:b1:9f:3b:cc:af:
        37:74:7e:58:e5:c5:1e:8a:77:45:42:21

CVE-2024-0854

-1344393306 | 2025-01-17T19:55:53.665568

5005 / tcp

400 Bad Request

HTTP/1.1 400 Bad Request
Date: Fri, 17 Jan 2025 19:55:53 GMT
Server: Apache
Content-Length: 362
Connection: close
Content-Type: text/html; charset=iso-8859-1

-445492624 | 2025-01-08T10:33:53.603782

5007 / tcp

HTTP/1.1 400 Bad Request
Date: Wed, 08 Jan 2025 10:33:53 GMT
Server: Apache
Content-Length: 226
Connection: close
Content-Type: text/html; charset=iso-8859-1

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>400 Bad Request</title>
</head><body>
<h1>Bad Request</h1>
<p>Your browser sent a request that this server could not understand.<br />
</p>
</body></html>

-171534721 | 2025-01-01T18:44:26.967731

5357 / tcp

502 Bad Gateway

HTTP/1.1 502 Bad Gateway
Server: nginx
Date: Wed, 01 Jan 2025 18:44:23 GMT
Content-Type: text/html
Content-Length: 552
Connection: keep-alive
Keep-Alive: timeout=20

-1019681612 | 2025-01-10T06:58:24.066864

7001 / tcp

HTTP/1.1 400 Bad Request
Server: nginx
Date: Fri, 10 Jan 2025 06:58:23 GMT
Content-Type: text/html
Content-Length: 150
Connection: close

<html>
<head><title>400 Bad Request</title></head>
<body>
<center><h1>400 Bad Request</h1></center>
<hr><center>nginx</center>
</body>
</html>

2.136.139.130

Last Seen: 2025-01-18

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

1927140995 | 2025-01-12T00:18:02.526401
443 / tcp

nginx

1982580709 | 2025-01-07T23:55:11.977177
445 / tcp

Samba4.15.13

493206403 | 2025-01-16T05:01:32.034462
500 / udp

1758763250 | 2025-01-18T03:54:25.312658
5000 / tcp

nginx

1975061768 | 2025-01-02T22:29:23.856691
5001 / tcp

nginx

-1344393306 | 2025-01-17T19:55:53.665568
5005 / tcp

-445492624 | 2025-01-08T10:33:53.603782
5007 / tcp

-171534721 | 2025-01-01T18:44:26.967731
5357 / tcp

nginx

-1019681612 | 2025-01-10T06:58:24.066864
7001 / tcp

nginx

Products

Pricing

Contact Us

2.136.139.130

Last Seen: 2025-01-18

Tags:

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 5001 Latest CVSS

OpenPorts

1927140995 | 2025-01-12T00:18:02.526401 443 / tcp

nginx

1982580709 | 2025-01-07T23:55:11.977177 445 / tcp

Samba4.15.13

493206403 | 2025-01-16T05:01:32.034462 500 / udp

1758763250 | 2025-01-18T03:54:25.312658 5000 / tcp

nginx

1975061768 | 2025-01-02T22:29:23.856691 5001 / tcp

nginx

-1344393306 | 2025-01-17T19:55:53.665568 5005 / tcp

-445492624 | 2025-01-08T10:33:53.603782 5007 / tcp

-171534721 | 2025-01-01T18:44:26.967731 5357 / tcp

nginx

-1019681612 | 2025-01-10T06:58:24.066864 7001 / tcp

nginx

Products

Pricing

Contact Us

Vulnerabilities

1927140995 | 2025-01-12T00:18:02.526401
443 / tcp

1982580709 | 2025-01-07T23:55:11.977177
445 / tcp

493206403 | 2025-01-16T05:01:32.034462
500 / udp

1758763250 | 2025-01-18T03:54:25.312658
5000 / tcp

1975061768 | 2025-01-02T22:29:23.856691
5001 / tcp

-1344393306 | 2025-01-17T19:55:53.665568
5005 / tcp

-445492624 | 2025-01-08T10:33:53.603782
5007 / tcp

-171534721 | 2025-01-01T18:44:26.967731
5357 / tcp

-1019681612 | 2025-01-10T06:58:24.066864
7001 / tcp