Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.
HTTP/1.1 403 Forbidden Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Wed, 05 Feb 2025 04:19:12 GMT Content-Length: 1233
HTTP/1.1 200 OK Date: Thu, 06 Feb 2025 16:53:11 GMT Server: Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN Content-Security-Policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' ; object-src 'self' ; worker-src 'self' blob: Content-type: text/html; charset=UTF-8 Last-modified: Fri, 25 Oct 2024 05:43:50 GMT Accept-Ranges: bytes Content-length: 580 Vary: Accept-Encoding X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff QNAP: Hostname: Meritech-Logs
Certificate: Data: Version: 3 (0x2) Serial Number: 03:58:f3:04:9a:ff:dd:24:77:46:80:c7:b8:79:08:be:13:96 Signature Algorithm: sha256WithRSAEncryption Issuer: C=US, O=Let's Encrypt, CN=R10 Validity Not Before: Jan 23 00:57:44 2025 GMT Not After : Apr 23 00:57:43 2025 GMT Subject: CN=meritechlogs.myqnapcloud.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Public-Key: (2048 bit) Modulus: 00:aa:6e:25:0f:b0:7b:72:57:31:0d:24:d7:7e:90: 43:35:b0:9f:2a:78:1f:79:ee:65:4b:a7:cb:e9:c3: 49:88:35:98:e3:29:4c:41:1e:ba:77:2d:6c:4f:df: c2:8d:ec:87:ea:7e:4f:b2:2f:a9:ac:e2:63:bf:20: 7d:1b:49:a6:74:f4:a7:be:ca:a6:f7:9b:be:27:87: 35:79:38:44:57:a2:7a:d8:c5:d2:81:3e:e8:5c:70: cd:84:62:d3:cf:ef:a0:d8:50:d9:d5:d4:11:85:e4: b9:e4:6f:0d:d2:ca:37:49:72:00:68:6b:b8:7b:cd: ca:e2:37:0d:0b:5c:f4:a2:e6:2a:dd:7e:99:a1:d4: 45:26:c5:be:75:06:26:fa:18:98:48:6a:93:e8:26: e1:15:45:ce:5b:62:1f:f8:77:98:06:58:99:84:f9: a8:8d:28:12:50:d9:3e:00:bc:12:17:00:74:05:26: e3:c4:ae:60:d7:7f:d4:0d:28:eb:47:d1:e7:42:4f: 09:7c:06:c4:08:0a:34:da:75:f6:dd:a8:af:0d:8a: 0b:32:85:d4:5f:e5:a0:4f:f7:49:88:55:85:b9:89: dd:33:f6:4c:0f:82:5c:da:7f:e3:93:7e:3e:d2:21: f2:67:84:7c:ff:3d:0b:3e:3f:94:40:80:6e:c0:af: cb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Key Usage: critical Digital Signature, Key Encipherment X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: 70:19:B8:65:54:6E:EA:F7:2A:1F:14:7A:6F:A9:36:C5:73:57:CB:E6 X509v3 Authority Key Identifier: BB:BC:C3:47:A5:E4:BC:A9:C6:C3:A4:72:0C:10:8D:A2:35:E1:C8:E8 Authority Information Access: OCSP - URI:http://r10.o.lencr.org CA Issuers - URI:http://r10.i.lencr.org/ X509v3 Subject Alternative Name: DNS:meritechlogs.myqnapcloud.com X509v3 Certificate Policies: Policy: 2.23.140.1.2.1 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Jan 23 01:56:14.598 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:21:00:BE:19:2D:5A:EB:DA:C6:36:5B:AC:65: F1:E7:75:56:5E:B8:6F:D8:1B:96:A6:7B:42:52:EF:08: 75:F8:49:80:A1:02:20:4F:D1:BE:AD:FC:9B:8B:79:52: F5:BA:ED:1E:C5:29:87:05:E5:31:3E:AE:24:AE:94:44: F7:7E:E6:C0:A5:6D:3E Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4: 16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22 Timestamp : Jan 23 01:56:14.889 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:44:02:20:5F:97:15:1A:1E:2D:86:21:46:70:C6:79: 11:3F:A9:CC:12:21:6F:7E:FC:B1:5F:6B:A3:BB:41:3E: E0:BB:A0:64:02:20:0F:93:3C:AF:22:A1:88:96:C8:B9: E8:C0:72:D9:35:33:21:0A:EA:19:66:0E:AE:0D:F5:34: 29:3E:4F:F1:BD:D3 Signature Algorithm: sha256WithRSAEncryption Signature Value: 41:3f:12:65:19:17:7a:f1:1d:7a:cf:a4:a2:ea:10:54:1d:68: 8f:ee:05:7b:a4:e3:6d:08:66:54:65:65:e4:eb:b0:6e:92:35: 76:0b:68:6d:39:1e:85:67:6d:fb:c2:3a:80:35:a4:30:99:4b: 4d:7b:68:a5:68:e8:c2:8f:b6:ba:2f:e8:47:c2:a7:1f:5a:80: d7:0d:b0:76:5b:12:91:a6:59:66:52:c9:5e:d0:19:28:e2:28: 0e:10:21:b7:92:82:ad:62:1b:98:2f:e1:ec:f9:66:50:6d:32: de:12:ea:2a:c7:36:83:6f:60:8a:7f:06:b3:1f:04:95:5c:52: f6:77:e9:00:96:44:e7:83:61:39:d5:e2:11:02:d1:b0:b8:ee: 90:c7:6f:2f:bd:77:be:d5:46:ee:a3:db:c8:b0:e5:b2:b4:09: 80:14:f3:9a:61:b2:7a:d3:a5:0c:23:69:f2:c1:b1:1c:3e:ae: 0a:aa:3e:7e:bb:51:36:d6:f7:a0:03:a6:cd:3a:f4:e5:4b:59: e4:05:88:26:60:83:66:5b:0c:23:cf:24:62:0e:c0:8c:8f:c0: 28:24:d3:47:d7:f3:4c:2f:73:30:df:69:37:c3:e3:d3:e8:56: 4d:7b:00:0a:39:cc:a6:ac:fa:f2:cd:ec:39:1e:cb:5f:ad:34: 2b:c5:96:3d
HTTP/1.1 302 Found Date: Sun, 02 Feb 2025 01:45:23 GMT Server: Apache/2.4.29 (Win32) OpenSSL/1.0.2n PHP/5.6.34 X-Powered-By: PHP/5.6.34 Location: http://39.110.216.254/dashboard/ Content-Length: 0 Content-Type: text/html; charset=UTF-8
HTTP/1.1 403 Forbidden Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Access-Control-Expose-Headers: x-filename Access-Control-Allow-Headers: * Date: Wed, 22 Jan 2025 22:01:39 GMT Content-Length: 1233
HTTP/1.1 403 Forbidden Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Access-Control-Expose-Headers: x-filename Access-Control-Allow-Headers: * Date: Sat, 18 Jan 2025 22:54:09 GMT Content-Length: 1233
HTTP/1.1 403 Forbidden Content-Type: text/html Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Fri, 24 Jan 2025 20:39:00 GMT Content-Length: 1233
HTTP/1.1 404 Not Found Transfer-Encoding: chunked Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET Date: Tue, 04 Feb 2025 16:47:35 GMT
Shodan ® - All rights reserved
