GeneralInformation

Hostnames	c-68-60-203-205.hsd1.mi.comcast.net kpcaanas1.direct.quickconnect.to kpcaanas1.synology.me
Domains	comcast.net quickconnect.to synology.me
Country	United States
City	Milford
Organization	Comcast Cable Communications, Inc.
ISP	Comcast Cable Communications, LLC
ASN	AS7922
Operating System	Synology DiskStation Manager (DSM) 7.0.1-42218

WebTechnologies

CDN

jQuery CDN

JavaScript frameworks

Vue.js

ExtJS

JavaScript libraries

jQuery

jQuery UI1.12.1

Network storage

Synology DiskStation

UI frameworks

Bootstrap3.3.6

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

22 80 443 5001

-377539632 | 2025-01-11T18:16:37.954576

22 / tcp

SSH-2.0-OpenSSH_8.2
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQDWGIaHSIXHU3ESKW9XiyjRGdowMky8vSQ8UiSpC2ISIOr4
F2eeUVOMKG3zSveZm7EwOZX5DZ9RszNQMQWwH9wxsqtQ1r9RZKbEJ3GXzVan2l8aOhbM4/saZ9wf
p1OReBng55vfJYoMDuug8EQW+fiCjsowBFyAngek1dF0YyJrYnjvRgpi8EOf3/JOrOEi7LEOCep0
02fLAag2HB43YyGpabNvkzEtx/irOqbK3KoVe8+sC25Fi0Z4bqmQtwPhvMpbokLz8VStixpTpwnb
Oa9qGUqO5Le5gdUESwqi18zDUIAPdTyH6LNk8+2XycFW2wkbhxjKyUj7hISr3TUq4TLsL6AL0eh2
/JqF23YUf/ZJKS5a02x+oI9+rN7wjighGRhKjG86QEY3NSZT3x14NAZvTfduUgZS+F/dXwhT2hhI
V4aKVZaAmEvu3sUP6/5cCnRZYt4+D75sjsaZhzNEm+bxWv85RxCPlQELqAQLcw8AmOfc4A9Ywxmz
rxQPkkfF5/E=
Fingerprint: 07:b2:75:23:54:03:a0:cb:1f:f0:e9:08:84:16:c6:81

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2021-28041 8 moreCVE-2020-15778 CVE-2020-12062 CVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

-45735031 | 2025-01-09T16:04:49.108505

80 / tcp

KIM (KPCAA Income Management)

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 09 Jan 2025 16:04:48 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Accept-Encoding
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=ad8f12b0571a11880cf79d07b4787395; path=/
Vary: Accept-Encoding

CVE-2019-8331 CVE-2018-20677 CVE-2018-20676 CVE-2018-14042 CVE-2018-14040 CVE-2016-10735

-45735031 | 2025-01-12T14:03:48.126144

443 / tcp

KIM (KPCAA Income Management)

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 12 Jan 2025 14:03:48 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: PHPSESSID=2ead9d46a15b9b16aa053938fa78a286; path=/
Vary: Accept-Encoding

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:b1:d1:b8:59:73:43:cc:16:fc:44:29:bc:d9:08:fe:b7:84
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E6
        Validity
            Not Before: Nov 28 04:31:49 2024 GMT
            Not After : Feb 26 04:31:48 2025 GMT
        Subject: CN=kpcaanas1.direct.quickconnect.to
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:08:da:a5:7d:53:c0:0d:5e:dc:17:82:44:c5:45:
                    eb:0a:52:47:c9:08:5c:22:45:fc:30:02:46:50:94:
                    e4:e3:33:89:56:0f:f2:14:68:61:17:92:39:98:10:
                    9a:75:93:26:82:d0:04:83:e8:fb:62:eb:7a:b0:c1:
                    82:42:ab:b7:a1
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                AC:24:39:16:F9:F9:19:31:2A:FC:1C:C4:EF:86:8B:C5:47:B0:83:E4
            X509v3 Authority Key Identifier: 
                93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2
            Authority Information Access: 
                OCSP - URI:http://e6.o.lencr.org
                CA Issuers - URI:http://e6.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:*.kpcaanas1.direct.quickconnect.to, DNS:kpcaanas1.direct.quickconnect.to
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 7D:59:1E:12:E1:78:2A:7B:1C:61:67:7C:5E:FD:F8:D0:
                                87:5C:14:A0:4E:95:9E:B9:03:2F:D9:0E:8C:2E:79:B8
                    Timestamp : Nov 28 05:30:19.976 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:44:02:20:3B:69:42:17:CF:5A:27:53:BD:3C:76:D4:
                                FD:CE:66:DF:67:07:C4:C0:22:F5:10:20:76:53:C6:E5:
                                E9:1B:C0:A1:02:20:0E:10:14:91:A0:E7:C8:E4:5C:90:
                                BA:90:0A:FF:F1:C1:19:C2:8E:95:EC:9B:08:47:4F:32:
                                00:A2:25:E1:0E:5C
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Nov 28 05:30:19.971 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:9E:7B:3F:08:94:4E:1E:CC:2E:96:3F:
                                68:1F:2C:5E:84:26:27:CB:E8:9C:A4:57:2E:55:73:ED:
                                8E:4B:17:68:7B:02:21:00:82:B9:38:01:CB:FB:04:43:
                                DC:DF:80:0F:AB:25:88:B6:1E:1F:F3:6C:3C:DD:A9:F0:
                                42:8B:2C:FD:FA:75:CC:D8
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:65:02:30:7a:e0:cf:04:d1:8e:2e:bc:65:a1:11:ba:08:46:
        46:27:25:ef:66:39:e5:52:a1:1e:4b:5a:4b:35:c3:e6:29:e3:
        50:2f:d4:1f:f4:0f:c2:00:66:c4:38:93:53:95:c4:21:02:31:
        00:fc:45:07:14:09:b3:43:b5:66:a9:a7:13:c2:88:47:72:1e:
        56:fb:80:70:88:30:89:01:ed:4d:ea:4e:62:5b:50:d8:14:c4:
        de:56:f2:59:ed:fb:d0:f6:40:49:a5:fb:ea

CVE-2019-8331 CVE-2018-20677 CVE-2018-20676 CVE-2018-14042 CVE-2018-14040 CVE-2016-10735

-1980018337 | 2025-01-15T01:48:34.087000

5001 / tcp

KPCAA-NAS-1 - Synology NAS

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 15 Jan 2025 01:48:34 GMT
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Content-Security-Policy: base-uri 'self';  connect-src data: ws: wss: *; default-src 'self' 'unsafe-eval' data: blob: https://*.synology.com https://www.synology.cn/ https://help.synology.cn/; font-src 'self' data: https://*.googleapis.com https://*.gstatic.com; form-action 'self'; frame-ancestors 'self' https://gofile.me http://gofile.me; frame-src 'self' data: blob: https://*.synology.com https://*.synology.cn; img-src 'self' data: blob: https://*.google.com https://*.googleapis.com http://*.googlecode.com https://*.gstatic.com; media-src 'self' data: about: https://*.synology.com https://help.synology.cn;  script-src 'self' 'unsafe-eval' data: blob: https://*.synology.com https://www.synology.cn/ https://help.synology.cn https://*.google.com https://*.googleapis.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com;


Synology DiskStation Manager (DSM):
  Version: 7.0.1-42218
  Hostname: KPCAA-NAS-1

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ed:ec:77:c9:54:c3:e9:f5:47:9c:55:11:6e:67:b5:f7:2b
        Signature Algorithm: ecdsa-with-SHA384
        Issuer: C=US, O=Let's Encrypt, CN=E5
        Validity
            Not Before: Dec 19 23:26:12 2024 GMT
            Not After : Mar 19 23:26:11 2025 GMT
        Subject: CN=kpcaanas1.synology.me
        Subject Public Key Info:
            Public Key Algorithm: id-ecPublicKey
                Public-Key: (256 bit)
                pub:
                    04:f3:2c:74:26:9a:85:f4:06:82:87:9b:53:5f:ec:
                    e3:1d:fc:c7:1b:85:f4:12:2b:41:fd:34:ad:3c:d3:
                    96:98:63:6f:d2:05:b8:16:d2:6d:5a:a0:42:70:20:
                    bb:88:05:fe:9c:2d:cb:d6:04:87:45:85:ea:4e:a1:
                    b6:d1:e4:64:27
                ASN1 OID: prime256v1
                NIST CURVE: P-256
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier: 
                0F:ED:49:CC:7F:9B:EA:B5:6F:51:6C:C7:CF:D0:89:13:71:CD:92:C3
            X509v3 Authority Key Identifier: 
                9F:2B:5F:CF:3C:21:4F:9D:04:B7:ED:2B:2C:C4:C6:70:8B:D2:D7:0D
            Authority Information Access: 
                OCSP - URI:http://e5.o.lencr.org
                CA Issuers - URI:http://e5.i.lencr.org/
            X509v3 Subject Alternative Name: 
                DNS:*.kpcaanas1.synology.me, DNS:kpcaanas1.synology.me
            X509v3 Certificate Policies: 
                Policy: 2.23.140.1.2.1
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Dec 20 00:24:42.444 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:8B:93:11:A4:21:4A:92:A6:3B:8D:32:
                                F3:E7:E6:AF:3F:1D:E4:A2:93:81:9D:E1:CF:68:41:1E:
                                83:C7:F8:00:45:02:21:00:E5:73:54:68:73:81:9A:6C:
                                69:17:F6:A8:45:E0:CA:1A:AD:DF:C0:02:10:35:12:96:
                                8C:50:EC:84:2D:57:CC:6C
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CC:FB:0F:6A:85:71:09:65:FE:95:9B:53:CE:E9:B2:7C:
                                22:E9:85:5C:0D:97:8D:B6:A9:7E:54:C0:FE:4C:0D:B0
                    Timestamp : Dec 20 00:24:42.467 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:46:02:21:00:FA:35:C8:70:D3:16:06:6E:97:E3:C2:
                                15:C6:F2:E1:3B:8A:89:D6:E9:5E:0C:B0:21:B7:1D:FE:
                                32:6A:51:5D:90:02:21:00:E6:DA:D7:67:3E:35:97:A8:
                                16:36:4E:76:52:F8:F8:3E:E4:38:67:B4:FD:7C:C1:D9:
                                18:83:A2:E1:55:3B:6E:63
    Signature Algorithm: ecdsa-with-SHA384
    Signature Value:
        30:64:02:30:08:07:77:eb:8b:2e:b4:af:85:73:6a:62:f5:6a:
        49:78:62:a3:71:c7:2c:fc:e7:42:78:0b:9a:30:53:d8:74:aa:
        0d:be:8c:6e:97:bd:42:72:ba:00:60:66:9d:c4:1c:61:02:30:
        1b:e7:3d:df:b5:e6:a5:3a:3a:4f:84:cf:5e:b7:cf:64:c2:81:
        c2:b6:1c:43:d4:ba:8a:8a:26:4c:13:61:66:ca:7f:64:91:75:
        93:0a:d5:68:9c:7b:99:be:0a:a3:2c:8f

CVE-2022-27626 CVE-2022-27625 CVE-2022-27624 CVE-2022-27623 CVE-2022-27616 11 moreCVE-2024-0854 CVE-2023-2729 CVE-2023-0142 CVE-2022-27622 CVE-2022-22680 CVE-2022-22679 CVE-2022-3576 CVE-2021-43929 CVE-2021-43927 CVE-2021-43926 CVE-2021-43925

68.60.203.205

Last Seen: 2025-01-15

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-377539632 | 2025-01-11T18:16:37.954576
22 / tcp

OpenSSH8.2

-45735031 | 2025-01-09T16:04:49.108505
80 / tcp

nginx

-45735031 | 2025-01-12T14:03:48.126144
443 / tcp

nginx

-1980018337 | 2025-01-15T01:48:34.087000
5001 / tcp

nginx

Products

Pricing

Contact Us

68.60.203.205

Last Seen: 2025-01-15

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 22 Port 80 Port 443 Port 5001 Latest CVSS

OpenPorts

-377539632 | 2025-01-11T18:16:37.954576 22 / tcp

OpenSSH8.2

-45735031 | 2025-01-09T16:04:49.108505 80 / tcp

nginx

-45735031 | 2025-01-12T14:03:48.126144 443 / tcp

nginx

-1980018337 | 2025-01-15T01:48:34.087000 5001 / tcp

nginx

Products

Pricing

Contact Us

Vulnerabilities

-377539632 | 2025-01-11T18:16:37.954576
22 / tcp

-45735031 | 2025-01-09T16:04:49.108505
80 / tcp

-45735031 | 2025-01-12T14:03:48.126144
443 / tcp

-1980018337 | 2025-01-15T01:48:34.087000
5001 / tcp