GeneralInformation

Hostnames	laubervilliers-657-1-138-92.w80-14.abo.wanadoo.fr
Domains	wanadoo.fr
Country	France
City	Paris
Organization	LNAUB657 Aubervilliers
ISP	Orange S.A.
ASN	AS3215

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

OpenPorts

21 22 25 69 79 80 110 111 137 465 500 548 631 873 995 1194 1701 1723 3260 3306 4434 5353 8089 8889 10001 30002 49152

21 / tcp

-1371612909 | 2025-02-07T14:56:35.669861

220 NASFTPD Turbo station 1.3.5a Server (ProFTPD)
530 Login incorrect.
214-The following commands are recognized (* =>'s unimplemented):
 CWD     XCWD    CDUP    XCUP    SMNT*   QUIT    PORT    PASV    
 EPRT    EPSV    ALLO*   RNFR    RNTO    DELE    MDTM    RMD     
 XRMD    MKD     XMKD    PWD     XPWD    SIZE    SYST    HELP    
 NOOP    FEAT    OPTS    AUTH*   CCC*    CONF*   ENC*    MIC*    
 PBSZ*   PROT*   TYPE    STRU    MODE    RETR    STOR    STOU    
 APPE    REST    ABOR    USER    PASS    ACCT*   REIN*   LIST    
 NLST    STAT    SITE    MLSD    MLST    
214 Direct comments to root@192.168.1.101
211-Features:
 LANG en-US*
 EPRT
 EPSV
 MDTM
 TVFS
 MFMT
 SIZE
 MFF modify;UNIX.group;UNIX.mode;
 REST STREAM
 MLST modify*;perm*;size*;type*;unique*;UNIX.group*;UNIX.mode*;UNIX.owner*;
 UTF8
211 End

22 / tcp

1239562357 | 2025-02-09T03:39:10.358622

SSH-2.0-OpenSSH_7.6
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQCjBSRp0OW8+WKi3kCocY2nwc8T4d8EoWHJZ5UYqB3Yr6o3
5gtZjHDXhAIp3fr/aU0axKqD6dPWPWiUaQEzNTEj3HWFUVXW3YRuAHoOyp662UjBidK9QiJCgukP
b8r2Eu56WCXGkNKPW/WkaI/WRJuE8LRhmytaAYOmdUrRYZ9RkEKwGn6w2/0fzDJgHT8gS32qKUk+
TFifjSkb1arten+NCHQYrJIOtifeo5a8P8m0nkwKb1/spb8a3ztXP054hPyqrTOQgDETl8rk6OWa
RT3cVn9+LcUeJ3Bq+tpBdkTmQZ17gl/aTBM/YG3T1+Q9B12tA7ALhboCf4nPe5UXufo7
Fingerprint: f4:58:ac:ba:b9:47:72:d7:e3:7e:2e:b2:66:bf:b4:e8

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1

Server Host Key Algorithms:
	ssh-rsa
	rsa-sha2-512
	rsa-sha2-256

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

CVE-2023-38408 CVE-2008-3844 CVE-2023-51767 CVE-2021-41617 CVE-2020-15778 12 moreCVE-2023-51385 CVE-2023-48795 CVE-2020-14145 CVE-2019-6111 CVE-2019-6110 CVE-2019-6109 CVE-2018-20685 CVE-2018-15919 CVE-2018-15473 CVE-2016-20012 CVE-2007-2768 CVE-2021-36368

25 / tcp

1811751913 | 2025-01-28T02:43:02.709655

220 xmailserver.test <1738031623.4142660496@xmailserver.test> [XMail 1.27 ESMTP Server] service ready; Tue, 28 Jan 2025 03:33:43 +0100
250-xmailserver.test
250-VRFY
250-ETRN
250-8BITMIME
250-PIPELINING
250-AUTH LOGIN PLAIN CRAM-MD5
250 SIZE

69 / udp

1136816110 | 2025-02-08T18:46:32.814172

\x00\x05\x00\x05Unknown transfer ID\x00

79 / tcp

1481923592 | 2025-02-12T13:56:15.574967

Empty query not allowed

80 / tcp

-285645819 | 2025-02-08T20:37:27.753015

Hashes

hash

1943200927

http.dom_hash

-736858104

http.html_hash

-285645819

http.server_hash

869690771

HTTP/1.1 200 OK
Date: Sat, 08 Feb 2025 20:27:58 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Vary: Accept-Encoding
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

110 / tcp

516241515 | 2025-02-10T12:07:11.932103

+OK <1739188662.4142922640@xmailserver.test> [XMail 1.27 POP3 Server] service ready; Mon, 10 Feb 2025 12:57:42 +0100
+OK Capability list follows
TOP
USER
UIDL
PIPELINING
STLS
IMPLEMENTATION [XMail 1.27 POP3 Server]
.

111 / tcp

-750907075 | 2025-02-02T22:44:19.163460

Portmap
Program	Version	Protocol	Port
portmapper	4	tcp	111
portmapper	3	tcp	111
portmapper	2	tcp	111
portmapper	4	udp	111
portmapper	3	udp	111
portmapper	2	udp	111
rquotad	1	udp	30002
rquotad	2	udp	30002
rquotad	1	tcp	30002
rquotad	2	tcp	30002
mountd	1	udp	30000
mountd	1	tcp	30000
mountd	2	udp	30000
mountd	2	tcp	30000
mountd	3	udp	30000
mountd	3	tcp	30000
nfs	2	tcp	2049
nfs	3	tcp	2049
100227	2	tcp	2049
100227	3	tcp	2049
nfs	2	udp	2049
nfs	3	udp	2049
100227	2	udp	2049
100227	3	udp	2049
nlockmgr	1	udp	50801
nlockmgr	3	udp	50801
nlockmgr	4	udp	50801
nlockmgr	1	tcp	38252
nlockmgr	3	tcp	38252
nlockmgr	4	tcp	38252
status	1	udp	30001
status	1	tcp	30001

111 / udp

-750907075 | 2025-02-02T04:16:51.335054

Portmap
Program	Version	Protocol	Port
portmapper	4	tcp	111
portmapper	3	tcp	111
portmapper	2	tcp	111
portmapper	4	udp	111
portmapper	3	udp	111
portmapper	2	udp	111
rquotad	1	udp	30002
rquotad	2	udp	30002
rquotad	1	tcp	30002
rquotad	2	tcp	30002
mountd	1	udp	30000
mountd	1	tcp	30000
mountd	2	udp	30000
mountd	2	tcp	30000
mountd	3	udp	30000
mountd	3	tcp	30000
nfs	2	tcp	2049
nfs	3	tcp	2049
100227	2	tcp	2049
100227	3	tcp	2049
nfs	2	udp	2049
nfs	3	udp	2049
100227	2	udp	2049
100227	3	udp	2049
nlockmgr	1	udp	50801
nlockmgr	3	udp	50801
nlockmgr	4	udp	50801
nlockmgr	1	tcp	38252
nlockmgr	3	tcp	38252
nlockmgr	4	tcp	38252
status	1	udp	30001
status	1	tcp	30001

137 / udp

191905183 | 2025-02-05T23:34:13.582986

NetBIOS Response:
  Server Name: NIM-QNAP
  MAC Address: 00:00:00:00:00:00
  Names:
    NIM-QNAP <0x0>
    NIM-QNAP <0x3>
    NIM-QNAP <0x20>
    MODERNE <0x0>
    MODERNE <0x1e>
  Additional Interfaces:
    192.168.1.101

500 / udp

648567035 | 2025-01-30T12:37:47.460761

VPN (IKE)

Initiator SPI: 7737326b6c783431
Responder SPI: 6638733264356b34
Next Payload: Notification (N)
Version: 1.0
Exchange Type: Informational
Flags:
    Encryption:     False
    Commit:         False
    Authentication: False
Message ID: 00000000
Length: 40

548 / tcp

-865641451 | 2025-01-26T09:47:55.425271

AFP:
  Server Name: nim-qnap
  UTF-8 Server Name: nim-qnap
  Machine Type: Netatalk3.1.9.q2
  Network Addresses:
    192.168.1.101
  AFP Versions:
    AFP2.2
    AFP3.1
    AFP3.2
    AFP3.3
    AFP3.4
    AFPX03
  UAMs:
    Cleartxt Passwrd
    DHX2
    No User Authent
  Server Signature: 2d3eb5ca67e0ef0dbb9fdd8a5b2ec7ec
  Server Flags:
    Flag Hex: 0x8f79
    Super Client: True
    UUIDs: True
    UTF-8 Server Name: True
    Open Directory: True
    Reconnect: False
    Server Notifications: True
    TCP/IP: True
    Server Signature: True
    Server Messages: True
    Password Saving Prohibited: False
    Password Changing: False
    Copy File: True

631 / tcp

355082906 | 2025-02-06T12:18:59.103830

Hashes

hash

-780244956

http.dom_hash

1356552681

http.html_hash

355082906

http.server_hash

888381556

http.title_hash

1059189395

Not Found - CUPS v2.1.3

HTTP/1.1 404 Not Found
Connection: close
Content-Language: en_US
Content-Length: 342
Content-Type: text/html; charset=utf-8
Date: Thu, 06 Feb 2025 12:09:31 GMT
Accept-Encoding: gzip, deflate, identity
Server: CUPS/2.1 IPP/2.1
X-Frame-Options: DENY
Content-Security-Policy: frame-ancestors 'none'


CUPS (IPP):
  Status Message: No destinations added.

873 / tcp

1659353095 | 2025-02-11T04:11:56.893154

@RSYNCD: 30.0\n@RSYNCD: AUTHREQD z0rbGQwdkaJvRPI7O/Zaiw

1194 / udp

1601634198 | 2025-01-22T18:32:57.858559

@3\x81do\x8by0\xce\x00\x00\x00\x00\x00

1701 / udp

-2129060956 | 2025-02-11T09:25:48.248722

\xc8\x02\x00\x0c\x00\x00\x00\x00\x00\x00\x00\x01

1723 / tcp

261189147 | 2025-01-14T11:23:38.465614

PPTP:
  Firmware: 1
  Hostname: local
  Vendor: linux

3260 / tcp

2088938902 | 2025-01-31T10:46:30.635631

iSCSI discovery targets
	Name: iqn.2004-04.com.qnap:ts-859proplus:iscsi.nasnim.c7649d
	Addresses: 192.168.1.101:3260,1
	Name: iqn.2004-04.com.qnap:ts-859proplus:iscsi.comptabilite.c7649d
	Addresses: 192.168.1.101:3260,1

3306 / tcp

503304818 | 2025-02-12T14:11:30.545293

MariaDB:
  Protocol Version: 10
  Version: 5.5.57-MariaDB
  Capabilities: 63487
  Server Language: 8
  Server Status: 2
  Extended Server Capabilities: 40975
  Authentication Plugin: mysql_native_password

5353 / udp

-292276408 | 2025-01-22T11:24:48.322121

mDNS:
  services:
    9/tcp workstation:
      Name=nim-qnap [00:08:9b:c7:64:9d]
      Address=192.168.1.101 fe80::208:9bff:fec7:649d
    9/tcp adisk:
      dk0=adVN=TMBackup,adVF=0xa1,adVU=41007FE8-9972-BB39-9673-C4A9F9BF6982
      Name=nim-qnap(TimeMachine)
      Address=192.168.1.101 fe80::208:9bff:fec7:649d
    21/tcp ftp:
      path=/
      Name=nim-qnap(FTP)
      Address=192.168.1.101 fe80::208:9bff:fec7:649d
    445/tcp smb:
      Name=nim-qnap
      Address=192.168.1.101 fe80::208:9bff:fec7:649d
    548/tcp afpovertcp:
      nim-qnap(AFP)
      Name=nim-qnap(TimeMachine)
      Address=192.168.1.101 fe80::208:9bff:fec7:649d
    3986/tcp qmobile:
      Name=nim-qnap(Apps)
      Address=192.168.1.101 fe80::208:9bff:fec7:649d
    8089/tcp http:
      path=/
      Name=nim-qnap
      Address=192.168.1.101 fe80::208:9bff:fec7:649d
    8089/tcp qdiscover:
      accessType=http,accessPort=8089,model=TS-859,displayModel=TS-859 Pro+,fwVer=4.2.6,fwBuildNum=20240618,serialNum=Q113I00947,myCloudNASName=nasnim,myCloudNASDomain=myqnapcloud.com,webAdmPort=0,webAdmSslPort=0,webPort=0,webSslPort=0
      Name=nim-qnap
      Address=192.168.1.101 fe80::208:9bff:fec7:649d
    device-info:
      nim-qnap(AFP)
      model=Xserve
      Name=nim-qnap(TimeMachine)
      Address=192.168.1.101 fe80::208:9bff:fec7:649d
  answers:
    PTR:
      _workstation._tcp.local
      _http._tcp.local
      _smb._tcp.local
      _ftp._tcp.local
      _qmobile._tcp.local
      _qdiscover._tcp.local
      _device-info._tcp.local
      _afpovertcp._tcp.local
      _adisk._tcp.local

8089 / tcp

403675931 | 2025-02-12T08:53:30.268028

HTTP/1.1 200 OK
Date: Wed, 12 Feb 2025 08:43:58 GMT
Server: http server 1.0
X-Frame-Options: SAMEORIGIN
Content-type: text/html; charset=UTF-8
Last-modified: Mon, 17 Jun 2024 23:04:07 GMT
Accept-Ranges: bytes
Content-length: 580
Vary: Accept-Encoding

<html style="background:#007cef">
<head>
<meta http-equiv="expires" content="0">
<script type='text/javascript'>
pr=(document.location.protocol == 'https:') ? 'https' : 'http';
pt=(location.port == '') ? '' : ':' + location.port;
redirect_suffix = "/redirect.html?count="+Math.random();
if(location.hostname.indexOf(':') == -1)
{
location.href=pr+"://"+location.hostname+pt+redirect_suffix;
}
else	//could be ipv6 addr
{
var url = "";
url=pr+"://["+ location.hostname.replace(/[\[\]]/g, '') +"]"+pt+redirect_suffix;
location.href = url;
}
</script>
</head>
<body>
</body>
</html>

49152 / tcp

907925138 | 2025-02-12T09:41:30.597397

Hashes

hash

1893523063

http.dom_hash

-1253794513

http.html_hash

907925138

http.server_hash

1800616658

HTTP/1.1 200 OK
CONTENT-LENGTH: 145
CONTENT-TYPE: text/html
DATE: Wed, 12 Feb 2025 09:31:58 GMT
LAST-MODIFIED: Wed, 12 Feb 2025 02:11:20 GMT
SERVER: Linux/3.4.6, UPnP/1.0, Portable SDK for UPnP devices/1.6.22
X-User-Agent: redsonic
CONNECTION: close

80.14.72.92

Last Seen: 2025-02-12

Tags:

GeneralInformation

Vulnerabilities All ports Port 22 Latest CVSS

OpenPorts

21 / tcp -1371612909 | 2025-02-07T14:56:35.669861

22 / tcp 1239562357 | 2025-02-09T03:39:10.358622

25 / tcp 1811751913 | 2025-01-28T02:43:02.709655

69 / udp 1136816110 | 2025-02-08T18:46:32.814172

79 / tcp 1481923592 | 2025-02-12T13:56:15.574967

80 / tcp -285645819 | 2025-02-08T20:37:27.753015

Hashes

110 / tcp 516241515 | 2025-02-10T12:07:11.932103

111 / tcp -750907075 | 2025-02-02T22:44:19.163460

111 / udp -750907075 | 2025-02-02T04:16:51.335054

137 / udp 191905183 | 2025-02-05T23:34:13.582986

500 / udp 648567035 | 2025-01-30T12:37:47.460761

548 / tcp -865641451 | 2025-01-26T09:47:55.425271

631 / tcp 355082906 | 2025-02-06T12:18:59.103830

Hashes

873 / tcp 1659353095 | 2025-02-11T04:11:56.893154

1194 / udp 1601634198 | 2025-01-22T18:32:57.858559

1701 / udp -2129060956 | 2025-02-11T09:25:48.248722

1723 / tcp 261189147 | 2025-01-14T11:23:38.465614

3260 / tcp 2088938902 | 2025-01-31T10:46:30.635631

3306 / tcp 503304818 | 2025-02-12T14:11:30.545293

5353 / udp -292276408 | 2025-01-22T11:24:48.322121

8089 / tcp 403675931 | 2025-02-12T08:53:30.268028

49152 / tcp 907925138 | 2025-02-12T09:41:30.597397

Hashes

Products

Pricing

Contact Us

Vulnerabilities

21 / tcp

-1371612909 | 2025-02-07T14:56:35.669861

22 / tcp

1239562357 | 2025-02-09T03:39:10.358622

25 / tcp

1811751913 | 2025-01-28T02:43:02.709655

69 / udp

1136816110 | 2025-02-08T18:46:32.814172

79 / tcp

1481923592 | 2025-02-12T13:56:15.574967

80 / tcp

-285645819 | 2025-02-08T20:37:27.753015

110 / tcp

516241515 | 2025-02-10T12:07:11.932103

111 / tcp

-750907075 | 2025-02-02T22:44:19.163460

111 / udp

-750907075 | 2025-02-02T04:16:51.335054

137 / udp

191905183 | 2025-02-05T23:34:13.582986

500 / udp

648567035 | 2025-01-30T12:37:47.460761

548 / tcp

-865641451 | 2025-01-26T09:47:55.425271

631 / tcp

355082906 | 2025-02-06T12:18:59.103830

873 / tcp

1659353095 | 2025-02-11T04:11:56.893154

1194 / udp

1601634198 | 2025-01-22T18:32:57.858559

1701 / udp

-2129060956 | 2025-02-11T09:25:48.248722

1723 / tcp

261189147 | 2025-01-14T11:23:38.465614

3260 / tcp

2088938902 | 2025-01-31T10:46:30.635631

3306 / tcp

503304818 | 2025-02-12T14:11:30.545293

5353 / udp

-292276408 | 2025-01-22T11:24:48.322121

8089 / tcp

403675931 | 2025-02-12T08:53:30.268028

49152 / tcp

907925138 | 2025-02-12T09:41:30.597397