GeneralInformation

Hostnames	ppp238-115.qz.zj.cninfo.net
Domains	cninfo.net
Country	China
City	Beilun
Organization	Beilun Shidate Machine Co.,ltd.
ISP	CHINANET-BACKBONE
ASN	AS4134

WebTechnologies

Development

Microsoft Visual Studio

JavaScript frameworks

JavaScript libraries

Network storage

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

MS15-034	10.0HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability."
CVE-2015-1635	10.0HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability."
CVE-2014-4078	5.1The IP Security feature in Microsoft Internet Information Services (IIS) 8.0 and 8.5 does not properly process wildcard allow and deny rules for domains within the "IP Address and Domain Restrictions" list, which makes it easier for remote attackers to bypass an intended rule set via an HTTP request, aka "IIS Security Feature Bypass Vulnerability."

OpenPorts

23 81 88 554 5000 5005 5222 8082 8086 8180 8443 8999 9090 55553

-34583175 | 2024-04-24T19:56:38.996190

23 / tcp


Warning: Telnet is not a secure protocol, and it is recommended to use Stelnet.

Login authentication


Username:

-268697557 | 2024-05-09T11:51:41.054144

81 / tcp

HTTP/1.0 404 Not Found
Server: Gnway Web Server
Connection: close
Content-Length: 0
Date: Thu, 09 May 2024 19:51:41 GMT

-1183234733 | 2024-04-30T19:20:15.011731

88 / tcp

HTTP/1.1 200 OK
Server: WVS
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1
X-UA-Compatible: IE=8
Cache-Control: private,max-age=86400000
ETag: "HCPGHF5c4V7"
Last-Modified: Thu, 06 May 2021 01:48:18 GMT
Set-Cookie: ecology_JSessionid=aaahlJbThggjE4Ut6nX7y; path=/
Content-Type: text/html; charset=utf-8
Content-Length: 3235
Date: Tue, 30 Apr 2024 19:20:14 GMT

-1716714231 | 2024-05-04T02:43:26.861516

554 / tcp

RTSP/1.0 200 OK
CSeq: 1
Server: MgcServer
Public: OPTIONS, DESCRIBE, SETUP, TEARDOWN, PLAY, PAUSE, HEARTBEAT, GET_PARAMETER, SET_PARAMETER
SupportAuth: AES BASE64

1572810096 | 2024-05-05T07:16:29.839270

5000 / tcp

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 05 May 2024 07:23:34 GMT
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Accept-Encoding
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Content-Security-Policy: base-uri 'self';  connect-src ws: wss: *; default-src 'self' 'unsafe-eval' data: blob: https://*.synology.com https://www.synology.cn/; font-src 'self' data: https://*.googleapis.com https://*.gstatic.com; form-action 'self'; frame-ancestors 'self' https://gofile.me http://gofile.me; frame-src 'self' data: blob: https://*.synology.com https://www.synology.cn/ http://*.synology.com http://*.synology.cn; img-src 'self' data: blob: https://*.google.com https://*.googleapis.com http://*.googlecode.com https://*.gstatic.com; media-src 'self' data: about:;  script-src 'self' 'unsafe-eval' data: blob: https://*.synology.com https://www.synology.cn/ https://*.google.com https://*.googleapis.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com;


Synology DiskStation Manager (DSM):
  Version: 6.2.3-25426
  Hostname: RS1619XSPLUS

-708522787 | 2024-05-04T06:15:13.829860

5005 / tcp

HTTP/1.1 404 Not Found
Date: Sat, 04 May 2024 06:22:17 GMT
Server: Apache
Content-Length: 198
Content-Type: text/html; charset=iso-8859-1

1498013321 | 2024-04-21T12:48:07.089528

5222 / tcp

<?xml version='1.0' encoding='UTF-8'?><stream:stream xmlns:stream="http://etherx.jabber.org/streams" xmlns="jabber:client" from="weaver" id="8adez5cnei" xml:lang="en-US" version="1.0"><stream:features><mechanisms xmlns="urn:ietf:params:xml:ns:xmpp-sasl"><mechanism>SCRAM-SHA-1</mechanism><mechanism>CRAM-MD5</mechanism><mechanism>DIGEST-MD5</mechanism></mechanisms><compression xmlns="http://jabber.org/features/compress"><method>zlib</method></compression><ver xmlns="urn:xmpp:features:rosterver"/><auth xmlns="http://jabber.org/features/iq-auth"/><register xmlns="http://jabber.org/features/iq-register"/></stream:features>

605578823 | 2024-05-02T22:44:39.204043

8082 / tcp

HTTP/1.1 200 OK
Server: Apache-Coyote/1.1
Accept-Ranges: bytes
ETag: W/"1629-1629969730000"
Last-Modified: Thu, 26 Aug 2021 09:22:10 GMT
Content-Type: text/html
Content-Length: 1629
Date: Thu, 02 May 2024 22:44:37 GMT

<!doctype html><html lang="zh-cn"><head><meta charset="utf-8"><title>SRM 2.0</title><base href="/"><meta name="viewport" content="width=device-width,initial-scale=1"><link rel="icon" type="image/x-icon" href="/assets/img/favicon.ico"><link href="styles.dbff42138f127cc8d39c.bundle.css" rel="stylesheet"/></head><body><app-root></app-root><script src="assets/js/jweixin-1.4.0.js"></script><script src="assets/js/jquery.min.js"></script><script>function changeTableMode() {
      var $lineList = $('.lineList'),
        $head = $lineList.find('.lhead');
      if ($head.length) {
        var scrollTop = $(document).scrollTop(),
          offsetTop = $lineList.offset().top - $('.header_top').height(),
          top = scrollTop < offsetTop ? 0 : scrollTop - offsetTop;
        // $head.css('top', top + 'px');
        // $('.addlhead').css('top', '0px!important')
      }
      var $page = $('.pagination'),
        $pageContain = $page.find('.page-contain');
      if ($pageContain.length) {
        var scrollBottom = $(document).height() - $(window).height() - $(document).scrollTop(),
          offsetBottom = 0,
          bottom = scrollBottom < offsetBottom ? 0 : scrollBottom - offsetBottom;
        $pageContain.css('bottom', bottom + 'px');
      }
    }
    $(window).on('scroll resize', changeTableMode);
    setInterval(changeTableMode, 500);</script><script type="text/javascript" src="inline.057af2a708a4987edc89.bundle.js"></script><script type="text/javascript" src="polyfills.e6cdbe22548957f34649.bundle.js"></script><script type="text/javascript" src="main.b4eb89c5bb36c00c74a0.bundle.js"></script></body></html>

1874836405 | 2024-05-04T13:33:40.590002

8086 / tcp

HTTP/1.1 200 OK
Connection: keep-alive
Last-Modified: Tue, 15 Feb 2022 06:46:11 GMT
Content-Length: 1544
Content-Type: text/html
Accept-Ranges: bytes
Date: Sat, 04 May 2024 13:33:35 GMT

1138219898 | 2024-05-04T05:25:56.910338

8180 / tcp

HTTP/1.1 200 OK
Content-Type: text/html
Last-Modified: Sat, 07 May 2022 04:17:58 GMT
Accept-Ranges: bytes
ETag: "397b1d6fc961d81:0"
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
Date: Sat, 04 May 2024 05:25:56 GMT
Content-Length: 701

-582543674 | 2024-04-16T21:36:27.990360

8443 / tcp

HTTP/1.1 200 OK
Date: SUN, 17 Apr 2024 05:32:14
Connection: 
Server: HTTP Server 1.0
Content-Length: 7571
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1;mode=block
Strict-Transport-Security: max-age=31536000
Content-Security-Policy: default-src 'self';script-src 'self' 'unsafe-inline' 'unsafe-eval';style-src 'self' 'unsafe-inline';img-src 'self' data:;frame-ancestors 'self';
X-Download-Options: noopen
Content-Type: text/html; charset=utf-8
Set-Cookie: SESSIONID=RgEAABgAoDLg4YeCzyxZFE4qkUDQXEWfbn4UyHM5Sig=&RgEAAD/q/a1Tcv6SZxjE7A==&HUAWEI &langfrombrows=&copyright=2014-2021;httponly; secure

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            87:b6:8b:6d:0d:e9:fd:cf
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=CN, ST=JS, L=NJ, O=HW, OU=VPN, CN=CA-102150271512
        Validity
            Not Before: May 24 17:04:26 2021 GMT
            Not After : May 22 17:04:26 2031 GMT
        Subject: C=CN, ST=JS, L=NJ, O=HW, OU=VPN, CN=LOCAL-102150271512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e6:08:7d:90:d5:0e:08:3a:96:d7:c5:14:08:d0:
                    4f:fd:86:2b:c9:2f:6a:0e:b8:16:b2:64:ce:85:a8:
                    1b:14:52:64:a3:37:b7:0a:bf:de:23:7d:4f:74:b6:
                    ac:10:99:d7:80:fa:9b:b2:0e:2b:38:9f:f5:44:de:
                    a7:4a:7c:6f:e8:92:78:46:bd:c0:26:f1:0e:30:76:
                    a4:a7:1b:91:59:ed:e6:35:ad:a3:bb:22:e2:3b:35:
                    99:1f:6b:3e:9d:b5:23:7c:13:f9:e7:04:4b:8e:b9:
                    8a:11:95:27:0b:62:44:10:14:01:53:d3:8d:e4:bd:
                    40:ff:32:b0:d5:bb:f9:5c:ba:7e:db:cc:ad:6b:a4:
                    78:79:90:67:aa:88:7b:bf:f5:6f:e0:f7:24:bb:f8:
                    06:d5:75:03:83:66:6c:29:03:7a:21:e3:bf:a7:da:
                    2f:75:cb:b9:25:b1:d9:38:47:f6:8c:35:e8:5d:7c:
                    b7:38:a5:6c:fa:55:96:d2:c4:8e:16:70:26:97:2f:
                    c9:c3:6d:f5:56:0d:e6:15:7f:0a:9b:37:09:e6:89:
                    f5:27:ec:a1:82:e3:73:47:ae:15:ef:ab:41:92:cd:
                    6d:cc:3b:6e:c5:03:42:64:07:cc:8e:3e:10:79:b4:
                    b7:09:6a:81:f9:7b:3d:dd:a1:8e:8d:5b:e6:81:6b:
                    a5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                11:82:8C:23:93:A5:CB:64:5D:84:0B:F2:E0:07:4C:3F:5E:B5:9E:E8
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        62:19:ca:10:d9:e1:54:7b:ea:09:f8:13:27:05:7c:9b:6b:d0:
        16:f3:6b:dc:52:e8:49:4a:58:9a:2b:c3:08:c3:5b:46:0c:63:
        79:d2:e1:ef:87:b7:c1:a7:59:4a:7e:00:44:31:4f:df:25:a3:
        d6:9e:dd:0b:1c:cc:34:16:f9:3d:d1:9f:d3:39:54:94:83:f1:
        1d:3b:23:34:a9:df:1e:2b:9c:ad:0c:3e:5e:68:aa:af:b3:e4:
        bd:1e:b7:b4:cd:16:91:51:2b:43:cb:5e:f9:4a:69:e1:66:75:
        26:bb:3a:dd:24:72:7c:24:14:73:d1:91:74:73:29:db:b9:2a:
        f6:a1:b6:d7:65:98:d8:eb:58:68:e7:ee:1f:09:d1:b5:47:cc:
        6e:68:96:23:6a:86:ca:de:23:0f:bd:ea:16:b0:c2:3a:de:10:
        88:a5:42:97:db:cd:3e:9c:10:a7:2c:be:e7:e3:2b:3d:cf:7b:
        10:e3:a4:36:f4:b3:0d:a5:8e:08:84:93:6a:4f:ae:4d:a8:cb:
        7e:de:a8:00:72:8d:29:01:15:4a:e8:4d:af:4b:5c:35:b3:8c:
        a0:40:98:33:ec:c2:01:6e:73:f4:f0:04:03:df:2a:f3:86:1e:
        62:ea:96:81:74:d8:3d:8a:89:10:f6:69:94:10:fb:cf:5a:52:
        c7:a0:cf:39

MAC Addresses

10:21:50:27:15:12
    Unknown

1674776136 | 2024-05-02T18:26:55.555465

8999 / tcp

HTTP/1.1 200 
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
vary: accept-encoding
Content-Type: text/html;charset=UTF-8
Content-Language: zh-CN
Transfer-Encoding: chunked
Date: Thu, 02 May 2024 18:26:52 GMT

1831682531 | 2024-05-06T02:20:31.986744

9090 / tcp

.NETSystem.Runtime.Remoting.RemotingException: TCP 信道协议冲突: 应为报头。
   在 System.Runtime.Remoting.Channels.Tcp.TcpSocketHandler.ReadAndMatchPreamble()
   在 System.Runtime.Remoting.Channels.Tcp.TcpSocketHandler.ReadVersionAndOperation(UInt16& operation)
   在 System.Runtime.Remoting.Channels.Tcp.TcpServerSocketHandler.ReadHeaders()
   在 System.Runtime.Remoting.Channels.Tcp.TcpServerTransportSink.ServiceRequest(Object state)
   在 System.Runtime.Remoting.Channels.SocketHandler.ProcessRequestNow()

-469920498 | 2024-05-07T09:18:39.665830

55553 / tcp

HTTP/1.1 403 Forbidden
Server: WebServer/2.1.8 PeerSec-MatrixSSL/3.9.3-OPEN
Date: SUN JUL 23 18:58:28 2000
X-Content-Type-Options: nosniff
X-frame-Options: SAMEORIGIN
X-XSS-Protection: 1;mode=block
Strict-Transport-Security: max-age=31536000; includeSubDomains
Pragma: no-cache
Cache-Control: no-cache
Content-Type: text/html

61.130.115.238

Last Seen: 2024-05-09

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-34583175 | 2024-04-24T19:56:38.996190
23 / tcp

-268697557 | 2024-05-09T11:51:41.054144
81 / tcp

-1183234733 | 2024-04-30T19:20:15.011731
88 / tcp

-1716714231 | 2024-05-04T02:43:26.861516
554 / tcp

1572810096 | 2024-05-05T07:16:29.839270
5000 / tcp

nginx

-708522787 | 2024-05-04T06:15:13.829860
5005 / tcp

1498013321 | 2024-04-21T12:48:07.089528
5222 / tcp

605578823 | 2024-05-02T22:44:39.204043
8082 / tcp

Apache Tomcat/Coyote JSP engine1.1

1874836405 | 2024-05-04T13:33:40.590002
8086 / tcp

1138219898 | 2024-05-04T05:25:56.910338
8180 / tcp

Microsoft IIS httpd8.5

-582543674 | 2024-04-16T21:36:27.990360
8443 / tcp

1674776136 | 2024-05-02T18:26:55.555465
8999 / tcp

1831682531 | 2024-05-06T02:20:31.986744
9090 / tcp

-469920498 | 2024-05-07T09:18:39.665830
55553 / tcp

Products

Pricing

Contact Us

61.130.115.238

Last Seen: 2024-05-09

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

-34583175 | 2024-04-24T19:56:38.996190 23 / tcp

-268697557 | 2024-05-09T11:51:41.054144 81 / tcp

-1183234733 | 2024-04-30T19:20:15.011731 88 / tcp

-1716714231 | 2024-05-04T02:43:26.861516 554 / tcp

1572810096 | 2024-05-05T07:16:29.839270 5000 / tcp

nginx

-708522787 | 2024-05-04T06:15:13.829860 5005 / tcp

1498013321 | 2024-04-21T12:48:07.089528 5222 / tcp

605578823 | 2024-05-02T22:44:39.204043 8082 / tcp

Apache Tomcat/Coyote JSP engine1.1

1874836405 | 2024-05-04T13:33:40.590002 8086 / tcp

1138219898 | 2024-05-04T05:25:56.910338 8180 / tcp

Microsoft IIS httpd8.5

-582543674 | 2024-04-16T21:36:27.990360 8443 / tcp

1674776136 | 2024-05-02T18:26:55.555465 8999 / tcp

1831682531 | 2024-05-06T02:20:31.986744 9090 / tcp

-469920498 | 2024-05-07T09:18:39.665830 55553 / tcp

Products

Pricing

Contact Us

-34583175 | 2024-04-24T19:56:38.996190
23 / tcp

-268697557 | 2024-05-09T11:51:41.054144
81 / tcp

-1183234733 | 2024-04-30T19:20:15.011731
88 / tcp

-1716714231 | 2024-05-04T02:43:26.861516
554 / tcp

1572810096 | 2024-05-05T07:16:29.839270
5000 / tcp

-708522787 | 2024-05-04T06:15:13.829860
5005 / tcp

1498013321 | 2024-04-21T12:48:07.089528
5222 / tcp

605578823 | 2024-05-02T22:44:39.204043
8082 / tcp

1874836405 | 2024-05-04T13:33:40.590002
8086 / tcp

1138219898 | 2024-05-04T05:25:56.910338
8180 / tcp

-582543674 | 2024-04-16T21:36:27.990360
8443 / tcp

1674776136 | 2024-05-02T18:26:55.555465
8999 / tcp

1831682531 | 2024-05-06T02:20:31.986744
9090 / tcp

-469920498 | 2024-05-07T09:18:39.665830
55553 / tcp