LeakIX - Host 3f797e63db9d5ed4a34b8c80.keenetic.io

Domain 3f797e63db9d5ed4a34b8c80.keenetic.io

Russia

OOO Network of data-centers Selectel

Vulnerable HiSilicon family DVR

This vulnerability (with proof of concept (PoC) code) affects DVR/NVR devices built using the HiSilicon hi3520d and similar system on a chip (SoC).

Exploiting the vulnerabilities lead to unauthorized remote code execution (RCE) using only the web interface, causing full takeover of the exploited device

IP: 31.184.251.19
Domain: 3f797e63db9d5ed4a34b8c80.keenetic.io
Port: 80
URL: http://3f797e63db9d5ed4a34b8c80.keenetic.io

First seen 2023-08-18 13:17
Last seen 2024-05-01 00:57
Open for 256 days
- Severity: high
  Fingerprint: 321975614123c6c05f83e99b0731aca679766ae779766ae779766ae779766ae7
```
Found HiSiliconDVR firmware:
Hardware: General AHB7804R-MH-V2
Vulnerable to multiple issues : LFI, possibly RCE
```
  Found on 2024-05-01 00:57
Create report

Open service 31.184.251.19:80 · 3f797e63db9d5ed4a34b8c80.keenetic.io

2024-05-08 15:05

HTTP/1.1 503 Service Unavailable
Server: NDM NDNS
Date: Wed, 08 May 2024 15:05:28 GMT
Content-Type: text/html
Content-Length: 975
Cache-Control: no-store, no-cache, max-age=0, private
X-Detail: Not Reachable
Set-Cookie: X-Detail=503; max-age=300
Connection: close

Page title: Error

<!DOCTYPE html>
<html lang="en">

<head>

  <base href="https://static.keenetic.net/kdns201/"/>

  <link rel="shortcut icon" href="favicon.ico" />
  <link rel="stylesheet" href="style.css" />
  <link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Roboto+Condensed:400,700&amp;subset=cyrillic" />
  <meta charset="utf-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" />
  <meta http-equiv="Referrer-Policy" content="origin-when-cross-origin" />
  <meta http-equiv="Content-Security-Policy" content="
		default-src 'self' https://static.keenetic.net/kdns201/ ; 
		style-src 'self' 'unsafe-inline' https: ; 
		font-src 'self' https: ; 
		img-src 'self' data: 'unsafe-eval' 'unsafe-inline' https: ;
		script-src 'self' https://static.keenetic.net/kdns201/  ;
	" />
  <script defer src="script.js"></script>
  <title>Error</title>
</head>

<body>
  <noscript>503</noscript>
  <main class="template" />
</body>

</html>

Found 2024-05-08 by HttpPlugin

Create report

Open service 31.184.251.19:80 · 3f797e63db9d5ed4a34b8c80.keenetic.io

2024-05-01 00:57

HTTP/1.0 200 OK
Content-type: text/html
Server: uc-httpd 1.0.0
Expires: 0

Page title: NETSurveillance WEB

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
	<meta http-equiv="X-UA-Compatible" content="IE=edge"/>
    <link rel="stylesheet" type="text/css" media="screen" href="m.css" />
    
    <title>NETSurveillance WEB</title>
    
    <!-- m.js -->

    <script type="text/javascript" language="JavaScript">
     var bCrossBrow=false;
	 var bnpCheck = false;
var ShowTipFlag=2;
	
	// var SupportFind=false;
	
	if(navigator.userAgent.indexOf('IE') < 0)
	{
	    
		if(navigator.platform != "Win32")//
		{
			location="Login.htm";
		}
		var userAgent = navigator.userAgent,   
                rMsie = /(msie\s|trident.*rv:)([\w.]+)/,   
                rFirefox = /(firefox)\/([\w.]+)/,   
                rOpera = /(opera).+version\/([\w.]+)/,   
                rChrome = /(chrome)\/([\w.]+)/,   
                rSafari = /version\/([\w.]+).*(safari)/;
		var browserMatch = uaMatch(userAgent.toLowerCase());
		 
		if(browserMatch.browser!="IE")
		{
		     //location="Login.htm";
			 bCrossBrow=true;
			  var userla=navigator.browserLanguage;
			  switch (browserMatch.browser)
			{
			    case "firefox":
				    if (compareBrowser(browserMatch.version,"52.0")){
					    if(userla=="zh-cn"){
					        alert("您的浏览器太新了,某些功能将不能正常使用,请下载51.0或以前的版本。");
						}else{
						    alert("Your browser is too new,Some features will not work properly.Please download 51.0 or earlier.");
						}
						location="Login.htm";
					}
			        break;
				case "opera":
				    if (compareBrowser(browserMatch.version,"34.0")){
					     if(userla=="zh-cn"){
					        alert("您的浏览器太新了，请下载33.0或以前的版本。");
						}else{
						    alert("Your browser is too new,Some features will not work properly.Please download 33.0 or earlier.");
						}
						location="Login.htm";
					}
			        break;
				case "chrome":
				    if (compareBrowser(browserMatch.version,"45.0")){
					     if(userla=="zh-cn"){
					        alert("您的浏览器太新了，请下载44.0或以前的版本。");
						}else{
						    alert("Your browser is too new,Some features will not work properly.Please download 44.0 or earlier.");
						}
						location="Login.htm";
					}
			        break;
				case "safari":
				    if (compareBrowser(browserMatch.version,"10.0")){
					     if(userla=="zh-cn"){
					        alert("您的浏览器太新了，请下载9.0或以前的版本。");
						}else{
						    alert("Your browser is too new,Some features will not work properly.Please download 9.0 or earlier.");
						}
						location="Login.htm";
					}
			        break;
			}
		}
		
	}
	
	function compareBrowser(ver1,ver2) {  
      var version1pre = parseFloat(ver1);  
      var version2pre = parseFloat(ver2);  
      var version1next =  ver1.replace(version1pre + ".","");  
      var version2next =  ver2.replace(version2pre + ".","");  
      if(version1pre > version2pre){  
          return true;  
      }else if(version1pre < version2pre){  
      return false;  
      }else{  
          if(version1next > version2next){  
            return true;  
          }else{  
            return false;  
           }  
        }  
	}
	
	
	function reminder()
	{
		var nSel=$('langlist').selectedIndex;
		var cLanguage;
		switch(nSel)
		{
		case 0:
             cLanguage="English";
            
             break;
		case 1:
             cLanguage="French";
            
             break;
		case 2:
             cLanguage="Hungarian";
            
             break;
		case 3:
             cLanguage="Italian";
            
             break;
		case 4:
             cLanguage="Japanese";
             
             break;
		case 5:
             cLanguage="Portugal";

Found 2024-05-01 by HttpPlugin

Create report

Open service 31.184.251.19:80 · 3f797e63db9d5ed4a34b8c80.keenetic.io

2024-04-28 23:30

HTTP/1.0 200 OK
Content-type: text/html
Server: uc-httpd 1.0.0
Expires: 0

Page title: NETSurveillance WEB

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
	<meta http-equiv="X-UA-Compatible" content="IE=edge"/>
    <link rel="stylesheet" type="text/css" media="screen" href="m.css" />
    
    <title>NETSurveillance WEB</title>
    
    <!-- m.js -->

    <script type="text/javascript" language="JavaScript">
     var bCrossBrow=false;
	 var bnpCheck = false;
var ShowTipFlag=2;
	
	// var SupportFind=false;
	
	if(navigator.userAgent.indexOf('IE') < 0)
	{
	    
		if(navigator.platform != "Win32")//
		{
			location="Login.htm";
		}
		var userAgent = navigator.userAgent,   
                rMsie = /(msie\s|trident.*rv:)([\w.]+)/,   
                rFirefox = /(firefox)\/([\w.]+)/,   
                rOpera = /(opera).+version\/([\w.]+)/,   
                rChrome = /(chrome)\/([\w.]+)/,   
                rSafari = /version\/([\w.]+).*(safari)/;
		var browserMatch = uaMatch(userAgent.toLowerCase());
		 
		if(browserMatch.browser!="IE")
		{
		     //location="Login.htm";
			 bCrossBrow=true;
			  var userla=navigator.browserLanguage;
			  switch (browserMatch.browser)
			{
			    case "firefox":
				    if (compareBrowser(browserMatch.version,"52.0")){
					    if(userla=="zh-cn"){
					        alert("您的浏览器太新了,某些功能将不能正常使用,请下载51.0或以前的版本。");
						}else{
						    alert("Your browser is too new,Some features will not work properly.Please download 51.0 or earlier.");
						}
						location="Login.htm";
					}
			        break;
				case "opera":
				    if (compareBrowser(browserMatch.version,"34.0")){
					     if(userla=="zh-cn"){
					        alert("您的浏览器太新了，请下载33.0或以前的版本。");
						}else{
						    alert("Your browser is too new,Some features will not work properly.Please download 33.0 or earlier.");
						}
						location="Login.htm";
					}
			        break;
				case "chrome":
				    if (compareBrowser(browserMatch.version,"45.0")){
					     if(userla=="zh-cn"){
					        alert("您的浏览器太新了，请下载44.0或以前的版本。");
						}else{
						    alert("Your browser is too new,Some features will not work properly.Please download 44.0 or earlier.");
						}
						location="Login.htm";
					}
			        break;
				case "safari":
				    if (compareBrowser(browserMatch.version,"10.0")){
					     if(userla=="zh-cn"){
					        alert("您的浏览器太新了，请下载9.0或以前的版本。");
						}else{
						    alert("Your browser is too new,Some features will not work properly.Please download 9.0 or earlier.");
						}
						location="Login.htm";
					}
			        break;
			}
		}
		
	}
	
	function compareBrowser(ver1,ver2) {  
      var version1pre = parseFloat(ver1);  
      var version2pre = parseFloat(ver2);  
      var version1next =  ver1.replace(version1pre + ".","");  
      var version2next =  ver2.replace(version2pre + ".","");  
      if(version1pre > version2pre){  
          return true;  
      }else if(version1pre < version2pre){  
      return false;  
      }else{  
          if(version1next > version2next){  
            return true;  
          }else{  
            return false;  
           }  
        }  
	}
	
	
	function reminder()
	{
		var nSel=$('langlist').selectedIndex;
		var cLanguage;
		switch(nSel)
		{
		case 0:
             cLanguage="English";
            
             break;
		case 1:
             cLanguage="French";
            
             break;
		case 2:
             cLanguage="Hungarian";
            
             break;
		case 3:
             cLanguage="Italian";
            
             break;
		case 4:
             cLanguage="Japanese";
             
             break;
		case 5:
             cLanguage="Portugal";

Found 2024-04-28 by HttpPlugin

Create report

Open service 31.184.251.19:80 · 3f797e63db9d5ed4a34b8c80.keenetic.io

2024-04-18 22:44

HTTP/1.0 200 OK
Content-type: text/html
Server: uc-httpd 1.0.0
Expires: 0

Page title: NETSurveillance WEB

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
	<meta http-equiv="X-UA-Compatible" content="IE=edge"/>
    <link rel="stylesheet" type="text/css" media="screen" href="m.css" />
    
    <title>NETSurveillance WEB</title>
    
    <!-- m.js -->

    <script type="text/javascript" language="JavaScript">
     var bCrossBrow=false;
	 var bnpCheck = false;
var ShowTipFlag=2;
	
	// var SupportFind=false;
	
	if(navigator.userAgent.indexOf('IE') < 0)
	{
	    
		if(navigator.platform != "Win32")//
		{
			location="Login.htm";
		}
		var userAgent = navigator.userAgent,   
                rMsie = /(msie\s|trident.*rv:)([\w.]+)/,   
                rFirefox = /(firefox)\/([\w.]+)/,   
                rOpera = /(opera).+version\/([\w.]+)/,   
                rChrome = /(chrome)\/([\w.]+)/,   
                rSafari = /version\/([\w.]+).*(safari)/;
		var browserMatch = uaMatch(userAgent.toLowerCase());
		 
		if(browserMatch.browser!="IE")
		{
		     //location="Login.htm";
			 bCrossBrow=true;
			  var userla=navigator.browserLanguage;
			  switch (browserMatch.browser)
			{
			    case "firefox":
				    if (compareBrowser(browserMatch.version,"52.0")){
					    if(userla=="zh-cn"){
					        alert("您的浏览器太新了,某些功能将不能正常使用,请下载51.0或以前的版本。");
						}else{
						    alert("Your browser is too new,Some features will not work properly.Please download 51.0 or earlier.");
						}
						location="Login.htm";
					}
			        break;
				case "opera":
				    if (compareBrowser(browserMatch.version,"34.0")){
					     if(userla=="zh-cn"){
					        alert("您的浏览器太新了，请下载33.0或以前的版本。");
						}else{
						    alert("Your browser is too new,Some features will not work properly.Please download 33.0 or earlier.");
						}
						location="Login.htm";
					}
			        break;
				case "chrome":
				    if (compareBrowser(browserMatch.version,"45.0")){
					     if(userla=="zh-cn"){
					        alert("您的浏览器太新了，请下载44.0或以前的版本。");
						}else{
						    alert("Your browser is too new,Some features will not work properly.Please download 44.0 or earlier.");
						}
						location="Login.htm";
					}
			        break;
				case "safari":
				    if (compareBrowser(browserMatch.version,"10.0")){
					     if(userla=="zh-cn"){
					        alert("您的浏览器太新了，请下载9.0或以前的版本。");
						}else{
						    alert("Your browser is too new,Some features will not work properly.Please download 9.0 or earlier.");
						}
						location="Login.htm";
					}
			        break;
			}
		}
		
	}
	
	function compareBrowser(ver1,ver2) {  
      var version1pre = parseFloat(ver1);  
      var version2pre = parseFloat(ver2);  
      var version1next =  ver1.replace(version1pre + ".","");  
      var version2next =  ver2.replace(version2pre + ".","");  
      if(version1pre > version2pre){  
          return true;  
      }else if(version1pre < version2pre){  
      return false;  
      }else{  
          if(version1next > version2next){  
            return true;  
          }else{  
            return false;  
           }  
        }  
	}
	
	
	function reminder()
	{
		var nSel=$('langlist').selectedIndex;
		var cLanguage;
		switch(nSel)
		{
		case 0:
             cLanguage="English";
            
             break;
		case 1:
             cLanguage="French";
            
             break;
		case 2:
             cLanguage="Hungarian";
            
             break;
		case 3:
             cLanguage="Italian";
            
             break;
		case 4:
             cLanguage="Japanese";
             
             break;
		case 5:
             cLanguage="Portugal";

Found 2024-04-18 by HttpPlugin

Create report

Domain summary

3f797e63db9d5ed4a34b8c80.keenetic.io 4

1 recorded

IP summary

31.184.251.19 2

1 recorded

Domain 3f797e63db9d5ed4a34b8c80.keenetic.io

Russia

Vulnerable HiSilicon family DVR

Create report

Create report

Create report

Create report

Domain summary

IP summary