LeakIX - Host 85.30.205.13

Host 85.30.205.13

Russia

Rostelecom

Software information

NVRHttpStream

tcp/8000

A JSON configuration file has been found

A JSON configuration file has been found at config.json.

It may contains application configuration such as credentials.

False positive might happen when hitting a JSON API endpoint.

IP: 85.30.205.13
Port: 443
URL: https://85.30.205.13

First seen 2023-05-04 23:43
Last seen 2024-06-11 22:29
Open for 403 days

Fingerprint: b18befd9dd653680a9759aa1a9759aa1a9759aa1a9759aa1a9759aa1a9759aa1

{ "error_code": -40401, "data": { "code": -40407, "encrypt_type": [ "1", "2" ], "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtm7vmbyhRj7%2ba6DtdtDbnO91sUSx%2fctrR%2fBimInuvhvYxDKTinHHhOjPdODx25%2fRuSggF8yWnIRRZ6EVlSZ5wqRFkpyaaOdejknW88LKwCOpAPsGgIWU7osywYInsKnnO%2bZbyD2HzrTB3HHPR1r%2bnoC6Gk8QPZAKDEkf9LKwIrQIDAQAB", "nonce": "JtpsIEAK" } }

Found on 2024-06-11 22:29

Fingerprint: b18befd9dd65368084cad78584cad78584cad78584cad78584cad78584cad785

{ "error_code": -40401, "data": { "code": -40407, "encrypt_type": [ "1", "2" ], "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtedvQYw8cI3Q7mpy6%2fPaFJF7PPsD5e0lUKvWJMZea47QzFcK8VdgivZVziiZnuPLuPUsCayK%2be5lDa5wC2K4lnW%2bjYH%2f7xNlhZ45sby%2b0cnPry7pICc2QqRZ5zhLRC4xzXDRTWagVdSNDN3Dtf4zaQ5Bw8xJgtBKHOFC23MrCNQIDAQAB", "nonce": "s29NMDlx" } }

Found on 2024-05-28 21:35

Fingerprint: b18befd9dd653680b52da6a8b52da6a8b52da6a8b52da6a8b52da6a8b52da6a8

{ "error_code": -40401, "data": { "code": -40407, "encrypt_type": [ "1", "2" ], "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCeQfAd4AMYhhmFebjPPlPGZYnTiFeq5g08VklJW%2bmj3fYwT2C0dkgaOB%2b1VygS77Y3HJmqCLGGs8m2325w9ORhcZs9NDFxJdqL8gPwmlx9837aB8FJR3wqVhwqP4%2foyYclOTkh3vqM9O1WXm8GzZypHyM2y%2fgFMAlKC3xZftFSnwIDAQAB", "nonce": "XtNSf7Se" } }

Found on 2024-05-25 20:20

Fingerprint: b18befd9dd653680c2a7e7ecc2a7e7ecc2a7e7ecc2a7e7ecc2a7e7ecc2a7e7ec

{ "error_code": -40401, "data": { "code": -40407, "encrypt_type": [ "1", "2" ], "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCeQfAd4AMYhhmFebjPPlPGZYnTiFeq5g08VklJW%2bmj3fYwT2C0dkgaOB%2b1VygS77Y3HJmqCLGGs8m2325w9ORhcZs9NDFxJdqL8gPwmlx9837aB8FJR3wqVhwqP4%2foyYclOTkh3vqM9O1WXm8GzZypHyM2y%2fgFMAlKC3xZftFSnwIDAQAB", "nonce": "ktjvLGWs" } }

Found on 2024-05-24 23:22

Fingerprint: b18befd9dd653680feff2729feff2729feff2729feff2729feff2729feff2729

{ "error_code": -40401, "data": { "code": -40407, "encrypt_type": [ "1", "2" ], "key": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCeQfAd4AMYhhmFebjPPlPGZYnTiFeq5g08VklJW%2bmj3fYwT2C0dkgaOB%2b1VygS77Y3HJmqCLGGs8m2325w9ORhcZs9NDFxJdqL8gPwmlx9837aB8FJR3wqVhwqP4%2foyYclOTkh3vqM9O1WXm8GzZypHyM2y%2fgFMAlKC3xZftFSnwIDAQAB", "nonce": "Ql9CR6ou" } }

Found on 2024-05-23 22:03

Fingerprint: b18befd9dd6536801293a91f1293a91f1293a91f1293a91f1293a91f1293a91f
```
{ "error_code": -40401, "data": { "code": -40407 } }
```
Found on 2024-02-01 19:40
Fingerprint: b18befd9dd653682e0ca70e9e0ca70e9e0ca70e9e0ca70e9e0ca70e9e0ca70e9
```
{"error_code": -40401, "data": {"code": -40407}}
```
Found on 2023-05-04 23:43

Create report

Open service 85.30.205.13:8000

2024-06-15 14:18

HTTP/1.0 307 Temporary Redirect
Server: NVRHttpStream
Date: Sat, 15 Jun 2024 14:18:13 UTC
Content-Type: text/html;charset=utf-8
Location: https://192.168.0.30:443
Connection: close

Found 2024-06-15 by HttpPlugin

Create report

Open service 85.30.205.13:443

2024-06-11 22:29

HTTP/1.1 200 OK
Connection: close
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache
Expires: 0
X-Frame-Options: SAMEORIGIN
Transfer-Encoding: chunked

Page title: NVR

<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml">
  <head>
    <title>NVR</title>
    <meta name="renderer" content="webkit" />
    <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />
    <link
      rel="shortcut icon"
      href="../web-static/images/icon.ico?random=20240119175641"
      type="image/x-icon"
    />
    <link rel="stylesheet" href="../web-static/dynaform/class.css?random=20240119175641" />
    <script
      type="text/javascript"
      src="../web-static/media_player/tp.min.js?random=20240119175641"
    ></script>
    <script
      type="text/javascript"
      src="../web-static/dynaform/class.js?random=20240119175641"
    ></script>
    <link rel="stylesheet" href="../web-static/dynaform/global.css?random=20240119175641" />
  </head>
  <body>
    <div id="Error"></div>
    <div id="Confirm"></div>
    <div id="Con"></div>
    <div id="Help"></div>
    <div id="Cover"></div>
    <div id="Login"></div>
    <script type="text/javascript">
      pageOnload();
    </script>
  </body>
</html>

Found 2024-06-11 by HttpPlugin

Create report

Open service 85.30.205.13:443

2024-06-09 20:40

HTTP/1.1 200 OK
Connection: close
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache
Expires: 0
X-Frame-Options: SAMEORIGIN
Transfer-Encoding: chunked

Page title: NVR

<!DOCTYPE html>
<html xmlns="http://www.w3.org/1999/xhtml">
  <head>
    <title>NVR</title>
    <meta name="renderer" content="webkit" />
    <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />
    <link
      rel="shortcut icon"
      href="../web-static/images/icon.ico?random=20240119175641"
      type="image/x-icon"
    />
    <link rel="stylesheet" href="../web-static/dynaform/class.css?random=20240119175641" />
    <script
      type="text/javascript"
      src="../web-static/media_player/tp.min.js?random=20240119175641"
    ></script>
    <script
      type="text/javascript"
      src="../web-static/dynaform/class.js?random=20240119175641"
    ></script>
    <link rel="stylesheet" href="../web-static/dynaform/global.css?random=20240119175641" />
  </head>
  <body>
    <div id="Error"></div>
    <div id="Confirm"></div>
    <div id="Con"></div>
    <div id="Help"></div>
    <div id="Cover"></div>
    <div id="Login"></div>
    <script type="text/javascript">
      pageOnload();
    </script>
  </body>
</html>

Found 2024-06-09 by HttpPlugin

Create report

Fingerprint:

f29d60b7dc35c1349af796395218f5d3f428ab73b41d114401bf6c7991108d63

CN:

TP-Link

Key:

RSA-1024

Issuer:

TP-Link

Not before:

2024-05-23 15:07

Not after:

2026-05-23 15:07

Domain summary

No record