GeneralInformation

Country	Slovenia
City	Črna na Koroškem
Organization	KRS Networks
ISP	siaIT d.o.o.
ASN	AS58056

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

CVE-2022-41556

A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of service (connection-slot exhaustion) after a large amount of anomalous TCP behavior by clients. It is related to RDHUP mishandling in certain HTTP/1.1 chunked situations. Use of mod_fastcgi is, for example, affected. This is fixed in 1.4.67.

CVE-2022-22707

4.3In lighttpd 1.4.46 through 1.4.63, the mod_extforward_Forwarded function of the mod_extforward plugin has a stack-based buffer overflow (4 bytes representing -1), as demonstrated by remote denial of service (daemon crash) in a non-default configuration. The non-default configuration requires handling of the Forwarded header in a somewhat unusual manner. Also, a 32-bit system is much more likely to be affected than a 64-bit system.

OpenPorts

21 81 443 1883 2222 2223 5900 5901 5908 5910 5938 5984 5986 5990 6000 8080 8081 8123

-949720558 | 2024-03-17T14:03:37.246541

81 / tcp

HTTP/1.1 403 Forbidden
Content-Type: text/html
Content-Length: 341
Date: Sun, 17 Mar 2024 14:03:37 GMT
Server: lighttpd/1.4.59

-284417934 | 2024-04-15T12:11:45.319885

443 / tcp

HTTP/1.1 200 OK
Connection: close
ETag: "14a6-c06-659b3b32"
Last-Modified: Mon, 08 Jan 2024 00:00:50 GMT
Date: Mon, 15 Apr 2024 12:11:44 GMT
Content-Type: text/html
Content-Length: 3078

SSL Certificate

Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number:
            b3:89:f9:00:31:06:22:88
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=CN, CN=tplinkwifi.net
        Validity
            Not Before: Jan  8 00:00:50 2024 GMT
            Not After : Jan  6 00:00:50 2029 GMT
        Subject: C=CN, CN=tplinkwifi.net
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:a8:b4:d6:99:04:e2:b3:82:f0:ab:d6:9d:5f:3f:
                    66:63:d0:d6:2a:f1:88:9c:64:57:1e:88:87:3a:53:
                    84:f4:15:c2:34:03:f1:d5:3f:68:85:41:84:8f:44:
                    6e:f4:71:30:f1:22:77:84:2f:a8:83:97:08:51:95:
                    92:12:cc:e7:ee:68:f5:8c:75:79:b9:bc:15:df:65:
                    0c:34:1f:51:cc:96:83:65:60:07:d2:08:0b:35:ad:
                    65:38:ca:13:a2:ff:0a:dc:25:fc:1f:bc:34:66:05:
                    28:df:35:52:36:3a:f7:0e:35:04:47:25:42:1d:bd:
                    df:26:ea:01:f6:73:f8:86:e9:20:37:c0:7a:18:36:
                    17:39:67:b0:70:45:b6:0f:68:a2:ff:61:37:92:46:
                    bc:38:50:98:d2:bd:4d:c0:8c:cb:9b:8a:ac:a5:0f:
                    bf:73:dc:3f:6f:c5:7f:ca:58:ec:65:84:34:1f:92:
                    ab:70:65:83:7e:34:94:b2:ac:6e:e9:f0:bb:01:c2:
                    96:32:03:fa:fe:8f:f1:4e:30:7c:49:db:60:0f:1a:
                    1e:a1:29:0a:a4:89:17:92:3c:35:89:34:6d:26:c6:
                    6b:3a:a6:04:c6:58:cc:66:4b:51:38:c0:7a:c3:11:
                    88:ac:af:37:a7:fc:0a:2b:53:02:4c:d3:45:ef:c1:
                    07:71
                Exponent: 65537 (0x10001)
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        21:f0:b6:3b:e6:ab:e0:70:8d:f9:95:75:af:51:29:7f:31:67:
        d9:01:d2:e6:94:5b:5f:03:d7:3d:7d:ab:82:f1:e4:d7:64:cd:
        b6:06:fc:00:25:40:d5:42:28:2a:21:bf:d0:e8:41:9a:61:a3:
        10:83:c0:cb:df:d6:9f:5d:18:e2:03:e5:d4:25:c8:92:c2:82:
        da:2e:46:78:fd:81:7b:78:c6:32:9b:95:ed:3e:7a:7f:99:5c:
        49:0e:bc:e7:42:56:d9:0f:d5:a2:4a:1a:63:7a:8b:bd:6e:65:
        60:8e:80:18:1e:6b:c2:ad:7d:b8:ad:1b:86:44:a8:4d:a1:d1:
        d8:a5:f7:3b:1e:fd:37:a0:1d:37:cf:0a:42:80:f2:65:fc:e9:
        d0:4f:78:63:18:cf:32:93:ab:6b:56:ea:67:5c:6f:e1:f4:f6:
        e0:d6:56:fd:61:22:f0:9a:93:af:3a:91:4c:ba:ad:17:84:79:
        42:ab:5b:29:f0:24:7d:dd:51:00:4c:81:f5:00:c8:e0:e4:03:
        35:f4:7c:c7:dd:39:a6:17:0f:e7:e7:be:d2:f6:9f:67:6e:32:
        e6:0a:5a:fc:ac:bd:69:26:02:97:35:85:fb:cb:fa:8a:f6:40:
        c8:83:47:3f:2d:df:55:ff:47:e7:ee:4d:20:a2:2d:bb:bc:bc:
        96:10:19:55

-1278912815 | 2024-03-23T16:39:13.222212

1883 / tcp

MQTT Connection Code: 5

Topics:

1147712618 | 2024-04-16T07:44:51.167337

2222 / tcp

SSH-2.0-OpenSSH_7.9p1 Raspbian-10+deb10u2
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABAQDA+HHzZbSW2SP0f7DGTzxf4EBZNreIR+NcncIAU1rYCLnH
Cd735HvvEkP/H4kNowJwKJOrjxxNiK40TWi+vLYMKVzG9X7DFSzdi8H4xxri+btm4EMi60DQ0fIG
XsSHbI+O4kkW92uWt12spWJ8r+IYwEoI+8XF7c/oTNOaZ7jzDA8QkSmQdYLBFp7roBHPdHCUds8Y
iLQcM8dlh9z0OIXq2SPfK7o6YeJMZJ8TDsTBPktVR1vW127Bcg+IFx2IHd0m8JJKUliwv8qMC7ae
1qQiWR3nUKIGWxtDi3CzFQTFfq5K/+vOceA6HrKiHqJlvUrX1eI2+MYQo/izxn5COmWv
Fingerprint: 99:eb:24:75:c1:67:6a:31:e5:b3:3e:ee:cb:3a:7a:17

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	diffie-hellman-group14-sha1

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

2101989042 | 2024-04-11T09:30:54.753773

2223 / tcp

SSH-2.0-OpenSSH_8.4p1 Raspbian-5+deb11u3
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQDItNUZPl9URNVn/1hJFBI6zsY09M60OrBrLCyVKaOn/XOW
BTtN6/vZ25hwXT704TUGVx7hbqPQhMPAj9IhubTV5fZpB8LKupsfeWctXl2yGskVHqBOlTqjemUE
sZmDhkHSfUURgYEUf/YXfFIYZkDTdp02PFkohp79g8QLSHdBXWTM10X2FH6vNDDNdT1yL3Irl/T/
IDnmyB77JSkI/oEiJACs7HLxxI1xeEfO7aGljoZBCybzCye/2ODGTOXGd73xSMqlIIN6ndoIkuFe
h/yWfDJKDYf8cnr6WxrjQSXjWWyXJR9zW9NQWXR7nZfAbGdmcu30ezDb9n2zF+IPqSPxqcv6j1Vh
vQ8B20BZwS1gNTDH2gj1kxApV1jTR42HrLJVORGwKyrkyzqek4iAHX1WmDhuA1gxiMKFMiXd5Qs7
bzBKB4OIL4NO+syuZjK5uVzua11rGKK826uTqDRtQllBlrZUrHdcKmM6Z1Q1vpbKb9+OqiP8+u4C
A5EHXCmyYz8=
Fingerprint: 4f:e6:fb:03:4f:6b:35:4f:c7:41:28:22:06:03:19:f4

Kex Algorithms:
	curve25519-sha256
	curve25519-sha256@libssh.org
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	diffie-hellman-group-exchange-sha256
	diffie-hellman-group16-sha512
	diffie-hellman-group18-sha512
	diffie-hellman-group14-sha256
	kex-strict-s-v00@openssh.com

Server Host Key Algorithms:
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa
	ecdsa-sha2-nistp256
	ssh-ed25519

Encryption Algorithms:
	chacha20-poly1305@openssh.com
	aes128-ctr
	aes192-ctr
	aes256-ctr
	aes128-gcm@openssh.com
	aes256-gcm@openssh.com

MAC Algorithms:
	umac-64-etm@openssh.com
	umac-128-etm@openssh.com
	hmac-sha2-256-etm@openssh.com
	hmac-sha2-512-etm@openssh.com
	hmac-sha1-etm@openssh.com
	umac-64@openssh.com
	umac-128@openssh.com
	hmac-sha2-256
	hmac-sha2-512
	hmac-sha1

Compression Algorithms:
	none
	zlib@openssh.com

-1239823314 | 2024-04-05T07:58:05.811867

5900 / tcp

RFB 005.000

VNC:
  Protocol Version: 5.0
  Security Types:
    5: RA2
    6: RA2ne
    13: RealVNC
    130: RealVNC
    192: RealVNC

-1239823314 | 2024-04-10T21:39:30.955309

5901 / tcp

RFB 005.000

VNC:
  Protocol Version: 5.0
  Security Types:
    5: RA2
    6: RA2ne
    13: RealVNC
    130: RealVNC
    192: RealVNC

-1239823314 | 2024-04-08T23:11:36.064028

5908 / tcp

RFB 005.000

VNC:
  Protocol Version: 5.0
  Security Types:
    5: RA2
    6: RA2ne
    13: RealVNC
    130: RealVNC
    192: RealVNC

-1239823314 | 2024-03-24T01:36:37.881695

5910 / tcp

RFB 005.000

VNC:
  Protocol Version: 5.0
  Security Types:
    5: RA2
    6: RA2ne
    13: RealVNC
    130: RealVNC
    192: RealVNC

-42767839 | 2024-03-24T00:37:10.037994

5938 / tcp

RFB 005.000

VNC:
  Protocol Version: 5.0

-1239823314 | 2024-04-01T05:03:45.920466

5984 / tcp

RFB 005.000

VNC:
  Protocol Version: 5.0
  Security Types:
    5: RA2
    6: RA2ne
    13: RealVNC
    130: RealVNC
    192: RealVNC

-1239823314 | 2024-04-11T13:58:02.352489

5986 / tcp

RFB 005.000

VNC:
  Protocol Version: 5.0
  Security Types:
    5: RA2
    6: RA2ne
    13: RealVNC
    130: RealVNC
    192: RealVNC

-42767839 | 2024-04-05T09:32:09.196851

5990 / tcp

RFB 005.000

VNC:
  Protocol Version: 5.0

-1239823314 | 2024-04-01T13:29:26.304813

6000 / tcp

RFB 005.000

VNC:
  Protocol Version: 5.0
  Security Types:
    5: RA2
    6: RA2ne
    13: RealVNC
    130: RealVNC
    192: RealVNC

131759722 | 2024-04-02T20:08:34.665353

8080 / tcp

HTTP/1.1 200 OK
Content-type: text/html
Expires: Thu, 3 Oct 1968 12:00:00 GMT
Pragma: no-cache
Cache-Control: no-cache, must-revalidate
Connection: close
Content-Length: 1469

-627360364 | 2024-03-25T22:42:45.246324

8081 / tcp

HTTP/1.1 302 Found
Location: https://109.123.44.40:443/
Connection: close

-380184913 | 2024-04-15T19:16:52.784413

8123 / tcp

HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
Referrer-Policy: no-referrer
X-Content-Type-Options: nosniff
Server: 
X-Frame-Options: SAMEORIGIN
Content-Length: 4199
Date: Mon, 15 Apr 2024 19:16:52 GMT

109.123.44.40

Last Seen: 2024-04-16

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-949720558 | 2024-03-17T14:03:37.246541
81 / tcp

lighttpd1.4.59

-284417934 | 2024-04-15T12:11:45.319885
443 / tcp

-1278912815 | 2024-03-23T16:39:13.222212
1883 / tcp

MQTT

1147712618 | 2024-04-16T07:44:51.167337
2222 / tcp

OpenSSH7.9p1 Raspbian-10+deb10u2

2101989042 | 2024-04-11T09:30:54.753773
2223 / tcp

OpenSSH8.4p1 Raspbian-5+deb11u3

-1239823314 | 2024-04-05T07:58:05.811867
5900 / tcp

RealVNC Enterprise5.3 or later

-1239823314 | 2024-04-10T21:39:30.955309
5901 / tcp

RealVNC Enterprise5.3 or later

-1239823314 | 2024-04-08T23:11:36.064028
5908 / tcp

RealVNC Enterprise5.3 or later

-1239823314 | 2024-03-24T01:36:37.881695
5910 / tcp

RealVNC Enterprise5.3 or later

-42767839 | 2024-03-24T00:37:10.037994
5938 / tcp

RealVNC Enterprise5.3 or later

-1239823314 | 2024-04-01T05:03:45.920466
5984 / tcp

RealVNC Enterprise5.3 or later

-1239823314 | 2024-04-11T13:58:02.352489
5986 / tcp

RealVNC Enterprise5.3 or later

-42767839 | 2024-04-05T09:32:09.196851
5990 / tcp

RealVNC Enterprise5.3 or later

-1239823314 | 2024-04-01T13:29:26.304813
6000 / tcp

RealVNC Enterprise5.3 or later

131759722 | 2024-04-02T20:08:34.665353
8080 / tcp

-627360364 | 2024-03-25T22:42:45.246324
8081 / tcp

-380184913 | 2024-04-15T19:16:52.784413
8123 / tcp

Home Assistant

Products

Pricing

Contact Us

109.123.44.40

Last Seen: 2024-04-16

Tags:

GeneralInformation

Vulnerabilities

OpenPorts

-949720558 | 2024-03-17T14:03:37.246541 81 / tcp

-284417934 | 2024-04-15T12:11:45.319885 443 / tcp

-1278912815 | 2024-03-23T16:39:13.222212 1883 / tcp

1147712618 | 2024-04-16T07:44:51.167337 2222 / tcp

2101989042 | 2024-04-11T09:30:54.753773 2223 / tcp

-1239823314 | 2024-04-05T07:58:05.811867 5900 / tcp

-1239823314 | 2024-04-10T21:39:30.955309 5901 / tcp

-1239823314 | 2024-04-08T23:11:36.064028 5908 / tcp

-1239823314 | 2024-03-24T01:36:37.881695 5910 / tcp

-42767839 | 2024-03-24T00:37:10.037994 5938 / tcp

-1239823314 | 2024-04-01T05:03:45.920466 5984 / tcp

-1239823314 | 2024-04-11T13:58:02.352489 5986 / tcp

-42767839 | 2024-04-05T09:32:09.196851 5990 / tcp

-1239823314 | 2024-04-01T13:29:26.304813 6000 / tcp

131759722 | 2024-04-02T20:08:34.665353 8080 / tcp

-627360364 | 2024-03-25T22:42:45.246324 8081 / tcp

-380184913 | 2024-04-15T19:16:52.784413 8123 / tcp

Products

Pricing

Contact Us

-949720558 | 2024-03-17T14:03:37.246541
81 / tcp

-284417934 | 2024-04-15T12:11:45.319885
443 / tcp

-1278912815 | 2024-03-23T16:39:13.222212
1883 / tcp

1147712618 | 2024-04-16T07:44:51.167337
2222 / tcp

2101989042 | 2024-04-11T09:30:54.753773
2223 / tcp

-1239823314 | 2024-04-05T07:58:05.811867
5900 / tcp

-1239823314 | 2024-04-10T21:39:30.955309
5901 / tcp

-1239823314 | 2024-04-08T23:11:36.064028
5908 / tcp

-1239823314 | 2024-03-24T01:36:37.881695
5910 / tcp

-42767839 | 2024-03-24T00:37:10.037994
5938 / tcp

-1239823314 | 2024-04-01T05:03:45.920466
5984 / tcp

-1239823314 | 2024-04-11T13:58:02.352489
5986 / tcp

-42767839 | 2024-04-05T09:32:09.196851
5990 / tcp

-1239823314 | 2024-04-01T13:29:26.304813
6000 / tcp

131759722 | 2024-04-02T20:08:34.665353
8080 / tcp

-627360364 | 2024-03-25T22:42:45.246324
8081 / tcp

-380184913 | 2024-04-15T19:16:52.784413
8123 / tcp