GeneralInformation

Hostnames	213-91-171-68.btc-net.bg
Domains	btc-net.bg
Country	Bulgaria
City	Sofia
Organization	Vivacom Bulgaria EAD
ISP	Vivacom Bulgaria EAD
ASN	AS8866

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2023(1)

CVE-2023-44487

7.5The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

2021(2)

CVE-2021-23017

7.7A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.

CVE-2021-3618

7.4ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. A MiTM attacker having access to victim's traffic at the TCP/IP layer can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.

2019(4)

CVE-2019-20372

5.3NGINX before 1.17.7, with certain error_page configurations, allows HTTP request smuggling, as demonstrated by the ability of an attacker to read unauthorized web pages in environments where NGINX is being fronted by a load balancer.

CVE-2019-9516

7.5Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations allocate memory for these headers and keep the allocation alive until the session dies. This can consume excess memory.

CVE-2019-9513

7.5Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU.

CVE-2019-9511

7.5Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.

2018(3)

CVE-2018-16845

8.2nginx before versions 1.15.6, 1.14.1 has a vulnerability in the ngx_http_mp4_module, which might allow an attacker to cause infinite loop in a worker process, cause a worker process crash, or might result in worker process memory disclosure by using a specially crafted mp4 file. The issue only affects nginx if it is built with the ngx_http_mp4_module (the module is not built by default) and the .mp4. directive is used in the configuration file. Further, the attack is only possible if an attacker is able to trigger processing of a specially crafted mp4 file with the ngx_http_mp4_module.

CVE-2018-16844

5.3nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive CPU usage. This issue affects nginx compiled with the ngx_http_v2_module (not compiled by default) if the 'http2' option of the 'listen' directive is used in a configuration file.

CVE-2018-16843

5.3nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessive memory consumption. This issue affects nginx compiled with the ngx_http_v2_module (not compiled by default) if the 'http2' option of the 'listen' directive is used in a configuration file.

2017(2)

CVE-2017-20005

9.8NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 that causes an integer overflow (or a false modification date far in the future), when encountered by the autoindex module.

CVE-2017-7529

7.5Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request.

OpenPorts

53 80 81 82 83 84 88 1701 7777 8080 8081 8291 8888 9999 10000 20000

53 / tcp

206959906 | 2025-03-25T19:33:00.950020

9.10.3-P4-Ubuntu
Resolver name: DL380p

53 / udp

206959906 | 2025-03-17T03:19:06.552755

9.10.3-P4-Ubuntu
Resolver name: DL380p

80 / tcp

0 | 2025-03-24T09:37:44.501029

Hashes

hash

1645470457

http.dom_hash

http.html_hash

http.server_hash

891375817

HTTP/1.1 200 OK
Server: nginx/1.10.3 (Ubuntu)
Date: Mon, 24 Mar 2025 09:37:44 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive

Vulnerabilities

1 8 3

81 / tcp

450682244 | 2025-03-17T21:34:43.974214

Hashes

hash

1668793887

http.dom_hash

427300722

http.html_hash

450682244

http.server_hash

891375817

http.title_hash

-1030444411

403 Forbidden

HTTP/1.1 403 Forbidden
Server: nginx/1.10.3 (Ubuntu)
Date: Mon, 17 Mar 2025 21:34:43 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 278
Connection: keep-alive

Vulnerabilities

1 8 3

82 / tcp

0 | 2025-03-14T06:52:48.973646

Hashes

hash

581945963

http.dom_hash

http.html_hash

http.server_hash

891375817

HTTP/1.1 200 OK
Server: nginx/1.10.3 (Ubuntu)
Date: Fri, 14 Mar 2025 06:52:48 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive

Vulnerabilities

1 8 3

83 / tcp

1410093119 | 2025-03-15T11:43:24.833069

Hashes

hash

1399248470

http.dom_hash

1804521491

http.html_hash

1410093119

http.server_hash

967792298

http.title_hash

-22151114

Apache2 Ubuntu Default Page: It works

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 15 Mar 2025 11:43:24 GMT
Content-Type: text/html
Content-Length: 10671
Connection: keep-alive
Last-Modified: Tue, 13 Feb 2024 10:27:21 GMT
ETag: "29af-61140d6ed9630"
Accept-Ranges: bytes
Vary: Accept-Encoding

Vulnerabilities

84 / tcp

-356053970 | 2025-03-15T15:11:57.742409

Hashes

hash

625405971

http.dom_hash

427300722

http.html_hash

-356053970

http.server_hash

891375817

http.title_hash

-1030444411

403 Forbidden

HTTP/1.1 403 Forbidden
Server: nginx/1.10.3 (Ubuntu)
Date: Sat, 15 Mar 2025 15:11:57 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 278
Connection: keep-alive

Vulnerabilities

1 8 3

88 / tcp

1410093119 | 2025-03-23T20:04:18.273678

Hashes

hash

40377965

http.dom_hash

1804521491

http.html_hash

1410093119

http.server_hash

967792298

http.title_hash

-22151114

Apache2 Ubuntu Default Page: It works

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 23 Mar 2025 20:04:18 GMT
Content-Type: text/html
Content-Length: 10671
Connection: keep-alive
Last-Modified: Tue, 13 Feb 2024 10:27:21 GMT
ETag: "29af-61140d6ed9630"
Accept-Ranges: bytes
Vary: Accept-Encoding

Vulnerabilities

1701 / udp

1377963018 | 2025-03-26T04:18:11.391683

\xc8\x02\x00d\x00\x00\x00\x00\x00\x00\x00\x01\x80\x08\x00\x00\x00\x00\x00\x02\x80\x08\x00\x00\x00\x02\x01\x00\x80\n\x00\x00\x00\x03\x00\x00\x00\x01\x80\n\x00\x00\x00\x04\x00\x00\x00\x00\x00\x08\x00\x00\x00\x06\x00\x01\x80\x0e\x00\x00\x00\x07MikroTik\x00\x0e\x00\x00\x00\x08MikroTik\x80\x08\x00\x00\x00\tT\x9c\x80\x08\x00\x00\x00\n\x00\x04

7777 / tcp

-269153666 | 2025-03-24T21:41:02.668831

Hashes

hash

-680237082

http.dom_hash

-2006505642

http.html_hash

-269153666

http.server_hash

-1191076616

HTTP/1.0 401 Unauthorized
Server: webserver/1.0
Date: Mon, 24 Mar 2025 21:41:02 GMT
WWW-Authenticate: Digest algorithm="MD5", realm="Forbidden", qop="auth", opaque="fc96ef0f033654a39e17b7381d75a716", nonce="f67b17af9ba825cf00c72f3623931e34"
Content-Type: text/html
Cache-Control: no-store, no-cache, must-revalidate
Expires: Sat, 10 Jan 2000 05:00:00 GMT
Content-Length: 15
Last-Modified: Mon, 24 Mar 2025 21:41:02 GMT
ETag: "753868328"
Connection: close

8080 / tcp

209452879 | 2025-03-13T12:10:04.052089

Hashes

hash

-1612796895

http.dom_hash

-434416351

http.html_hash

209452879

http.server_hash

997559063

HTTP/1.1 200 OK
Connection: keep-alive
Date: Thu, 13 Mar 2025 12:10:03 GMT
Content-Length: 647
Server: Streamer 23.02
Content-Type: text/html
Pragma: no-cache

8081 / tcp

892115548 | 2025-03-17T20:48:28.759652

HTTP/1.1 302 Found
Connection: keep-alive
Date: Mon, 17 Mar 2025 20:48:27 GMT
Content-Length: 42
Server: Streamer 23.02
Location: http://213.91.171.68:8080/admin/

Location http://213.91.171.68:8080/admin/

8291 / tcp

-298895619 | 2025-02-28T06:48:41.060525

MikroTik Winbox:
  list:
    advtool.jg: 7.7
    dhcp.jg: 7.7
    hotspot.jg: 7.7
    icons.png: 7.7
    icons24.png: 
    icons32.png: 
    ipv6.jg: 7.7
    ppp.jg: 7.7
    roteros.jg: 7.7
    secure.jg: 7.7
    wlan6.jg: 7.7

8888 / tcp

-269153666 | 2025-03-07T09:47:16.391681

Hashes

hash

-899101609

http.dom_hash

-2006505642

http.html_hash

-269153666

http.server_hash

-1191076616

HTTP/1.0 401 Unauthorized
Server: webserver/1.0
Date: Fri, 07 Mar 2025 09:47:16 GMT
WWW-Authenticate: Digest algorithm="MD5", realm="Forbidden", qop="auth", opaque="6e3a8a76eb909c9c0d6011b7fa78dca3", nonce="5e69ab86a9b5c8a186a5b3bc5856cea5"
Content-Type: text/html
Cache-Control: no-store, no-cache, must-revalidate
Expires: Sat, 10 Jan 2000 05:00:00 GMT
Content-Length: 15
Last-Modified: Fri, 07 Mar 2025 09:47:16 GMT
ETag: "753868328"
Connection: close

9999 / tcp

-269153666 | 2025-03-13T05:39:48.289126

Hashes

hash

1281335425

http.dom_hash

-2006505642

http.html_hash

-269153666

http.server_hash

-1191076616

HTTP/1.0 401 Unauthorized
Server: webserver/1.0
Date: Thu, 13 Mar 2025 05:39:48 GMT
WWW-Authenticate: Digest algorithm="MD5", realm="Forbidden", qop="auth", opaque="57c7513bc635abb939ca1122947052d7", nonce="c4e3dcadbc740e8e0b0d9d36a734c842"
Content-Type: text/html
Cache-Control: no-store, no-cache, must-revalidate
Expires: Sat, 10 Jan 2000 05:00:00 GMT
Content-Length: 15
Last-Modified: Thu, 13 Mar 2025 05:39:48 GMT
ETag: "753868328"
Connection: close

20000 / tcp

838815282 | 2025-03-17T11:07:36.712638

\r\xde\x073`&\x19\xf2\x16#\xddy\xa6\xd1

213.91.171.68

Last Seen: 2025-03-26

Tags:

GeneralInformation

Vulnerabilities All ports Port 80 Port 81 Port 82 Port 83 Port 84 Port 88 Latest CVSS

OpenPorts

53 / tcp 206959906 | 2025-03-25T19:33:00.950020

53 / udp 206959906 | 2025-03-17T03:19:06.552755

80 / tcp 0 | 2025-03-24T09:37:44.501029

Hashes

nginx1.10.3

81 / tcp 450682244 | 2025-03-17T21:34:43.974214

Hashes

nginx1.10.3

82 / tcp 0 | 2025-03-14T06:52:48.973646

Hashes

nginx1.10.3

83 / tcp 1410093119 | 2025-03-15T11:43:24.833069

Hashes

nginx1.18.0

84 / tcp -356053970 | 2025-03-15T15:11:57.742409

Hashes

nginx1.10.3

88 / tcp 1410093119 | 2025-03-23T20:04:18.273678

Hashes

nginx1.18.0

1701 / udp 1377963018 | 2025-03-26T04:18:11.391683

7777 / tcp -269153666 | 2025-03-24T21:41:02.668831

Hashes

8080 / tcp 209452879 | 2025-03-13T12:10:04.052089

Hashes

8081 / tcp 892115548 | 2025-03-17T20:48:28.759652

8291 / tcp -298895619 | 2025-02-28T06:48:41.060525

MikroTik Winbox

8888 / tcp -269153666 | 2025-03-07T09:47:16.391681

Hashes

9999 / tcp -269153666 | 2025-03-13T05:39:48.289126

Hashes

20000 / tcp 838815282 | 2025-03-17T11:07:36.712638

Products

Pricing

Contact Us

Vulnerabilities

53 / tcp

206959906 | 2025-03-25T19:33:00.950020

53 / udp

206959906 | 2025-03-17T03:19:06.552755

80 / tcp

0 | 2025-03-24T09:37:44.501029

81 / tcp

450682244 | 2025-03-17T21:34:43.974214

82 / tcp

0 | 2025-03-14T06:52:48.973646

83 / tcp

1410093119 | 2025-03-15T11:43:24.833069

84 / tcp

-356053970 | 2025-03-15T15:11:57.742409

88 / tcp

1410093119 | 2025-03-23T20:04:18.273678

1701 / udp

1377963018 | 2025-03-26T04:18:11.391683

7777 / tcp

-269153666 | 2025-03-24T21:41:02.668831

8080 / tcp

209452879 | 2025-03-13T12:10:04.052089

8081 / tcp

892115548 | 2025-03-17T20:48:28.759652

8291 / tcp

-298895619 | 2025-02-28T06:48:41.060525

8888 / tcp

-269153666 | 2025-03-07T09:47:16.391681

9999 / tcp

-269153666 | 2025-03-13T05:39:48.289126

20000 / tcp

838815282 | 2025-03-17T11:07:36.712638