In my last article, I found that some unknown device has a group of interesting services, including what seems to be an emergency alert service running on port 80, RPC running on port 111, and ZeroMQ running on port 5555. Let's see if we can narrow down the devices a bit more.
My network is interesting in some ways — I live in an Adobe house, and Adobe is about as transparent to radio as lead. So, I have a bunch of additional access points scattered throughout the house. When I scan my 192.168.1.0/24 range, I'm able to see all the devices on my network as I've configured my access points to pass through authentication and DHCP to my primary router. My primary router doesn't seem to know everything that's running on that subnet though as it thinks I only have 11 devices attached. NMAP tells me otherwise — it's able to scan 15 hosts. Something to note here is that you might have more on your networks than you think if you're using extenders as I do. From looking at the device map, it seems that my primary router doesn't know what's running behind the various extenders (in some cases at least).
from DZone.com Feed https://ift.tt/2KEKRRz
No comments:
Post a Comment