![]() I generally download dd-wrt to my modems, sothey are removed. Side note: UDP port 5555 uses the Datagram Protocol, a communications protocol for the Internet network layer, transport layer, and session layer. So those extra ports are, I think, to support the smart config tools. Port 80 is http so just point Firefox to you modems address, you will get you modems config screen. In any case I think you will find that the dhcp server is setting the DNS server to the router, and that will,be using port 53 so it's being poked all the time, ![]() ![]() Then ask it to resolved names to IP addresses. To poke on DNS port 53, run nslookup and use the command "server IPaddress". But it has been discovered that some (in particular chinese) Android phones. The 3333 port, looking at that link I'd guess it's part of the netgenie discovery, but I could not find any support for that The retransmissions probably mean some program on your machine is repeatedly trying to make a connection to the server on port 5555 the packet is an 'initial SYN', which is the first packet in a TCP connection attempt, and it's probably being reported as a ' (suspected) retransmission' because there were previous similar connection attempts. Port 5555 is used by the Android Debug Bridge. Which I understand is sort of of a superset or uses http. A quick port scan of my R8000P router found a service named 'freeciv' using TCP port 5555 - is this expected As part of the scan, it did also find ftp (21/tcp), domain (53/tcp), http (80/tcp), https (443/tcp), upnp (5000/tcp) which were expected. PORT STATE SERVICE 2222/tcp open EtherNetIP-1 5555/tcp filtered freeciv. In it they talk about netgenie making soap calls to the device on port 5555. Enumerating the opened ports, we discover a SSH, Android Debug Bridge (adb). Could it be the Modem built into the router itself? Another guess would be some host from my ISP.I think that the netgenie app uses port 5555 to talk to and setup the Netgear modem. I have no clue what this device would be and am very curious. 2222,5555,40947,42135,59777 -Pn 10.10.10.247 -T4 -oN nmap/sSV.txt PORT STATE SERVICE VERSION 2222/tcp open ssh (protocol 2.0) 5555/tcp filtered freeciv. Now the really strange thing: When i try to connect to port 5555 ie with netcat, my internet connection stops working instantly and I have to reset the router. 5432/udp postgres freeciv 5556/tcp rptp Freeciv gameplay freeciv 5556/udp amqp 5672/tcp amqp. ![]() Not shown: 956 closed ports, 42 filtered ports Quick reference guide - TCP / UDP ports /etc/services. SOCKSTREAM) ns.connect((host, port)) nprint(s.recv(1024)) n nsubprocess.call(ssh -p 2222 -L 5555:localhost:5555 kristiexplorer.htb, shellTrue). Doing a port scan on the hosts reveals 2 open TCP ports: Port numbers are assigned in various ways, based on three ranges: System Ports (0-1023), User Ports (1024-49151), and the Dynamic and/or Private Ports (49152-65535) the different uses of these ranges are described in RFC6335. The router is directly connected via LTE modem to the internet, there's nothing else between. I did a traceroute, it's apearantly behind the TP-Link traceroute 192.168.0.1 ![]() External Resources SANS Internet Storm Center: port 5555 Notes: Port numbers in computer networking represent communication endpoints. This subnet / address is not configured in my network. 16 records found SG security scan: port 5555 jump to: Related ports: 4 2727 5004 5440 5447 back to SG Ports err. Now i did a scan for network devices in the /16 range and found the strange address 192.168.0.1. My router is configured to use the subnet 192.168.2.0/24 and has address 192.168.2.1. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |