Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Inactive Support Threads
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Security
General Security Discussions
What can be done about firmware rootkit?
Message
<blockquote data-quote="oskopia" data-source="post: 1119665" data-attributes="member: 121188"><p>Super tip, </p><p>[SPOILER="nmap -O -v 192.268.2.1 (Click to see full answer)"]</p><p>Starting Nmap 7.95 ( <a href="https://nmap.org" target="_blank">Nmap: the Network Mapper - Free Security Scanner</a> ) at 2025-03-14 17:28 Mitteleuropõische Ze</p><p>it</p><p>Initiating ARP Ping Scan at 17:28</p><p>Scanning 192.168.2.1 [1 port]</p><p>Completed ARP Ping Scan at 17:28, 0.19s elapsed (1 total hosts)</p><p>Initiating Parallel DNS resolution of 1 host. at 17:28</p><p>Completed Parallel DNS resolution of 1 host. at 17:28, 0.03s elapsed</p><p>Initiating SYN Stealth Scan at 17:28</p><p>Scanning speedport.ip (192.168.2.1) [1000 ports]</p><p>Discovered open port 139/tcp on 192.168.2.1</p><p>Discovered open port 445/tcp on 192.168.2.1</p><p>Discovered open port 80/tcp on 192.168.2.1</p><p>Discovered open port 53/tcp on 192.168.2.1</p><p>Increasing send delay for 192.168.2.1 from 0 to 5 due to 22 out of 73 dropped pr</p><p>obes since last increase.</p><p>Increasing send delay for 192.168.2.1 from 5 to 10 due to 11 out of 16 dropped p</p><p>robes since last increase.</p><p>Increasing send delay for 192.168.2.1 from 10 to 20 due to 11 out of 11 dropped</p><p>probes since last increase.</p><p>Increasing send delay for 192.168.2.1 from 20 to 40 due to 11 out of 11 dropped</p><p>probes since last increase.</p><p>Discovered open port 8443/tcp on 192.168.2.1</p><p>Completed SYN Stealth Scan at 17:29, 45.74s elapsed (1000 total ports)</p><p>Initiating OS detection (try #1) against speedport.ip (192.168.2.1)</p><p>Retrying OS detection (try #2) against speedport.ip (192.168.2.1)</p><p>WARNING: OS didn't match until try #2</p><p>Nmap scan report for speedport.ip (192.168.2.1)</p><p>Host is up (0.00s latency).</p><p>Not shown: 994 closed tcp ports (reset)</p><p>PORT STATE SERVICE</p><p>53/tcp open domain</p><p>80/tcp open http</p><p>139/tcp open netbios-ssn</p><p>445/tcp open microsoft-ds</p><p>5060/tcp filtered sip</p><p>8443/tcp open https-alt</p><p>MAC Address: CC<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite116" alt=":D" title="Big grin :D" loading="lazy" data-shortname=":D" />4:2E:ED:19:3B (Arcadyan)</p><p>Device type: switch</p><p>Running: Aruba ArubaOS-CX 10.X</p><p>OS CPE: cpe:/o:arubanetworks:arubaos_cx:10.04</p><p>OS details: Aruba ArubaOS-CX 10.04</p><p>Uptime guess: 1.238 days (since Thu Mar 13 11:46:04 2025)</p><p>Network Distance: 1 hop</p><p>TCP Sequence Prediction: Difficulty=257 (Good luck!)</p><p>IP ID Sequence Generation: All zeros</p><p></p><p>Read data files from: C:\Program Files (x86)\Nmap</p><p>OS detection performed. Please report any incorrect results at <a href="https://nmap.org/" target="_blank">Nmap: the Network Mapper - Free Security Scanner</a></p><p>submit/ .</p><p>Nmap done: 1 IP address (1 host up) scanned in 53.03 seconds</p><p> Raw packets sent: 1132 (51.412KB) | Rcvd: 1075 (45.023KB)</p><p>[/SPOILER]</p><p></p><p> It says it is a switch. But I connect my LAN cable with a router. Can this switch be the Telekom Speedport Smart 3 Router?</p></blockquote><p></p>
[QUOTE="oskopia, post: 1119665, member: 121188"] Super tip, [SPOILER="nmap -O -v 192.268.2.1 (Click to see full answer)"] Starting Nmap 7.95 ( [URL="https://nmap.org"]Nmap: the Network Mapper - Free Security Scanner[/URL] ) at 2025-03-14 17:28 Mitteleuropõische Ze it Initiating ARP Ping Scan at 17:28 Scanning 192.168.2.1 [1 port] Completed ARP Ping Scan at 17:28, 0.19s elapsed (1 total hosts) Initiating Parallel DNS resolution of 1 host. at 17:28 Completed Parallel DNS resolution of 1 host. at 17:28, 0.03s elapsed Initiating SYN Stealth Scan at 17:28 Scanning speedport.ip (192.168.2.1) [1000 ports] Discovered open port 139/tcp on 192.168.2.1 Discovered open port 445/tcp on 192.168.2.1 Discovered open port 80/tcp on 192.168.2.1 Discovered open port 53/tcp on 192.168.2.1 Increasing send delay for 192.168.2.1 from 0 to 5 due to 22 out of 73 dropped pr obes since last increase. Increasing send delay for 192.168.2.1 from 5 to 10 due to 11 out of 16 dropped p robes since last increase. Increasing send delay for 192.168.2.1 from 10 to 20 due to 11 out of 11 dropped probes since last increase. Increasing send delay for 192.168.2.1 from 20 to 40 due to 11 out of 11 dropped probes since last increase. Discovered open port 8443/tcp on 192.168.2.1 Completed SYN Stealth Scan at 17:29, 45.74s elapsed (1000 total ports) Initiating OS detection (try #1) against speedport.ip (192.168.2.1) Retrying OS detection (try #2) against speedport.ip (192.168.2.1) WARNING: OS didn't match until try #2 Nmap scan report for speedport.ip (192.168.2.1) Host is up (0.00s latency). Not shown: 994 closed tcp ports (reset) PORT STATE SERVICE 53/tcp open domain 80/tcp open http 139/tcp open netbios-ssn 445/tcp open microsoft-ds 5060/tcp filtered sip 8443/tcp open https-alt MAC Address: CC:D4:2E:ED:19:3B (Arcadyan) Device type: switch Running: Aruba ArubaOS-CX 10.X OS CPE: cpe:/o:arubanetworks:arubaos_cx:10.04 OS details: Aruba ArubaOS-CX 10.04 Uptime guess: 1.238 days (since Thu Mar 13 11:46:04 2025) Network Distance: 1 hop TCP Sequence Prediction: Difficulty=257 (Good luck!) IP ID Sequence Generation: All zeros Read data files from: C:\Program Files (x86)\Nmap OS detection performed. Please report any incorrect results at [URL="https://nmap.org/"]Nmap: the Network Mapper - Free Security Scanner[/URL] submit/ . Nmap done: 1 IP address (1 host up) scanned in 53.03 seconds Raw packets sent: 1132 (51.412KB) | Rcvd: 1075 (45.023KB) [/SPOILER] It says it is a switch. But I connect my LAN cable with a router. Can this switch be the Telekom Speedport Smart 3 Router? [/QUOTE]
Insert quotes…
Verification
Post reply
Top