February « 2009 « jacobandreas.net

Fun with nmap: a tour of your Columbia Network Neighborhood

February 2, 2009

Out of what can only be described as idle curiosity I decided to run a port scan on IP addresses near mine to see if anything interesting turned up. Pretty straightforward: nmap OS and service detection on the /21 CIDR block containing my dynamically-assigned IP as of two nights ago.

Counts after the colon denote the number of hosts with a match, i.e. “upnp : 2″ means that 2 computers had Universal Plug-N-Play ports open.

The operating system names listed represent nmap’s best guess about what was running on each host and are not guaranteed to be accurate. Note that on the OS list the individual operating system counts don’t necessarily add up to the class total; sometimes the vendor could be identified but the specifics of the operating system couldn’t.

Some interesting results:

the ban on wireless routers doesn’t appear to be stopping people from installing them
nearly as many Mac users as windows, and a surprisingly small number of XP holdouts
at least two people still use RealPlayer

And a couple of other things you can’t see from these lists:

Hillel has a mysterious webcam somewhere in John Jay
Out of 2048 IP addresses tested, only 251 hosts were alive: either everybody shuts their computers off at night, or Columbia leaves most of its address space unallocated
The washing machines run FreeBSD

OS scan:

embedded : 68
	NetBSD 1.5.2, Lanier LS232c multifunction printer : 1
	Captor Omni-Clock (employee timeclock) : 1
	IBM BladeCenter management module (firmware BRET85L) : 1
	Lantronix Xport-03 embedded serial device server (firmware 6.1.0.3) : 1
	APC AP9319 Environmental Monitoring Unit or Smart-UPS 1000 RM UPS : 1
	Linksys WET54G wireless bridge : 5
Windows : 54
	Microsoft Windows Longhorn : 3
	Microsoft Windows Server 2003 SP2, SP3, or SP4 : 1
	Microsoft Windows XP SP2 or Windows Server 2003 SP0/SP1 : 3
	Microsoft Windows XP Home SP2 : 1
	Microsoft Windows 2000 SP4, or Windows XP SP2 or SP3 : 4
	Microsoft Windows Vista Home Basic : 2
	Microsoft Windows Server 2008 Beta 3 : 1
	Microsoft Windows Vista : 32
	Microsoft Windows 2000 SP4 or Windows XP SP2 : 4
	Microsoft Windows 2000 Server SP4 : 1
Mac OS X : 38
	Apple Mac OS X 10.4.10 (Tiger) (Darwin 8.10.0 - 8.11.1) : 5
	Apple Mac OS X 10.5 - 10.5.2 (Leopard) (Darwin 9.0.0b5 - 9.2.0) : 26
	Apple Mac OS X 10.4.8 - 10.4.11 (Tiger) (Darwin 8.8.0 - 8.11.1) : 6
	Apple Mac OS X 10.5 (Leopard) (Darwin 9.1.0) : 1
CatOS : 5
	Cisco Catalyst WS-C6506 switch (CatOS 7.6(16)) : 4
FreeBSD : 2
	FreeBSD 5.2.1-RELEASE : 2
Linux : 3
	FON La Fonera WAP running OpenWrt w/Linux kernel 2.4.32 : 2
	Linux 2.6.17 - 2.6.23 : 1
NetBSD : 11
	NetBSD 4.99.49 (x86) : 8
	NetBSD 4.99.4 (x86) : 2

Service list:

admdog : 1
kdm : 1
zannet : 1
dlswpn : 1
kerberos-sec : 13
msrpc : 16
globe : 2
rtsp : 5
eklogin : 3
domain : 1
netbios-ssn : 26
ftps : 1
ipp : 4
iasd : 1
dpsi : 1
vnc : 6
upnp : 2
aol : 1
abyss : 1
IIS : 1
nfsd-status : 1
jetdirect : 1
ms-term-serv : 1
https : 10
afp : 15
bbn-mmc : 1
printer : 23
http : 17
landesk-cba : 1
iad2 : 1
iad3 : 1
airport-admin : 3
rendezvous : 27
auth : 2
remoteanything : 1
advocentkvm : 1
telnet : 4
ssh : 4
alta-ana-lm : 1
X11 : 1
microsoft-ds : 25
snet-sensor-mgmt : 3
sql-net : 1
dna-cml : 1
svrloc : 1
NFS-or-IIS : 2
java-or-OTGfileshare : 1
netbios-ns : 1
realserver : 2

[5 comments]

↓ jacob andreas [.net]

links for 2009-02-22

links for 2009-02-12

Fun with nmap: a tour of your Columbia Network Neighborhood

OS scan:

Service list: