[olug] nmap paranoia

[Phil Brutsche]

Cox uses RFC1918 addresses for their backend stuff.

I would say you just portscanned a bunch of Cox's equipment.

Dave Rowe wrote:
> Okay, so just to play around with nmap, I tried running it with the 
> following command:
> 
> ~$ nmap -v -sP 192.168.2.0/16
> 
> which, appears to have scanned the entire 192.168.* subnet (/16, not 
> /24, whoops).  So, anyways, I started getting results back, like, 
> 192.168.6.2 appears to be up, etc.
> 
> Here's the thing, my local network is 192.168.2.*.  So, I tried going to 
> 192.168.6.2 in a browser, and I got an authentication popup (HTTP-Auth) 
> for "Security", clicking 'Cancel' just says 'Error Loading!!!', some 
> number, then what appears to be a timestamp.
> 
> Anyone seen something like this?  I'm on Cox, with no additional 
> connections that I'm aware of (ie, no VPNs, etc).

-- 

Phil Brutsche
phil at brutsche.us