Login Register


Multiple suspicious IPs w/ no MAC appearing on my network filter_list
Author
Message
RE: Multiple suspicious IPs w/ no MAC appearing on my network #11
I'd personally use Nmap, like Ex094 said. If you absolutely need a GUI, grab Zenmap, it does the exact same as Nmap. Good luck Smile
xevenofhearts

Reply

RE: Multiple suspicious IPs w/ no MAC appearing on my network #12
(07-22-2013, 04:45 AM)Akkomodate Wrote: I'd personally use Nmap, like Ex094 said. If you absolutely need a GUI, grab Zenmap, it does the exact same as Nmap. Good luck Smile

When I do the nmap scan of the IP's while they're on my network I'm getting:

Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn

Reply

RE: Multiple suspicious IPs w/ no MAC appearing on my network #13
(07-23-2013, 01:58 AM)OctopusPopsicles Wrote:
(07-22-2013, 04:45 AM)Akkomodate Wrote: I'd personally use Nmap, like Ex094 said. If you absolutely need a GUI, grab Zenmap, it does the exact same as Nmap. Good luck Smile

When I do the nmap scan of the IP's while they're on my network I'm getting:

Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn

Try adding the -Pn parameter then Smile
Tell us what was the result, also, please include what options you used when scanning (you can just paste the whole command here), so we can see what you were exactly doing and point you to the right direction Smile
Staff will never ever ask you for your personal information.
We know everything about you anyway.

Reply

RE: Multiple suspicious IPs w/ no MAC appearing on my network #14
(07-23-2013, 01:58 AM)OctopusPopsicles Wrote:
(07-22-2013, 04:45 AM)Akkomodate Wrote: I'd personally use Nmap, like Ex094 said. If you absolutely need a GUI, grab Zenmap, it does the exact same as Nmap. Good luck Smile

When I do the nmap scan of the IP's while they're on my network I'm getting:

Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn

Try adding the -Pn parameter then Smile
Tell us what was the result, also, please include what options you used when scanning (you can just paste the whole command here), so we can see what you were exactly doing and point you to the right direction Smile
Staff will never ever ask you for your personal information.
We know everything about you anyway.

Reply

RE: Multiple suspicious IPs w/ no MAC appearing on my network #15
(07-23-2013, 02:24 AM)1llusion Wrote:
(07-23-2013, 01:58 AM)OctopusPopsicles Wrote:
(07-22-2013, 04:45 AM)Akkomodate Wrote: I'd personally use Nmap, like Ex094 said. If you absolutely need a GUI, grab Zenmap, it does the exact same as Nmap. Good luck Smile

When I do the nmap scan of the IP's while they're on my network I'm getting:

Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn

Try adding the -Pn parameter then Smile
Tell us what was the result, also, please include what options you used when scanning (you can just paste the whole command here), so we can see what you were exactly doing and point you to the right direction Smile

Target: 10.254.#%.*&!
Command:nmap -T4 -A -v -Pn 10.254.AB.CDE

Starting Nmap 6.25 ( http://nmap.org ) at 2013-07-23 09:47 CDT
NSE: Loaded 106 scripts for scanning.
NSE: Script Pre-scanning.
Initiating Parallel DNS resolution of 1 host. at 09:48
Completed Parallel DNS resolution of 1 host. at 09:48, 0.13s elapsed
Initiating SYN Stealth Scan at 09:48
Scanning 10.254.AB.CDE [1000 ports]
SYN Stealth Scan Timing: About 29.25% done; ETC: 09:49 (0:01:15 remaining)
SYN Stealth Scan Timing: About 59.50% done; ETC: 09:49 (0:00:42 remaining)
Completed SYN Stealth Scan at 09:49, 102.17s elapsed (1000 total ports)
Initiating Service scan at 09:49
Initiating OS detection (try #1) against 10.254.AB.CDE
Retrying OS detection (try #2) against 10.254.AB.CDE
NSE: Script scanning 10.254.AB.CDE.
Initiating NSE at 09:49
Completed NSE at 09:49, 0.00s elapsed
Nmap scan report for 10.254.AB.CDE
Host is up.
All 1000 scanned ports on 10.254.40.130 are filtered
Too many fingerprints match this host to give specific OS details

TRACEROUTE
HOP RTT ADDRESS
1 -- 10.254.AB.CDE

NSE: Script Post-scanning.
Read data files from: /usr/local/bin/../share/nmap
OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 109.63 seconds
Raw packets sent: 2048 (94.672KB) | Rcvd: 0 (0B)

Reply

RE: Multiple suspicious IPs w/ no MAC appearing on my network #16
(07-23-2013, 02:24 AM)1llusion Wrote:
(07-23-2013, 01:58 AM)OctopusPopsicles Wrote:
(07-22-2013, 04:45 AM)Akkomodate Wrote: I'd personally use Nmap, like Ex094 said. If you absolutely need a GUI, grab Zenmap, it does the exact same as Nmap. Good luck Smile

When I do the nmap scan of the IP's while they're on my network I'm getting:

Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn

Try adding the -Pn parameter then Smile
Tell us what was the result, also, please include what options you used when scanning (you can just paste the whole command here), so we can see what you were exactly doing and point you to the right direction Smile

Target: 10.254.#%.*&!
Command:nmap -T4 -A -v -Pn 10.254.AB.CDE

Starting Nmap 6.25 ( http://nmap.org ) at 2013-07-23 09:47 CDT
NSE: Loaded 106 scripts for scanning.
NSE: Script Pre-scanning.
Initiating Parallel DNS resolution of 1 host. at 09:48
Completed Parallel DNS resolution of 1 host. at 09:48, 0.13s elapsed
Initiating SYN Stealth Scan at 09:48
Scanning 10.254.AB.CDE [1000 ports]
SYN Stealth Scan Timing: About 29.25% done; ETC: 09:49 (0:01:15 remaining)
SYN Stealth Scan Timing: About 59.50% done; ETC: 09:49 (0:00:42 remaining)
Completed SYN Stealth Scan at 09:49, 102.17s elapsed (1000 total ports)
Initiating Service scan at 09:49
Initiating OS detection (try #1) against 10.254.AB.CDE
Retrying OS detection (try #2) against 10.254.AB.CDE
NSE: Script scanning 10.254.AB.CDE.
Initiating NSE at 09:49
Completed NSE at 09:49, 0.00s elapsed
Nmap scan report for 10.254.AB.CDE
Host is up.
All 1000 scanned ports on 10.254.40.130 are filtered
Too many fingerprints match this host to give specific OS details

TRACEROUTE
HOP RTT ADDRESS
1 -- 10.254.AB.CDE

NSE: Script Post-scanning.
Read data files from: /usr/local/bin/../share/nmap
OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 109.63 seconds
Raw packets sent: 2048 (94.672KB) | Rcvd: 0 (0B)

Reply

RE: Multiple suspicious IPs w/ no MAC appearing on my network #17
(07-23-2013, 02:24 AM)1llusion Wrote:
(07-23-2013, 01:58 AM)OctopusPopsicles Wrote:
(07-22-2013, 04:45 AM)Akkomodate Wrote: I'd personally use Nmap, like Ex094 said. If you absolutely need a GUI, grab Zenmap, it does the exact same as Nmap. Good luck Smile

When I do the nmap scan of the IP's while they're on my network I'm getting:

Note: Host seems down. If it is really up, but blocking our ping probes, try -Pn

Try adding the -Pn parameter then Smile
Tell us what was the result, also, please include what options you used when scanning (you can just paste the whole command here), so we can see what you were exactly doing and point you to the right direction Smile

Target: 10.254.#%.*&!
Command:nmap -T4 -A -v -Pn 10.254.AB.CDE

Starting Nmap 6.25 ( http://nmap.org ) at 2013-07-23 09:47 CDT
NSE: Loaded 106 scripts for scanning.
NSE: Script Pre-scanning.
Initiating Parallel DNS resolution of 1 host. at 09:48
Completed Parallel DNS resolution of 1 host. at 09:48, 0.13s elapsed
Initiating SYN Stealth Scan at 09:48
Scanning 10.254.AB.CDE [1000 ports]
SYN Stealth Scan Timing: About 29.25% done; ETC: 09:49 (0:01:15 remaining)
SYN Stealth Scan Timing: About 59.50% done; ETC: 09:49 (0:00:42 remaining)
Completed SYN Stealth Scan at 09:49, 102.17s elapsed (1000 total ports)
Initiating Service scan at 09:49
Initiating OS detection (try #1) against 10.254.AB.CDE
Retrying OS detection (try #2) against 10.254.AB.CDE
NSE: Script scanning 10.254.AB.CDE.
Initiating NSE at 09:49
Completed NSE at 09:49, 0.00s elapsed
Nmap scan report for 10.254.AB.CDE
Host is up.
All 1000 scanned ports on 10.254.40.130 are filtered
Too many fingerprints match this host to give specific OS details

TRACEROUTE
HOP RTT ADDRESS
1 -- 10.254.AB.CDE

NSE: Script Post-scanning.
Read data files from: /usr/local/bin/../share/nmap
OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 109.63 seconds
Raw packets sent: 2048 (94.672KB) | Rcvd: 0 (0B)

Reply

RE: Multiple suspicious IPs w/ no MAC appearing on my network #18
It is very strange, because of the ARP protocol the MAC must be given. You can try to drop the MAC table so that the router will have to learn it again but this might work or not. My advice to make it simple is to disable the guest access as i don't see how that can be useful.
Everything is relative

Reply







Users browsing this thread: 1 Guest(s)