iot scanner to see if one of your devices are owned...

[Elixer]

http://iotscanner.bullguard.com

Do a deep scan as well, it is another option after you do the first scan.

 

[VirtualLarry]

"We scanned your public IP address and it looks like your network is not reachable from the internet. This is good news. You should perform this scan again when you add new devices to your network."

 

[ch33zw1z]

I have interesting results. running IoT off a windows 7 x64 laptop in chrome, no extensions.

Here's my config:

Cable Modem <-> Ubiquiti ER-X : breaks out into 192.168.1.x

Directly behind this is a UAP-AC-LR, which has a laptop, 2 Nest T-stats, Roku 3, a few android phones.

So, when I'm on this network, I have all green from the IoT scanner. Great, good to go, right?

Hold on!

Also off the ER-X, I have a Linksys E3000, running Shibby's Tomato 1.28.0000 MIPSR2-138 K26 USB VPN, maintaining a VPN connection that's always on. Want VPN for private browsing, etc? join the wifi and have at it. I did this to play with WebRTC workaround mostly...and a little bit of boredom.

When I run the IoT scanner while connected to this network, I have 3 devices visible and these ports:

80
500
1723

Things that make you go...hmmmmmm /scratch chin

I'm wondering if setting up a couple vlans would clear it up..

 

[Number1]

Thanks for the link. I ran both tests and received an all good rating. I use this device:

THERMOSTATS
Wi-Fi 7-Day Programmable Touchscreen Thermostat (RTH8580WF)

When I installed it, I set a username and password and I can access it from the internet.

The message I received from your test says:

We scanned your public IP address and it looks like your network is not reachable from the internet. This is good news. You should perform this scan again when you add new devices to your network.

Obviously my network IS reachable from the internet. How valid is this test?

 

[Elixer]

Port 80 is the default for web servers, you running one?

 

[Elixer]

Obviously my network IS reachable from the internet. How valid is this test?

If the device in question doesn't respond to the port scans / pings, then, that is good.
You can also try https://www.grc.com/x/ne.dll?bh0bkyd2 (shields up) and do 'all service ports' test.

 

[John Connor]

I'm wondering if setting up a couple vlans would clear it up..

No... Not port forwarding those ports would help.

Double check with ShieldsUp and/or this. https://pentest-tools.com/network-vulnerability-scanning/tcp-port-scanner-online-nmap

 

[ch33zw1z]

I don't forward those ports anywhere in my configuration.

The link wants me to buy credits to run the test

 

[John Connor]

I don't forward those ports anywhere in my configuration.

The link wants me to buy credits to run the test

No, you should be able to run the scanner with the free allotment of credits they give you. I did mention ShieldsUp as well. Also, you say you're not forwarding those ports, but the bulldog site says otherwise. Double check your settings and configuration in your router/modem hardware. Having 80 open is a big no, no.

 

[ch33zw1z]

Yes, it said I needed credits to run the test.

I've checked my config, Im betting on the VPN provider having those ports open. I'm already doing the leg work on it, I'll update as I go.

I configured the VPN to point at a different server. It still say's there's open ports, 80,500,8888 instead this time.

 

[John Connor]

I just tried it again and it's still free. Your issue might be that the VPN IP was used by others to run that test thereby reducing the free credits. Try another IP if you can. Also check out ShieldsUp.