I recently discovered nmap
and pointed it at my router out of curiosity. It found that ports 3333 and 5555 are open but doesn't recognise either service. I investigated and found:
- I can successfully make TCP connections on both ports.
- On port 3333, after I connect the router sends '0NTP00-00-00MAC00-00-00-00-00-00'. Nothing I send it in response seems to trigger it sending anything else.
- Port 5555 responds to HTTP
GET /
(plus any other HTTP query) with a simple 404 page [1]. If it's an HTTP server, why didn'tnmap
recognise it as such?
It doesn't look like the ports are accessible from outside the LAN.
I couldn't find any info about these ports on the web. Does anyone know anything about them? What techniques exist for investigating further?
[1]:<HTML><HEAD><TITLE>404 Not Found</TITLE></HEAD><BODY><H1>Not Found</H1>The requested URL was not found on this server.</BODY></HTML>