Category Archives: WiFi

Twiddling with a Pineapple Nano


CPU: 400 MHz MIPS Atheros AR9331 SoC
Memory: 64 MB DDR2 RAM
Disk: 16 MB ROM + Micro SD (not included)
Wireless: Atheros AR9331 + Atheros AR9271, both IEEE 802.11 b/g/n
Ports: (2) RP-SMA Antenna, Ethernet over USB (ASIX AX88772A), USB 2.0 Host, Micro SD
Power: USB 5V 1.5A. Includes USB Y-Cable
Configurable Status Indicator LED
Configurable Reset Button

Refill at later date.

WiFi-Honeypot. #KeepCalmAndAnalyze

Step 0 – Create a new and updated infrastructure – migrate your connected devices.
Step 1 – do not update the infrastructure (the ‘broken’ one).
Step 2 – Isolate the infrastructure (meaning – place into a ‘pot’ mode with fake targets all over).
Step 3 – setup recording / detection of all things related to that part of the infrastructure.
Step 4 – monitor actions, step 1-3 and the possible broken part of WPA2 simply is a the entry-point.

Perhaps an exception of providing wireless access to resources would be a possible step 0 – but don’t just turn it off, make sure that the new way of connecting is communicated and understood.

In essence, WPA2-breakdown is like your locked cabinet of entry point for the network just gave away a way in to that specific portion.
It does not have to mean that all things are exposed. It has not broken the protocols that are in use (but they may already have their specific portion broken). You are not completely naked here.

What would be the general idea here? To always keep all things ‘up-to-date’ and isolated in the term of knowing how and where things communicate, separation of duties and communication still holds. Isolation in the world of connections means that you do not allow all things know or reach everything else of your infrastructure, ever.

The best part of this, is that sites/companies/entities can now detect (possibly) what kind of targets they are.
Is the attack general?
Just recon?
Already targeting specific (previously reachable) resources?
Someone trying to use you as a base of attack for another target?

Use this as an oppertunity, instead of doom.

My viewpoint here is – if you already have a wireless network attached to your infrastructure, you should already have isolated and made infrastructural decicions on access. There is no reason to go all in bananas because one of your entry points that already are a physical weakpoint might be now a even more broken entry point.

Cracking open the worthless Zyxel X1 Armor (WAP6806)

Prepare yourself, this will be so far one of my longest rants to this day.

Bought my bloody MacBook Pro, and figured it was time to get a cheapish AC Access Point since the MacBooks USB ports is non existant – a good trade off so TimeMachine could do it’s thing and I would be none the wiser but lots poorer.

However – getting the Mac and getting it to a good state was the easier part. Getting that fudged Zyxel AP however…

Waste of plastic.

We start the fun right here…

BusyBox v1.12.1 (2016-10-26 15:52:49 CST) multi-call binary

So.. After you enable TELNET (IN 2017!), and since you cannot change the “admin” password (default “1234”) to anything with “special chars” (I’ll append the f-ked message later on), you prolly log in with admin and 1234, over TELNET…

Ah – did I mention that you need to log out for the password change to stick? No? Okay.. Now I did..

This will leave you with the setup of;


# cat /proc/cpuinfo
system type : Ralink SoC
processor : 0
cpu model : MIPS 1004Kc V2.15
BogoMIPS : 583.68
wait instruction : yes
microsecond timers : yes
tlb_entries : 32
extra interrupt vector : yes
hardware watchpoint : yes, count: 4, address/irw mask: [0x0000, 0x0000, 0x0000, 0x0000]
ASEs implemented : mips16 dsp mt
shadow register sets : 1
core : 0
VCED exceptions : not available
VCEI exceptions : not available

processor : 1
cpu model : MIPS 1004Kc V2.15
BogoMIPS : 583.68
wait instruction : yes
microsecond timers : yes
tlb_entries : 32
extra interrupt vector : yes
hardware watchpoint : yes, count: 4, address/irw mask: [0x0000, 0x0000, 0x0000, 0x0000]
ASEs implemented : mips16 dsp mt
shadow register sets : 1
core : 0
VCED exceptions : not available
VCEI exceptions : not available

The CPU in this is laughable, or weird … So “much” umpf – for what? But, it’s not the main part – I knew I was in for a cheap-thrill to begin with with all the dinks and donks.


# cat /proc/meminfo
MemTotal: 58928 kB
MemFree: 23576 kB
Buffers: 0 kB
Cached: 21236 kB
SwapCached: 0 kB
Active: 580 kB
Inactive: 2872 kB
Active(anon): 564 kB
Inactive(anon): 2868 kB
Active(file): 16 kB
Inactive(file): 4 kB
Unevictable: 21196 kB
Mlocked: 0 kB
SwapTotal: 0 kB
SwapFree: 0 kB
Dirty: 0 kB
Writeback: 0 kB
AnonPages: 3412 kB
Mapped: 2316 kB
Shmem: 20 kB
Slab: 7748 kB
SReclaimable: 2312 kB
SUnreclaim: 5436 kB
KernelStack: 400 kB
PageTables: 292 kB
NFS_Unstable: 0 kB
Bounce: 0 kB
WritebackTmp: 0 kB
CommitLimit: 29464 kB
Committed_AS: 7968 kB
VmallocTotal: 1048372 kB
VmallocUsed: 2340 kB
VmallocChunk: 1044532 kB


# uname -a
Linux WAP6806 2.6.36 #173 SMP Tue Nov 1 11:37:47 CST 2016 mips unknown

The kernel is a bit more enjoyable – as I know it could at least do networking of some sort…

But, the REALLY sad part?

They have hardcoded a few bridge interfaces.. Why? NO F-ING IDEA!
The setup was supposed to be kinda straight forward – it is a disaster! With a old as hell kernel in (release 2016) 2017!

# ifconfig
br0 Link encap:Ethernet HWaddr 1C:xxxxxxx
inet addr:192.168.x.x Bcast:192.168.x.x Mask:255.255.255.x
inet6 addr: fe80::x::x Scope:Link
UP BROADCAST RUNNING ALLMULTI MULTICAST MTU:1500 Metric:1
RX packets:21870 errors:0 dropped:0 overruns:0 frame:0
TX packets:25841 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:1344357 (1.2 MiB) TX bytes:6758904 (6.4 MiB)

br0:1 Link encap:Ethernet HWaddr 1C:xxxxxxxxxxxx
inet addr:192.168.1.2 Bcast:192.168.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING ALLMULTI MULTICAST MTU:1500 Metric:1

br0:9 Link encap:Ethernet HWaddr 1C:xxxxxxxxxxx
inet addr:1.1.1.1 Bcast:1.1.1.255 Mask:255.255.255.0
UP BROADCAST RUNNING ALLMULTI MULTICAST MTU:1500 Metric:1

eth2 Link encap:Ethernet HWaddr 1C:---------
inet6 addr: fe80::x::x Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:715 errors:0 dropped:0 overruns:0 frame:0
TX packets:1414 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:63796 (62.3 KiB) TX bytes:631847 (617.0 KiB)
Interrupt:3

eth3 Link encap:Ethernet HWaddr 00.......
inet6 addr: fe80::x::x Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:21170 errors:0 dropped:0 overruns:0 frame:0
TX packets:25096 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:1587641 (1.5 MiB) TX bytes:6223369 (5.9 MiB)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:115 errors:0 dropped:0 overruns:0 frame:0
TX packets:115 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:9880 (9.6 KiB) TX bytes:9880 (9.6 KiB)

#


The static non-existant iwconfig;

# iwconfig
lo no wireless extensions.

eth2 no wireless extensions.

ra0 RTWIFI SoftAP Access Point: 1E:xx:xx:xx:

sit0 no wireless extensions.

ip6tnl0 no wireless extensions.

ra1 RTWIFI SoftAP ESSID:"ZyGuest[random]"
Mode:Managed 13 Access Point: 1E:--------
Bit Rate=300 Mb/s

ra2 RTWIFI SoftAP ESSID:"ZyGuest[random]"
Mode:Managed 13 Access Point: 1E:----------
Bit Rate=300 Mb/s

ra3 RTWIFI SoftAP ESSID:"ZyGuest[random]"
Mode:Managed 13 Access Point: 1E:---------
Bit Rate=300 Mb/s

apcli0 RTWIFI SoftAP ESSID:""
Mode:Managed 13 Access Point: Not-Associated
Bit Rate:300 Mb/s

eth3 no wireless extensions.

br0 no wireless extensions.

Well, I do have some idea – the interface 1.1.1.2 seems to be their tied in for static interface. Dozens of cgi-scripts calls it.

The other one, is their “alias” address, hardcoded into existance from factory at 192.168.1.2. Makes no sense. NO SENSE.

The awesome part was this -it has a “nice” Autodetect mode of what kind of mode it should be in – AP, Client or Repeater.
My unit got stuck in a rotating state – and kept changing mode ALL THE TIME.
And since the routing table get screwed up with the static parts – it’s really enjoyable.. I got a “new” release of the firmware (do NOT get me started on the versioning on their firmware…No, seriously, don’t). That “new” “release” “fixed” it.


# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
239.255.255.250 * 255.255.255.255 UH 0 0 0 br0
192.168.x.y * 255.255.255.x U 0 0 0 br0
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 br0
1.1.1.0 * 255.255.255.0 U 0 0 0 br0
default 192.168.x.y 0.0.0.0 UG 1 0 0 br0

The above example is missing out the static entry of br0:1 – as I killed it off so my network didn’t explode on itself since it’s supposed to be in another broadcast domain…

I could produce and sell a better setup software-wise myself. Why oh WHY don’t they (since they don’t seem to be interested in doing anything right or giving their R&D time to develop something resembeling a working state) simply make a pledge to dd-wrt or openwrt instead, meaning they can instead contribute and make sure their plastic is not wasted nor the components..

I am not sure where to end this.. So I’ll just update it as it comes and publish it. Meaning this line moves down.

Fing discovery report for Norwegian Internet Access (128.65.64.0/25)

Discovery date: 01:16 12/17/2011
Network: Norwegian Internet Access (128.65.64.0/25)
BSSID: 64:00:F1:XX:XX:XX
Speed: 72 Mbps
Address: 128.65.64.87 7C:61:93:XX:XX:XX
Gateway: 128.65.64.2
DNS: 128.65.64.2 Access:
Internet ISP: Internet address: 128.65.64.87 (128.65.64.87)
Node identification: MAC address Found nodes: 24/24

IP Address: 128.65.64.1 State: UP MAC: 00:10:13:XX:XX:XX Vendor: Kontron America Other
IP addresses: 128.65.64.2 First seen: 00:12 12/17/2011
IP Address: 128.65.64.4 State: UP MAC: B8:8D:12:XX:XX:XX Vendor: Apple NetBIOS name: MACBOOKAIR-AF2E First seen: 01:16 12/17/2011
IP Address: 128.65.64.11 State: UP MAC: A4:67:06:XX:XX:XX Vendor: Apple First seen: 01:16 12/17/2011
IP Address: 128.65.64.17 State: UP MAC: 48:60:BC:XX:XX:XX Vendor: Apple First seen: 00:12 12/17/2011
IP Address: 128.65.64.21 State: UP MAC: 7C:C5:37:XX:XX:XX Vendor: Apple First seen: 01:16 12/17/2011
IP Address: 128.65.64.25 State: UP MAC: E4:CE:8F:XX:XX:XX Vendor: Apple First seen: 01:16 12/17/2011
IP Address: 128.65.64.32 State: UP MAC: 8C:7B:9D:XX:XX:XX Vendor: Apple First seen: 01:16 12/17/2011
IP Address: 128.65.64.40 State: UP MAC: B8:FF:61:XX:XX:XX Vendor: Apple First seen: 00:12 12/17/2011
IP Address: 128.65.64.54 State: UP MAC: 40:A6:D9:XX:XX:XX Vendor: Apple First seen: 01:16 12/17/2011
IP Address: 128.65.64.56 State: UP MAC: 6C:23:B9:XX:XX:XX Vendor: Sony First seen: 01:16 12/17/2011
IP Address: 128.65.64.61 State: UP MAC: F4:0B:93:XX:XX:XX Vendor: Research In Motion First seen: 01:16 12/17/2011
IP Address: 128.65.64.70 State: UP MAC: D8:9E:3F:XX:XX:XX Vendor: Apple First seen: 00:12 12/17/2011
IP Address: 128.65.64.73 State: UP MAC: E4:CE:8F:XX:XX:XX Vendor: Apple First seen: 00:12 12/17/2011
IP Address: 128.65.64.77 State: UP MAC: 90:4C:E5:XX:XX:XX Vendor: Hon Hai Precision Ind. NetBIOS name: WORKGROUP\ADAM-PC NetBIOS role: [FILE SERVER] First seen: 1:16 12/17/2011
IP Address: 128.65.64.86 State: UP MAC: B4:07:F9:XX:XX:XX Vendor: Samsung First seen: 00:12 12/17/2011 Name: My Phone
IP Address: 128.65.64.87 State: UP MAC: 7C:61:93:XX:XX:XX Vendor: HTC First seen: 00:12 12/17/2011
IP Address: 128.65.64.88 State: UP MAC: 0C:EE:E6:XX:XX:XX Vendor: Hon Hai Precision Ind. NetBIOS name: WORKGROUP\EXTRADATOR NetBIOS role: [FILE SERVER] First een: 00:12 12/17/2011
IP Address: 128.65.64.89 State: UP MAC: F4:6D:04:XX:XX:XX Vendor: ASUSTek COMPUTER First seen: 00:12 12/17/2011
IP Address: 128.65.64.99 State: UP MAC: F8:1E:DF:XX:XX:XX Vendor: Apple First seen: 01:16 12/17/2011
IP Address: 128.65.64.102 State: UP MAC: 90:84:0D:XX:XX:XX Vendor: Apple First seen: 00:12 12/17/2011
IP Address: 128.65.64.120 State: UP MAC: E8:06:88:XX:XX:XX Vendor: Apple First seen: 00:12 12/17/2011
IP Address: 128.65.64.121 State: UP MAC: 78:CA:39:XX:XX:XX Vendor: Apple First seen: 01:16 12/17/2011
IP Address: 128.65.64.122 State: UP MAC: 98:03:D8:XX:XX:XX Vendor: Apple First seen: 01:16 12/17/2011
IP Address: 128.65.64.123 State: UP MAC: 40:30:04:XX:XX:XX Vendor: Apple First seen: 00:12 12/17/2011
IP Address: 128.65.64.6 State: DOWN MAC: 80:50:1B:XX:XX:XX Vendor: Nokia First seen: 00:12 12/17/2011 Last change: 01:16 12/17/2011
IP Address: 128.65.64.59 State: DOWN MAC: 58:1F:AA:XX:XX:XX Vendor: Apple First seen: 00:12 12/17/2011 Last change: 01:16 12/17/2011
IP Address: 128.65.64.82 State: DOWN MAC: 04:0C:CE:XX:XX:XX Vendor: Apple First seen: 00:12 12/17/2011 Last change: 01:16 12/17/2011

Sent from Overlook Fing

Fing discovery report for Free Wi-Fi Finavia Airports (10.10.2.0/24)

Discovery date: 15:27 11/29/2011
Network: Free Wi-Fi Finavia Airports (10.10.2.0/24)
BSSID: 00:24:6C:XX:XX:XX
Speed: 54 Mbps
Address: 10.10.2.132 7C:61:93:XX:XX:XX
Gateway: 10.10.2.1
DNS: 194.79.16.26
Access: Local network
Node identification: MAC address Found nodes: 48/48

IP Address: 10.10.2.1 State: UP MAC: 00:0B:86:XX:XX:XX Vendor: Aruba Networks First seen: 15:27 11/29/2011
IP Address: 10.10.2.16 State: UP MAC: 10:F9:EE:XX:XX:XX Vendor: Nokia First seen: 15:27 11/29/2011
IP Address: 10.10.2.24 State: UP MAC: 00:21:6B:XX:XX:XX Vendor: Intel First seen: 15:27 11/29/2011
IP Address: 10.10.2.28 State: UP MAC: 58:94:6B:XX:XX:XX Vendor: Intel First seen: 15:27 11/29/2011
IP Address: 10.10.2.32 State: UP MAC: 00:24:D7:XX:XX:XX Vendor: Intel First seen: 15:27 11/29/2011
IP Address: 10.10.2.35 State: UP MAC: 00:23:14:XX:XX:XX Vendor: Intel First seen: 15:27 11/29/2011
IP Address: 10.10.2.44 State: UP MAC: 00:24:D6:XX:XX:XX Vendor: Intel First seen: 15:27 11/29/2011
IP Address: 10.10.2.50 State: UP MAC: E0:F8:47:XX:XX:XX Vendor: Apple First seen: 15:27 11/29/2011
IP Address: 10.10.2.51 State: UP MAC: 78:D6:F0:XX:XX:XX Vendor: Samsung First seen: 15:27 11/29/2011
IP Address: 10.10.2.54 State: UP MAC: A0:88:B4:XX:XX:XX Vendor: Intel First seen: 15:27 11/29/2011
IP Address: 10.10.2.56 State: UP MAC: 00:23:14:XX:XX:XX Vendor: Intel First seen: 15:27 11/29/2011
IP Address: 10.10.2.70 State: UP MAC: 00:24:D7:XX:XX:XX Vendor: Intel Other
IP addresses: 10.10.2.91 First seen: 15:27 11/29/2011
IP Address: 10.10.2.74 State: UP MAC: A4:67:06:XX:XX:XX Vendor: Apple First seen: 15:27 11/29/2011
IP Address: 10.10.2.78 State: UP MAC: B8:FF:61:XX:XX:XX Vendor: Apple First seen: 15:27 11/29/2011
IP Address: 10.10.2.80 State: UP MAC: 58:94:6B:XX:XX:XX Vendor: Intel First seen: 15:27 11/29/2011
IP Address: 10.10.2.81 State: UP MAC: 04:1E:64:XX:XX:XX Vendor: Apple First seen: 15:27 11/29/2011
IP Address: 10.10.2.82 State: UP MAC: 08:11:96:XX:XX:XX Vendor: Intel First seen: 15:27 11/29/2011
IP Address: 10.10.2.97 State: UP MAC: D8:B3:77:XX:XX:XX Vendor: HTC First seen: 15:27 11/29/2011
IP Address: 10.10.2.98 State: UP MAC: 00:18:F3:XX:XX:XX Vendor: ASUSTek COMPUTER First seen: 15:27 11/29/2011
IP Address: 10.10.2.108 State: UP MAC: 00:27:10:XX:XX:XX Vendor: Intel First seen: 15:27 11/29/2011
IP Address: 10.10.2.112 State: UP MAC: 38:E7:D8:XX:XX:XX Vendor: HTC First seen: 15:27 11/29/2011
IP Address: 10.10.2.113 State: UP MAC: 18:3D:A2:XX:XX:XX Vendor: Intel First seen: 15:27 11/29/2011
IP Address: 10.10.2.122 State: UP MAC: 74:2F:68:XX:XX:XX Vendor: Azurewave Technologies First seen: 15:27 11/29/2011
IP Address: 10.10.2.127 State: UP MAC: AC:81:12:XX:XX:XX Vendor: Gemtek Technology First seen: 15:27 11/29/2011
Name: My Phone IP Address: 10.10.2.132 State: UP MAC: 7C:61:93:XX:XX:XX Vendor: HTC First seen: 15:27 11/29/2011
IP Address: 10.10.2.138 State: UP MAC: 00:21:5C:XX:XX:XX Vendor: Intel First seen: 15:27 11/29/2011
IP Address: 10.10.2.139 State: UP MAC: DC:2B:61:XX:XX:XX Vendor: Apple First seen: 15:27 11/29/2011
IP Address: 10.10.2.140 State: UP MAC: E0:B9:BA:XX:XX:XX Vendor: Apple First seen: 15:27 11/29/2011
IP Address: 10.10.2.145 State: UP MAC: 00:26:C6:XX:XX:XX Vendor: Intel First seen: 15:27 11/29/2011
IP Address: 10.10.2.156 State: UP MAC: E4:CE:8F:XX:XX:XX Vendor: Apple First seen: 15:27 11/29/2011
IP Address: 10.10.2.160 State: UP MAC: CC:08:E0:XX:XX:XX Vendor: Apple First seen: 15:27 11/29/2011
IP Address: 10.10.2.170 State: UP MAC: E0:2A:82:XX:XX:XX Vendor: Universal Global Scientific Industrial First seen: 15:27 11/29/2011
IP Address: 10.10.2.172 State: UP MAC: 68:A3:C4:XX:XX:XX Vendor: Liteon Technology First seen: 15:27 11/29/2011
IP Address: 10.10.2.188 State: UP MAC: 18:3D:A2:XX:XX:XX Vendor: Intel First seen: 15:27 11/29/2011
IP Address: 10.10.2.189 State: UP MAC: 18:3D:A2:XX:XX:XX Vendor: Intel First seen: 15:27 11/29/2011
IP Address: 10.10.2.191 State: UP MAC: 00:26:C6:XX:XX:XX Vendor: Intel First seen: 15:27 11/29/2011
IP Address: 10.10.2.192 State: UP MAC: 60:C5:47:XX:XX:XX Vendor: Apple First seen: 15:27 11/29/2011
IP Address: 10.10.2.205 State: UP MAC: D4:5D:42:XX:XX:XX Vendor: Nokia First seen: 15:27 11/29/2011
IP Address: 10.10.2.208 State: UP MAC: CC:08:E0:XX:XX:XX Vendor: Apple First seen: 15:27 11/29/2011
IP Address: 10.10.2.210 State: UP MAC: 90:CF:15:XX:XX:XX Vendor: Nokia First seen: 15:27 11/29/2011
IP Address: 10.10.2.219 State: UP MAC: 00:16:44:XX:XX:XX Vendor: LITE-ON Technology First seen: 15:27 11/29/2011
IP Address: 10.10.2.220 State: UP MAC: 14:5A:05:XX:XX:XX Vendor: Apple First seen: 15:27 11/29/2011
IP Address: 10.10.2.228 State: UP MAC: 00:18:41:XX:XX:XX Vendor: High Tech Computer First seen: 15:27 11/29/2011
IP Address: 10.10.2.235 State: UP MAC: 00:26:B0:XX:XX:XX Vendor: Apple First seen: 15:27 11/29/2011
IP Address: 10.10.2.242 State: UP MAC: 00:25:00:XX:XX:XX Vendor: Apple First seen: 15:27 11/29/2011
IP Address: 10.10.2.244 State: UP MAC: 48:60:BC:XX:XX:XX Vendor: Apple First seen: 15:27 11/29/2011
IP Address: 10.10.2.253 State: UP MAC: 28:6A:BA:XX:XX:XX First seen: 15:27 11/29/2011
IP Address: 10.10.2.254 State: UP MAC: 0C:DF:A4:XX:XX:XX Vendor: Samsung First seen: 15:27 11/29/2011

Sent from Overlook Fing

Fing discovery report for Norwegian Internet Access (82.214.246.0/25)

Discovery date: 08:32 12/15/2011
Network: Norwegian Internet Access (82.214.246.0/25)
BSSID: D0:D0:FD:XX:XX:XX
Speed: 72 Mbps
Address: 82.214.246.50 7C:61:93:XX:XX:XX
Gateway: 82.214.246.2
DNS: 82.214.246.2
Access: Internet ISP: Hughes Network Systems GmbH (Apo, United States)
Internet address: 50.246.214.82.in-addr.arpa (82.214.246.50)
Node identification: MAC address Found nodes: 16/16
IP Address: 82.214.246.1 State: UP MAC: 00:10:13:XX:XX:XX Hostname: 1.246.214.82.in-addr.arpa Vendor: Kontron America Other
IP addresses: 82.214.246.2 First seen: 08:31 12/15/2011
IP Address: 82.214.246.4 State: UP MAC: D8:9E:3F:XX:XX:XX Hostname: 4.246.214.82.in-addr.arpa Vendor: Apple First seen: 08:31 12/15/2011
IP Address: 82.214.246.9 State: UP MAC: E0:2A:82:XX:XX:XX Hostname: 9.246.214.82.in-addr.arpa Vendor: Universal Global Scientific Industrial NetBIOS name: WORKGROUP\JOHAN-HP NetBIOS role: [FILE SERVER] First seen: 08:31 12/15/2011
IP Address: 82.214.246.17 State: UP MAC: B8:FF:61:XX:XX:XX Hostname: 17.246.214.82.in-addr.arpa Vendor: Apple First seen: 08:31 12/15/2011
IP Address: 82.214.246.33 State: UP MAC: 58:55:CA:XX:XX:XX Hostname: 33.246.214.82.in-addr.arpa Vendor: Apple First seen: 08:31 12/15/2011 Name: My Phone
IP Address: 82.214.246.50 State: UP MAC: 7C:61:93:XX:XX:XX Hostname: 50.246.214.82.in-addr.arpa Vendor: HTC First seen: 08:31 12/15/2011
IP Address: 82.214.246.54 State: UP MAC: CC:08:E0:XX:XX:XX Hostname: 54.246.214.82.in-addr.arpa Vendor: Apple First seen: 08:31 12/15/2011
IP Address: 82.214.246.60 State: UP MAC: 00:1D:4F:XX:XX:XX Hostname: 60.246.214.82.in-addr.arpa Vendor: Apple First seen: 08:31 12/15/2011
IP Address: 82.214.246.72 State: UP MAC: 7C:C5:37:XX:XX:XX Hostname: 72.246.214.82.in-addr.arpa Vendor: Apple First seen: 08:31 12/15/2011
IP Address: 82.214.246.73 State: UP MAC: D8:A2:5E:XX:XX:XX Hostname: 73.246.214.82.in-addr.arpa Vendor: Apple First seen: 08:31 12/15/2011
IP Address: 82.214.246.86 State: UP MAC: 90:84:0D:XX:XX:XX Hostname: 86.246.214.82.in-addr.arpa Vendor: Apple First seen: 08:31 12/15/2011
IP Address: 82.214.246.87 State: UP MAC: 28:6A:BA:XX:XX:XX Hostname: 87.246.214.82.in-addr.arpa First seen: 08:31 12/15/2011
IP Address: 82.214.246.99 State: UP MAC: A8:92:2C:XX:XX:XX Hostname: 99.246.214.82.in-addr.arpa Vendor: LG Electronics First seen: 08:31 12/15/2011
IP Address: 82.214.246.112 State: UP MAC: A4:67:06:XX:XX:XX Hostname: 112.246.214.82.in-addr.arpa Vendor: Apple First seen: 08:31 12/15/2011
IP Address: 82.214.246.116 State: UP MAC: 00:26:08:XX:XX:XX Hostname: 116.246.214.82.in-addr.arpa Vendor: Apple First seen: 08:31 12/15/2011
IP Address: 82.214.246.125 State: UP MAC: 7C:C5:37:XX:XX:XX Hostname: 125.246.214.82.in-addr.arpa Vendor: Apple First seen: 08:32 12/15/2011

Sent from Overlook Fing

Sometimes it feels like a fruitstand…