LinuxQuestions.org - Strange SSH servers on a motel WiFi network

- Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)

- - Strange SSH servers on a motel WiFi network (https://www.linuxquestions.org/questions/linux-networking-3/strange-ssh-servers-on-a-motel-wifi-network-4175677958/)

Strange SSH servers on a motel WiFi network

Ok. Because everyone here did such a fantastic job with my last question, I'll "reward" you with another one that's completely unrelated.
I just spent a night in a pleasant motel. As is my habit, I visually scanned our room for cameras and then surveyed the WiFi network using nmap for anything that looked suspicious.
Besides the usual routers and network printers and guests' iPhones, here were about 14 Linux SSH servers that looked like this:

Code:

Nmap scan report for 192.168.1.119

Host is up (0.0056s latency).

Not shown: 99 closed ports

PORT  STATE SERVICE

22/tcp open  ssh

What could those SSH servers be doing? There were around 14 rooms in the motel, so it would make sense they were in use in each room, but I couldn't see any likely devices. The thermostat was old and definitely not "smart" and I don't think the air conditioner itself (Mitsubishi Mr. Slim) has an OS. The in-room phones definitely pre-dated the digital age (well, technically, they were touch tone).
Is there any explanation that makes sense here?

There was another host on the network that made me curious, since it was running all kinds of services, including X11 through port 6000:

Code:

Nmap scan report for 192.168.1.134

Host is up (0.013s latency).

Not shown: 994 closed ports

PORT    STATE SERVICE

80/tcp  open  http

443/tcp  open  https

4443/tcp open  pharos

6000/tcp open  X11

7676/tcp open  imqbrokerd

9090/tcp open  zeus-admin

Quote:

Originally Posted by teckk (Post 6140197)

https://docs.oracle.com/cd/E19253-01...q37/index.html
https://www.speedguide.net/port.php?port=7676

https://stackoverflow.com/questions/...g-on-my-server
https://en.wikipedia.org/wiki/Zeus_Web_Server

https://pharos.com/
https://www.speedguide.net/port.php?port=4443

Very interesting. So port 7676 suggests the device is likely a router with a "back door" open for remote administration by the vendor. 4443 suggests it might be used as a print server or to allow control of a robot vacuum - which would make a lot more sense for a motel. 9090 is odd: which motel manager is running an OpenFire IM server? :)
Thanks!

Still, I'm most curious about those SSH servers.

Are the doors using electronic locks?

Quote:

Originally Posted by michaelk (Post 6140205)

Are the doors using electronic locks?

Definitely not.
They had some newer-looking LED light bulbs in some of the fixtures. I wonder if it's possible that they'd only installed 14 so far. Can you SSH into smart bulbs?

Not that I know. Could be some hub to control lights or AC etc.