Which command identifies IoT devices using insecure HTTP ports?

Which command identifies IoT devices using insecure HTTP ports?

• A. ifconfig
• B. Telnet
• C. nmap -p 80, 81, 8080, 8081 <Target IP address range>
• D. Airodump-ng

Answer: (C)

Opening up to open HTTP ports on devices is a practical way to spot IoT devices that expose web interfaces without encryption. By scanning common HTTP ports—like 80, 81, 8080, and 8081—you probe which hosts in the target range have those services listening. If a device responds on any of these ports, it likely has a web-based management page that could be using HTTP instead of HTTPS, making it a candidate for further security checks. The other options aren’t built for this kind of discovery. Ifconfig just shows the network interfaces and their addresses on your own system, not devices across a range. Telnet is a protocol you could use to connect to a port manually, but it isn’t a scalable discovery or identification tool for many hosts. Airodump-ng focuses on capturing Wi-Fi frames and identifying devices on a wireless network, not on scanning for open HTTP ports to identify IoT devices.

Opening up to open HTTP ports on devices is a practical way to spot IoT devices that expose web interfaces without encryption. By scanning common HTTP ports—like 80, 81, 8080, and 8081—you probe which hosts in the target range have those services listening. If a device responds on any of these ports, it likely has a web-based management page that could be using HTTP instead of HTTPS, making it a candidate for further security checks.

The other options aren’t built for this kind of discovery. Ifconfig just shows the network interfaces and their addresses on your own system, not devices across a range. Telnet is a protocol you could use to connect to a port manually, but it isn’t a scalable discovery or identification tool for many hosts. Airodump-ng focuses on capturing Wi-Fi frames and identifying devices on a wireless network, not on scanning for open HTTP ports to identify IoT devices.