# Quad9 ## Identification [[Nomadix|Nomadix]] makes hospitality-network gateways, which is consistent with the hotel context. Port 1883 is conventionally associated with [[MQTT|MQTT]], port 5000 is sometimes used by UPnP-related services, and 62078 is associated with Apple device synchronization. [[Quad9|Quad9]] uses `9.9.9.9`; [[Cloudflare DNS|Cloudflare DNS]] uses `1.1.1.1`. A port label records a scanner’s service guess, not proof of the application actually listening. ## Notebook evidence - [[Scanned_20260730-1719#PDF page 4 — Hotel LAN scan and gateway services|PDF page 4: Hotel LAN scan and gateway services]] — This is a practical reconnaissance sheet for a captive hospitality LAN. The author identified the gateway and local handset, then recorded exposed service signatures and alternate resolvers. It is diagnostic rather than conclusively adversarial: the same observations support troubleshooting, privacy checks, or device discovery. ## Relationships and overlays The source places this note in a shared evidence cluster with [[Cloudflare DNS|Cloudflare DNS]] · [[MQTT|MQTT]] · [[Nomadix|Nomadix]] · [[Scanned_20260730-1706|Scanned_20260730-1706]]. Within the larger collection, this evidence extends [[Vendor-Agnostic Recovery|vendor-agnostic recovery]] and [[Continuity Architecture|continuity architecture]] by showing how software, hardware, identity, and pre-OS control depend on recoverable interfaces. ## Evidentiary status and open leads Preserve scanner timestamps, probe type, and service banners in future captures. `0.0.0.0` may be a failed resolver, route placeholder, or copied interface value. ## Source - [[Scanned_20260730-1719|Scanned_20260730-1719]]