Quick answer

In “Network Information”, LinPEAS lists interfaces, hosts/DNS, neighbours, listening ports and firewall rules. It also probes outbound connectivity by default — contacting external IPs over TCP 80/443, ICMP and DNS — which is important to know for scoped engagements.

Where it appears#

Network checks are in the Network Information section (network_information). Active network recon (host discovery, port scanning) is separate and only runs with -t, -d, -p, -i.

Default outbound probes

The connectivity probes reach 1.1.1.1 and 104.18.74.230 by default. If outbound traffic is out of scope, account for this before running. The documented -n flag does not reliably disable it in the build we reviewed — see is LinPEAS safe?

Verify it yourself#

Reproduce the network enumeration
ip a
ss -tulpn 2>/dev/null || netstat -tulpn 2>/dev/null
iptables -L 2>/dev/null

Sources & references

  1. linPEAS README
  2. PEASS-ng release — reviewed 20260908-dffb9496
  3. HackTricks: Linux privilege escalation