IACS Cockpit Infinity Interface CMD: nmap -p 1-65535 -T4 -A -v 172.16.20.90 Nmap scan report for 172.16.20.90 Host is up (0.00059s latency). Not shown: 65530 filtered ports PORT STATE SERVICE VERSION 1950/tcp open ismaeasdaqtest? | fingerprint-strings: | TerminalServerCookie: |_ Cookie: mst 7100/tcp open font-service? 20010/tcp open unknown 20011/tcp open unknown 20012/tcp open ss-idi-disc? 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service : SF-Port1950-TCP:V=7.91%I=7%D=7/12%Time=60EC4775%P=x86_64-apple-darwin17.7. SF:0%r(NULL,4,"\xff\xff\0\x04")%r(GenericLines,8,"\xff\xff\0\x04\xff\xff\0 SF:\x04")%r(RTSPRequest,4,"\xff\xff\0\x04")%r(RPCCheck,18,"\0d\0\x18\0\x01 SF:\x1d\x13\0\0\0\0\0\0\0\x02\0\x01\x86\xa0\0\x01\xa5\xa5")%r(Help,4,"\xff SF:\xff\0\x04")%r(TerminalServerCookie,18,"\0d\0\x18\0\x01\0\0\0\0\0Cookie SF::\x20mst\xa5\xa5")%r(Kerberos,18,"\0d\0\x18\0\x01n0\x81k\xa1\x03\x02\x0 SF:1\x05\xa2\x03\x02\x01\n\xa4\x81\xa5\xa5")%r(SMBProgNeg,18,"\0d\0\x18\0\ SF:x01MBr\0\0\0\0\x08\x01@\0\0\0\0\0\0\xa5\xa5")%r(SIPOptions,4,"\xff\xff\ SF:0\x04")%r(ms-sql-s,18,"\0d\0\x18\0\x01\0\0\0\0\x15\0\x06\x01\0\x1b\0\x0 SF:1\x02\0\x1c\0\xa5\xa5"); MAC Address: 00:00:60:E8:03:A4 (Kontron Elektronik Gmbh) Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose|specialized|phone Running: Microsoft Windows 2008|8.1|7|Phone|Vista OS CPE: cpe:/o:microsoft:windows_server_2008:r2 cpe:/o:microsoft:windows_8.1 cpe:/o:microsoft:windows_7::-:professional cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 OS details: Microsoft Windows Server 2008 R2 or Windows 8.1, Microsoft Windows 7 Professional or Windows 8, Microsoft Windows Embedded Standard 7, Microsoft Windows Phone 7.5 or 8.0, Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7, Microsoft Windows Vista SP2, Windows 7 SP1, or Windows Server 2008 Uptime guess: 250.922 days (since Tue Nov 3 10:41:25 2020) Network Distance: 1 hop TCP Sequence Prediction: Difficulty=259 (Good luck!) IP ID Sequence Generation: Incremental TRACEROUTE HOP RTT ADDRESS 1 0.59 ms 172.16.20.90 NSE: Script Post-scanning. Initiating NSE at 09:48 Completed NSE at 09:48, 0.00s elapsed Initiating NSE at 09:48 Completed NSE at 09:48, 0.00s elapsed Initiating NSE at 09:48 Completed NSE at 09:48, 0.00s elapsed Read data files from: /usr/local/bin/../share/nmap OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 331.82 seconds Raw packets sent: 131171 (5.773MB) | Rcvd: 83 (3.974KB) IACS Cockpit Hospital Interface CMD:nmap -p 1-65535 -T4 -A -v 172.16.10.90 Nmap scan report for 172.16.10.90 Host is up (0.00044s latency). Not shown: 65534 filtered ports PORT STATE SERVICE VERSION 6464/tcp open ssl/ieee11073-20701? MAC Address: 00:80:82:98:E7:8C (PEP Modular Computers Gmbh) Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose|phone Running (JUST GUESSING): Microsoft Windows 2008|7|Vista|Phone|8.1 (90%) OS CPE: cpe:/o:microsoft:windows_server_2008::sp1 cpe:/o:microsoft:windows_7::-:professional cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows cpe:/o:microsoft:windows_8.1 Aggressive OS guesses: Microsoft Windows Server 2008 SP1 (90%), Microsoft Windows Server 2008 R2 (86%), Microsoft Windows 7 Professional or Windows 8 (86%), Microsoft Windows 7 SP1 or Windows Server 2008 SP2 or 2008 R2 SP1 (86%), Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (86%), Microsoft Windows Server 2008 (86%), Microsoft Windows Vista SP2 (86%), Microsoft Windows Phone 7.5 or 8.0 (85%), Microsoft Windows 7 or Windows Server 2008 R2 (85%), Microsoft Windows Server 2008 R2 SP1 or Windows 8 (85%) No exact OS matches for host (test conditions non-ideal). Uptime guess: 250.990 days (since Tue Nov 3 10:41:25 2020) Network Distance: 1 hop TCP Sequence Prediction: Difficulty=257 (Good luck!) IP ID Sequence Generation: Incremental TRACEROUTE HOP RTT ADDRESS 1 0.44 ms 172.16.10.90 NSE: Script Post-scanning. Initiating NSE at 11:27 Completed NSE at 11:27, 0.00s elapsed Initiating NSE at 11:27 Completed NSE at 11:27, 0.00s elapsed Initiating NSE at 11:27 Completed NSE at 11:27, 0.00s elapsed Read data files from: /usr/local/bin/../share/nmap OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 1303.91 seconds Raw packets sent: 131151 (5.774MB) | Rcvd: 27 (1.848KB) CMD: nmap -sU -p 161,123 -T4 -A -v 172.16.10.90 Nmap scan report for 172.16.10.90 Host is up (0.00036s latency). PORT STATE SERVICE VERSION 123/udp open ntp NTP v3 | ntp-info: |_ receive time stamp: 2021-07-13T08:17:49 161/udp open snmp Canon SNMP service; AGENT++ SNMPv3 server | snmp-info: | enterprise: AGENT++ | engineIDFormat: octets | engineIDData: 44303030303630453830334134c400 | snmpEngineBoots: 0 |_ snmpEngineTime: 0s MAC Address: 00:80:82:98:E7:8C (PEP Modular Computers Gmbh) Too many fingerprints match this host to give specific OS details Network Distance: 1 hop Host script results: |_clock-skew: -3h59m37s TRACEROUTE HOP RTT ADDRESS 1 0.36 ms 172.16.10.90 NSE: Script Post-scanning. Initiating NSE at 08:17 Completed NSE at 08:17, 0.00s elapsed Initiating NSE at 08:17 Completed NSE at 08:17, 0.00s elapsed Initiating NSE at 08:17 Completed NSE at 08:17, 0.00s elapsed Read data files from: /usr/local/bin/../share/nmap OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 20.28 seconds Raw packets sent: 41 (5.045KB) | Rcvd: 5 (680B)