IACS Cocpit Infinity Interface
CMD: nmap -p 1-65535 -T4 -A -v 191.50.30.103

Nmap scan report for 191.50.30.103
Host is up (0.0017s latency).
Not shown: 65526 filtered ports
PORT      STATE SERVICE         VERSION
22/tcp    open  ssh             OpenSSH for_Windows_8.1 (protocol 2.0)
1950/tcp  open  ismaeasdaqtest?
7100/tcp  open  font-service?
20010/tcp open  unknown
20011/tcp open  unknown
20012/tcp open  ss-idi-disc?
20022/tcp open  ssh             (protocol 2.0)
| fingerprint-strings: 
|   NULL: 
|     SSH-2.0-uSSH_5.76.N.6
|     Mcurve25519-sha256@libssh.org,ecdh-sha2-nistp256,diffie-hellman-group14-sha256
|     #ecdsa-sha2-nistp256,ssh-rsa,ssh-dss
|     aes128-ctr,aes192-ctr,aes256-ctr
|     aes128-ctr,aes192-ctr,aes256-ctr
|     hmac-sha2-256
|     hmac-sha2-256
|     none
|     none
|     [?U<q
|_    C'Tf
23901/tcp open  unknown
| fingerprint-strings: 
|   GenericLines, GetRequest, HTTPOptions, RTSPRequest: 
|_    ["success",[]]
32002/tcp open  unknown
3 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port20022-TCP:V=7.80%I=7%D=6/13%Time=6488628B%P=i686-pc-windows-windows
SF:%r(NULL,137,"SSH-2\.0-uSSH_5\.76\.N\.6\r\n\0\0\x01\x1c\x0b\x14D\xc6Y\xd
SF:3\xea\xc4\x02\x8d1\xfe\x89;QA\x08\xb0\0\0\0Mcurve25519-sha256@libssh\.o
SF:rg,ecdh-sha2-nistp256,diffie-hellman-group14-sha256\0\0\0#ecdsa-sha2-ni
SF:stp256,ssh-rsa,ssh-dss\0\0\0\x20aes128-ctr,aes192-ctr,aes256-ctr\0\0\0\
SF:x20aes128-ctr,aes192-ctr,aes256-ctr\0\0\0\rhmac-sha2-256\0\0\0\rhmac-sh
SF:a2-256\0\0\0\x04none\0\0\0\x04none\0\0\0\0\0\0\0\0\0\0\0\0\0\[\?U<q\xf4
SF:\xeeC'Tf");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port23901-TCP:V=7.80%I=7%D=6/13%Time=64886290%P=i686-pc-windows-windows
SF:%r(GenericLines,F,"\[\"success\",\[\]\]\n")%r(GetRequest,F,"\[\"success
SF:\",\[\]\]\n")%r(HTTPOptions,F,"\[\"success\",\[\]\]\n")%r(RTSPRequest,F
SF:,"\[\"success\",\[\]\]\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port32002-TCP:V=7.80%I=7%D=6/13%Time=6488628B%P=i686-pc-windows-windows
SF:%r(NULL,4,"\xff\xff\0\x04")%r(GenericLines,8,"\xff\xff\0\x04\xff\xff\0\
SF:x04")%r(GetRequest,4,"\xff\xff\0\x04")%r(HTTPOptions,4,"\xff\xff\0\x04"
SF:)%r(RTSPRequest,4,"\xff\xff\0\x04")%r(RPCCheck,4,"\xff\xff\0\x04")%r(DN
SF:SVersionBindReqTCP,4,"\xff\xff\0\x04")%r(DNSStatusRequestTCP,4,"\xff\xf
SF:f\0\x04")%r(Help,4,"\xff\xff\0\x04")%r(SSLSessionReq,4,"\xff\xff\0\x04"
SF:)%r(TerminalServerCookie,4,"\xff\xff\0\x04")%r(TLSSessionReq,4,"\xff\xf
SF:f\0\x04")%r(Kerberos,4,"\xff\xff\0\x04")%r(SMBProgNeg,4,"\xff\xff\0\x04
SF:")%r(X11Probe,4,"\xff\xff\0\x04")%r(FourOhFourRequest,4,"\xff\xff\0\x04
SF:")%r(LPDString,4,"\xff\xff\0\x04")%r(LDAPSearchReq,4,"\xff\xff\0\x04")%
SF:r(LDAPBindReq,4,"\xff\xff\0\x04")%r(SIPOptions,4,"\xff\xff\0\x04")%r(LA
SF:NDesk-RC,4,"\xff\xff\0\x04")%r(TerminalServer,4,"\xff\xff\0\x04")%r(NCP
SF:,4,"\xff\xff\0\x04")%r(NotesRPC,4,"\xff\xff\0\x04")%r(JavaRMI,4,"\xff\x
SF:ff\0\x04")%r(WMSRequest,4,"\xff\xff\0\x04")%r(oracle-tns,4,"\xff\xff\0\
SF:x04")%r(ms-sql-s,4,"\xff\xff\0\x04")%r(afp,4,"\xff\xff\0\x04")%r(giop,4
SF:,"\xff\xff\0\x04");
MAC Address: 00:00:60:E6:5E:E7 (Kontron Elektronik Gmbh)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2008|XP|7 (86%)
OS CPE: cpe:/o:microsoft:windows_server_2008::sp1 cpe:/o:microsoft:windows_server_2008:r2 cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_7
Aggressive OS guesses: Microsoft Windows Server 2008 SP1 or Windows Server 2008 R2 (86%), Microsoft Windows XP SP2 (85%), Microsoft Windows 7 (85%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 1 hop
TCP Sequence Prediction: Difficulty=259 (Good luck!)
IP ID Sequence Generation: Incremental

TRACEROUTE
HOP RTT     ADDRESS
1   1.68 ms 191.50.30.103

NSE: Script Post-scanning.
Initiating NSE at 08:39
Completed NSE at 08:39, 0.00s elapsed
Initiating NSE at 08:39
Completed NSE at 08:39, 0.00s elapsed
Initiating NSE at 08:39
Completed NSE at 08:39, 0.00s elapsed
Read data files from: C:\Draeger\Install\Nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 341.89 seconds
           Raw packets sent: 131203 (5.777MB) | Rcvd: 484 (21.988KB)




IACS Cockpit Hospital Interface
CMD: nmap -p 1-65535 -T4 -A -v 10.227.83.199

Nmap scan report for 10.227.83.199
Host is up (0.00092s latency).
Not shown: 65532 filtered ports
PORT      STATE SERVICE VERSION
22/tcp    open  ssh     OpenSSH for_Windows_8.1 (protocol 2.0)
20022/tcp open  ssh     (protocol 2.0)
| fingerprint-strings: 
|   NULL: 
|     SSH-2.0-uSSH_5.76.N.6
|     Mcurve25519-sha256@libssh.org,ecdh-sha2-nistp256,diffie-hellman-group14-sha256
|     #ecdsa-sha2-nistp256,ssh-rsa,ssh-dss
|     aes128-ctr,aes192-ctr,aes256-ctr
|     aes128-ctr,aes192-ctr,aes256-ctr
|     hmac-sha2-256
|     hmac-sha2-256
|     none
|_    none
23901/tcp open  unknown
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port20022-TCP:V=7.80%I=7%D=6/13%Time=64886938%P=i686-pc-windows-windows
SF:%r(NULL,137,"SSH-2\.0-uSSH_5\.76\.N\.6\r\n\0\0\x01\x1c\x0b\x14\xa6\xfd\
SF:xae\xf9cP\x9bR\x1a\x03t\x7f\xb9P\x15\x0b\0\0\0Mcurve25519-sha256@libssh
SF:\.org,ecdh-sha2-nistp256,diffie-hellman-group14-sha256\0\0\0#ecdsa-sha2
SF:-nistp256,ssh-rsa,ssh-dss\0\0\0\x20aes128-ctr,aes192-ctr,aes256-ctr\0\0
SF:\0\x20aes128-ctr,aes192-ctr,aes256-ctr\0\0\0\rhmac-sha2-256\0\0\0\rhmac
SF:-sha2-256\0\0\0\x04none\0\0\0\x04none\0\0\0\0\0\0\0\0\0\0\0\0\0\x02\x83
SF:\xc3\xd5\x9a\xaf\x18\xe3\xf8\xe0\[");
MAC Address: 00:00:60:E5:00:6B (Kontron Elektronik Gmbh)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows XP|7|2008 (87%)
OS CPE: cpe:/o:microsoft:windows_xp::sp2 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_server_2008::sp1 cpe:/o:microsoft:windows_server_2008:r2
Aggressive OS guesses: Microsoft Windows XP SP2 (87%), Microsoft Windows 7 (85%), Microsoft Windows Server 2008 SP1 or Windows Server 2008 R2 (85%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 1 hop
TCP Sequence Prediction: Difficulty=258 (Good luck!)
IP ID Sequence Generation: Incremental

TRACEROUTE
HOP RTT     ADDRESS
1   0.92 ms 10.227.83.199

NSE: Script Post-scanning.
Initiating NSE at 09:06
Completed NSE at 09:06, 0.00s elapsed
Initiating NSE at 09:06
Completed NSE at 09:06, 0.00s elapsed
Initiating NSE at 09:06
Completed NSE at 09:06, 0.00s elapsed
Read data files from: C:\Draeger\Install\Nmap
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 309.71 seconds
           Raw packets sent: 131226 (5.778MB) | Rcvd: 522 (23.324KB)