Ethernet/IP is a very popular protocol used in industrial systems that uses Ethernet as the transport layer and CIP for providing services and profiles needed for the applications. Ethernet/IP devices by several vendors usually operate on UDP port 44818
and we can gather information such as vendor name, product name, serial number, device type, product code, internal IP address, and version.
This recipe shows you how to enumerate Ethernet/IP devices with Nmap.
Open your terminal and enter the following Nmap command:
$ nmap -Pn -sU -p44818 --script enip-info <target>
The enip-info
script will obtain device information as shown next:
PORT STATE SERVICE 44818/udp open EtherNet-IP-2 | enip-info: | Vendor: Rockwell Automation/Allen-Bradley (1) | Product Name: PanelViewPlus_6 1500 | Serial Number: 0x00123456 | Device Type: Human-Machine Interface (24) | Product Code: 51 | Revision: 3.1 |_...