Layout:
subnet:10.137.44.0/24 10.137.44.255 Field Unknown subnet:172.24.55.0/24 172.24.55.1 Scada Server 172.24.55.121 Plc Rtu 172.24.55.17 Field Unknown 172.24.55.23 Operator Workstation Hmi 172.24.55.232 Dns Server 172.24.55.24 Operator Workstation Hmi 172.24.55.25 Operator Workstation Hmi 172.24.55.255 Field Unknown 172.24.55.26 Operator Workstation Hmi 172.24.55.27 Operator Workstation Hmi +3 more Field Unknown x2, Operator Workstation Hmi x1 subnet:10.194.170.0/24 10.194.170.1 Plc Rtu 10.194.170.10 Plc Rtu 10.194.170.100 Plc Rtu 10.194.170.101 Plc Rtu 10.194.170.102 Plc Rtu 10.194.170.103 Plc Rtu 10.194.170.104 Plc Rtu 10.194.170.105 Plc Rtu 10.194.170.106 Plc Rtu 10.194.170.107 Plc Rtu +82 more Field Unknown x44, Plc Rtu x33, Scada Server x5 subnet:172.17.81.0/24 172.17.81.151 Field Unknown 172.17.81.152 Plc Rtu 172.24.55.1 → 10.194.170.107: EtherNet/IP (7,730 packets, 926,520 bytes) 10.194.170.1 → 10.194.170.10: EtherNet/IP (11,647 packets, 898,182 bytes) 172.24.55.1 → 172.17.81.152: EtherNet/IP (3,249 packets, 510,832 bytes) 172.24.55.1 → 10.194.170.1: EtherNet/IP (37,664 packets, 8,792,344 bytes) 172.24.55.1 → 10.194.170.105: EtherNet/IP (6,912 packets, 777,761 bytes) 172.24.55.121 → 172.24.55.1: Modbus, TCP, UDP (1,938 packets, 351,086 bytes) 172.24.55.1 → 172.24.55.26: TCP (3,890 packets, 330,038 bytes) 172.24.55.27 → 172.24.55.1: TCP (3,995 packets, 349,986 bytes) 172.24.55.1 → 172.24.55.25: TCP (4,495 packets, 463,966 bytes) 172.24.55.1 → 172.24.55.24: TCP (4,462 packets, 391,642 bytes) 172.24.55.1 → 172.17.81.151: TCP (1,594 packets, 566,248 bytes) 172.24.55.1 → 172.24.55.23: TCP (3,815 packets, 315,714 bytes) 172.24.55.1 → 10.194.170.101: EtherNet/IP (368 packets, 48,484 bytes) 172.24.55.1 → 10.194.170.103: EtherNet/IP (368 packets, 54,004 bytes) 172.24.55.1 → 10.194.170.100: EtherNet/IP (398 packets, 50,452 bytes) 172.24.55.1 → 10.194.170.102: EtherNet/IP (383 packets, 57,004 bytes) 172.24.55.1 → 10.194.170.104: EtherNet/IP (368 packets, 68,908 bytes) 172.24.55.25 → 172.24.55.232: DNS (32 packets, 2,746 bytes) 172.24.55.1 → 10.194.170.106: EtherNet/IP (740 packets, 183,872 bytes) 172.24.55.232 → 172.24.55.26: DNS, TCP (300 packets, 70,134 bytes) 172.24.55.232 → 172.24.55.24: DNS (2 packets, 162 bytes) 10.194.170.107 → 10.194.170.1: EtherNet/IP (6 packets, 636 bytes) 10.194.170.1 → 10.194.170.101: EtherNet/IP (9 packets, 990 bytes) 10.194.170.106 → 10.194.170.1: EtherNet/IP (9 packets, 1,026 bytes) 10.194.170.1 → 10.194.170.100: EtherNet/IP (25 packets, 2,978 bytes) 10.194.170.1 → 10.194.170.104: EtherNet/IP (5 packets, 422 bytes) 10.194.170.1 → 10.194.170.103: EtherNet/IP (3 packets, 186 bytes) 172.24.55.232 → 172.24.55.1: DNS, UDP (104 packets, 11,440 bytes) 172.24.55.23 → 172.24.55.232: DNS, TCP (16 packets, 1,178 bytes) 172.24.55.27 → 172.24.55.232: DNS (1 packets, 77 bytes) 172.24.55.232 → 172.24.55.255: UDP (17 packets, 4,199 bytes) 172.24.55.1 → 172.24.55.17: SNMP (4 packets, 490 bytes) PROBABLE LAYER-3 SWITCH/ROUTER (Not directly observed)