PrinterScanningIntrusion

[Brandon Oliver <bdoliver6 () gmail com>]

The loan noob, need to borrow some sec info.  What's a DragonIDSConsole
doing on an HP Printer?  Obviously firewall, but as I read about this bad
boy it's pretty nifty, all retard meant.  I do have a serious question,
shall I close all these ports, and why do I return an error when scanning
for window -sW?  It suggests to run ipv6 if my address is wrong but it's
not, did it anyways :
# Nmap 6.25 scan initiated Sat May 18 20:34:14 2013 as: nmap -oXBug1 sW
--------
Failed to resolve given hostname/IP: sW.  Note that you can't use '/mask'
AND '1-4,7,100-' style IP ranges. If the machine only has an IPv6 address,
add the Nmap -6 flag to scan that.
Nmap scan report for -----
Host is up (0.46s latency).
Not shown: 984 closed ports
PORT     STATE SERVICE
80/tcp   open  http
139/tcp  open  netbios-ssn
443/tcp  open  https
445/tcp  open  microsoft-ds
515/tcp  open  printer
631/tcp  open  ipp
6839/tcp open  unknown
7435/tcp open  unknown
8080/tcp open  http-proxy
9100/tcp open  jetdirect
9101/tcp open  jetdirect
9102/tcp open  jetdirect
9110/tcp open  unknown
9111/tcp open  DragonIDSConsole
9220/tcp open  unknown
9290/tcp open  unknown
MAC Address: xx:xx:xx:xx:xx:xx (Unknown)

# Nmap done at Sat May 18 20:34:25 2013 -- 1 IP address (1 host up) scanned
in 10.78 seconds

||||||||||||||||||||||||||IPv6
# Nmap 6.25 scan initiated Sat May 18 20:36:30 2013 as: nmap -6 -oXBug3 sW
-------
Failed to resolve given IPv6 hostname/IP: sW.  Note that you can't use
'/mask' or '[1-4,7,100-]' style ranges for IPv6.
Failed to resolve given IPv6 hostname/IP: -------.  Note that you can't use
'/mask' or '[1-4,7,100-]' style ranges for IPv6.
WARNING: No targets were specified, so 0 hosts scanned.
# Nmap done at Sat May 18 20:36:30 2013 -- 0 IP addresses (0 hosts up)
scanned in 0.05 seconds

|||||||||||||||||||||||||||||-sM
# Nmap 6.25 scan initiated Sat May 18 20:35:53 2013 as: nmap -oXBug2 sM
------
Failed to resolve given hostname/IP: sM.  Note that you can't use '/mask'
AND '1-4,7,100-' style IP ranges. If the machine only has an IPv6 address,
add the Nmap -6 flag to scan that.
Nmap scan report for --------
Host is up (0.48s latency).
Not shown: 984 closed ports
PORT     STATE SERVICE
80/tcp   open  http
139/tcp  open  netbios-ssn
443/tcp  open  https
445/tcp  open  microsoft-ds
515/tcp  open  printer
631/tcp  open  ipp
6839/tcp open  unknown
7435/tcp open  unknown
8080/tcp open  http-proxy
9100/tcp open  jetdirect
9101/tcp open  jetdirect
9102/tcp open  jetdirect
9110/tcp open  unknown
9111/tcp open  DragonIDSConsole
9220/tcp open  unknown
9290/tcp open  unknown
MAC Address: xx:xx:xx:xx:xx:xx (Unknown)

# Nmap done at Sat May 18 20:36:04 2013 -- 1 IP address (1 host up) scanned
in 11.52 seconds
_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/