0

I ran an nmap scan on my iPad’s IP address and the results showed the following ports listed below available in a filtered state. See screenshot for the actual terminal results.

nmap results

  • SSH
  • Netbios-ssn
  • ms-wbt-server (Remote Desktop)
  • 4 different VNC ports
  • And an iPhone Sync port

This can’t be normal, right? There are no apps installed that would explain these ports and the device is not jailbroken.

Improve this question
1
  • You might want to add the exact nmap command to your post. Different parameters could yield different results.
    – Kate
    Jun 6, 2021 at 14:26

1 Answer 1

Reset to default
2

This can’t be normal, right?

Wrong, it can be normal.

Your scan shows that there is only one open port, on port 62078.

The results will be similar for other iDevices. For example, an iPhone 11 Pro on my network shows 985 closed ports, 14 filtered ports, and one open port (port 62078).

Improve this answer
3
  • Ok, good to know. Are your filtered ports similar to the one’s listed above - rdp, ssh, vnc, etc
    – petergibbons
    Jun 6, 2021 at 2:43
  • No, they are different. BTW, filtered is (in a sense) "better" than closed--the packets are just getting dropped. The names that nmap is using for the "filtered" ports are just based on typical/common services associated with the port historically, there's no indication that any services are actually running--the packets are just totally dropped so nmap has no idea what's up with those ports.
    – hft
    Jun 6, 2021 at 2:46
  • Here the the definitions of open, closed, filtered: nmap.org/book/man-port-scanning-basics.html
    – hft
    Jun 6, 2021 at 2:50

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .