Port 161:SNMP - SNMPwalk to discover VPN key(PSK)

Snmpwalk -c public -v2c IP

Then crack the hashes found via https://hashes.com/en/decrypt/hash

or manually with Kraken

snmp-check IP

you can extract different data about the OS

• hidden ports that are open