Starting Nmap 4.76 ( http://nmap.org ) at 2008-12-14 18:28 Eastern Standard Time Initiating Ping Scan at 18:28 Scanning 67.139.45.35 [2 ports] Completed Ping Scan at 18:28, 0.30s elapsed (1 total hosts) Initiating Parallel DNS resolution of 1 host. at 18:28 Completed Parallel DNS resolution of 1 host. at 18:28, 0.09s elapsed Initiating SYN Stealth Scan at 18:28 Scanning 67.139.45.35 [1000 ports] Discovered open port 22/tcp on 67.139.45.35 Discovered open port 23/tcp on 67.139.45.35 Discovered open port 21/tcp on 67.139.45.35 Discovered open port 80/tcp on 67.139.45.35 Completed SYN Stealth Scan at 18:28, 8.36s elapsed (1000 total ports) Initiating Service scan at 18:28 Scanning 4 services on 67.139.45.35 Completed Service scan at 18:44, 122.80s elapsed (4 services on 1 host) Initiating OS detection (try #1) against 67.139.45.35 Retrying OS detection (try #2) against 67.139.45.35 Initiating Traceroute at 18:28 67.139.45.35: guessing hop distance at 3 Completed Traceroute at 18:33, 124.02s elapsed Initiating Parallel DNS resolution of 2 hosts. at 18:33 Completed Parallel DNS resolution of 2 hosts. at 18:33, 0.13s elapsed SCRIPT ENGINE: Initiating script scanning. Initiating SCRIPT ENGINE at 18:33 Completed SCRIPT ENGINE at 18:33, 6.11s elapsed Host 67.139.45.35 appears to be up ... good. Interesting ports on 67.139.45.35: Not shown: 996 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp? 22/tcp open tcpwrapped 23/tcp open telnet BusyBox telnetd 80/tcp open http Vonage http config |_ HTML title: >Log In 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at http://www.insecure.org/cgi-bin/servicefp-submit.cgi : SF-Port21-TCP:V=4.76%I=7%D=12/14%Time=494599CC%P=i686-pc-windows-windows%r SF:(NULL,21,"220\x20FTPU\x20ready,\x20login\x20required\.\r\n")%r(GenericL SF:ines,21,"220\x20FTPU\x20ready,\x20login\x20required\.\r\n")%r(Help,3E," SF:220\x20FTPU\x20ready,\x20login\x20required\.\r\n500\x20Sorry,\x20no\x20 SF:such\x20command\.\r\n")%r(GetRequest,3E,"220\x20FTPU\x20ready,\x20login SF:\x20required\.\r\n500\x20Sorry,\x20no\x20such\x20command\.\r\n")%r(HTTP SF:Options,3E,"220\x20FTPU\x20ready,\x20login\x20required\.\r\n500\x20Sorr SF:y,\x20no\x20such\x20command\.\r\n")%r(RPCCheck,3E,"220\x20FTPU\x20ready SF:,\x20login\x20required\.\r\n500\x20Sorry,\x20no\x20such\x20command\.\r\ SF:n")%r(DNSVersionBindReq,3E,"220\x20FTPU\x20ready,\x20login\x20required\ SF:.\r\n500\x20Sorry,\x20no\x20such\x20command\.\r\n")%r(DNSStatusRequest, SF:3E,"220\x20FTPU\x20ready,\x20login\x20required\.\r\n500\x20Sorry,\x20no SF:\x20such\x20command\.\r\n")%r(SSLSessionReq,21,"220\x20FTPU\x20ready,\x SF:20login\x20required\.\r\n")%r(SMBProgNeg,3E,"220\x20FTPU\x20ready,\x20l SF:ogin\x20required\.\r\n500\x20Sorry,\x20no\x20such\x20command\.\r\n")%r( SF:X11Probe,3E,"220\x20FTPU\x20ready,\x20login\x20required\.\r\n500\x20Sor SF:ry,\x20no\x20such\x20command\.\r\n")%r(FourOhFourRequest,3E,"220\x20FTP SF:U\x20ready,\x20login\x20required\.\r\n500\x20Sorry,\x20no\x20such\x20co SF:mmand\.\r\n")%r(LPDString,3E,"220\x20FTPU\x20ready,\x20login\x20require SF:d\.\r\n500\x20Sorry,\x20no\x20such\x20command\.\r\n")%r(LDAPBindReq,3E, SF:"220\x20FTPU\x20ready,\x20login\x20required\.\r\n500\x20Sorry,\x20no\x2 SF:0such\x20command\.\r\n")%r(SIPOptions,3E,"220\x20FTPU\x20ready,\x20logi SF:n\x20required\.\r\n500\x20Sorry,\x20no\x20such\x20command\.\r\n")%r(LAN SF:Desk-RC,3E,"220\x20FTPU\x20ready,\x20login\x20required\.\r\n500\x20Sorr SF:y,\x20no\x20such\x20command\.\r\n")%r(TerminalServer,3E,"220\x20FTPU\x2 SF:0ready,\x20login\x20required\.\r\n500\x20Sorry,\x20no\x20such\x20comman SF:d\.\r\n")%r(NCP,3E,"220\x20FTPU\x20ready,\x20login\x20required\.\r\n500 SF:\x20Sorry,\x20no\x20such\x20command\.\r\n")%r(NotesRPC,3E,"220\x20FTPU\ SF:x20ready,\x20login\x20required\.\r\n500\x20Sorry,\x20no\x20such\x20comm SF:and\.\r\n")%r(WMSRequest,3E,"220\x20FTPU\x20ready,\x20login\x20required SF:\.\r\n500\x20Sorry,\x20no\x20such\x20command\.\r\n"); Device type: WAP|broadband router|printer|switch|load balancer Running (JUST GUESSING) : MontaVista Linux 2.4.X (97%), Telkom Linux 2.4.X (97%), Actiontec Linux 2.4.X (96%), HP embedded (96%), Linksys embedded (96%), Netgear embedded (96%), F5 Networks embedded (95%), AVM embedded (95%) Aggressive OS guesses: MontaVista Linux 2.4.17 (97%), Telkom Mega 100 WR DSL modem (Linux 2.4.17_mvl21-malta-mips_fp_le) (97%), HP Brocade 4100 switch; or Actiontec MI-424-WR, Linksys WRVS4400N, or Netgear WNR834B wireless broadband router (96%), F5 BIG-IP Local Traffic Manager load balancer (95%), AVM Fritz!Box FON 7050, Linksys WAG200G, or Netgear DG834GT wireless broadband router (95%), HP 4200 PSA (Print Server Appliance) model J4117A (95%), Actiontec GT701 DSL modem (93%), Linux 2.4.20 (92%), DD-WRT v23 (Linux 2.4.34) (91%), Acorp W400G or W422G wireless ADSL modem (MontaVista Linux 2.4.17) (91%) No exact OS matches for host (test conditions non-ideal). Service Info: Device: VoIP adapter TRACEROUTE (using port 113/tcp) HOP RTT ADDRESS 1 ... 13 no response 14 93.00 67.139.45.35 Read data files from: C:\Program Files\nmap OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 269.09 seconds Raw packets sent: 1234 (58.000KB) | Rcvd: 4836 (3.115MB)