00:11:59 ~ # nmap -sS -sV -P0 -O -p 11523 lamusique.homelinux.org -d -n -vv --packet_trace Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2006-11-11 00:13 CET --------------- Timing report --------------- hostgroups: min 1, max 100000 rtt-timeouts: init 1000, min 100, max 10000 scan-delay: TCP 1000, UDP 1000 parallelism: min 0, max 0 max-retries: 10, host-timeout: 0 --------------------------------------------- Initiating SYN Stealth Scan against 81.251.121.11 [1 port] at 00:13 Packet capture filter (device wlan0): dst host 192.168.1.101 and (icmp or (tcp and (src host 81.251.121.11))) SENT (0.2470s) TCP 192.168.1.101:35856 > 81.251.121.11:11523 S ttl=56 id=31651 iplen=44 seq=1463534839 win=1024 RCVD (0.3280s) TCP 81.251.121.11:11523 > 192.168.1.101:35856 SA ttl=20 id=0 iplen=44 seq=3316823414 win=9999 ack=1463534840 Discovered open port 11523/tcp on 81.251.121.11 The SYN Stealth Scan took 0.09s to scan 1 total ports. Initiating service scan against 1 service on 81.251.121.11 at 00:13 NSOCK (0.4120s) TCP connection requested to 81.251.121.11:11523 (IOD #1) EID 8 NSOCK (0.4130s) nsock_loop() started (no timeout). 1 events pending NSOCK (0.5190s) Callback: CONNECT SUCCESS for EID 8 [81.251.121.11:11523] NSOCK (0.5190s) Read request from IOD #1 [81.251.121.11:11523] (timeout: 6000ms) EID 18 NSOCK (0.6160s) Callback: READ SUCCESS for EID 18 [81.251.121.11:11523] (20 bytes): SSH-2.0-OpenSSH_4.5. The service scan took 0.21s to scan 1 service on 1 host. Starting RPC scan against 81.251.121.11 Warning: OS detection will be MUCH less reliable because we did not find at least 1 open and 1 closed TCP port Packet capture filter (device wlan0): dst host 192.168.1.101 and (icmp or (tcp and src host 81.251.121.11)) For OSScan assuming port 11523 is open, 42979 is closed, and neither are firewalled SENT (0.6250s) TCP 192.168.1.101:35863 > 81.251.121.11:11523 SE ttl=57 id=41724 iplen=60 seq=1606452458 win=2048 SENT (0.6260s) TCP 192.168.1.101:35864 > 81.251.121.11:11523 ttl=56 id=55710 iplen=60 seq=1606452458 win=1024 SENT (0.6260s) TCP 192.168.1.101:35865 > 81.251.121.11:11523 SFPU ttl=58 id=9547 iplen=60 seq=1606452458 win=3072 SENT (0.6270s) TCP 192.168.1.101:35866 > 81.251.121.11:11523 A ttl=43 id=42692 iplen=60 seq=1606452458 win=4096 ack=0 SENT (0.6270s) TCP 192.168.1.101:35867 > 81.251.121.11:42979 S ttl=41 id=3902 iplen=60 seq=1606452458 win=2048 SENT (0.6280s) TCP 192.168.1.101:35868 > 81.251.121.11:42979 A ttl=50 id=41989 iplen=60 seq=1606452458 win=3072 ack=0 SENT (0.6280s) TCP 192.168.1.101:35869 > 81.251.121.11:42979 FPU ttl=38 id=39775 iplen=60 seq=1606452458 win=3072 SENT (0.6290s) UDP 192.168.1.101:35856 > 81.251.121.11:42979 ttl=59 id=62904 iplen=328 RCVD (0.7040s) TCP 81.251.121.11:11523 > 192.168.1.101:38060 A ttl=20 id=3008 iplen=40 seq=3316915998 win=9999 ack=2812812691 RCVD (0.7040s) TCP 81.251.121.11:11523 > 192.168.1.101:38060 FA ttl=20 id=3009 iplen=40 seq=3316915998 win=9999 ack=2812812691 SENT (2.7440s) TCP 192.168.1.101:35863 > 81.251.121.11:11523 SE ttl=52 id=15984 iplen=60 seq=1606452458 win=1024 SENT (2.7440s) TCP 192.168.1.101:35864 > 81.251.121.11:11523 ttl=53 id=65419 iplen=60 seq=1606452458 win=2048 SENT (2.7440s) TCP 192.168.1.101:35865 > 81.251.121.11:11523 SFPU ttl=44 id=21934 iplen=60 seq=1606452458 win=1024 SENT (2.7440s) TCP 192.168.1.101:35866 > 81.251.121.11:11523 A ttl=50 id=21003 iplen=60 seq=1606452458 win=3072 ack=0 SENT (2.7440s) TCP 192.168.1.101:35867 > 81.251.121.11:42979 S ttl=58 id=53967 iplen=60 seq=1606452458 win=3072 SENT (2.7440s) TCP 192.168.1.101:35868 > 81.251.121.11:42979 A ttl=51 id=37226 iplen=60 seq=1606452458 win=4096 ack=0 SENT (2.7440s) TCP 192.168.1.101:35869 > 81.251.121.11:42979 FPU ttl=49 id=51714 iplen=60 seq=1606452458 win=2048 SENT (2.7440s) UDP 192.168.1.101:35856 > 81.251.121.11:42979 ttl=59 id=62904 iplen=328 RCVD (3.5030s) TCP 81.251.121.11:6667 > 192.168.1.101:46589 PA ttl=21 id=35717 iplen=139 seq=2894502967 win=7504 ack=1602288283 SENT (5.9500s) TCP 192.168.1.101:35857 > 81.251.121.11:11523 S ttl=43 id=29736 iplen=60 seq=1606452459 win=4096 RCVD (6.0300s) TCP 81.251.121.11:11523 > 192.168.1.101:35857 SA ttl=20 id=0 iplen=44 seq=3319979125 win=9999 ack=1606452460 SENT (6.0600s) TCP 192.168.1.101:35858 > 81.251.121.11:11523 S ttl=59 id=58765 iplen=60 seq=1606452460 win=4096 SENT (6.4690s) TCP 192.168.1.101:35859 > 81.251.121.11:11523 S ttl=57 id=2700 iplen=60 seq=1606452461 win=2048 SENT (6.8770s) TCP 192.168.1.101:35860 > 81.251.121.11:11523 S ttl=55 id=42528 iplen=60 seq=1606452462 win=4096 SENT (7.2850s) TCP 192.168.1.101:35861 > 81.251.121.11:11523 S ttl=37 id=20182 iplen=60 seq=1606452463 win=2048 SENT (7.6930s) TCP 192.168.1.101:35862 > 81.251.121.11:11523 S ttl=47 id=20658 iplen=60 seq=1606452464 win=4096 Insufficient responses for TCP sequencing (1), OS detection may be less accurate Packet capture filter (device wlan0): dst host 192.168.1.101 and (icmp or (tcp and src host 81.251.121.11)) For OSScan assuming port 11523 is open, 38550 is closed, and neither are firewalled SENT (11.7460s) TCP 192.168.1.101:35863 > 81.251.121.11:11523 SE ttl=48 id=61438 iplen=60 seq=4003719234 win=1024 SENT (11.7470s) TCP 192.168.1.101:35864 > 81.251.121.11:11523 ttl=58 id=27113 iplen=60 seq=4003719234 win=3072 SENT (11.7470s) TCP 192.168.1.101:35865 > 81.251.121.11:11523 SFPU ttl=38 id=54140 iplen=60 seq=4003719234 win=3072 SENT (11.7480s) TCP 192.168.1.101:35866 > 81.251.121.11:11523 A ttl=49 id=36521 iplen=60 seq=4003719234 win=2048 ack=0 SENT (11.7480s) TCP 192.168.1.101:35867 > 81.251.121.11:38550 S ttl=37 id=13357 iplen=60 seq=4003719234 win=2048 SENT (11.7490s) TCP 192.168.1.101:35868 > 81.251.121.11:38550 A ttl=45 id=32725 iplen=60 seq=4003719234 win=2048 ack=0 SENT (11.7490s) TCP 192.168.1.101:35869 > 81.251.121.11:38550 FPU ttl=58 id=49793 iplen=60 seq=4003719234 win=3072 SENT (11.7500s) UDP 192.168.1.101:35856 > 81.251.121.11:38550 ttl=59 id=62904 iplen=328 SENT (13.7890s) TCP 192.168.1.101:35863 > 81.251.121.11:11523 SE ttl=53 id=12153 iplen=60 seq=4003719234 win=2048 SENT (13.7890s) TCP 192.168.1.101:35864 > 81.251.121.11:11523 ttl=40 id=32905 iplen=60 seq=4003719234 win=1024 SENT (13.7890s) TCP 192.168.1.101:35865 > 81.251.121.11:11523 SFPU ttl=58 id=21986 iplen=60 seq=4003719234 win=3072 SENT (13.7890s) TCP 192.168.1.101:35866 > 81.251.121.11:11523 A ttl=47 id=25958 iplen=60 seq=4003719234 win=4096 ack=0 SENT (13.7890s) TCP 192.168.1.101:35867 > 81.251.121.11:38550 S ttl=47 id=34200 iplen=60 seq=4003719234 win=4096 SENT (13.7890s) TCP 192.168.1.101:35868 > 81.251.121.11:38550 A ttl=57 id=14078 iplen=60 seq=4003719234 win=2048 ack=0 SENT (13.7900s) TCP 192.168.1.101:35869 > 81.251.121.11:38550 FPU ttl=59 id=54465 iplen=60 seq=4003719234 win=4096 SENT (13.7900s) UDP 192.168.1.101:35856 > 81.251.121.11:38550 ttl=59 id=62904 iplen=328 RCVD (15.3630s) TCP 81.251.121.11:6667 > 192.168.1.101:46589 A ttl=21 id=35718 iplen=40 seq=2894503066 win=7504 ack=1602288309 RCVD (16.2720s) TCP 81.251.121.11:6667 > 192.168.1.101:46589 PA ttl=21 id=35719 iplen=116 seq=2894503066 win=7504 ack=1602288309 SENT (18.3200s) TCP 192.168.1.101:35857 > 81.251.121.11:11523 S ttl=51 id=30241 iplen=60 seq=4003719235 win=4096 SENT (18.7280s) TCP 192.168.1.101:35858 > 81.251.121.11:11523 S ttl=38 id=7078 iplen=60 seq=4003719236 win=3072 SENT (19.1350s) TCP 192.168.1.101:35859 > 81.251.121.11:11523 S ttl=57 id=22557 iplen=60 seq=4003719237 win=2048 SENT (19.5440s) TCP 192.168.1.101:35860 > 81.251.121.11:11523 S ttl=42 id=52067 iplen=60 seq=4003719238 win=3072 SENT (19.9520s) TCP 192.168.1.101:35861 > 81.251.121.11:11523 S ttl=50 id=62195 iplen=60 seq=4003719239 win=3072 SENT (20.3600s) TCP 192.168.1.101:35862 > 81.251.121.11:11523 S ttl=47 id=48584 iplen=60 seq=4003719240 win=4096 Insufficient responses for TCP sequencing (0), OS detection may be less accurate Packet capture filter (device wlan0): dst host 192.168.1.101 and (icmp or (tcp and src host 81.251.121.11)) For OSScan assuming port 11523 is open, 38509 is closed, and neither are firewalled SENT (24.4130s) TCP 192.168.1.101:35863 > 81.251.121.11:11523 SE ttl=57 id=41886 iplen=60 seq=772164156 win=2048 SENT (24.4140s) TCP 192.168.1.101:35864 > 81.251.121.11:11523 ttl=47 id=39186 iplen=60 seq=772164156 win=4096 SENT (24.4140s) TCP 192.168.1.101:35865 > 81.251.121.11:11523 SFPU ttl=39 id=34476 iplen=60 seq=772164156 win=4096 SENT (24.4150s) TCP 192.168.1.101:35866 > 81.251.121.11:11523 A ttl=59 id=28887 iplen=60 seq=772164156 win=4096 ack=0 SENT (24.4150s) TCP 192.168.1.101:35867 > 81.251.121.11:38509 S ttl=58 id=64835 iplen=60 seq=772164156 win=3072 SENT (24.4160s) TCP 192.168.1.101:35868 > 81.251.121.11:38509 A ttl=58 id=36753 iplen=60 seq=772164156 win=3072 ack=0 SENT (24.4160s) TCP 192.168.1.101:35869 > 81.251.121.11:38509 FPU ttl=40 id=1236 iplen=60 seq=772164156 win=1024 SENT (24.4170s) UDP 192.168.1.101:35856 > 81.251.121.11:38509 ttl=59 id=62904 iplen=328 SENT (26.4560s) TCP 192.168.1.101:35863 > 81.251.121.11:11523 SE ttl=50 id=21205 iplen=60 seq=772164156 win=3072 SENT (26.4560s) TCP 192.168.1.101:35864 > 81.251.121.11:11523 ttl=45 id=42105 iplen=60 seq=772164156 win=2048 SENT (26.4560s) TCP 192.168.1.101:35865 > 81.251.121.11:11523 SFPU ttl=39 id=60506 iplen=60 seq=772164156 win=4096 SENT (26.4560s) TCP 192.168.1.101:35866 > 81.251.121.11:11523 A ttl=53 id=23609 iplen=60 seq=772164156 win=2048 ack=0 SENT (26.4560s) TCP 192.168.1.101:35867 > 81.251.121.11:38509 S ttl=38 id=14273 iplen=60 seq=772164156 win=3072 SENT (26.4570s) TCP 192.168.1.101:35868 > 81.251.121.11:38509 A ttl=47 id=22487 iplen=60 seq=772164156 win=4096 ack=0 SENT (26.4570s) TCP 192.168.1.101:35869 > 81.251.121.11:38509 FPU ttl=45 id=12715 iplen=60 seq=772164156 win=2048 SENT (26.4570s) UDP 192.168.1.101:35856 > 81.251.121.11:38509 ttl=59 id=62904 iplen=328 SENT (28.4960s) TCP 192.168.1.101:35857 > 81.251.121.11:11523 S ttl=59 id=34904 iplen=60 seq=772164157 win=4096 SENT (28.9040s) TCP 192.168.1.101:35858 > 81.251.121.11:11523 S ttl=45 id=40382 iplen=60 seq=772164158 win=2048 SENT (29.3120s) TCP 192.168.1.101:35859 > 81.251.121.11:11523 S ttl=50 id=64669 iplen=60 seq=772164159 win=3072 SENT (29.7200s) TCP 192.168.1.101:35860 > 81.251.121.11:11523 S ttl=55 id=6995 iplen=60 seq=772164160 win=4096 SENT (30.1260s) TCP 192.168.1.101:35861 > 81.251.121.11:11523 S ttl=54 id=21570 iplen=60 seq=772164161 win=3072 SENT (30.5350s) TCP 192.168.1.101:35862 > 81.251.121.11:11523 S ttl=40 id=61197 iplen=60 seq=772164162 win=1024 Insufficient responses for TCP sequencing (0), OS detection may be less accurate Failed exact match #1 (0-based): T1(Resp=N) T2(Resp=N) T3(Resp=N) T4(Resp=N) T5(Resp=N) T6(Resp=N) T7(Resp=N) PU(Resp=N) Failed exact match #2 (0-based): T1(Resp=N) T2(Resp=N) T3(Resp=N) T4(Resp=N) T5(Resp=N) T6(Resp=N) T7(Resp=N) PU(Resp=N) Host 81.251.121.11 appears to be up ... good. Interesting ports on 81.251.121.11: PORT STATE SERVICE VERSION 11523/tcp open ssh OpenSSH 4.5 (protocol 2.0) Too many fingerprints match this host to give specific OS details TCP/IP fingerprint: SInfo(V=4.11%P=x86_64-pc-linux-gnu%D=11/11%Tm=455507C8%O=11523%C=-1) T1(Resp=N) T2(Resp=N) T3(Resp=N) T4(Resp=N) T5(Resp=N) T6(Resp=N) T7(Resp=N) PU(Resp=N) Final times for host: srtt: 81553 rttvar: 81553 to: 407765 Nmap finished: 1 IP address (1 host up) scanned in 32.597 seconds Raw packets sent: 67 (5612B) | Rcvd: 7 (463B) 00:14:16 ~ #