[root@83-142-83-186 ~]# nmap -A 141.30.214.62 -vv Starting Nmap 4.10 ( http://www.insecure.org/nmap/ ) at 2006-11-15 23:22 CET DNS resolution of 1 IPs took 0.00s. Initiating SYN Stealth Scan against chaos2.wh20.tu-dresden.de (141.30.214.62) [1679 ports] at 23:22 Discovered open port 443/tcp on 141.30.214.62 Discovered open port 21/tcp on 141.30.214.62 Discovered open port 80/tcp on 141.30.214.62 Discovered open port 1030/tcp on 141.30.214.62 Discovered open port 3306/tcp on 141.30.214.62 SYN Stealth Scan Timing: About 33.95% done; ETC: 23:24 (0:00:58 remaining) Discovered open port 2105/tcp on 141.30.214.62 Discovered open port 5101/tcp on 141.30.214.62 The SYN Stealth Scan took 88.97s to scan 1679 total ports. Initiating service scan against 7 services on chaos2.wh20.tu-dresden.de (141.30.214.62) at 23:24 Service scan Timing: About 42.86% done; ETC: 23:25 (0:00:42 remaining) The service scan took 43.79s to scan 7 services on 1 host. For OSScan assuming port 21 is open, 20 is closed, and neither are firewalled Host chaos2.wh20.tu-dresden.de (141.30.214.62) appears to be up ... good. Interesting ports on chaos2.wh20.tu-dresden.de (141.30.214.62): Not shown: 1669 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open tcpwrapped 80/tcp open http? 143/tcp closed imap 443/tcp open https? 1030/tcp open msrpc Microsoft Windows RPC 2105/tcp open msrpc Microsoft Windows RPC 3306/tcp open mysql MySQL (unauthorized) 5100/tcp closed admd 5101/tcp open admdog? 2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at http://www.insecure.org/cgi-bin/servicefp-submit.cgi : ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port80-TCP:V=4.10%I=7%D=11/15%Time=455B939C%P=i686-redhat-linux-gnu%r(G SF:etRequest,1A,"HTTP/1\.0\x20404\x20Not\x20Found\r\n\r\n")%r(HTTPOptions, SF:29,"\x9e\xdeJ\x85\xc7\?\xa7\xc6\xb7ab:\xf7\xees\xce\x17\xa7\xa9\x17\xde SF:\xc7\xfd\x9e-\xfe0\x12\x06\t\xf3\x03V:\xbaY\0\r\x91\x8e\xa5")%r(RTSPReq SF:uest,42,"\x96y\x9f\x19\xbe\xea\x12\xcb\x08\x20\xa2\x952\*Y\x9f\xc6\xfe\ SF:xeaJ\x82\x84<\x8e/-\xdf\x80`\x11\xe8T\x91\xfc\x11\x07:\"\"\^\x8b\xeb\xc SF:30\x16\+\xb0W\x8e,\xb4}\xb61\x80iD\xcf\xe7\xde\xb5\xed\x82\xe3s\xcd")%r SF:(X11Probe,46,"\xfb>Ir\x03\xfc\xd2\x9b\x009,\+\xe8\xc7\xecD3\x05\xf7\x04 SF:Q\xa1\x1b\xcc\xf7\xab\$l\+r\xf3\xeb\xb4`\xb3R\x95\x90\xc3\xd5\xed\xf8\x SF:e2C\x9f<\xabKXn\xe4K\xbc\)oV\x156\^\xf6\xbc\xf3\xa2\xd2\xb1X\xe3\xfc\x8 SF:6\x15")%r(FourOhFourRequest,1A,"HTTP/1\.0\x20404\x20Not\x20Found\r\n\r\ SF:n")%r(RPCCheck,3D,"i\xc8\xbf\xeeV\xf0\x8cZ\xf1\xae9\x9b>=\x0b\xf4\x81\x SF:80\xf2wP\x1d\x81Z@\xfc\x8b\xa9\xdfBF=\xce\xf2\xb2:\x0e\x8f\xf5\r\xd1\xd SF:32\x0e-T\xd7\xa7V`rI\xa3\xf2\x17\.\xde\xe3I\xe4\xf2")%r(DNSVersionBindR SF:eq,2E,"\xcc\xeaf\xc0\x8e\x19\x9b\tYH\x1e\xe2g\xf6\xb1\+\\\xc5\x94\xd3\x SF:ddzN\xb3\x93\x05I,\xad\xbf\x91\x9e\xa26\xf1\x9d\xa4\x94\x1bB\x1e\x07\x8 SF:2X&\x8b")%r(DNSStatusRequest,44,"\xeb\"u>C\xde\xb4\xb3\x81\xf1fPK\^\)\x SF:ca\)\x99\x92X\x9f\x86\x84iy\xd8\xae\+\xfaH#\xde\x9e\x06\xfc#\x85\r\xb1\ SF:xdd\x0bI\xaf\xe7{x\x15\x19\xff\x97\x97\x82\xa2\xc7S&k\xef\xac\xd2\x9a\x SF:d0\xf7\x93@\xbd\xfd\t")%r(SSLSessionReq,2A,"E%\x89{\xbb\*\+\x04\tB\xce\ SF:xfbY\xb4\x0c\xd9u\xb3\xf5~\x84H\x91\.\x1f\x84J\xfeA\xbe\x8b\)\xd6e\x9e\ SF:xb6\xf8\x8f\x1b\x82IE")%r(SMBProgNeg,30,"\x063\xd9s\|\xa2\x1d\xa7\xa9\x SF:1b\x99\x171~\?\)\xab\x88\xbdo\xbb\xbcQ,\x85\xc8\xb19\xda\x05\xde\xa6U8v SF:\xc8\xbf\xc8\xab\xb4\xf8\xedd3\xb8a\x83}")%r(LPDString,39,"nX\xc4\x16y\ SF:xb9JsP\xf7\xbc\xf6\xe5\xdf,\xb5\x1f\xf1\xdb6\x8dX\"\x10\)\x13C\xa4\[FVI SF:\xc0\xe3\xfbg2\x95\xb4\xf2I\xe3\xc1\x81\(\xef\x9f\x9d\x83uL\x118\x89\x0 SF:5\xd2\xef")%r(LDAPBindReq,43,"P\xee\xb3m\xb9=a\x91#\xde\xfb\x80\x80\xd6 SF:\xd1\x84\xd9XE\xc0\xbfeRN\xf8\xd0\xcbC\xb7\x06\x03\x9dao1j\xb6\^\xb7\xd SF:6\^\xcez\x15q\x16\xa6t\t\xbf\x80\xa0p\xaf\x94\xe7\xb5\xbf5s\\\xe8\xd3\x SF:a2\xec\x96\xca")%r(LANDesk-RC,3F,"M&\xe3\x1d\x90_\x91\x96mx\xad\xda\xe2 SF:\xf1p\xf6\xb9\xef;6\x19O\x209\x9b\xe27\xfe\x08\xdfo\r\x85\xed\xea\x19#L SF:u\x9a\x12\xe23\x99\xa2,aW\x87\xdcY\xd0\xbdqC\xf4=\x064S>\xc6\xf5"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port443-TCP:V=4.10%I=7%D=11/15%Time=455B939C%P=i686-redhat-linux-gnu%r( SF:HTTPOptions,48,"\xa9\x95\x16\xc9K\xd5\)\x8fo8\xfd\xdd\^@\xb8\xb0mj\xbd\ SF:xa2m\x1c\xa0\x94=\)\xad\x05\xbe\xf4%\xb0\xb5}\\\n\xaaEh\x19\xcf\x8a&\xa SF:5\x83x\x1a\xc4\xd5qY\xc8\xd7P>l\xcbZ\xc6\x0e\xaa\xb39\xe7\xcf\t\xdc\x82 SF:H\x8cA<")%r(SSLSessionReq,36,"\xe1\xf1n\xac&\xb1i\xf8\|\xcd\*\x82<\x91\ SF:xe9\x9fJ\x80\xf5\xea\xf5\x86\x99\0\xed:\xbf\x0e\x95\xa1=\x17\xfb:\xfe\x SF:c6b\[\xd1R\x98\xd4\x12\x90\xf3\x13k\xa4zjR\xb0\x01\xf3")%r(X11Probe,3D, SF:"5\x8e\x1eI>\xf8nE\xc6S`/Ntb\x1d\xaa\x20\x94Ipn0\x20\xd7_\xe7\x83#\]\xb SF:0t\.\$\x03\x8a\xf3\xbe%\xab\xbc\x83\x07\x99\x17;9GA\xbb\x86`\xb0\xa9\xd SF:8\$U\xbd\x20\x82\xbb")%r(GetRequest,1A,"HTTP/1\.0\x20404\x20Not\x20Foun SF:d\r\n\r\n")%r(RTSPRequest,43,"KnP\xa4\xd4r\xe83\x80{K\x88\)\xf3\xbc\xb4 SF:\x93\xc3!\$\xfct\x14\xbas\xe9i\x88\x18\x9dC\xd9Y\xd1}!ZF\xd2~\x9d\x87\x SF:e3\x13\.\x20{\|\x0cHPU\+\x1a\)\xd9\xf3\xf8\x16tk\xe4Ec\xbb\xa6\xda")%r( SF:RPCCheck,1A,"\xe8\xd7YWC\x16\x20Zw\*'v\x7f\xfdT\tJ\t\x9f\x121y\x0b\xabU SF:\x8b")%r(DNSVersionBindReq,1D,"\x98C\xa5\x0el\r\x03\]m\x9e\xc4\xef\x99\ SF:x02q\xa9\xae\xa7\xceg\xcdI\xc6\x85\x11\xe4\xaao\t")%r(DNSStatusRequest, SF:2F,"F\x134\xc9A\r\$\xd7\ra\x1b\xe4\xb8\xc5\x80h`2\xdf\xfb\x8b%F\x11\xd8 SF:dp{\xd4\x15\xb7\x01H\xed\x1f\xce\xf3\x1bA\xb28\xee5\+\xb8\xa8\xc2")%r(S SF:MBProgNeg,38,"\xbb&\xe3\x04E\xf4\x91\xa1\x95\x05shD\x80\x16R\xca\xf1\x1 SF:4\xba\xe44Y\)\xb3d\x15\x11w\xb7\xc0T\x0fJ\x8c-\xaf\x9b\x18\xe3{\x9f\xd7 SF:\xe0!\xc0\x7fc\xaf&\xdd\x9b\xfe\?\x03\x07")%r(FourOhFourRequest,1A,"HTT SF:P/1\.0\x20404\x20Not\x20Found\r\n\r\n")%r(LPDString,48,"p\xc4\x84\xfa\x SF:e4jR\x83\xba\$\x12\x85\xbb\xab\x97\xca\[%\xe5\xa17\x97`xt\]27RYaW\xbcL\ SF:x1a\xe3\x1fa\xc6\xbc\x01w\x04\xdc\x8b\xd23\xa1\xe0o\xc8b\xb2g\xb4'\x07\ SF:x9a\nh\xe4-W{%\xd0\|\x0f\xf2;\xd8\xe4")%r(LDAPBindReq,27,"\x0f\x8cVo\x9 SF:d\xf2\x1f\x15\x99\xb7\x81\xbe>N\xac\xa5}\xfe9'\x0f\x99\x92`\xbb\x1ep\xb SF:8u\xf4\"\x16\x99\xdac\xc5\xc8\xa8\xde")%r(LANDesk-RC,2D,"E5\xe9\xe3\xa2 SF:\\\xcc,q\?\x9a\x8fY\]\x9fg\*\xb3\xb5\[\xc8\x94I\x1f\x13'\xac\x18\xf5\xb SF:9\x8e\xc8\xa6\xf1\x03c\x1d\xb2\0\x84\x91\xe5\xbb\.u")%r(TerminalServer, SF:1B,"\xd7k\x7f%\x13\x9d{\xebtj\x8a\|d\xa8\x8a\x8c\xab\xeaJ\|V\xe1N\xb8\x SF:e0\x08\x16"); Device type: general purpose|firewall Running: Microsoft Windows 2003/.NET|NT/2K/XP, Symantec Windows NT/2K/XP OS details: Microsoft Windows 2003 Server or XP SP2, Microsoft Windows XP Pro SP2, Symantec Enterprise Firewall 7.0 running on Windows 2000 SP2 OS Fingerprint: TSeq(Class=TR%TS=0) T1(Resp=Y%DF=N%W=402E%ACK=S++%Flags=AS%Ops=MNWNNT) T2(Resp=N) T3(Resp=N) T4(Resp=N) T5(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=) T6(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=) T7(Resp=N) PU(Resp=N) TCP Sequence Prediction: Class=truly random Difficulty=9999999 (Good luck!) IPID Sequence Generation: Busy server or unknown class Service Info: OS: Windows Nmap finished: 1 IP address (1 host up) scanned in 134.670 seconds Raw packets sent: 5041 (222.624KB) | Rcvd: 2065 (95.192KB)