[root@acmesys /]# nmap -sS -P0 -O -vv 72.29.94.88 > scan.txt [root@acmesys /]# cat scan.txt Starting nmap V. 3.00 ( www.insecure.org/nmap/ ) Host dime131.dizinc.com (72.29.94.88) appears to be up ... good. Initiating SYN Stealth Scan against dime131.dizinc.com (72.29.94.88) Adding open port 143/tcp Adding open port 993/tcp Adding open port 80/tcp Adding open port 21/tcp Adding open port 465/tcp Adding open port 110/tcp Adding open port 25/tcp Adding open port 3306/tcp Adding open port 26/tcp Adding open port 995/tcp Adding open port 53/tcp Adding open port 443/tcp The SYN Stealth Scan took 296 seconds to scan 1601 ports. For OSScan assuming that port 21 is open and port 1 is closed and neither are firewalled For OSScan assuming that port 21 is open and port 1 is closed and neither are firewalled For OSScan assuming that port 21 is open and port 1 is closed and neither are firewalled Interesting ports on dime131.dizinc.com (72.29.94.88): (The 1557 ports scanned but not shown below are in state: filtered) Port State Service 1/tcp closed tcpmux 20/tcp closed ftp-data 21/tcp open ftp 22/tcp closed ssh 25/tcp open smtp 26/tcp open unknown 53/tcp open domain 80/tcp open http 110/tcp open pop-3 143/tcp open imap2 443/tcp open https 465/tcp open smtps 993/tcp open imaps 995/tcp open pop3s 3306/tcp open mysql 6666/tcp closed irc-serv 20005/tcp closed btx 22273/tcp closed wnn6 22289/tcp closed wnn6_Cn 22305/tcp closed wnn6_Kr 22321/tcp closed wnn6_Tw 22370/tcp closed hpnpd 26208/tcp closed wnn6_DS 27374/tcp closed subseven 27665/tcp closed Trinoo_Master 31337/tcp closed Elite 32770/tcp closed sometimes-rpc3 32771/tcp closed sometimes-rpc5 32772/tcp closed sometimes-rpc7 32773/tcp closed sometimes-rpc9 32774/tcp closed sometimes-rpc11 32775/tcp closed sometimes-rpc13 32776/tcp closed sometimes-rpc15 32777/tcp closed sometimes-rpc17 32778/tcp closed sometimes-rpc19 32779/tcp closed sometimes-rpc21 32780/tcp closed sometimes-rpc23 32786/tcp closed sometimes-rpc25 32787/tcp closed sometimes-rpc27 43188/tcp closed reachout 44442/tcp closed coldfusion-auth 44443/tcp closed coldfusion-auth 47557/tcp closed dbbrowse 49400/tcp closed compaqdiag No exact OS matches for host (If you know what OS is running on it, see http://www.insecure.org/cgi-bin/nmap-submit.cgi). TCP/IP fingerprint: SInfo(V=3.00%P=i686-pc-linux-gnu%D=2/28%Time=45E48F28%O=21%C=1) TSeq(Class=RI%gcd=1%SI=FC9EB%IPID=Z%TS=U) TSeq(Class=RI%gcd=1%SI=FCE66%IPID=Z%TS=U) TSeq(Class=RI%gcd=1%SI=FC3E5%IPID=Z%TS=U) T1(Resp=Y%DF=Y%W=16D0%ACK=S++%Flags=AS%Ops=M) T2(Resp=N) T3(Resp=N) T4(Resp=Y%DF=Y%W=0%ACK=O%Flags=R%Ops=) T5(Resp=Y%DF=Y%W=0%ACK=S++%Flags=AR%Ops=) T6(Resp=Y%DF=Y%W=0%ACK=O%Flags=R%Ops=) T7(Resp=N) PU(Resp=N) TCP Sequence Prediction: Class=random positive increments Difficulty=1033189 (Good luck!) TCP ISN Seq. Numbers: 8E94D3F6 8EBBC58A 8EB1F049 8EC7BD87 8EB4649F 8E7E42AD IPID Sequence Generation: All zeros Nmap run completed -- 1 IP address (1 host up) scanned in 315 seconds [root@acmesys /]#