BlindRomance sellout # nmap -sS -sR -sV -O -PI -PP -PM -PT -PS -PU 69.5.3.202 Starting Nmap 4.01 ( http://www.insecure.org/nmap/ ) at 2007-03-16 21:41 Local time zone must be set--see zic manual page Interesting ports on av1611.org (69.5.3.202): (The 1636 ports scanned but not shown below are in state: closed) PORT STATE SERVICE VERSION 21/tcp open ftp 22/tcp open ssh OpenSSH 3.8.1p1 (protocol 1.99) 23/tcp open telnet Linux telnetd 25/tcp open smtp mailfront smtpd 80/tcp open http Apache httpd 110/tcp open pop3 111/tcp filtered rpcbind 113/tcp open auth 135/tcp filtered msrpc 136/tcp filtered profile 139/tcp filtered netbios-ssn 143/tcp open imap 209/tcp open tam 445/tcp filtered microsoft-ds 465/tcp open smtp mailfront smtpd 515/tcp filtered printer 554/tcp open rtsp 587/tcp open smtp mailfront smtpd 617/tcp filtered sco-dtmgr 993/tcp open imaps 995/tcp open pop3s 1022/tcp open tcpwrapped 1025/tcp open smtp mailfront smtpd 1080/tcp filtered socks 1433/tcp filtered ms-sql-s 1720/tcp filtered H.323/Q.931 2017/tcp filtered cypress-stat 2049/tcp filtered nfs 3128/tcp filtered squid-http 5050/tcp open mmcc 7070/tcp open realserver 8000/tcp open http-alt 9090/tcp open zeus-admin 12345/tcp filtered NetBus 12346/tcp filtered NetBus 31337/tcp filtered Elite 9 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at http://www.insecure.org/cgi-bin/servicefp-submit.cgi : ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port21-TCP:V=4.01%I=7%D=3/16%Time=45FB0F4D%P=i686-pc-linux-gnu%r(NULL,3 SF:4,"220-TwoFTPd\x20server\x20ready\.\r\n220\x20Authenticate\x20first\.\r SF:\n")%r(GenericLines,6C,"220-TwoFTPd\x20server\x20ready\.\r\n220\x20Auth SF:enticate\x20first\.\r\n502\x20Command\x20not\x20supported\.\r\n502\x20C SF:ommand\x20not\x20supported\.\r\n")%r(Help,4F,"220-TwoFTPd\x20server\x20 SF:ready\.\r\n220\x20Authenticate\x20first\.\r\n502\x20No\x20help\x20is\x2 SF:0available\.\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port110-TCP:V=4.01%I=7%D=3/16%Time=45FB0F4D%P=i686-pc-linux-gnu%r(NULL, SF:6,"\+OK\x20\r\n")%r(GenericLines,2E,"\+OK\x20\r\n-ERR\x20Unimplemented\ SF:r\n-ERR\x20Unimplemented\r\n")%r(GetRequest,2E,"\+OK\x20\r\n-ERR\x20Uni SF:mplemented\r\n-ERR\x20Unimplemented\r\n")%r(HTTPOptions,2E,"\+OK\x20\r\ SF:n-ERR\x20Unimplemented\r\n-ERR\x20Unimplemented\r\n")%r(RTSPRequest,2E, SF:"\+OK\x20\r\n-ERR\x20Unimplemented\r\n-ERR\x20Unimplemented\r\n")%r(RPC SF:Check,6,"\+OK\x20\r\n")%r(DNSVersionBindReq,6,"\+OK\x20\r\n")%r(DNSStat SF:usRequest,6,"\+OK\x20\r\n")%r(Help,1A,"\+OK\x20\r\n-ERR\x20Unimplemente SF:d\r\n")%r(SSLSessionReq,1A,"\+OK\x20\r\n-ERR\x20Unimplemented\r\n")%r(S SF:MBProgNeg,6,"\+OK\x20\r\n")%r(X11Probe,6,"\+OK\x20\r\n")%r(LPDString,1A SF:,"\+OK\x20\r\n-ERR\x20Unimplemented\r\n")%r(LDAPBindReq,6,"\+OK\x20\r\n SF:")%r(LANDesk-RC,6,"\+OK\x20\r\n")%r(TerminalServer,6,"\+OK\x20\r\n")%r( SF:NCP,6,"\+OK\x20\r\n")%r(NotesRPC,6,"\+OK\x20\r\n")%r(WMSRequest,6,"\+OK SF:\x20\r\n")%r(oracle-tns,6,"\+OK\x20\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port113-TCP:V=4.01%I=7%D=3/16%Time=45FB0F53%P=i686-pc-linux-gnu%r(GetRe SF:quest,16,",:ERROR:NOT-A-NUMBER\r\n")%r(Help,16,",:ERROR:NOT-A-NUMBER\r\ SF:n")%r(HTTPOptions,16,",:ERROR:NOT-A-NUMBER\r\n")%r(RTSPRequest,16,",:ER SF:ROR:NOT-A-NUMBER\r\n")%r(RPCCheck,16,",:ERROR:NOT-A-NUMBER\r\n")%r(DNSV SF:ersionBindReq,16,",:ERROR:NOT-A-NUMBER\r\n")%r(DNSStatusRequest,16,",:E SF:RROR:NOT-A-NUMBER\r\n")%r(SSLSessionReq,16,",:ERROR:NOT-A-NUMBER\r\n")% SF:r(SMBProgNeg,16,",:ERROR:NOT-A-NUMBER\r\n")%r(X11Probe,16,",:ERROR:NOT- SF:A-NUMBER\r\n")%r(LPDString,16,",:ERROR:NOT-A-NUMBER\r\n")%r(LDAPBindReq SF:,17,"0,:ERROR:SYNTAX-ERROR\r\n")%r(LANDesk-RC,16,",:ERROR:NOT-A-NUMBER\ SF:r\n")%r(TerminalServer,16,",:ERROR:NOT-A-NUMBER\r\n")%r(NCP,16,",:ERROR SF::NOT-A-NUMBER\r\n")%r(NotesRPC,16,",:ERROR:NOT-A-NUMBER\r\n")%r(WMSRequ SF:est,16,",:ERROR:NOT-A-NUMBER\r\n")%r(oracle-tns,16,",:ERROR:NOT-A-NUMBE SF:R\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port143-TCP:V=4.01%I=7%D=3/16%Time=45FB0F4D%P=i686-pc-linux-gnu%r(NULL, SF:17,"\*\x20OK\x20imapfront\x20ready\.\r\n")%r(GetRequest,4A,"\*\x20OK\x2 SF:0imapfront\x20ready\.\r\nGET\x20BAD\x20Unimplemented\x20command\r\n\*\x SF:20BAD\x20Syntax\x20error\r\n")%r(GenericLines,3F,"\*\x20OK\x20imapfront SF:\x20ready\.\r\n\*\x20BAD\x20Syntax\x20error\r\n\*\x20BAD\x20Syntax\x20e SF:rror\r\n")%r(HTTPOptions,4E,"\*\x20OK\x20imapfront\x20ready\.\r\nOPTION SF:S\x20BAD\x20Unimplemented\x20command\r\n\*\x20BAD\x20Syntax\x20error\r\ SF:n")%r(RTSPRequest,4E,"\*\x20OK\x20imapfront\x20ready\.\r\nOPTIONS\x20BA SF:D\x20Unimplemented\x20command\r\n\*\x20BAD\x20Syntax\x20error\r\n")%r(R SF:PCCheck,17,"\*\x20OK\x20imapfront\x20ready\.\r\n")%r(DNSVersionBindReq, SF:17,"\*\x20OK\x20imapfront\x20ready\.\r\n")%r(DNSStatusRequest,17,"\*\x2 SF:0OK\x20imapfront\x20ready\.\r\n")%r(Help,2E,"\*\x20OK\x20imapfront\x20r SF:eady\.\r\nHELP\x20BAD\x20Syntax\x20error\r\n")%r(SSLSessionReq,2C,"\*\x SF:20OK\x20imapfront\x20ready\.\r\n\x16\x03\x20BAD\x20Syntax\x20error\r\n" SF:)%r(SMBProgNeg,17,"\*\x20OK\x20imapfront\x20ready\.\r\n")%r(X11Probe,17 SF:,"\*\x20OK\x20imapfront\x20ready\.\r\n")%r(LPDString,32,"\*\x20OK\x20im SF:apfront\x20ready\.\r\n\x01default\x20BAD\x20Syntax\x20error\r\n")%r(LDA SF:PBindReq,17,"\*\x20OK\x20imapfront\x20ready\.\r\n")%r(LANDesk-RC,17,"\* SF:\x20OK\x20imapfront\x20ready\.\r\n")%r(TerminalServer,17,"\*\x20OK\x20i SF:mapfront\x20ready\.\r\n")%r(NCP,17,"\*\x20OK\x20imapfront\x20ready\.\r\ SF:n")%r(NotesRPC,17,"\*\x20OK\x20imapfront\x20ready\.\r\n")%r(WMSRequest, SF:17,"\*\x20OK\x20imapfront\x20ready\.\r\n")%r(oracle-tns,17,"\*\x20OK\x2 SF:0imapfront\x20ready\.\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port209-TCP:V=4.01%I=7%D=3/16%Time=45FB0F4D%P=i686-pc-linux-gnu%r(Gener SF:icLines,23,"31:ZInvalid\x20message\x20body\x20netstring,")%r(GetRequest SF:,23,"31:ZInvalid\x20message\x20body\x20netstring,")%r(HTTPOptions,23,"3 SF:1:ZInvalid\x20message\x20body\x20netstring,")%r(RTSPRequest,23,"31:ZInv SF:alid\x20message\x20body\x20netstring,")%r(RPCCheck,23,"31:ZInvalid\x20m SF:essage\x20body\x20netstring,")%r(DNSVersionBindReq,23,"31:ZInvalid\x20m SF:essage\x20body\x20netstring,")%r(DNSStatusRequest,23,"31:ZInvalid\x20me SF:ssage\x20body\x20netstring,")%r(Help,23,"31:ZInvalid\x20message\x20body SF:\x20netstring,")%r(SSLSessionReq,23,"31:ZInvalid\x20message\x20body\x20 SF:netstring,")%r(SMBProgNeg,23,"31:ZInvalid\x20message\x20body\x20netstri SF:ng,")%r(X11Probe,23,"31:ZInvalid\x20message\x20body\x20netstring,")%r(L SF:PDString,23,"31:ZInvalid\x20message\x20body\x20netstring,")%r(LDAPBindR SF:eq,23,"31:ZInvalid\x20message\x20body\x20netstring,")%r(LANDesk-RC,23," SF:31:ZInvalid\x20message\x20body\x20netstring,")%r(TerminalServer,23,"31: SF:ZInvalid\x20message\x20body\x20netstring,")%r(NCP,23,"31:ZInvalid\x20me SF:ssage\x20body\x20netstring,")%r(NotesRPC,18,"20:ZZero\x20length\x20mess SF:age,")%r(WMSRequest,23,"31:ZInvalid\x20message\x20body\x20netstring,")% SF:r(oracle-tns,23,"31:ZInvalid\x20message\x20body\x20netstring,"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port554-TCP:V=4.01%I=7%D=3/16%Time=45FB0F4E%P=i686-pc-linux-gnu%r(GetRe SF:quest,D5,"HTTP/1\.0\x20404\x20Not\x20Found\r\nContent-type:\x20text/htm SF:l\nContent-length:\x20143\n\r\n\n\x20Not\x20Found\x20</TIT SF:LE>\n<BODY\x20BGCOLOR=\"#FFFFFF\">\n<FONT\x20FACE=\"Arial,Helvetica,Gen SF:eva\"\x20SIZE=-1>\n<H2>\x20Not\x20Found\x20</H2>\n</BODY>\n</HTML>\n\r\ SF:n")%r(RTSPRequest,10A,"RTSP/1\.0\x20200\x20OK\r\nCSeq:\x200\r\nDate:\x2 SF:0Sat,\x2017\x20Mar\x202007\x2006:43:30\x20GMT\r\nServer:\x20RealMedia\x SF:20Server\x20Version\x206\.0\.3\.353\x20\(linux2\)\r\nPublic:\x20OPTIONS SF:,\x20DESCRIBE,\x20ANNOUNCE,\x20SETUP,\x20GET_PARAMETER,\x20SET_PARAMETE SF:R,\x20TEARDOWN\r\nRealChallenge1:\x20d65999e1ad2908415dc2253f4f394fb3\r SF:\nStatsMask:\x203\r\n\r\n")%r(HTTPOptions,59,"RTSP/1\.0\x20505\x20RTSP\ SF:x20Version\x20not\x20supported\r\nCSeq:\x200\r\nDate:\x20Sat,\x2017\x20 SF:Mar\x202007\x2006:43:36\x20GMT\r\n\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port993-TCP:V=4.01%T=SSL%I=7%D=3/16%Time=45FB0F55%P=i686-pc-linux-gnu%r SF:(NULL,17,"\*\x20OK\x20imapfront\x20ready\.\r\n")%r(GenericLines,3F,"\*\ SF:x20OK\x20imapfront\x20ready\.\r\n\*\x20BAD\x20Syntax\x20error\r\n\*\x20 SF:BAD\x20Syntax\x20error\r\n")%r(GetRequest,4A,"\*\x20OK\x20imapfront\x20 SF:ready\.\r\nGET\x20BAD\x20Unimplemented\x20command\r\n\*\x20BAD\x20Synta SF:x\x20error\r\n")%r(HTTPOptions,4E,"\*\x20OK\x20imapfront\x20ready\.\r\n SF:OPTIONS\x20BAD\x20Unimplemented\x20command\r\n\*\x20BAD\x20Syntax\x20er SF:ror\r\n")%r(RTSPRequest,4E,"\*\x20OK\x20imapfront\x20ready\.\r\nOPTIONS SF:\x20BAD\x20Unimplemented\x20command\r\n\*\x20BAD\x20Syntax\x20error\r\n SF:")%r(RPCCheck,17,"\*\x20OK\x20imapfront\x20ready\.\r\n")%r(DNSVersionBi SF:ndReq,17,"\*\x20OK\x20imapfront\x20ready\.\r\n")%r(DNSStatusRequest,17, SF:"\*\x20OK\x20imapfront\x20ready\.\r\n")%r(Help,2E,"\*\x20OK\x20imapfron SF:t\x20ready\.\r\nHELP\x20BAD\x20Syntax\x20error\r\n")%r(SSLSessionReq,2C SF:,"\*\x20OK\x20imapfront\x20ready\.\r\n\x16\x03\x20BAD\x20Syntax\x20erro SF:r\r\n")%r(SMBProgNeg,17,"\*\x20OK\x20imapfront\x20ready\.\r\n")%r(X11Pr SF:obe,17,"\*\x20OK\x20imapfront\x20ready\.\r\n")%r(LPDString,32,"\*\x20OK SF:\x20imapfront\x20ready\.\r\n\x01default\x20BAD\x20Syntax\x20error\r\n") SF:%r(LDAPBindReq,17,"\*\x20OK\x20imapfront\x20ready\.\r\n")%r(LANDesk-RC, SF:17,"\*\x20OK\x20imapfront\x20ready\.\r\n")%r(TerminalServer,17,"\*\x20O SF:K\x20imapfront\x20ready\.\r\n")%r(NCP,17,"\*\x20OK\x20imapfront\x20read SF:y\.\r\n")%r(NotesRPC,17,"\*\x20OK\x20imapfront\x20ready\.\r\n")%r(WMSRe SF:quest,17,"\*\x20OK\x20imapfront\x20ready\.\r\n")%r(oracle-tns,17,"\*\x2 SF:0OK\x20imapfront\x20ready\.\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port995-TCP:V=4.01%T=SSL%I=7%D=3/16%Time=45FB0F66%P=i686-pc-linux-gnu%r SF:(NULL,6,"\+OK\x20\r\n")%r(GenericLines,2E,"\+OK\x20\r\n-ERR\x20Unimplem SF:ented\r\n-ERR\x20Unimplemented\r\n")%r(GetRequest,2E,"\+OK\x20\r\n-ERR\ SF:x20Unimplemented\r\n-ERR\x20Unimplemented\r\n")%r(HTTPOptions,2E,"\+OK\ SF:x20\r\n-ERR\x20Unimplemented\r\n-ERR\x20Unimplemented\r\n")%r(RTSPReque SF:st,2E,"\+OK\x20\r\n-ERR\x20Unimplemented\r\n-ERR\x20Unimplemented\r\n") SF:%r(RPCCheck,6,"\+OK\x20\r\n")%r(DNSVersionBindReq,6,"\+OK\x20\r\n")%r(D SF:NSStatusRequest,6,"\+OK\x20\r\n")%r(Help,1A,"\+OK\x20\r\n-ERR\x20Unimpl SF:emented\r\n")%r(SSLSessionReq,1A,"\+OK\x20\r\n-ERR\x20Unimplemented\r\n SF:")%r(SMBProgNeg,6,"\+OK\x20\r\n")%r(X11Probe,6,"\+OK\x20\r\n")%r(LPDStr SF:ing,1A,"\+OK\x20\r\n-ERR\x20Unimplemented\r\n")%r(LDAPBindReq,6,"\+OK\x SF:20\r\n")%r(LANDesk-RC,6,"\+OK\x20\r\n")%r(TerminalServer,6,"\+OK\x20\r\ SF:n")%r(NCP,6,"\+OK\x20\r\n")%r(NotesRPC,6,"\+OK\x20\r\n")%r(WMSRequest,6 SF:,"\+OK\x20\r\n")%r(oracle-tns,6,"\+OK\x20\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port7070-TCP:V=4.01%I=7%D=3/16%Time=45FB0F5E%P=i686-pc-linux-gnu%r(GetR SF:equest,D5,"HTTP/1\.0\x20404\x20Not\x20Found\r\nContent-type:\x20text/ht SF:ml\nContent-length:\x20143\n\r\n<HTML>\n<TITLE>\x20Not\x20Found\x20</TI SF:TLE>\n<BODY\x20BGCOLOR=\"#FFFFFF\">\n<FONT\x20FACE=\"Arial,Helvetica,Ge SF:neva\"\x20SIZE=-1>\n<H2>\x20Not\x20Found\x20</H2>\n</BODY>\n</HTML>\n\r SF:\n")%r(RTSPRequest,10A,"RTSP/1\.0\x20200\x20OK\r\nCSeq:\x200\r\nDate:\x SF:20Sat,\x2017\x20Mar\x202007\x2006:43:46\x20GMT\r\nServer:\x20RealMedia\ SF:x20Server\x20Version\x206\.0\.3\.353\x20\(linux2\)\r\nPublic:\x20OPTION SF:S,\x20DESCRIBE,\x20ANNOUNCE,\x20SETUP,\x20GET_PARAMETER,\x20SET_PARAMET SF:ER,\x20TEARDOWN\r\nRealChallenge1:\x2017d85901f39c117a422bf3aa53b5f042\ SF:r\nStatsMask:\x203\r\n\r\n")%r(HTTPOptions,59,"RTSP/1\.0\x20505\x20RTSP SF:\x20Version\x20not\x20supported\r\nCSeq:\x200\r\nDate:\x20Sat,\x2017\x2 SF:0Mar\x202007\x2006:43:51\x20GMT\r\n\r\n"); No exact OS matches for host (If you know what OS is running on it, see http://www.insecure.org/cgi-bin/nmap-submit.cgi). TCP/IP fingerprint: SInfo(V=4.01%P=i686-pc-linux-gnu%D=3/16%Tm=45FB0FE9%O=21%C=1) TSeq(Class=RI%gcd=2%SI=17B88A%IPID=Z%TS=100HZ) TSeq(Class=RI%gcd=1%SI=2F3342%IPID=Z%TS=100HZ) TSeq(Class=RI%gcd=1%SI=2FE2EF%IPID=Z%TS=100HZ) T1(Resp=Y%DF=Y%W=16A0%ACK=S++%Flags=AS%Ops=MNNTNW) T2(Resp=N) T3(Resp=N) T4(Resp=Y%DF=N%W=0%ACK=S%Flags=R%Ops=) T5(Resp=Y%DF=Y%W=0%ACK=S++%Flags=AR%Ops=) T6(Resp=Y%DF=N%W=0%ACK=S%Flags=R%Ops=) T7(Resp=N) PU(Resp=Y%DF=N%TOS=0%IPLEN=164%RIPTL=148%RID=E%RIPCK=E%UCK=E%ULEN=134%DAT=E) Uptime 7.023 days (since Fri Mar 9 21:12:48 2007) Service Info: OS: Linux Nmap finished: 1 IP address (1 host up) scanned in 213.243 seconds