# Nmap 4.20 scan initiated Sun May 13 21:48:24 2007 as: nmap -p1-65535 -r -O2 -oA mpgh -v -v mpgh.net Interesting ports on *** (66.90.118.43): Not shown: 65488 closed ports PORT STATE SERVICE 21/tcp open ftp 25/tcp filtered smtp 53/tcp open domain 80/tcp open http 110/tcp open pop3 135/tcp filtered msrpc 136/tcp filtered profile 137/tcp filtered netbios-ns 138/tcp filtered netbios-dgm 139/tcp filtered netbios-ssn 411/tcp filtered rmt 443/tcp open https 445/tcp filtered microsoft-ds 593/tcp filtered http-rpc-epmap 707/tcp filtered unknown 1026/tcp open LSA-or-nterm 1028/tcp open unknown 1111/tcp open unknown 1433/tcp filtered ms-sql-s 1720/tcp filtered H.323/Q.931 1935/tcp open rtmp 2112/tcp open kip 2331/tcp open unknown 3306/tcp open mysql 3389/tcp open ms-term-serv 4111/tcp filtered unknown 4444/tcp filtered krb524 6667/tcp open irc 6697/tcp open unknown 7217/tcp open unknown 8000/tcp open http-alt 8001/tcp open unknown 8021/tcp open ftp-proxy 8022/tcp open unknown 8080/tcp open http-proxy 8401/tcp open unknown 8402/tcp open unknown 8425/tcp open unknown 8443/tcp open https-alt 8880/tcp open unknown 9876/tcp open sd 11110/tcp open unknown 14534/tcp open unknown 19350/tcp open unknown 51234/tcp open unknown 54509/tcp open unknown 63631/tcp open unknown Device type: general purpose Running (JUST GUESSING) : Microsoft Windows 2003 (87%) OS fingerprint not ideal because: Host distance (11 network hops) is greater than ten Aggressive OS guesses: Microsoft Windows 2003 Server SP1 (87%) No exact OS matches for host (test conditions non-ideal). TCP/IP fingerprint by osscan system #2: SCAN(V=4.20%D=5/13%OT=21%CT=1%CU=32181%PV=N%DS=11%G=N%TM=4647C0AF%P=i686-pc-windows-windows) SEQ(SP=103%GCD=1%ISR=108%TS=0) OPS(O1=M5B4NW0NNT00NNS%O2=M5B4NW0NNT00NNS%O3=M5B4NW0NNT00%O4=M5B4NW0NNT00NNS%O5=M5B4NW0NNT00NNS%O6=M5B4NNT00NNS) OPS(O1=M5B4NW0NNT00NNS%O2=M5B4NW0NNT00NNS%O3=M5B4NW0NNT00%O4=M5B4NW0NNT00NNS%O5=M5B4NW0NNT00NNS%O6=M5B4NNT00NNS) WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000) WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000) ECN(R=N) ECN(R=Y%DF=N%T=85%W=4000%O=M5B4NW0NNS%CC=N%Q=) T1(R=Y%DF=N%T=85%S=O%A=S+%F=AS%RD=0%Q=) T1(R=Y%DF=N%T=85%S=O%A=S+%F=AS%RD=0%Q=) T2(R=N) T2(R=N) T3(R=N) T3(R=N) T4(R=Y%DF=N%T=85%W=0%S=A%A=O%F=R%O=%RD=0%Q=) T4(R=Y%DF=N%T=85%W=0%S=A%A=O%F=R%O=%RD=0%Q=) T5(R=Y%DF=N%T=85%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=) T5(R=Y%DF=N%T=85%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=) T6(R=Y%DF=N%T=85%W=0%S=A%A=O%F=R%O=%RD=0%Q=) T6(R=Y%DF=N%T=85%W=0%S=A%A=O%F=R%O=%RD=0%Q=) T7(R=N) T7(R=N) U1(R=Y%DF=N%T=85%TOS=0%IPL=B0%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G) U1(R=Y%DF=N%T=85%TOS=0%IPL=B0%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G) IE(R=N) IE(R=N) Network Distance: 11 hops OS detection performed. Please report any incorrect results at http://insecure.org/nmap/submit/ . # Nmap run completed at Sun May 13 21:51:43 2007 -- 1 IP address (1 host up) scanned in 199.546 seconds