nmap -sT -O -vv 200.242.52.9 Starting Nmap 4.20 ( http://insecure.org ) at 2007-10-17 23:04 AMT Initiating Parallel DNS resolution of 1 host. at 23:04 Completed Parallel DNS resolution of 1 host. at 23:04, 0.08s elapsed Initiating Connect() Scan at 23:04 Scanning 200.242.52.9 [1697 ports] Discovered open port 53/tcp on 200.242.52.9 Discovered open port 25/tcp on 200.242.52.9 Discovered open port 3389/tcp on 200.242.52.9 Discovered open port 21/tcp on 200.242.52.9 Discovered open port 80/tcp on 200.242.52.9 Connect() Scan Timing: About 15.36% done; ETC: 23:07 (0:02:46 remaining) Discovered open port 1032/tcp on 200.242.52.9 Discovered open port 1029/tcp on 200.242.52.9 Increasing send delay for 200.242.52.9 from 0 to 5 due to max_successful_tryno increase to 4 Increasing send delay for 200.242.52.9 from 5 to 10 due to 11 out of 11 dropped probes since last increase. Increasing send delay for 200.242.52.9 from 10 to 20 due to 11 out of 11 dropped probes since las t increase. Discovered open port 1025/tcp on 200.242.52.9 Discovered open port 1031/tcp on 200.242.52.9 Connect() Scan Timing: About 55.41% done; ETC: 23:10 (0:02:39 remaining) Increasing send delay for 200.242.52.9 from 20 to 40 due to max_successful_tryno increase to 5 Increasing send delay for 200.242.52.9 from 40 to 80 due to max_successful_tryno increase to 6 Increasing send delay for 200.242.52.9 from 80 to 160 due to 11 out of 11 dropped probes since la st increase. Discovered open port 135/tcp on 200.242.52.9 Discovered open port 1030/tcp on 200.242.52.9 Completed Connect() Scan at 23:10, 363.28s elapsed (1697 total ports) Initiating OS detection (try #1) against 200.242.52.9 Retrying OS detection (try #2) against 200.242.52.9 Initiating gen1 OS Detection against 200.242.52.9 at 379.857s For OSScan assuming port 21 is open, 1 is closed, and neither are firewalled For OSScan assuming port 21 is open, 1 is closed, and neither are firewalled For OSScan assuming port 21 is open, 1 is closed, and neither are firewalled Host 200.242.52.9 appears to be up ... good. Interesting ports on 200.242.52.9: Not shown: 1678 closed ports PORT STATE SERVICE 21/tcp open ftp 25/tcp open smtp 53/tcp open domain 80/tcp open http 135/tcp open msrpc 137/tcp filtered netbios-ns 138/tcp filtered netbios-dgm 139/tcp filtered netbios-ssn 445/tcp filtered microsoft-ds 1025/tcp open NFS-or-IIS 1029/tcp open ms-lsa 1030/tcp open iad1 1031/tcp open iad2 1032/tcp open iad3 1433/tcp filtered ms-sql-s 1434/tcp filtered ms-sql-m 3389/tcp open ms-term-serv 12345/tcp filtered NetBus 12346/tcp filtered NetBus Device type: general purpose Running (JUST GUESSING) : Microsoft Windows 2003|XP|2000 (93%) OS fingerprint not ideal because: Host distance (11 network hops) is greater than ten Aggressive OS guesses: Microsoft Windows 2003 Server SP1 (93%), Microsoft Windows XP SP2 (88%), M icrosoft Windows XP SP2 (firewall disabled) (88%), Microsoft Windows 2000 SP4 (85%) No exact OS matches for host (test conditions non-ideal). TCP/IP fingerprint by osscan system #2: SCAN(V=4.20%D=10/17%OT=21%CT=1%CU=34628%PV=N%DS=11%G=N%TM=4716CEC7%P=i486-slackware-linux-gnu) SEQ(SP=100%GCD=1%ISR=10E%TI=I%TS=0) SEQ(SP=FF%GCD=1%ISR=10E%TI=I%TS=0) OPS(O1=M5ACNW0NNT00NNS%O2=M5ACNW0NNT00NNS%O3=M5ACNW0NNT00%O4=M5ACNW0NNT00NNS%O5=M5ACNW0NNT00NNS%O 6=M5ACNNT00NNS) WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000) ECN(R=Y%DF=N%T=80%W=4000%O=M5ACNW0NNS%CC=N%Q=) T1(R=Y%DF=N%T=80%S=O%A=S+%F=AS%RD=0%Q=) T2(R=Y%DF=N%T=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=) T3(R=Y%DF=N%T=80%W=4000%S=O%A=S+%F=AS%O=M5ACNW0NNT00NNS%RD=0%Q=) T4(R=Y%DF=N%T=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=) T5(R=Y%DF=N%T=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=) T6(R=Y%DF=N%T=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=) T7(R=Y%DF=N%T=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=) U1(R=Y%DF=N%T=80%TOS=0%IPL=B0%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=D3E6%RUL=G%RUD=G) IE(R=N) Network Distance: 11 hops TCP Sequence Prediction: Difficulty=0 (Trivial joke) IPID Sequence Generation: Incremental OS detection performed. Please report any incorrect results at http://insecure.org/nmap/submit/ . Nmap finished: 1 IP address (1 host up) scanned in 391.922 seconds Raw packets sent: 82 (7116B) | Rcvd: 73 (4856B)