root@TeleBucara:~# nmap -vv -sV -sS -P0 -O 190.48.201.81

Starting Nmap 4.20 ( http://insecure.org ) at 2007-11-14 17:24 COT
Initiating Parallel DNS resolution of 1 host. at 17:24
Completed Parallel DNS resolution of 1 host. at 17:24, 0.21s elapsed
Initiating SYN Stealth Scan at 17:24
Scanning 190-48-201-81.speedy.com.ar (190.48.201.81) [1697 ports]
Discovered open port 443/tcp on 190.48.201.81
Discovered open port 80/tcp on 190.48.201.81
Discovered open port 85/tcp on 190.48.201.81
Completed SYN Stealth Scan at 17:25, 69.05s elapsed (1697 total ports)
Initiating Service scan at 17:25
Scanning 3 services on 190-48-201-81.speedy.com.ar (190.48.201.81)
Completed Service scan at 17:26, 15.21s elapsed (3 services on 1 host)
Initiating OS detection (try #1) against 190-48-201-81.speedy.com.ar (190.48.201.81)
Retrying OS detection (try #2) against 190-48-201-81.speedy.com.ar (190.48.201.81)
Initiating gen1 OS Detection against 190.48.201.81 at 92.122s
For OSScan assuming port 80 is open, 1 is closed, and neither are firewalled
For OSScan assuming port 80 is open, 1 is closed, and neither are firewalled
For OSScan assuming port 80 is open, 1 is closed, and neither are firewalled
Host 190-48-201-81.speedy.com.ar (190.48.201.81) appears to be up ... good.
Interesting ports on 190-48-201-81.speedy.com.ar (190.48.201.81):
Not shown: 1691 closed ports
PORT      STATE    SERVICE  VERSION
67/tcp    filtered dhcps
68/tcp    filtered dhcpc
80/tcp    open     http     Apache httpd
85/tcp    open     http     Apache httpd
443/tcp   open     ssl/http Apache httpd
27008/tcp filtered flexlm8
Device type: general purpose|VoIP gateway|WAP
Running (JUST GUESSING) : Linux 2.6.X|2.4.X (89%), Occam embedded (87%), Siemens linux (86%)
OS fingerprint not ideal because: Host distance (11 network hops) is greater than ten
Aggressive OS guesses: Linux 2.6.9-42.(x86, SMP) (89%), Linux 2.6.9 - 2.6.12 (x86) (89%), Linux 2.6.15.4 (88%), Occam ONT ON2342 Voice/Video over IP box (87%), Linux 2.4.33 (87%), Linux 2.6.18-em64t (x86-64) (87%), Linux 2.6.15-27-686 (Ubuntu Dapper, X86) (86%), Siemens Gigaset SE515dsl wireless broadband router (86%), Linux 2.4.31 w/grsec (x86) (85%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint by osscan system #2:
SCAN(V=4.20%D=11/14%OT=80%CT=1%CU=31670%PV=N%DS=11%G=N%TM=473B7627%P=i686-pc-linux-gnu)
SEQ(SP=CC%GCD=1%ISR=D1%TI=Z%II=I%TS=A)
SEQ(SP=CB%GCD=1%ISR=D0%TI=Z%II=I%TS=A)
OPS(O1=M584ST11NW6%O2=M584ST11NW6%O3=M584NNT11NW6%O4=M584ST11NW6%O5=M584ST11NW6%O6=M584ST11)
WIN(W1=1680%W2=1680%W3=1680%W4=1680%W5=1680%W6=1680)
ECN(R=Y%DF=Y%T=41%W=16B0%O=M584NNSNW6%CC=N%Q=)
T1(R=Y%DF=Y%T=41%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=Y%DF=Y%T=41%W=1680%S=O%A=S+%F=AS%O=M584ST11NW6%RD=0%Q=)
T3(R=Y%DF=Y%T=41%W=1680%S=O%A=O%F=AS%O=M584ST11NW6%RD=0%Q=)
T4(R=Y%DF=Y%T=41%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T5(R=Y%DF=Y%T=41%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=Y%T=41%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)
T7(R=Y%DF=Y%T=41%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=Y%DF=N%T=41%TOS=0%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
IE(R=Y%DFI=N%T=41%TOSI=Z%CD=S%SI=S%DLI=S)

Uptime: 0.315 days (since Wed Nov 14 09:52:42 2007)
Network Distance: 11 hops
TCP Sequence Prediction: Difficulty=0 (Trivial joke)
IPID Sequence Generation: All zeros

OS and Service detection performed. Please report any incorrect results at http://insecure.org/nmap/submit/ .
Nmap finished: 1 IP address (1 host up) scanned in 121.084 seconds
               Raw packets sent: 1922 (87.616KB) | Rcvd: 1843 (87.378KB)