Scan of Emo-Corner.com Ports 1-5000 # Nmap 4.20 scan initiated Sat Dec 22 22:02:22 2007 as: nmap -vv -D google.com -O -P0 -sV --version-all -sSU -p1-5000 -r -oN emoports.txt A emo-corner.com Insufficient responses for TCP sequencing (0), OS detection may be less accurate Interesting ports on 75.125.94.18: Not shown: 4996 open|filtered ports, 4980 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp PureFTPd 25/tcp open smtp Exim smtpd 4.68 53/tcp open domain 80/tcp open http Apache httpd 1.3.37 110/tcp open pop3 Courier pop3d 143/tcp open imap Courier Imapd (released 2005) 443/tcp open http Apache httpd 1.3.37 465/tcp open ssl OpenSSL 953/tcp closed rndc 993/tcp open ssl OpenSSL 995/tcp open ssl OpenSSL 2077/tcp open unknown 2078/tcp open ssl OpenSSL 2082/tcp open http Control Panel httpd 11.2.2 2083/tcp open ssl OpenSSL 2086/tcp open http Control Panel httpd 11.2.2 2087/tcp open ssl OpenSSL 2095/tcp open http Control Panel httpd 11.2.2 2096/tcp open ssl OpenSSL 20/udp closed ftp-data 21/udp closed ftp 53/udp open domain ISC Bind (Fake version: Keep Guessing) 953/udp closed unknown 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at http://www.insecure.org/cgi-bin/servicefp-submit.cgi : SF-Port2077-TCP:V=4.20%I=9%D=12/22%Time=476DDE57%P=i686-pc-windows-windows SF:%r(GenericLines,A8,"HTTP/1\.1\x20401\x20Unauthorized\r\nDate:\x20Sun,\x SF:2023\x20Dec\x202007\x2004:04:25\x20GMT\r\nServer:\x20Cpanel::Httpd\x20l SF:ike\x20Apache\r\nConnection:\x20close\r\nWWW-Authenticate:\x20Basic\x20 SF:realm=\"cPanel\x20WebDisk\"\r\n\r\n")%r(GetRequest,A8,"HTTP/1\.1\x20401 SF:\x20Unauthorized\r\nDate:\x20Sun,\x2023\x20Dec\x202007\x2004:04:25\x20G SF:MT\r\nServer:\x20Cpanel::Httpd\x20like\x20Apache\r\nConnection:\x20clos SF:e\r\nWWW-Authenticate:\x20Basic\x20realm=\"cPanel\x20WebDisk\"\r\n\r\n" SF:)%r(HTTPOptions,A8,"HTTP/1\.1\x20401\x20Unauthorized\r\nDate:\x20Sun,\x SF:2023\x20Dec\x202007\x2004:04:25\x20GMT\r\nServer:\x20Cpanel::Httpd\x20l SF:ike\x20Apache\r\nConnection:\x20close\r\nWWW-Authenticate:\x20Basic\x20 SF:realm=\"cPanel\x20WebDisk\"\r\n\r\n")%r(RTSPRequest,A8,"HTTP/1\.1\x2040 SF:1\x20Unauthorized\r\nDate:\x20Sun,\x2023\x20Dec\x202007\x2004:04:25\x20 SF:GMT\r\nServer:\x20Cpanel::Httpd\x20like\x20Apache\r\nConnection:\x20clo SF:se\r\nWWW-Authenticate:\x20Basic\x20realm=\"cPanel\x20WebDisk\"\r\n\r\n SF:")%r(FourOhFourRequest,A8,"HTTP/1\.1\x20401\x20Unauthorized\r\nDate:\x2 SF:0Sun,\x2023\x20Dec\x202007\x2004:05:03\x20GMT\r\nServer:\x20Cpanel::Htt SF:pd\x20like\x20Apache\r\nConnection:\x20close\r\nWWW-Authenticate:\x20Ba SF:sic\x20realm=\"cPanel\x20WebDisk\"\r\n\r\n"); Device type: general purpose Running: Linux 2.4.X|2.6.X OS details: Linux 2.4.19 - 2.4.20, Linux 2.4.21 (x86 SuSE), Linux 2.6.5 - 2.6.11 OS Fingerprint: OS:SCAN(V=4.20%D=12/23%OT=21%CT=20%CU=%PV=N%DS=11%G=Y%TM=476E402F%P=i686-pc OS:-windows-windows)TSeq(Class=TD%gcd=66%SI=0%IPID=Z%TS=1000HZ)T1(Resp=N)T1 OS:(Resp=Y%DF=Y%W=16A0%ACK=S++%Flags=AS%Ops=MNNTNW)T2(Resp=N)T2(Resp=N)T3(R OS:esp=N)T3(Resp=N)T4(Resp=Y%DF=Y%W=0%ACK=O%Flags=R%Ops=)T4(Resp=Y%DF=Y%W=0 OS:%ACK=O%Flags=R%Ops=)T5(Resp=Y%DF=Y%W=0%ACK=S++%Flags=AR%Ops=)T5(Resp=Y%D OS:F=Y%W=0%ACK=S++%Flags=AR%Ops=)T6(Resp=Y%DF=Y%W=0%ACK=O%Flags=R%Ops=)T6(R OS:esp=Y%DF=Y%W=0%ACK=O%Flags=R%Ops=)T7(Resp=N)T7(Resp=N)PU(Resp=Y%DF=N%TOS OS:=0%IPLEN=164%RIPTL=148%RID=E%RIPCK=E%UCK=F%ULEN=134%DAT=E)PU(Resp=Y%DF=N OS:%TOS=0%IPLEN=164%RIPTL=148%RID=E%RIPCK=E%UCK=F%ULEN=134%DAT=E) Network Distance: 11 hops Service Info: Hosts: host.prosavedesigns.com, prosave.theplanet.host; OS: Unix OS and Service detection performed. Please report any incorrect results at http://insecure.org/nmap/submit/ . # Nmap run completed at Sun Dec 23 05:02:07 2007 -- 1 IP address (1 host up) scanned in 25185.579 seconds