Starting Nmap 4.03 ( http://www.insecure.org/nmap ) at 2006-10-24 00:20 GMT Dayl
ight Time
Warning: OS detection will be MUCH less reliable because we did not find at lea
st 1 open and 1 closed TCP port
Interesting ports on 172.16.31.158:
(The 1672 ports scanned but not shown below are in state: filtered)
PORT STATE SERVICE VERSION
80/tcp open http?
443/tcp open https?
2 services unrecognized despite returning data. If you know the service/version,
please submit the following fingerprints at http://www.insecure.org/cgi-bin/ser
vicefp-submit.cgi :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=4.03%I=7%D=10/24%Time=453D4E74%P=i686-pc-windows-windows%r
SF:(GetRequest,1A,"HTTP/1\.0\x20404\x20Not\x20Found\r\n\r\n")%r(HTTPOption
SF:s,28,"\xae\n\r7\x03\x8cbf\x94\x8e\xd4\^k\x1f\xb0\xf3\xa8U\xdc\x96\xa2\x
SF:b1\xbf\)\x80\x83\xd9\xa0\xe0t4\x1d\xb6:\xb7\x84l\xd7\xb5\x86")%r(RTSPRe
SF:quest,43,"1\x9a\xb9Xj36\x10\xfb\x1a\x8e\x1e\xd2\x8b\x02\xd9\t\xf4\xfei5
SF:\.3\x16\xa3!!\x1c\xc2\x80k1\x82T9\x0e\0\xc9d\^\xc3\xb2\xf4\x16\x0e\xe1\
SF:x15EP\xd0\xc9\x94\x9a{\(\xaa\xa1\x8aEB\x01\xd2\xcd\x89\x1e\xb5\xf1")%r(
SF:X11Probe,30,"\xee\x8d\xf2y;9\x0c\xb3\xc9R7\x7f\x8d\xa7\xf8l\xb8&\x0b\x9
SF:87\x0ec\xa3-\xa1\x99\x1a\xe4lw\xcf2\x12\xf5\xa8\x015\xa5\xe9\xb8\x12g\]
SF:\xbf\xc5j\(")%r(RPCCheck,41,"Q\xceF9e\xfd\x06j\xa5\xf5\t\xb2mJ\x01\xe8r
SF:\?'\x7f\xc9\x83\xc3\x8e7\xf5YQ\xeb\x95\x82\xb2\x83\xf5tk\x04z\x11\x1b9\
SF:xb4\x04\x1d\xa3\x98\x1c\x1c\x0e\x14\x8a\x80\xa2EY\xf6\x80\.B\xcbp\xebz7
SF:V")%r(DNSVersionBindReq,42,"0\x8f\xfa\x83I\x84\x7faI\xa7@7\x9b\xd0\xae\
SF:xdfy\^\xad\xa32\x8c\xab2\xb0\xe5\x8a\x8f;\xcepf>N\"4\xcccd\x93\x9b\(\t\
SF:xdf\xd6;\x93\x9f\xf9\xae\xaf\xe1\xddwYr\xeez%\xa2\xeckYuV\xdc")%r(DNSSt
SF:atusRequest,3F,"\x0c#i\x92\[\xb5I\xa5\xb8\xda\xb0\xff;\.:\xed\xc8\x1b/\
SF:x87\xadU\xa8\x05\xd5\xd7X\x1c\x8b\xde\xb5T\xcd\xdf\x05\xfe\xbb\x1e\xd1\
SF:xd7\x80&\xb4\xff\x06\x93\x9aK\xfc\xa7\xa3\xcd&\xac\x08\x99\x9a\[\xcc\xa
SF:5\x1e\xa8\x8f")%r(SSLSessionReq,36,"\xe4\x20OX\x0e\x06\xcd\x01R14\xec\x
SF:d7\x9a@\xec\xf2\xe5WB\x8f\xdc6\x07\xf8%\xf4B\x9f>!\xaf\x05%P\x97\)\xcc\
SF:(\xe5\x20\xb8\x12Pqc\xa51\x1f!\n\x9dv\xfb")%r(SMBProgNeg,38,"\x1fs\xbb\
SF:x8e\xaf\xdfUKt\x1d\*\xe8E\xbf}\xfbx1Wd\xa3\xce\x9a\xb8\xd6\xcb\xaem\xf1
SF:\xd1\xf4\0Km\x9fk\xbb1\x94\xb9\xebE=\x93\x03\xffc7X\xb0\+~\x0e\x9b\xa2d
SF:")%r(LPDString,20,"\xb1\xad\x86\x8ba\xb9P\xa4\xb7\xceId\xdb\?Bz\xfec{\x
SF:02\xd3\xa7C\x15>%\^\xa8\x97\xf3\xa5\xd5")%r(LDAPBindReq,24,"W\x8eA\xa3\
SF:xaa\xeay\xbbh\x86\xb5\"4\xbe\x81\x11\xdf\xe4\xec\xa2\xa7\xf9\xe4\xbcC\t
SF:\x01\xc0C\"\.}G\xae\xf8\xbf")%r(LANDesk-RC,24,"\x88S\xa6h\x9cu!\xd8\xe3
SF:4\xa5\xda\x85S6\xcf\xae,67\xae\x9a4~\xb7\x98\x1b\xe2iV\x05q\xdfJd\(")%r
SF:(TerminalServer,38,"\x86{\xbd\x86x\x94\x17W\x866\xc9w\]\xda\xab\(\x92\x
SF:a5\xbd\x87\xa8i\*e\xb6\xad\xc9G\|QAF\xac%B\x8b\x92\xaf\xf5R\xe5\xdbv\xb
SF:2\xdamf\xc8\x1e\xdf\x06\x91\xe6\xcc\xfc\x1a");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=4.03%I=7%D=10/24%Time=453D4E74%P=i686-pc-windows-windows%
SF:r(HTTPOptions,27,"\xb4\x13w9\*\x8b2\x11\x8a\xb6z\xcc\xa9\xa5\x9b\x9eFD\
SF:x08<\xba\xfd\x07a\x82\xbfm\x06\x15q\xb9k\xb1\x9bX\xee\xebG\xea")%r(SSLS
SF:essionReq,27,"\xe4W\xdd\x12VE\xb3\xcej\xfd\xdcO\xf39f\x9d\xb2\xf0}\x20A
SF:e\xe0\x92\xb2\xf9d\xc7\x8a\x1abJ\x1eR_\x85\x94e;")%r(X11Probe,48,"\xe6\
SF:xe9\xab\x02E8\xe6\x8a\x87\xf7\xa3Ac170W\xa4\xc0\xba\xee\[\x20\*\xeb\x8c
SF:Z\r\x12\x16L\x80\xe8\x207\x01nG\x15w\x08\x9ew\xe4\x1b\x14\xa5\xbb\xba\x
SF:ff\xfdr\x8a\xad%\x1aV:R\?G\|\x9e\x1eR\)H\xb9u\xc0\xc0\x1a")%r(GetReques
SF:t,1A,"HTTP/1\.0\x20404\x20Not\x20Found\r\n\r\n")%r(RTSPRequest,27,"jC\x
SF:8b%\xa4\x90\xee\x93\x07\x95\x82{l\x04\x15\x81>\x929\x83\^\xe6F\x14\0\x8
SF:c}\xf8\xc8G\x80\xdd\xdb\xce\x81\x8e\xe0\xe9\xdf")%r(RPCCheck,3F,"\xcb\x
SF:c8S\xf4\x95\x9f\xfb3\xa8@\x15T\xb1\x8ftI\xf0s\x19oR\x18\xfc\x96s\xb8\x0
SF:53B\xc1\xfetK\xbf\xd1\x20\xb8\xd8\x95\xee\x9bs7B\x1b\xbc\xb9x&\xa3\xfd\
SF:xe9\xa0\xda\x19\xe6\xf1#w\xe3gI\x05")%r(DNSVersionBindReq,39,"\xf1dn`\x
SF:f1_\xe8r\xa3\xe1\x01\xfdl\xa9%\r\x0f\x1eN\xda\xe2\xc5%L\x8d\xc9\x98\xf2
SF:M\(\xd2\xbdK\xa6G\x9c\x1by\x012\xe1\xa8h\xe2\xa1\xeb\xe7\\\xb8\"\x81\xc
SF:b\xd8>O\xdb#")%r(DNSStatusRequest,26,"\x83\xc8\xfb\$\"c\x15\xe5\x16\x81
SF:\x9b7p\xe8\r%\xee\x957\^\xacK\xcd!\x18ie\xd4}\xaf\xc0'`\xb4\x9b9\xd8\x1
SF:b")%r(SMBProgNeg,3E,"B\xb6-\xc1\xe5k\x9f\x93\xa1o\xbe\xdb\xb7\xcc:\x96\
SF:x03\xceK\xbd\xd6b!@\xc3\x87\x03`\xc6\xea}\xf5\xbc\xcaZ\xbe\xa5\xe9\xf7E
SF:\xa1-\.\x89\xcd\xd3o\x80{\xe8\xe1\x83\x02G,\xce1\xce\xe8x\xfc\x15")%r(L
SF:PDString,3F,"\xba\xeaQ\x85\x01R%\x9d\xc9\xd7&\xb1\xfc\xa4`\xa3\x95\xfc\
SF:xd7\xa1\x9aL\xf6\xd4\n\x92\xb4\xb9\x0c\x061u}N\xa5\xe3N\x8a\x83\xc0\x88
SF:\x14\xe8\r\xcd\x0b\x7fL\x99\xf6\xb0\x1d\xd4Z`\xf9\x85\xb0;p\xccT\x8a")%
SF:r(LDAPBindReq,47,";d\xc7B\x93\xec\xc3\xd4nf\x07\x92\x8b_\xe2\xa42\xba\x
SF:e9\xeb\x8a\xc8\x08\x04\x06\xd0BP\xfb\xb1\x04U\xb5a\xc9xc\x13m\xef\x0b\x
SF:d3\x0e\x9c\xc0V\x1b\xfd\xc2\x0fn\xae\xebe\x9c\x8f\xf6\xd0\xb4\xfd\xfa\x
SF:99_\x0b\xeaV\xf0\x18\$\x89\x06")%r(LANDesk-RC,47,"\xff4\xd1{\x0b\.x\x07
SF:r\r\xd2\xdb\x91\x86z\xdd&\xb0\x8e1\x98hY\x1c\xf3\xb4_\.i\xf6_O\xee\xe1\
SF:xc0\?\xcb1\xd3\xc6\x97\xda\x1c\[%\xb3\x93y\xc4M\.\xa7\xb4\x19\n\xcb\xbc
SF:4Q\xda\xfbG\xa7\x13\xfd\xe1'\xb7G\xf1\x9a");
MAC Address: 00:01:4A:25:B4:62 (Sony)
Device type: general purpose
Running: IBM AIX 4.X, Microsoft Windows 2003/.NET|NT/2K/XP
OS details: IBM AIX 4.3.2.0-4.3.3.0 on an IBM RS/*, Microsoft Windows 2003 Serve
r or XP SP2, Microsoft Windows XP SP2
Nmap finished: 1 IP address (1 host up) scanned in 63.062 seconds