[root@83-142-83-186 ~]# nmap -A 141.30.214.62 -vv
Starting Nmap 4.10 ( http://www.insecure.org/nmap/ ) at 2006-11-15 23:22 CET
DNS resolution of 1 IPs took 0.00s.
Initiating SYN Stealth Scan against chaos2.wh20.tu-dresden.de (141.30.214.62) [1679 ports] at 23:22
Discovered open port 443/tcp on 141.30.214.62
Discovered open port 21/tcp on 141.30.214.62
Discovered open port 80/tcp on 141.30.214.62
Discovered open port 1030/tcp on 141.30.214.62
Discovered open port 3306/tcp on 141.30.214.62
SYN Stealth Scan Timing: About 33.95% done; ETC: 23:24 (0:00:58 remaining)
Discovered open port 2105/tcp on 141.30.214.62
Discovered open port 5101/tcp on 141.30.214.62
The SYN Stealth Scan took 88.97s to scan 1679 total ports.
Initiating service scan against 7 services on chaos2.wh20.tu-dresden.de (141.30.214.62) at 23:24
Service scan Timing: About 42.86% done; ETC: 23:25 (0:00:42 remaining)
The service scan took 43.79s to scan 7 services on 1 host.
For OSScan assuming port 21 is open, 20 is closed, and neither are firewalled
Host chaos2.wh20.tu-dresden.de (141.30.214.62) appears to be up ... good.
Interesting ports on chaos2.wh20.tu-dresden.de (141.30.214.62):
Not shown: 1669 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open tcpwrapped
80/tcp open http?
143/tcp closed imap
443/tcp open https?
1030/tcp open msrpc Microsoft Windows RPC
2105/tcp open msrpc Microsoft Windows RPC
3306/tcp open mysql MySQL (unauthorized)
5100/tcp closed admd
5101/tcp open admdog?
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at http://www.insecure.org/cgi-bin/servicefp-submit.cgi :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=4.10%I=7%D=11/15%Time=455B939C%P=i686-redhat-linux-gnu%r(G
SF:etRequest,1A,"HTTP/1\.0\x20404\x20Not\x20Found\r\n\r\n")%r(HTTPOptions,
SF:29,"\x9e\xdeJ\x85\xc7\?\xa7\xc6\xb7ab:\xf7\xees\xce\x17\xa7\xa9\x17\xde
SF:\xc7\xfd\x9e-\xfe0\x12\x06\t\xf3\x03V:\xbaY\0\r\x91\x8e\xa5")%r(RTSPReq
SF:uest,42,"\x96y\x9f\x19\xbe\xea\x12\xcb\x08\x20\xa2\x952\*Y\x9f\xc6\xfe\
SF:xeaJ\x82\x84<\x8e/-\xdf\x80`\x11\xe8T\x91\xfc\x11\x07:\"\"\^\x8b\xeb\xc
SF:30\x16\+\xb0W\x8e,\xb4}\xb61\x80iD\xcf\xe7\xde\xb5\xed\x82\xe3s\xcd")%r
SF:(X11Probe,46,"\xfb>Ir\x03\xfc\xd2\x9b\x009,\+\xe8\xc7\xecD3\x05\xf7\x04
SF:Q\xa1\x1b\xcc\xf7\xab\$l\+r\xf3\xeb\xb4`\xb3R\x95\x90\xc3\xd5\xed\xf8\x
SF:e2C\x9f<\xabKXn\xe4K\xbc\)oV\x156\^\xf6\xbc\xf3\xa2\xd2\xb1X\xe3\xfc\x8
SF:6\x15")%r(FourOhFourRequest,1A,"HTTP/1\.0\x20404\x20Not\x20Found\r\n\r\
SF:n")%r(RPCCheck,3D,"i\xc8\xbf\xeeV\xf0\x8cZ\xf1\xae9\x9b>=\x0b\xf4\x81\x
SF:80\xf2wP\x1d\x81Z@\xfc\x8b\xa9\xdfBF=\xce\xf2\xb2:\x0e\x8f\xf5\r\xd1\xd
SF:32\x0e-T\xd7\xa7V`rI\xa3\xf2\x17\.\xde\xe3I\xe4\xf2")%r(DNSVersionBindR
SF:eq,2E,"\xcc\xeaf\xc0\x8e\x19\x9b\tYH\x1e\xe2g\xf6\xb1\+\\\xc5\x94\xd3\x
SF:ddzN\xb3\x93\x05I,\xad\xbf\x91\x9e\xa26\xf1\x9d\xa4\x94\x1bB\x1e\x07\x8
SF:2X&\x8b")%r(DNSStatusRequest,44,"\xeb\"u>C\xde\xb4\xb3\x81\xf1fPK\^\)\x
SF:ca\)\x99\x92X\x9f\x86\x84iy\xd8\xae\+\xfaH#\xde\x9e\x06\xfc#\x85\r\xb1\
SF:xdd\x0bI\xaf\xe7{x\x15\x19\xff\x97\x97\x82\xa2\xc7S&k\xef\xac\xd2\x9a\x
SF:d0\xf7\x93@\xbd\xfd\t")%r(SSLSessionReq,2A,"E%\x89{\xbb\*\+\x04\tB\xce\
SF:xfbY\xb4\x0c\xd9u\xb3\xf5~\x84H\x91\.\x1f\x84J\xfeA\xbe\x8b\)\xd6e\x9e\
SF:xb6\xf8\x8f\x1b\x82IE")%r(SMBProgNeg,30,"\x063\xd9s\|\xa2\x1d\xa7\xa9\x
SF:1b\x99\x171~\?\)\xab\x88\xbdo\xbb\xbcQ,\x85\xc8\xb19\xda\x05\xde\xa6U8v
SF:\xc8\xbf\xc8\xab\xb4\xf8\xedd3\xb8a\x83}")%r(LPDString,39,"nX\xc4\x16y\
SF:xb9JsP\xf7\xbc\xf6\xe5\xdf,\xb5\x1f\xf1\xdb6\x8dX\"\x10\)\x13C\xa4\[FVI
SF:\xc0\xe3\xfbg2\x95\xb4\xf2I\xe3\xc1\x81\(\xef\x9f\x9d\x83uL\x118\x89\x0
SF:5\xd2\xef")%r(LDAPBindReq,43,"P\xee\xb3m\xb9=a\x91#\xde\xfb\x80\x80\xd6
SF:\xd1\x84\xd9XE\xc0\xbfeRN\xf8\xd0\xcbC\xb7\x06\x03\x9dao1j\xb6\^\xb7\xd
SF:6\^\xcez\x15q\x16\xa6t\t\xbf\x80\xa0p\xaf\x94\xe7\xb5\xbf5s\\\xe8\xd3\x
SF:a2\xec\x96\xca")%r(LANDesk-RC,3F,"M&\xe3\x1d\x90_\x91\x96mx\xad\xda\xe2
SF:\xf1p\xf6\xb9\xef;6\x19O\x209\x9b\xe27\xfe\x08\xdfo\r\x85\xed\xea\x19#L
SF:u\x9a\x12\xe23\x99\xa2,aW\x87\xdcY\xd0\xbdqC\xf4=\x064S>\xc6\xf5");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=4.10%I=7%D=11/15%Time=455B939C%P=i686-redhat-linux-gnu%r(
SF:HTTPOptions,48,"\xa9\x95\x16\xc9K\xd5\)\x8fo8\xfd\xdd\^@\xb8\xb0mj\xbd\
SF:xa2m\x1c\xa0\x94=\)\xad\x05\xbe\xf4%\xb0\xb5}\\\n\xaaEh\x19\xcf\x8a&\xa
SF:5\x83x\x1a\xc4\xd5qY\xc8\xd7P>l\xcbZ\xc6\x0e\xaa\xb39\xe7\xcf\t\xdc\x82
SF:H\x8cA<")%r(SSLSessionReq,36,"\xe1\xf1n\xac&\xb1i\xf8\|\xcd\*\x82<\x91\
SF:xe9\x9fJ\x80\xf5\xea\xf5\x86\x99\0\xed:\xbf\x0e\x95\xa1=\x17\xfb:\xfe\x
SF:c6b\[\xd1R\x98\xd4\x12\x90\xf3\x13k\xa4zjR\xb0\x01\xf3")%r(X11Probe,3D,
SF:"5\x8e\x1eI>\xf8nE\xc6S`/Ntb\x1d\xaa\x20\x94Ipn0\x20\xd7_\xe7\x83#\]\xb
SF:0t\.\$\x03\x8a\xf3\xbe%\xab\xbc\x83\x07\x99\x17;9GA\xbb\x86`\xb0\xa9\xd
SF:8\$U\xbd\x20\x82\xbb")%r(GetRequest,1A,"HTTP/1\.0\x20404\x20Not\x20Foun
SF:d\r\n\r\n")%r(RTSPRequest,43,"KnP\xa4\xd4r\xe83\x80{K\x88\)\xf3\xbc\xb4
SF:\x93\xc3!\$\xfct\x14\xbas\xe9i\x88\x18\x9dC\xd9Y\xd1}!ZF\xd2~\x9d\x87\x
SF:e3\x13\.\x20{\|\x0cHPU\+\x1a\)\xd9\xf3\xf8\x16tk\xe4Ec\xbb\xa6\xda")%r(
SF:RPCCheck,1A,"\xe8\xd7YWC\x16\x20Zw\*'v\x7f\xfdT\tJ\t\x9f\x121y\x0b\xabU
SF:\x8b")%r(DNSVersionBindReq,1D,"\x98C\xa5\x0el\r\x03\]m\x9e\xc4\xef\x99\
SF:x02q\xa9\xae\xa7\xceg\xcdI\xc6\x85\x11\xe4\xaao\t")%r(DNSStatusRequest,
SF:2F,"F\x134\xc9A\r\$\xd7\ra\x1b\xe4\xb8\xc5\x80h`2\xdf\xfb\x8b%F\x11\xd8
SF:dp{\xd4\x15\xb7\x01H\xed\x1f\xce\xf3\x1bA\xb28\xee5\+\xb8\xa8\xc2")%r(S
SF:MBProgNeg,38,"\xbb&\xe3\x04E\xf4\x91\xa1\x95\x05shD\x80\x16R\xca\xf1\x1
SF:4\xba\xe44Y\)\xb3d\x15\x11w\xb7\xc0T\x0fJ\x8c-\xaf\x9b\x18\xe3{\x9f\xd7
SF:\xe0!\xc0\x7fc\xaf&\xdd\x9b\xfe\?\x03\x07")%r(FourOhFourRequest,1A,"HTT
SF:P/1\.0\x20404\x20Not\x20Found\r\n\r\n")%r(LPDString,48,"p\xc4\x84\xfa\x
SF:e4jR\x83\xba\$\x12\x85\xbb\xab\x97\xca\[%\xe5\xa17\x97`xt\]27RYaW\xbcL\
SF:x1a\xe3\x1fa\xc6\xbc\x01w\x04\xdc\x8b\xd23\xa1\xe0o\xc8b\xb2g\xb4'\x07\
SF:x9a\nh\xe4-W{%\xd0\|\x0f\xf2;\xd8\xe4")%r(LDAPBindReq,27,"\x0f\x8cVo\x9
SF:d\xf2\x1f\x15\x99\xb7\x81\xbe>N\xac\xa5}\xfe9'\x0f\x99\x92`\xbb\x1ep\xb
SF:8u\xf4\"\x16\x99\xdac\xc5\xc8\xa8\xde")%r(LANDesk-RC,2D,"E5\xe9\xe3\xa2
SF:\\\xcc,q\?\x9a\x8fY\]\x9fg\*\xb3\xb5\[\xc8\x94I\x1f\x13'\xac\x18\xf5\xb
SF:9\x8e\xc8\xa6\xf1\x03c\x1d\xb2\0\x84\x91\xe5\xbb\.u")%r(TerminalServer,
SF:1B,"\xd7k\x7f%\x13\x9d{\xebtj\x8a\|d\xa8\x8a\x8c\xab\xeaJ\|V\xe1N\xb8\x
SF:e0\x08\x16");
Device type: general purpose|firewall
Running: Microsoft Windows 2003/.NET|NT/2K/XP, Symantec Windows NT/2K/XP
OS details: Microsoft Windows 2003 Server or XP SP2, Microsoft Windows XP Pro SP2, Symantec Enterprise Firewall 7.0 running on Windows 2000 SP2
OS Fingerprint:
TSeq(Class=TR%TS=0)
T1(Resp=Y%DF=N%W=402E%ACK=S++%Flags=AS%Ops=MNWNNT)
T2(Resp=N)
T3(Resp=N)
T4(Resp=N)
T5(Resp=Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
T6(Resp=Y%DF=N%W=0%ACK=O%Flags=R%Ops=)
T7(Resp=N)
PU(Resp=N)
TCP Sequence Prediction: Class=truly random
Difficulty=9999999 (Good luck!)
IPID Sequence Generation: Busy server or unknown class
Service Info: OS: Windows
Nmap finished: 1 IP address (1 host up) scanned in 134.670 seconds
Raw packets sent: 5041 (222.624KB) | Rcvd: 2065 (95.192KB)