# Nmap 4.20 scan initiated Sun May 13 21:48:24 2007 as: nmap -p1-65535 -r -O2 -oA mpgh -v -v mpgh.net
Interesting ports on *** (66.90.118.43):
Not shown: 65488 closed ports
PORT STATE SERVICE
21/tcp open ftp
25/tcp filtered smtp
53/tcp open domain
80/tcp open http
110/tcp open pop3
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
411/tcp filtered rmt
443/tcp open https
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
707/tcp filtered unknown
1026/tcp open LSA-or-nterm
1028/tcp open unknown
1111/tcp open unknown
1433/tcp filtered ms-sql-s
1720/tcp filtered H.323/Q.931
1935/tcp open rtmp
2112/tcp open kip
2331/tcp open unknown
3306/tcp open mysql
3389/tcp open ms-term-serv
4111/tcp filtered unknown
4444/tcp filtered krb524
6667/tcp open irc
6697/tcp open unknown
7217/tcp open unknown
8000/tcp open http-alt
8001/tcp open unknown
8021/tcp open ftp-proxy
8022/tcp open unknown
8080/tcp open http-proxy
8401/tcp open unknown
8402/tcp open unknown
8425/tcp open unknown
8443/tcp open https-alt
8880/tcp open unknown
9876/tcp open sd
11110/tcp open unknown
14534/tcp open unknown
19350/tcp open unknown
51234/tcp open unknown
54509/tcp open unknown
63631/tcp open unknown
Device type: general purpose
Running (JUST GUESSING) : Microsoft Windows 2003 (87%)
OS fingerprint not ideal because: Host distance (11 network hops) is greater than ten
Aggressive OS guesses: Microsoft Windows 2003 Server SP1 (87%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint by osscan system #2:
SCAN(V=4.20%D=5/13%OT=21%CT=1%CU=32181%PV=N%DS=11%G=N%TM=4647C0AF%P=i686-pc-windows-windows)
SEQ(SP=103%GCD=1%ISR=108%TS=0)
OPS(O1=M5B4NW0NNT00NNS%O2=M5B4NW0NNT00NNS%O3=M5B4NW0NNT00%O4=M5B4NW0NNT00NNS%O5=M5B4NW0NNT00NNS%O6=M5B4NNT00NNS)
OPS(O1=M5B4NW0NNT00NNS%O2=M5B4NW0NNT00NNS%O3=M5B4NW0NNT00%O4=M5B4NW0NNT00NNS%O5=M5B4NW0NNT00NNS%O6=M5B4NNT00NNS)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=N)
ECN(R=Y%DF=N%T=85%W=4000%O=M5B4NW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=85%S=O%A=S+%F=AS%RD=0%Q=)
T1(R=Y%DF=N%T=85%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T2(R=N)
T3(R=N)
T3(R=N)
T4(R=Y%DF=N%T=85%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T4(R=Y%DF=N%T=85%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=85%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T5(R=Y%DF=N%T=85%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=85%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T6(R=Y%DF=N%T=85%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=N)
T7(R=N)
U1(R=Y%DF=N%T=85%TOS=0%IPL=B0%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
U1(R=Y%DF=N%T=85%TOS=0%IPL=B0%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUL=G%RUD=G)
IE(R=N)
IE(R=N)
Network Distance: 11 hops
OS detection performed. Please report any incorrect results at http://insecure.org/nmap/submit/ .
# Nmap run completed at Sun May 13 21:51:43 2007 -- 1 IP address (1 host up) scanned in 199.546 seconds