nmap -sT -O -vv 200.242.52.9
Starting Nmap 4.20 ( http://insecure.org ) at 2007-10-17 23:04 AMT
Initiating Parallel DNS resolution of 1 host. at 23:04
Completed Parallel DNS resolution of 1 host. at 23:04, 0.08s elapsed
Initiating Connect() Scan at 23:04
Scanning 200.242.52.9 [1697 ports]
Discovered open port 53/tcp on 200.242.52.9
Discovered open port 25/tcp on 200.242.52.9
Discovered open port 3389/tcp on 200.242.52.9
Discovered open port 21/tcp on 200.242.52.9
Discovered open port 80/tcp on 200.242.52.9
Connect() Scan Timing: About 15.36% done; ETC: 23:07 (0:02:46 remaining)
Discovered open port 1032/tcp on 200.242.52.9
Discovered open port 1029/tcp on 200.242.52.9
Increasing send delay for 200.242.52.9 from 0 to 5 due to max_successful_tryno increase to 4
Increasing send delay for 200.242.52.9 from 5 to 10 due to 11 out of 11 dropped probes since last
increase.
Increasing send delay for 200.242.52.9 from 10 to 20 due to 11 out of 11 dropped probes since las
t increase.
Discovered open port 1025/tcp on 200.242.52.9
Discovered open port 1031/tcp on 200.242.52.9
Connect() Scan Timing: About 55.41% done; ETC: 23:10 (0:02:39 remaining)
Increasing send delay for 200.242.52.9 from 20 to 40 due to max_successful_tryno increase to 5
Increasing send delay for 200.242.52.9 from 40 to 80 due to max_successful_tryno increase to 6
Increasing send delay for 200.242.52.9 from 80 to 160 due to 11 out of 11 dropped probes since la
st increase.
Discovered open port 135/tcp on 200.242.52.9
Discovered open port 1030/tcp on 200.242.52.9
Completed Connect() Scan at 23:10, 363.28s elapsed (1697 total ports)
Initiating OS detection (try #1) against 200.242.52.9
Retrying OS detection (try #2) against 200.242.52.9
Initiating gen1 OS Detection against 200.242.52.9 at 379.857s
For OSScan assuming port 21 is open, 1 is closed, and neither are firewalled
For OSScan assuming port 21 is open, 1 is closed, and neither are firewalled
For OSScan assuming port 21 is open, 1 is closed, and neither are firewalled
Host 200.242.52.9 appears to be up ... good.
Interesting ports on 200.242.52.9:
Not shown: 1678 closed ports
PORT STATE SERVICE
21/tcp open ftp
25/tcp open smtp
53/tcp open domain
80/tcp open http
135/tcp open msrpc
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
1025/tcp open NFS-or-IIS
1029/tcp open ms-lsa
1030/tcp open iad1
1031/tcp open iad2
1032/tcp open iad3
1433/tcp filtered ms-sql-s
1434/tcp filtered ms-sql-m
3389/tcp open ms-term-serv
12345/tcp filtered NetBus
12346/tcp filtered NetBus
Device type: general purpose
Running (JUST GUESSING) : Microsoft Windows 2003|XP|2000 (93%)
OS fingerprint not ideal because: Host distance (11 network hops) is greater than ten
Aggressive OS guesses: Microsoft Windows 2003 Server SP1 (93%), Microsoft Windows XP SP2 (88%), M
icrosoft Windows XP SP2 (firewall disabled) (88%), Microsoft Windows 2000 SP4 (85%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint by osscan system #2:
SCAN(V=4.20%D=10/17%OT=21%CT=1%CU=34628%PV=N%DS=11%G=N%TM=4716CEC7%P=i486-slackware-linux-gnu)
SEQ(SP=100%GCD=1%ISR=10E%TI=I%TS=0)
SEQ(SP=FF%GCD=1%ISR=10E%TI=I%TS=0)
OPS(O1=M5ACNW0NNT00NNS%O2=M5ACNW0NNT00NNS%O3=M5ACNW0NNT00%O4=M5ACNW0NNT00NNS%O5=M5ACNW0NNT00NNS%O 6=M5ACNNT00NNS)
WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000%W6=4000)
ECN(R=Y%DF=N%T=80%W=4000%O=M5ACNW0NNS%CC=N%Q=)
T1(R=Y%DF=N%T=80%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=Y%DF=N%T=80%W=0%S=Z%A=S%F=AR%O=%RD=0%Q=)
T3(R=Y%DF=N%T=80%W=4000%S=O%A=S+%F=AS%O=M5ACNW0NNT00NNS%RD=0%Q=)
T4(R=Y%DF=N%T=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T5(R=Y%DF=N%T=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
T6(R=Y%DF=N%T=80%W=0%S=A%A=O%F=R%O=%RD=0%Q=)
T7(R=Y%DF=N%T=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)
U1(R=Y%DF=N%T=80%TOS=0%IPL=B0%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=D3E6%RUL=G%RUD=G)
IE(R=N)
Network Distance: 11 hops
TCP Sequence Prediction: Difficulty=0 (Trivial joke)
IPID Sequence Generation: Incremental
OS detection performed. Please report any incorrect results at http://insecure.org/nmap/submit/ .
Nmap finished: 1 IP address (1 host up) scanned in 391.922 seconds
Raw packets sent: 82 (7116B) | Rcvd: 73 (4856B)