Greetings, Hackers and Freedom fighters. By the end of the Season 3 of #OpSyria, Telecomix, FHIMT and Reflets published 54Go of Syrian Censorship logs. The Season 4 is called « The Iron Strike« , or how to strike the FastIron Cache of the syrian’s Net censorship infrastructure.
FastIron Cache is composed of 6 BlueCoat SG400, 4 NetApp and three others machines (ServerIron-S, ServerIron-M and Management : last one might host the management interface of the syrian censorship) probably very recently acquired by the Syrian regime thanks to an italian integrator, AreaSpa (sources here and here).
AreaSpa was not alone. This system includes americans BlueCoat and NetApp hardware providers, Qosmos Deep Packet Inspection software french provider, and Utimaco software german provider. AreaSpa and theses companies sold and set up this system last summer. They cannot tell they did not know that the purpose of it was to track and kill dissidents.
So we pushed our investigation further to localize theses machines. They’re in Syria, up and running.
Today, we share it with the world.
Enjoy.
- the following information is intended for a technologically mature audience -
The Target
The Syrian Computer Society is hosting Gov and some Corporate appliances or web applications. This ISP has been created by Bachar El Assad himself. You can find the Facebook SCS page .
* netname: sy-scs-net * mnt-routes: SCS-NOC * mnt-routes: STEMNT-1 * descr: SCS-NET is an ISP based in Damascus Syria
BlueCoat devices are up and running
… And we found new ones !
-
http://0/BigIron_Secondry/view.htm?id={5F28B141-DCE8-45DB-8ECF-72345FC1C4BB} -
http://0/1_BigIronMaster/view.htm?id={0875FCE9-AFAA-4A28-9D32-20B1C0CBF333} -
http://0/sensor.htm?id=%7BDD150884-1A47-455E-9455-E0799E1F326F%7D
-
http://0/sensor.htm?id={EE91EE64-CFAC-4401-B8CB-449CC04E3008}
The censorship system might cache trafic and store requests done to the Bluecoat proxys. Government can do man in the middle attack against the whole population. Once stored, a huge database can index the requests, so the regime has the perfect tool to track any dissident web activities.
Monitoring systems uncovered
Monitoring systems are very interesting, they reveal more than the whole infrastructure and downtimes. They reveal interesting LAN IP. The PRTG used is old, very old… and not up to date, at all.
This is monitoring the IronFast Cache and more …
http://7/sensorlist.htm
… But Bachar’s monitoring is often down. No worry, you can download a useful pdf here.
This one is monitoring Gov machines (DHost2) and some Bluecoat devices can be found here
http://0/prtg.htm :
And here two others monitoring systems :
http://3:8089/sensorlist.htm http://8/ (password protected)
The FastIron Caches (Lan : 192.168.57.100)
- BlueCoat :
- BlueCoat : 9
- BlueCoat : 8
- BlueCoat :
- BlueCoat : 5
- BlueCoat : 4
- NetApp : 77.44.210.6
- NetApp : 213.178.244.5
- NetApp : 3
- NetApp : 6
Identification of the machines is confirmed by fingerprinting obtaine with the -A option of NMAP.
You can get their uptime thanks to HPING3 using this command :
# hping3 -c 2 -p 443 --tcp-timestamp -S 6 | grep uptime
Do yo like Cisco ?… Bachar does !
Just play with it :
* 3 / Login : cisco / Password : cisco * 2 / Login : cisco / Password : cisco * 1 / Login : cisco / Password : cisco * 5 / Login : cisco / Password : cisco * 9 / Login : cisco / Password : cisco * / Login : cisco / Password : cisco * 1 / Login : cisco / Password : cisco * http://7:2002/
SCS’s hosted Bank printers can send you scans and more
Break into the Al-Sharq bank papers secrets.
http://9
Get the adress book, insert your mail and get notified…
http://9/hp/device/this.LCDispatcher?nav=hp.AddressBook
… or configure a remote wins server…
http://9/hp/device/this.LCDispatcher?nav=hp.Folders
Hey admins you seem to like young kids
Googling those specific SCS IP ranges we found this… a nasty bastard asking for some suggestive stuff on a russian board :
Dear Hisham, we come in peace
Hisham is developper, working on of the most interesting ranges with his laptop… Guess on what :
- http://8:8088/
- http://8:8088/callhome/
- http://8:8088/callhome/conf/
Hisham’s laptop
Interesting ports on 8 Not shown: 975 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp FileZilla ftpd 0.9.39 beta 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Jetty httpd 6.1.22 |_ html-title: Error 404 NOT_FOUND 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open netbios-ssn 990/tcp filtered ftps 1099/tcp open jrmi Java RMI 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2869/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) 4444/tcp filtered krb524 5060/tcp filtered sip 5357/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) |_ html-title: Service Unavailable 8080/tcp open http Jetty httpd 6.1.22 |_ html-title: Error 404 - Not Found 8088/tcp open http Jetty httpd 6.1.22 |_ html-title: Error 404 - Not Found 8443/tcp open ssl/http Jetty httpd 6.1.22 |_ html-title: Error 404 - Not Found 16993/tcp open tcpwrapped 49152/tcp open msrpc Microsoft Windows RPC 49153/tcp open msrpc Microsoft Windows RPC 49154/tcp open msrpc Microsoft Windows RPC 49158/tcp open msrpc Microsoft Windows RPC 49159/tcp open unknown Service Info: OS: Windows
Host script results: | smb-os-discovery: Windows 7 Professional 7600 | LAN Manager: Windows 7 Professional 6.1 | Name: WORKGROUP\HISHAM-LAPTOP |_ System time: 2012-02-26 12:10:35 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Reflets’ tourism office Syrian tour
Let’s take a tour on Bachar’s IP range.
77.44.210.1/24
Interesting ports on 77.44.210.6: Not shown: 979 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http? |_ html-title: Access Denied 81/tcp open http-proxy NetApp NetCache http proxy 6.0.7 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open http-proxy NetApp NetCache http proxy 6.0.7 514/tcp open login Cisco/NetApp logind 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3128/tcp open squid-http? 4444/tcp filtered krb524 5060/tcp filtered sip 8000/tcp open http-proxy NetApp NetCache http proxy 6.0.7 8008/tcp open http-proxy NetApp NetCache http proxy 6.0.7 8080/tcp open http-proxy? 8081/tcp open http-proxy NetApp NetCache http proxy 6.0.7 8088/tcp open http-proxy NetApp NetCache http proxy 6.0.7 8090/tcp open http-proxy NetApp NetCache http proxy 6.0.7 9090/tcp open http-proxy NetApp NetCache http proxy 6.0.7
Interesting ports on 77.44.210.7: Not shown: 989 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http-proxy NetApp NetCache http proxy 6.0.7 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 8080/tcp open http-proxy NetApp NetCache http proxy 6.0.7
Interesting ports on : Not shown: 985 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 53/tcp open domain? 80/tcp open http? |_ html-title: Access Denied 81/tcp open http-proxy BlueCoat SG-400 http proxy 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3128/tcp open squid-http? 4444/tcp filtered krb524 5060/tcp filtered sip 8080/tcp open http-proxy? 8082/tcp open ssl/blackice-alerts? |_ sslv2: server still supports SSLv2
Interesting ports on 6: Not shown: 979 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 53/tcp open domain 80/tcp open http? |_ html-title: Access Denied 81/tcp open http-proxy NetApp NetCache http proxy 6.0.7 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open http-proxy NetApp NetCache http proxy 6.0.7 514/tcp open login Cisco/NetApp logind 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3128/tcp open squid-http? 4444/tcp filtered krb524 5060/tcp filtered sip 8000/tcp open http-proxy NetApp NetCache http proxy 6.0.7 8080/tcp open http-proxy? 8081/tcp open http-proxy NetApp NetCache http proxy 6.0.7 8088/tcp open http-proxy NetApp NetCache http proxy 6.0.7 8090/tcp open http-proxy NetApp NetCache http proxy 6.0.7 9090/tcp open http-proxy NetApp NetCache http proxy 6.0.7
213.178.224.1/24
Interesting ports on 213.178.224.1: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp FileZilla ftpd 0.9.37 beta 443/tcp closed https 3389/tcp open microsoft-rdp Microsoft Terminal Service Service Info: OS: Windows
Interesting ports on 213.178.224.5: Not shown: 983 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 25/tcp filtered smtp 80/tcp open http? |_ html-title: Access Denied 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 280/tcp open tcpwrapped 1718/tcp filtered unknown 1719/tcp filtered unknown 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3128/tcp open squid-http? 4444/tcp filtered krb524 5060/tcp filtered sip 5061/tcp filtered sip-tls 8080/tcp open http-proxy?
Interesting ports on : Not shown: 985 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp ProFTPD 1.3.2 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: WORKGROUP) 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 8383/tcp open http Apache httpd 2.2.12 ((Ubuntu)) |_ html-title: 401 Authorization Required | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = Section Name 12000/tcp open cce4x? 16000/tcp open unknown 16001/tcp open tcpwrapped
Host script results: | smb-os-discovery: Unix | LAN Manager: Samba 3.4.0 | Name: Unknown\Unknown |_ System time: 2012-02-26 12:11:45 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 0: Not shown: 993 filtered ports PORT STATE SERVICE VERSION 80/tcp open http? |_ html-title: Site doesn't have a title (text/html). 443/tcp open https? 465/tcp open smtps? 912/tcp open vmware-auth VMware Authentication Daemon 1.0 (Uses VNC, SOAP) 993/tcp open imaps? 995/tcp open pop3s? 3389/tcp open ms-term-serv?
Interesting ports on 0: Not shown: 980 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Paessler PRTG Traffic Grapher httpd (Indy httpd 9.0.11) | html-title: PRTG Traffic Monitor - Monitoring Results - PRTG Traffic Graph... |_ Requested resource was http://0/prtg.htm 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open netbios-ssn 1110/tcp open tcpwrapped 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 19780/tcp open unknown 49152/tcp open msrpc Microsoft Windows RPC 49153/tcp open msrpc Microsoft Windows RPC 49154/tcp open msrpc Microsoft Windows RPC 49155/tcp open msrpc Microsoft Windows RPC 49156/tcp open msrpc Microsoft Windows RPC 49159/tcp open msrpc Microsoft Windows RPC Service Info: OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows 7 Ultimate 7600 | LAN Manager: Windows 7 Ultimate 6.1 | Name: WORKGROUP\SCS-NET-PC |_ System time: 2012-02-26 12:10:54 UTC+2
Interesting ports on 7: Not shown: 986 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Paessler PRTG Traffic Grapher httpd (Indy httpd 9.0.11) | html-title: PRTG Traffic Grapher - Monitoring Results - PRTG Traffic Graph... |_ Requested resource was http://7/sensorlist.htm | robots.txt: has 1 disallowed entry |_ / 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open tcpwrapped 1025/tcp open msrpc Microsoft Windows RPC 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3306/tcp open mysql MySQL 5.0.51b-community-nt | mysql-info: Protocol: 10 | Version: 5.0.51b-community-nt | Thread ID: 283 | Some Capabilities: Connect with DB, Compress, Transactions, Secure Connection | Status: Autocommit |_ Salt: !hiWV,v23ISHO5Y?q;qG 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 8 Not shown: 975 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp FileZilla ftpd 0.9.39 beta 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Jetty httpd 6.1.22 |_ html-title: Error 404 NOT_FOUND 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open netbios-ssn 990/tcp filtered ftps 1099/tcp open jrmi Java RMI 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2869/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) 4444/tcp filtered krb524 5060/tcp filtered sip 5357/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) |_ html-title: Service Unavailable 8080/tcp open http Jetty httpd 6.1.22 |_ html-title: Error 404 - Not Found 8088/tcp open http Jetty httpd 6.1.22 |_ html-title: Error 404 - Not Found 8443/tcp open ssl/http Jetty httpd 6.1.22 |_ html-title: Error 404 - Not Found 16993/tcp open tcpwrapped 49152/tcp open msrpc Microsoft Windows RPC 49153/tcp open msrpc Microsoft Windows RPC 49154/tcp open msrpc Microsoft Windows RPC 49158/tcp open msrpc Microsoft Windows RPC 49159/tcp open unknown Service Info: OS: Windows
Host script results: | smb-os-discovery: Windows 7 Professional 7600 | LAN Manager: Windows 7 Professional 6.1 | Name: WORKGROUP\HISHAM-LAPTOP |_ System time: 2012-02-26 12:10:35 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 3: Not shown: 980 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp FileZilla ftpd 0.9.37 beta 22/tcp filtered ssh 23/tcp filtered telnet 25/tcp open smtp Microsoft ESMTP 6.0.2600.5949 | smtp-commands: EHLO hp-hp Hello [88.191.90.106], SIZE 2097152, PIPELINING, DSN, ENHANCEDSTATUSCODES, 8bitmime, BINARYMIME, CHUNKING, VRFY |_ HELP This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH BDAT VRFY 80/tcp open http Microsoft IIS webserver 5.1 |_ html-title: Site doesn't have a title (text/html). 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open https? 445/tcp open microsoft-ds Microsoft Windows XP microsoft-ds 912/tcp open vmware-auth VMware Authentication Daemon 1.0 (Uses VNC, SOAP) 1028/tcp open msrpc Microsoft Windows RPC 1110/tcp open tcpwrapped 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 8089/tcp open http Paessler PRTG Traffic Grapher httpd (Indy httpd 9.0.11) | robots.txt: has 1 disallowed entry |_ / | html-title: PRTG Traffic Grapher - Monitoring Results - PRTG Traffic Graph... |_ Requested resource was http://3/sensorlist.htm 19780/tcp open unknown Service Info: Host: hp-hp; OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows XP | LAN Manager: Windows 2000 LAN Manager | Name: WORKGROUP\HP-HP |_ System time: 2012-02-26 12:10:45 UTC+2
Interesting ports on 8: Not shown: 980 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp filtered microsoft-ds 912/tcp open vmware-auth VMware Authentication Daemon 1.0 (Uses VNC, SOAP) 1110/tcp filtered nfsd-status 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2869/tcp filtered unknown 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 19780/tcp filtered unknown 49152/tcp open msrpc Microsoft Windows RPC 49153/tcp open msrpc Microsoft Windows RPC 49154/tcp open msrpc Microsoft Windows RPC 49159/tcp open msrpc Microsoft Windows RPC 49167/tcp open msrpc Microsoft Windows RPC Service Info: OS: Windows
Interesting ports on 1: Not shown: 984 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp ProFTPD |_ ftp-anon: Anonymous FTP login allowed 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Apache httpd 1.3.34 ((Unix) mod_ssl/2.8.25 OpenSSL/0.9.7e) |_ html-title: Site doesn't have a title (text/html; charset=UTF-8). 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Apache httpd 1.3.34 ((Unix) mod_ssl/2.8.25 OpenSSL/0.9.7e) |_ html-title: Site doesn't have a title (text/html; charset=UTF-8). |_ sslv2: server still supports SSLv2 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: WORKGROUP) 873/tcp open rsync (protocol version 29) 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 8873/tcp open ssl/unknown 22939/tcp open ssl/unknown Service Info: Host: 1; OS: Unix
Host script results: | smb-os-discovery: Unix | LAN Manager: Samba 3.0.30-1.4.osstech | Name: WORKGROUP\Unknown |_ System time: 2012-02-26 12:10:27 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 2: Not shown: 985 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp ProFTPD |_ ftp-anon: Anonymous FTP login allowed 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Apache httpd 1.3.34 ((Unix)) |_ html-title: Site doesn't have a title (text/html; charset=UTF-8). 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: WORKGROUP) 873/tcp open rsync (protocol version 29) 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 8873/tcp open ssl/unknown 22939/tcp open ssl/unknown Service Info: Host: 2; OS: Unix
Host script results: | smb-os-discovery: Unix | LAN Manager: Samba 3.0.24-1.22_OSSTECH | Name: WORKGROUP\Unknown |_ System time: 2012-02-26 13:00:33 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
213.178.244.1/24
Interesting ports on 213.178.244.5: Not shown: 987 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http? |_ html-title: Access Denied 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 514/tcp open login Cisco/NetApp logind 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3128/tcp open squid-http? 4444/tcp filtered krb524 5060/tcp filtered sip 8080/tcp open http-proxy? 3 services unrecognized despite returning data.
Interesting ports on : Not shown: 984 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 53/tcp open domain? 80/tcp open http-proxy BlueCoat SG-400 http proxy 81/tcp open http-proxy BlueCoat SG-400 http proxy 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3128/tcp open http-proxy BlueCoat SG-400 http proxy 4444/tcp filtered krb524 5060/tcp filtered sip 8000/tcp open http-proxy BlueCoat SG-400 http proxy 8080/tcp open http-proxy BlueCoat SG-400 http proxy 8082/tcp open ssl/blackice-alerts? |_ sslv2: server still supports SSLv2
Interesting ports on 3: Not shown: 980 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http? |_ html-title: Access Denied 81/tcp open http-proxy NetApp NetCache http proxy 6.0.2 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open http-proxy NetApp NetCache http proxy 6.0.2 514/tcp open login Cisco/NetApp logind 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3128/tcp open squid-http? 4444/tcp filtered krb524 5060/tcp filtered sip 8000/tcp open http-proxy NetApp NetCache http proxy 6.0.2 8080/tcp open http-proxy? 8081/tcp open http-proxy NetApp NetCache http proxy 6.0.2 8088/tcp open http-proxy NetApp NetCache http proxy 6.0.2 8090/tcp open http-proxy NetApp NetCache http proxy 6.0.2 9090/tcp open http-proxy NetApp NetCache http proxy 6.0.2 3 services unrecognized despite returning data.
Interesting ports on 4: Not shown: 996 filtered ports PORT STATE SERVICE VERSION 80/tcp open http-proxy BlueCoat SG-400 http proxy 3128/tcp open http-proxy BlueCoat SG-400 http proxy 8080/tcp open http-proxy BlueCoat SG-400 http proxy 8082/tcp open ssl/http-proxy BlueCoat http proxy |_ sslv2: server still supports SSLv2
213.178.224.1/24
Interesting ports on 213.178.224.1: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp FileZilla ftpd 0.9.37 beta 443/tcp closed https 3389/tcp open microsoft-rdp Microsoft Terminal Service Service Info: OS: Windows
Interesting ports on 213.178.224.5 Not shown: 983 closed ports
PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 25/tcp filtered smtp 80/tcp open http? |_ html-title: Access Denied 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 280/tcp open tcpwrapped 1718/tcp filtered unknown 1719/tcp filtered unknown 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3128/tcp open squid-http? 4444/tcp filtered krb524 5060/tcp filtered sip 5061/tcp filtered sip-tls 8080/tcp open http-proxy?
Interesting ports on : Not shown: 985 closed ports
PORT STATE SERVICE VERSION 21/tcp open ftp ProFTPD 1.3.2 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: WORKGROUP) 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 8383/tcp open http Apache httpd 2.2.12 ((Ubuntu)) |_ html-title: 401 Authorization Required | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = Section Name 12000/tcp open cce4x? 16000/tcp open unknown 16001/tcp open tcpwrapped Host script results: | smb-os-discovery: Unix | LAN Manager: Samba 3.4.0 | Name: Unknown\Unknown |_ System time: 2012-02-26 12:11:45 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 0: Not shown: 993 filtered ports PORT STATE SERVICE VERSION 80/tcp open http? ------> teamviewer |_ html-title: Site doesn't have a title (text/html). 443/tcp open https? 465/tcp open smtps? 912/tcp open vmware-auth VMware Authentication Daemon 1.0 (Uses VNC, SOAP) 993/tcp open imaps? 995/tcp open pop3s? 3389/tcp open ms-term-serv?
Interesting ports on 0: Not shown: 980 closed portsPORT STATE SERVICE VERSION
22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Paessler PRTG Traffic Grapher httpd (Indy httpd 9.0.11) | html-title: PRTG Traffic Monitor - Monitoring Results - PRTG Traffic Graph... |_ Requested resource was http://0/prtg.htm 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open netbios-ssn 1110/tcp open tcpwrapped 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 19780/tcp open unknown 49152/tcp open msrpc Microsoft Windows RPC 49153/tcp open msrpc Microsoft Windows RPC 49154/tcp open msrpc Microsoft Windows RPC 49155/tcp open msrpc Microsoft Windows RPC 49156/tcp open msrpc Microsoft Windows RPC 49159/tcp open msrpc Microsoft Windows RPC Service Info: OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows 7 Ultimate 7600 | LAN Manager: Windows 7 Ultimate 6.1 | Name: WORKGROUP\SCS-NET-PC |_ System time: 2012-02-26 12:10:54 UTC+2
Interesting ports on 7: Not shown: 986 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Paessler PRTG Traffic Grapher httpd (Indy httpd 9.0.11) | html-title: PRTG Traffic Grapher - Monitoring Results - PRTG Traffic Graph... |_ Requested resource was http://7/sensorlist.htm | robots.txt: has 1 disallowed entry |_ / 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open tcpwrapped 1025/tcp open msrpc Microsoft Windows RPC 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3306/tcp open mysql MySQL 5.0.51b-community-nt | mysql-info: Protocol: 10 | Version: 5.0.51b-community-nt | Thread ID: 283 | Some Capabilities: Connect with DB, Compress, Transactions, Secure Connection | Status: Autocommit |_ Salt: !hiWV,v23ISHO5Y?q;qG 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT Interesting ports on 3: Not shown: 980 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp FileZilla ftpd 0.9.37 beta 22/tcp filtered ssh 23/tcp filtered telnet 25/tcp open smtp Microsoft ESMTP 6.0.2600.5949 | smtp-commands: EHLO hp-hp Hello [88.191.90.106], SIZE 2097152, PIPELINING, DSN, ENHANCEDSTATUSCODES, 8bitmime, BINARYMIME, CHUNKING, VRFY |_ HELP This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH BDAT VRFY 80/tcp open http Microsoft IIS webserver 5.1 |_ html-title: Site doesn't have a title (text/html). 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open https? 445/tcp open microsoft-ds Microsoft Windows XP microsoft-ds 912/tcp open vmware-auth VMware Authentication Daemon 1.0 (Uses VNC, SOAP) 1028/tcp open msrpc Microsoft Windows RPC 1110/tcp open tcpwrapped 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 8089/tcp open http Paessler PRTG Traffic Grapher httpd (Indy httpd 9.0.11) | robots.txt: has 1 disallowed entry |_ / | html-title: PRTG Traffic Grapher - Monitoring Results - PRTG Traffic Graph... |_ Requested resource was http://3/sensorlist.htm 19780/tcp open unknown Service Info: Host: hp-hp; OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows XP | LAN Manager: Windows 2000 LAN Manager | Name: WORKGROUP\HP-HP |_ System time: 2012-02-26 12:10:45 UTC+2
Interesting ports on 8: Not shown: 980 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp filtered microsoft-ds 912/tcp open vmware-auth VMware Authentication Daemon 1.0 (Uses VNC, SOAP) 1110/tcp filtered nfsd-status 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2869/tcp filtered unknown 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 19780/tcp filtered unknown 49152/tcp open msrpc Microsoft Windows RPC 49153/tcp open msrpc Microsoft Windows RPC 49154/tcp open msrpc Microsoft Windows RPC 49159/tcp open msrpc Microsoft Windows RPC 49167/tcp open msrpc Microsoft Windows RPC Service Info: OS: Windows
Interesting ports on 1: Not shown: 984 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp ProFTPD |_ ftp-anon: Anonymous FTP login allowed 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Apache httpd 1.3.34 ((Unix) mod_ssl/2.8.25 OpenSSL/0.9.7e) |_ html-title: Site doesn't have a title (text/html; charset=UTF-8). 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Apache httpd 1.3.34 ((Unix) mod_ssl/2.8.25 OpenSSL/0.9.7e) |_ html-title: Site doesn't have a title (text/html; charset=UTF-8). |_ sslv2: server still supports SSLv2 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: WORKGROUP) 873/tcp open rsync (protocol version 29) 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 8873/tcp open ssl/unknown 22939/tcp open ssl/unknown Service Info: Host: 1; OS: Unix
Host script results: | smb-os-discovery: Unix | LAN Manager: Samba 3.0.30-1.4.osstech | Name: WORKGROUP\Unknown |_ System time: 2012-02-26 12:10:27 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 2: Not shown: 985 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp ProFTPD |_ ftp-anon: Anonymous FTP login allowed 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Apache httpd 1.3.34 ((Unix)) |_ html-title: Site doesn't have a title (text/html; charset=UTF-8). 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: WORKGROUP) 873/tcp open rsync (protocol version 29) 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 8873/tcp open ssl/unknown 22939/tcp open ssl/unknown Service Info: Host: 2; OS: Unix
Host script results: | smb-os-discovery: Unix | LAN Manager: Samba 3.0.24-1.22_OSSTECH | Name: WORKGROUP\Unknown |_ System time: 2012-02-26 13:00:33 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT 213.178.245.1/24 Interesting ports on : Not shown: 986 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp MikroTik router ftpd 3.13 22/tcp filtered ssh 23/tcp filtered telnet 53/tcp open domain? 80/tcp open http MikroTik router http config |_ html-title: mikrotik routeros > administration 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3986/tcp open mapper-ws_ethd? 4444/tcp filtered krb524 5060/tcp filtered sip 8291/tcp open unknown 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at http://www.insecure.org/cgi-bin/servicefp-submit.cgi : SF-Port53-TCP:V=5.00%I=7%D=2/26%Time=4F4A33E5%P=x86_64-unknown-linux-gnu%r SF:(DNSVersionBindReq,E,"\0\x0c\0\x06\x81\x84\0\0\0\0\0\0\0\0")%r(DNSStatu SF:sRequest,E,"\0\x0c\0\0\x90\x84\0\0\0\0\0\0\0\0"); Service Info: Device: router
Interesting ports on : Not shown: 981 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp Microsoft ftpd |_ ftp-anon: Anonymous FTP login allowed 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction 119/tcp open nntp Microsoft NNTP Service 6.0.3790.3959 (posting ok) 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds 563/tcp open snews? 1025/tcp open msrpc Microsoft Windows RPC 1026/tcp open msrpc Microsoft Windows RPC 1027/tcp open msrpc Microsoft Windows RPC 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 8099/tcp open http Microsoft IIS webserver 6.0 |_ html-title: The page must be viewed over a secure channel Service Info: OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows Server 2003 3790 Service Pack 2 | LAN Manager: Windows Server 2003 5.2 | Name: WORKGROUP\AASTMTIC |_ System time: 2012-02-26 13:35:13 UTC-8
Interesting ports on : Not shown: 988 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 4567/tcp filtered unknown 5060/tcp filtered sip 48080/tcp filtered unknown Service Info: OS: IOS Interesting ports on : Not shown: 998 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Apache httpd |_ html-title: User Portal 587/tcp open smtp Exim smtpd | smtp-commands: EHLO proxy.capmus.iust.edu.sy Hello sailor.toonux.com [88.191.88.106], SIZE 52428800, PIPELINING, STARTTLS, HELP |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
Interesting ports on 0: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Apache httpd |_ html-title: User Portal 587/tcp open smtp Exim smtpd | smtp-commands: EHLO proxy.capmus.iust.edu.sy Hello 88-191-90-106.rev.dedibox.fr [88.191.90.106], SIZE 52428800, PIPELINING, STARTTLS, HELP |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
Interesting ports on 5: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open https? 1720/tcp filtered H.323/Q.931 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 6: Not shown: 976 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 25/tcp open smtp Microsoft ESMTP 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: IIS7 110/tcp open pop3 MS Exchange 2007 pop3d |_ pop3-capabilities: STLS TOP UIDL 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ sslv2: server still supports SSLv2 |_ html-title: IIS7 445/tcp open netbios-ssn 705/tcp open unknown 995/tcp open ssl/pop3 MS Exchange 2007 pop3d |_ pop3-capabilities: USER SASL(NTLM GSSAPI PLAIN) TOP UIDL 1025/tcp open msrpc Microsoft Windows RPC 1026/tcp open msrpc Microsoft Windows RPC 1027/tcp open msrpc Microsoft Windows RPC 1028/tcp open msrpc Microsoft Windows RPC 1046/tcp open msrpc Microsoft Windows RPC 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 8021/tcp open remoting MS .NET Remoting services 10000/tcp open snet-sensor-mgmt?
Host script results: | smb-os-discovery: Windows Server 2008 R2 Standard 7601 Service Pack 1 | LAN Manager: Windows Server 2008 R2 Standard 6.1 | Name: STD\STD-5 |_ System time: 2012-02-26 14:33:00 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 7: Not shown: 984 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 49/tcp open tcpwrapped 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds 808/tcp open ccproxy-http? 1025/tcp open msrpc Microsoft Windows RPC 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2001/tcp open dc? 2002/tcp open http Cisco Secure ACS login |_ html-title: CiscoSecure ACS Login 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip Host script results: | smb-os-discovery: Windows Server 2003 3790 Service Pack 2 | LAN Manager: Windows Server 2003 5.2 | Name: STD\ASC-1 |_ System time: 2012-02-26 13:59:33 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 1: Not shown: 989 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open https? 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 2: Not shown: 989 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open https? 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 3: Not shown: 989 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open https? 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
213.178.247.1/24
Interesting ports on : Not shown: 992 closed ports PORT STATE SERVICE VERSION 23/tcp open telnet Cisco IOS telnetd 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS; Device: switch Interesting ports on : Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 0: Not shown: 995 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Microsoft ESMTP 6.0.3790.3959 | smtp-commands: EHLO exchange.uic.local Hello [88.190.24.19], TURN, SIZE, ETRN, PIPELINING, DSN, ENHANCEDSTATUSCODES, 8bitmime, BINARYMIME, CHUNKING, VRFY, X-EXPS GSSAPI NTLM LOGIN, X-EXPS=LOGIN, AUTH GSSAPI NTLM LOGIN, AUTH=LOGIN, X-LINK2STATE, XEXCH50 |_ HELP This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH TURN ETRN BDAT VRFY 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction 110/tcp open pop3 MS Exchange 2003 pop3d 6.5.6944.0 |_ pop3-capabilities: USER EXPIRE(NEVER) UIDL PIPELINING TOP SASL(NTLM) 143/tcp open imap Microsoft Exchange Server 2003 imapd 6.5.6944.0 |_ imap-capabilities: LOGIN-REFERRALS IMAP4 AUTH=NTLM IMAP4rev1 MAILBOX-REFERRALS UIDPLUS LITERAL+ IDLE NAMESPACE CHILDREN 3389/tcp open microsoft-rdp Microsoft Terminal Service Service Info: Host: exchange.uic.local; OS: Windows
Interesting ports on 7: Not shown: 985 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp 22/tcp filtered ssh 23/tcp filtered telnet 53/tcp filtered domain 80/tcp open http? | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = AG 3000 |_ html-title: Site doesn't have a title (text/html). 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 301/tcp open tcpwrapped 1111/tcp open http GoAhead-Webs embedded httpd | html-title: Site doesn't have a title (text/html). |_ Did not follow redirect to http://7:3111/usg/login 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2111/tcp open http GoAhead-Webs embedded httpd | html-title: Site doesn't have a title (text/html). |_ Did not follow redirect to http://7:3111/usg/login 4444/tcp filtered krb524 5060/tcp filtered sip Interesting ports on 8: Not shown: 989 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Apache httpd 2.2.3 ((CentOS)) | html-title: Login |_ Requested resource was http://8/network/index.php 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 5432/tcp open postgresql PostgreSQL DB Interesting ports on 3: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http? |_ html-title: AIU | Student Area http://3/
Interesting ports on 4: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http VMware ESX Server httpd |_ html-title: " + ID_EESX_Welcome + " 902/tcp open ssl/vmware-auth VMware Authentication Daemon 1.10 (Uses VNC, SOAP)
Interesting ports on 6: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp | smtp-commands: EHLO mail.stds.aiu.edu.sy, AUTH CRAM-MD5 PLAIN LOGIN DIGEST-MD5, SIZE 3145728, STARTTLS, ENHANCEDSTATUSCODES, 8BITMIME, PIPELINING, ETRN, DSN, HELP |_ HELP 2.0.0 Commands: HELO EHLO MAIL RCPT DATA RSET NOOP VRFY QUIT STARTTLS 443/tcp open ssl/https? | html-title: Kerio Connect WebMail |_ Requested resource was https://6/webmail/login/ 2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at http://www.insecure.org/cgi-bin/servicefp-submit.cgi :
Interesting ports on 7: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache Tomcat/Coyote JSP engine 1.1 |_ html-title: Site doesn't have a title (text/html).
Interesting ports on 8: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Microsoft ESMTP 6.0.3790.4675 | smtp-commands: EHLO webmail.aeu.ac.sy Hello [88.190.24.19], TURN, SIZE, ETRN, PIPELINING, DSN, ENHANCEDSTATUSCODES, 8bitmime, BINARYMIME, CHUNKING, VRFY, X-EXPS GSSAPI NTLM LOGIN, X-EXPS=LOGIN, AUTH GSSAPI NTLM LOGIN, AUTH=LOGIN, X-LINK2STATE, XEXCH50 |_ HELP This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH TURN ETRN BDAT VRFY 443/tcp open ssl/http Microsoft IIS webserver 6.0 | html-title: Document Moved |_ Did not follow redirect to https://8/exchange/ |_ sslv2: server still supports SSLv2 Service Info: Host: webmail.aeu.ac.sy; OS: Windows
Interesting ports on 0: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 53/tcp open domain ISC BIND 4.X 80/tcp open http Apache httpd 2.2.21 ((EL)) |_ html-title: 400 Bad Request
Interesting ports on 5: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open tcpwrapped
Interesting ports on 8: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Cisco PIX sanitized smtpd 110/tcp closed pop3 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ html-title: Under Construction |_ sslv2: server still supports SSLv2 Service Info: OS: Windows; Device: firewall
Interesting ports on 1: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp closed https
Interesting ports on 4: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction 443/tcp closed https 8080/tcp open http Apache Tomcat/Coyote JSP engine 1.0 |_ html-title: Apache Tomcat/4.1.24-LE-jdk14 - Error report Service Info: OS: Windows
Interesting ports on 0: Not shown: 978 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open https? 445/tcp filtered microsoft-ds 554/tcp filtered rtsp 1110/tcp filtered nfsd-status 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2869/tcp filtered unknown 3128/tcp open squid-http? 3389/tcp filtered ms-term-serv 4444/tcp filtered krb524 5060/tcp filtered sip 14000/tcp open http gSOAP httpd 2.7 |_ html-title: Site doesn't have a title (text/xml; charset=utf-8). 19780/tcp filtered unknown 49152/tcp open msrpc Microsoft Windows RPC 49153/tcp open msrpc Microsoft Windows RPC 49154/tcp open msrpc Microsoft Windows RPC 49155/tcp open msrpc Microsoft Windows RPC
213.178.246.1/24
Interesting ports on : Not shown: 983 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1000/tcp filtered cadlock 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3031/tcp filtered unknown 3998/tcp filtered unknown 4444/tcp filtered krb524 4899/tcp filtered radmin 5060/tcp filtered sip 9009/tcp filtered unknown 14441/tcp filtered unknown 50389/tcp filtered unknown Service Info: OS: IOS
Interesting ports on : Not shown: 971 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 53/tcp open domain Microsoft DNS 6.1.7601 88/tcp open kerberos-sec Microsoft Windows kerberos-sec 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 389/tcp open ldap 445/tcp open netbios-ssn 464/tcp open kpasswd5? 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 636/tcp open ssl/ldap |_ sslv2: server still supports SSLv2 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3071/tcp open ssl/unknown 3268/tcp open ldap 3269/tcp open ssl/ldap |_ sslv2: server still supports SSLv2 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 6129/tcp open damewaremr DameWare Mini Remote Control 14000/tcp open unknown 49153/tcp open msrpc Microsoft Windows RPC 49154/tcp open msrpc Microsoft Windows RPC 49155/tcp open msrpc Microsoft Windows RPC 49156/tcp open msrpc Microsoft Windows RPC 49160/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 49161/tcp open msrpc Microsoft Windows RPC 65000/tcp open ssl/unknown |_ sslv2: server still supports SSLv2
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows Server 2008 R2 Standard 7601 Service Pack 1 | LAN Manager: Windows Server 2008 R2 Standard 6.1 | Name: STD\STD-27 |_ System time: 2012-02-26 16:41:37 UTC+2
Interesting ports on : Not shown: 989 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access |_ html-title: Site doesn't have a title. 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 6881/tcp filtered bittorrent-tracker Service Info: OS: IOS
Interesting ports on 3: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 1: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Cisco IOS administrative httpd | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access |_ html-title: Site doesn't have a title. 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 2: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Cisco Adaptive Security Appliance http config | html-title: Cisco ASDM 6.1(5) |_ Requested resource was http://2/admin/public/index.html 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: Device: security-misc
Interesting ports on 3: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Cisco Adaptive Security Appliance http config | html-title: Cisco ASDM 6.1(5) |_ Requested resource was http://3/admin/public/index.html Service Info: Device: security-misc
Interesting ports on 5: Not shown: 972 closed ports PORT STATE SERVICE VERSION 21/tcp open tcpwrapped 22/tcp filtered ssh 23/tcp filtered telnet 53/tcp open domain Microsoft DNS 88/tcp open kerberos-sec Microsoft Windows kerberos-sec 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 389/tcp open ldap 445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds 464/tcp open kpasswd5? 548/tcp open afp? 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 636/tcp open tcpwrapped 1025/tcp open msrpc Microsoft Windows RPC 1027/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 1034/tcp open msrpc Microsoft Windows RPC 1041/tcp open msrpc Microsoft Windows RPC 1042/tcp open msrpc Microsoft Windows RPC 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2301/tcp open http HP Proliant System Management 2.1.10.186 (CompaqHTTPServer 9.9) | html-title: Site doesn't have a title (text/html). |_ Requested resource was http://5/red2301.html?RedirectUrl=/ 2381/tcp open http Apache SSL-only mode httpd |_ html-title: 400 Bad Request 3268/tcp open ldap 3269/tcp open tcpwrapped 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: Windows
Host script results: | smb-os-discovery: Windows Server 2003 3790 Service Pack 2 | LAN Manager: Windows Server 2003 5.2 | Name: AG\SERVER |_ System time: 2012-02-26 15:37:09 UTC+3 |_ nbstat: ERROR: Name query failed: TIMEOUT Interesting ports on 5: Not shown: 957 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 53/tcp open domain Microsoft DNS 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction 88/tcp open kerberos-sec Microsoft Windows kerberos-sec 111/tcp filtered rpcbind 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 389/tcp open ldap 445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds 464/tcp open kpasswd5? 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 636/tcp open tcpwrapped 714/tcp filtered unknown 801/tcp filtered device 902/tcp open ssl/vmware-auth VMware Authentication Daemon 1.10 (Uses VNC) 912/tcp open ssl/vmware-auth VMware Authentication Daemon 1.10 (Uses VNC) 1026/tcp open msrpc Microsoft Windows RPC 1027/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 1030/tcp filtered iad1 1042/tcp open msrpc Microsoft Windows RPC 1059/tcp open msrpc Microsoft Windows RPC 1076/tcp open msrpc Microsoft Windows RPC 1433/tcp open ms-sql-s Microsoft SQL Server 2000 8.00.760; SP3 1583/tcp filtered unknown 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2002/tcp open ssl/globe? 2301/tcp open http HP Proliant System Management 2.1.15.210 (CompaqHTTPServer 9.9) | html-title: Site doesn't have a title (text/html). |_ Requested resource was http://5/red2301.html?RedirectUrl=/ 2381/tcp open http Apache SSL-only mode httpd |_ html-title: 400 Bad Request 3001/tcp filtered nessus 3268/tcp open ldap 3269/tcp open tcpwrapped 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 8080/tcp open http Apache Tomcat/Coyote JSP engine 1.1 |_ html-title: Apache Tomcat/4.1.30 - Error report 8081/tcp open http Network Associates ePolicy Orchestrator (Computername: GMSYRIA Version: 3.6.0.569) |_ html-title: Site doesn't have a title (text/xml). 8443/tcp open ssl/http Apache Tomcat/Coyote JSP engine 1.1 |_ html-title: Apache Tomcat/4.1.30 - Error report 8600/tcp open unknown 9594/tcp filtered msgsys 20222/tcp filtered unknown
Host script results: | smb-os-discovery: Windows Server 2003 3790 Service Pack 2 | LAN Manager: Windows Server 2003 5.2 | Name: GLOBEMED-SYRIA\GMSYRIA |_ System time: 2012-02-26 16:33:58 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 9: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 3: ---> commercial bank of Syria Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 5.0 | html-title: 302 Found |_ Did not follow redirect to https://3/ 443/tcp open ssl/http Microsoft IIS webserver 5.0 |_ sslv2: server still supports SSLv2 |_ html-title: Commercial Bank of Syria - National Payment Network | robots.txt: has 1 disallowed entry |_ /cgi-bin/ Service Info: OS: Windows
Interesting ports on 7: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access |_ html-title: Site doesn't have a title. 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 0: Not shown: 974 closed ports PORT STATE SERVICE VERSION 21/tcp filtered ftp 22/tcp filtered ssh 23/tcp filtered telnet 25/tcp open smtp Alt-N MDaemon mail server 10.0.0 80/tcp open http MS ISA httpd |_ html-title: The page cannot be displayed 110/tcp open pop3 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 143/tcp open imap Alt-N MDaemon imapd 10.0.0 366/tcp open smtp Alt-N MDaemon mail server 10.0.0 445/tcp open tcpwrapped 554/tcp filtered rtsp 587/tcp open smtp MDaemon smtpd 10.0.0 (MSA support) 1000/tcp open http World Client WDaemon httpd 3.0 |_ html-title: WebAdmin | robots.txt: has 1 disallowed entry |_ / 1025/tcp open msrpc Microsoft Windows RPC 1174/tcp open msrpc Microsoft Windows RPC 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 1755/tcp filtered wms 1935/tcp filtered rtmp 2000/tcp filtered callbook 3000/tcp open http World Client WDaemon httpd 10.0.0 |_ html-title: WorldClient | robots.txt: has 1 disallowed entry |_ / 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 7070/tcp filtered realserver
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT Interesting ports on 6: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 3.8.1p1 (protocol 2.0) | ssh-hostkey: 1024 0a:22:6c:c8:1f:83:07:46:bd:4d:72:ec:8b:95:22:88 (DSA) |_ 1024 77:0c:3e:3b:1d:39:49:b3:99:ad:a1:df:8f:96:d4:e1 (RSA) 25/tcp closed smtp 80/tcp open http Microsoft IIS |_ html-title: The page cannot be displayed Service Info: OS: Windows
213.178.248.1/24
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ html-title: Welcome to Audi On-Line Service Info: OS: Windows Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Cisco IOS administrative webserver | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level 15 access |_ html-title: Authorization Required Service Info: OS: IOS; Device: switch Interesting ports on : Not shown: 994 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Cisco PIX sanitized smtpd | smtp-commands: EHLO SVRHO18.BBSF.COM Hello example.org ([88.190.24.19]), pleased to meet you, XXXA, SIZE, PIPELINING |_ HELP Enter one of the following commands: HELO EHLO MAIL RCPT DATA RSET NOOP QUIT HELP 53/tcp closed domain 80/tcp open http Lotus Domino httpd |_ html-title: Site doesn't have a title (text/html; charset=UTF-8). 110/tcp open pop3 Lotus Domino POP3 server 8.0.2 |_ pop3-capabilities: USER TOP UIDL 143/tcp closed imap 443/tcp open ssl/http Lotus Domino httpd |_ html-title: Site doesn't have a title (text/html; charset=UTF-8). Service Info: Device: firewall
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Apache httpd 2.2.10 ((Win32) mod_ssl/2.2.10 OpenSSL/0.9.8i PHP/5.2.6) |_ sslv2: server still supports SSLv2 |_ html-title: Site doesn't have a title (text/html).
Interesting ports on : Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http IBM HTTP Server 6.0 (Derived from Apache 2.0.47; Win32) |_ html-title: Redirecting... 443/tcp open ssl/http IBM HTTP Server 6.0 (Derived from Apache 2.0.47; Win32) |_ html-title: BBSF e-banking |_ sslv2: server still supports SSLv2
Interesting ports on : Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 | html-title: Document Moved |_ Did not follow redirect to https://www.onlinebbsf.com 443/tcp open ssl/http Microsoft IIS webserver 6.0 | html-title: ::Online Banking:: |_ Requested resource was http:///Default_Ar.aspx?ReturnUrl=%2f |_ sslv2: server still supports SSLv2 Service Info: OS: Windows
Interesting ports on : Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp closed http 8080/tcp closed http-proxy Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Cisco ASA firewall http config (Cisco AWARE 2.0) | html-title: SSL VPN Service |_ Requested resource was http:///+CSCOE+/logon.html Service Info: OS: IOS; Device: firewall
Interesting ports on 1: Not shown: 973 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 53/tcp open domain Microsoft DNS 6.1.7601 88/tcp open kerberos-sec Microsoft Windows kerberos-sec 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 389/tcp open ldap 445/tcp open netbios-ssn 464/tcp open kpasswd5? 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 636/tcp open ssl/ldap |_ sslv2: server still supports SSLv2 705/tcp open unknown 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3268/tcp open ldap 3269/tcp open ssl/ldap |_ sslv2: server still supports SSLv2 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 6129/tcp open damewaremr DameWare Mini Remote Control 49153/tcp open msrpc Microsoft Windows RPC 49154/tcp open msrpc Microsoft Windows RPC 49155/tcp open msrpc Microsoft Windows RPC 49159/tcp open msrpc Microsoft Windows RPC 49160/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 49161/tcp open msrpc Microsoft Windows RPC Service Info: OS: Windows
Host script results: | smb-os-discovery: Windows Server 2008 R2 Standard 7601 Service Pack 1 | LAN Manager: Windows Server 2008 R2 Standard 6.1 | Name: STD\STD-13 |_ System time: 2012-02-26 17:27:54 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT Interesting ports on 9: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS |_ html-title: The page cannot be displayed 443/tcp open ssl/http Microsoft IIS |_ html-title: The page cannot be displayed |_ sslv2: server still supports SSLv2 Service Info: OS: Windows
Interesting ports on 0: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS |_ html-title: The page cannot be displayed Service Info: OS: Windows
Interesting ports on 1: Not shown: 938 closed ports, 61 filtered ports PORT STATE SERVICE VERSION 1998/tcp open x25-svc-port? Interesting ports on 4: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Exim smtpd | smtp-commands: EHLO proxy.capmus.iust.edu.sy Hello elmariachi.toonux.com [88.190.24.19], SIZE 52428800, PIPELINING, STARTTLS, HELP |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP 443/tcp open ssl/http Apache httpd |_ html-title: User Portal
Interesting ports on 0: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Microsoft ESMTP 6.0.3790.4675 | smtp-commands: EHLO SY00-ExchFE.syria.abs Hello [88.190.24.19], TURN, SIZE 8388608, ETRN, PIPELINING, DSN, ENHANCEDSTATUSCODES, 8bitmime, BINARYMIME, CHUNKING, VRFY, X-EXPS GSSAPI NTLM LOGIN, X-EXPS=LOGIN, AUTH GSSAPI NTLM LOGIN, AUTH=LOGIN, X-LINK2STATE, XEXCH50 |_ HELP This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH TURN ETRN BDAT VRFY 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ html-title: Under Construction |_ sslv2: server still supports SSLv2 Service Info: Host: SY00-ExchFE.syria.abs; OS: Windows
Interesting ports on 2: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Oracle Application Server 10g httpd 10.1.2.0.2 |_ html-title: 403 Forbidden 443/tcp open ssl/http Oracle Application Server 10g httpd 10.1.2.0.2 |_ sslv2: server still supports SSLv2 |_ html-title: 403 Forbidden
Interesting ports on 6: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS |_ html-title: The page cannot be displayed |_ sslv2: server still supports SSLv2 Service Info: OS: Windows
Interesting ports on 7: Not shown: 989 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 49/tcp open tcpwrapped 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Cisco IOS administrative httpd | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access |_ html-title: Site doesn't have a title. 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 8: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Netscreen administrative web server (runs Virata-EmWeb/R6_0_1) |_ html-title: Login Service Info: Device: firewall
213.178.249.1/24
Interesting ports on : Not shown: 994 filtered ports PORT STATE SERVICE VERSION 80/tcp closed http 161/tcp closed snmp 443/tcp closed https 5666/tcp open tcpwrapped 8080/tcp closed http-proxy 8443/tcp closed https-alt
Interesting ports on : Not shown: 997 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: :: TICT :: Tartous International Container Termianl - An ICTSI... 110/tcp open pop3 MS Exchange 2003 pop3d 6.5.7638.1 |_ pop3-capabilities: USER EXPIRE(NEVER) UIDL PIPELINING TOP 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ sslv2: server still supports SSLv2 |_ html-title: :: TICT :: Tartous International Container Termianl - An ICTSI... Service Info: Host: ICTSISRV09.ICTSI.sy; OS: Windows
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http?
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http?
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http?
All 1000 scanned ports on are closed (959) or filtered (41)
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS |_ html-title: The page cannot be displayed |_ sslv2: server still supports SSLv2 Service Info: OS: Windows
SCAN DU 213.178.250.1/24
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction Service Info: OS: Windows
Interesting ports on : Not shown: 995 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 80/tcp open http Apache httpd 2.2.0 ((Win32) DAV/2 mod_ssl/2.2.0 OpenSSL/0.9.8a mod_autoindex_color PHP/5.1.2) |_ html-title: Site doesn't have a title (text/html). 443/tcp open ssl/http Apache httpd 2.2.0 ((Win32) DAV/2 mod_ssl/2.2.0 OpenSSL/0.9.8a mod_autoindex_color PHP/5.1.2) |_ html-title: Site doesn't have a title (text/html). |_ sslv2: server still supports SSLv2 3389/tcp open microsoft-rdp Microsoft Terminal Service Service Info: OS: Windows
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.2.16 ((Debian)) |_ html-title: Site doesn't have a title (text/html; charset=utf-8).
Interesting ports on : Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on : Not shown: 853 filtered ports, 145 closed ports PORT STATE SERVICE VERSION 445/tcp open microsoft-ds? 3389/tcp open ms-term-serv?
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on : Not shown: 989 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open tcpwrapped 1110/tcp open tcpwrapped 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 0: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS webserver 6.0 | html-title: BSO Online |_ Requested resource was http://0/index.aspx?ReturnUrl=%2fDefault.aspx Service Info: OS: Windows
Interesting ports on 5: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 3: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 7.5 | html-title: Document Moved |_ Did not follow redirect to https://ebanking.chambank.com/iBanking/ 443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ sslv2: server still supports SSLv2 | html-title: Document Moved |_ Did not follow redirect to https://ebanking.chambank.com/iBanking/ Service Info: OS: Windows
Interesting ports on 4: Not shown: 994 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO dns1.chambank.sy, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, AUTH PLAIN LOGIN, AUTH=PLAIN LOGIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN 53/tcp open domain ISC BIND 9.7.3 80/tcp open http nginx web server 1.0.12 |_ html-title: Requested resource was http://www.chambank.sy/ and no page was returned. 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING LOGIN-DELAY(10) TOP 143/tcp open imap Courier Imapd (released 2011) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open tcpwrapped Service Info: Host: dns1.chambank.sy
Interesting ports on 4: Not shown: 996 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 1.3.34 ((Unix) mod_ssl/2.8.25 OpenSSL/0.9.7e) |_ html-title: Site doesn't have a title (text/html; charset=UTF-8). 898/tcp closed sun-manageconsole 5631/tcp closed pcanywheredata 6002/tcp closed X11:2
Interesting ports on 5: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 2: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ html-title: SIIB Online Service Info: OS: Windows
Interesting ports on 3: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS |_ sslv2: server still supports SSLv2 |_ html-title: The page cannot be displayed 995/tcp open ssl/pop3 |_ pop3-capabilities: USER EXPIRE(1800 SECONDS) UIDL TOP SASL(GSSAPI)
213.178.251.1/24
Interesting ports on 213.178.251.1: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ sslv2: server still supports SSLv2 |_ html-title: Under Construction 3389/tcp open microsoft-rdp Microsoft Terminal Service 3390/tcp open microsoft-rdp Microsoft Terminal Service Service Info: OS: Windows
Interesting ports on : Not shown: 995 filtered ports PORT STATE SERVICE VERSION 53/tcp open domain Microsoft DNS 80/tcp open http Microsoft IIS webserver 6.0 | html-title: Login |_ Requested resource was http:///Login.aspx?ReturnUrl=%2fDefault.aspx 443/tcp closed https 2222/tcp closed unknown 3389/tcp open microsoft-rdp Microsoft Terminal Service Service Info: OS: Windows
Interesting ports on : Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: 403 - Forbidden: Access is denied. 443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ sslv2: server still supports SSLv2 |_ html-title: 401 - Unauthorized: Access is denied due to invalid credentials. Service Info: OS: Windows
Interesting ports on : Not shown: 998 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp Microsoft ftpd 587/tcp open smtp Exim smtpd | smtp-commands: EHLO proxy.capmus.iust.edu.sy Hello 88-191-90-106.rev.dedibox.fr [88.191.90.106], SIZE 52428800, PIPELINING, STARTTLS, HELP |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP Service Info: OS: Windows
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 587/tcp open smtp Exim smtpd | smtp-commands: EHLO proxy.capmus.iust.edu.sy Hello 88-191-90-106.rev.dedibox.fr [88.191.90.106], SIZE 52428800, PIPELINING, STARTTLS, HELP |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 587/tcp open smtp Exim smtpd | smtp-commands: EHLO proxy.capmus.iust.edu.sy Hello 88-191-90-106.rev.dedibox.fr [88.191.90.106], SIZE 52428800, PIPELINING, STARTTLS, HELP |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 587/tcp open smtp Exim smtpd | smtp-commands: EHLO proxy.capmus.iust.edu.sy Hello 88-191-90-106.rev.dedibox.fr [88.191.90.106], SIZE 52428800, PIPELINING, STARTTLS, HELP |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Cisco Adaptive Security Appliance http config | html-title: Cisco ASDM 6.2(3) |_ Requested resource was http:///admin/public/index.html Service Info: Device: security-misc
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 | html-title: Document Moved |_ Requested resource was http:///reb Service Info: OS: Windows
Interesting ports on 0: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http? 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ sslv2: server still supports SSLv2 | html-title: Document Moved |_ Requested resource was http://0/EBank Service Info: OS: Windows
Interesting ports on 9: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 5.1 |_ html-title: Under Construction 443/tcp open https? 3389/tcp open microsoft-rdp Microsoft Terminal Service Service Info: OS: Windows
Interesting ports on 9: Not shown: 711 closed ports, 288 filtered ports PORT STATE SERVICE VERSION 1998/tcp open x25-svc-port?
Interesting ports on 7: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Microsoft ESMTP 110/tcp open pop3 MS Exchange 2007 pop3d |_ pop3-capabilities: TOP UIDL 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ html-title: Under Construction |_ sslv2: server still supports SSLv2 Service Info: Host: mainserver.sskoc.com; OS: Windows
Interesting ports on 5: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Cisco IOS administrative httpd | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access |_ html-title: Site doesn't have a title. 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 9: Not shown: 706 closed ports, 291 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 443/tcp open ssl/http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 5061/tcp open tcpwrapped Service Info: OS: IOS
Interesting ports on 0: Not shown: 988 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 444/tcp filtered snpp 1218/tcp filtered aeroflight-ads 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
213.178.252.1/24
Interesting ports on : Not shown: 989 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access |_ html-title: Site doesn't have a title. 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 5: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 6: Not shown: 988 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open microsoft-ds Microsoft Windows XP microsoft-ds 1433/tcp filtered ms-sql-s 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows XP | LAN Manager: Windows 2000 LAN Manager | Name: MSHOME\ESYRIA-5988D3E2 |_ System time: 2012-02-26 18:55:35 UTC+2
Interesting ports on 1: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 7: Not shown: 981 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open netbios-ssn 1688/tcp open msrpc Microsoft Windows RPC 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2869/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) |_ html-title: Service Unavailable 4444/tcp filtered krb524 5060/tcp filtered sip 5357/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) |_ html-title: Service Unavailable 49152/tcp open msrpc Microsoft Windows RPC 49153/tcp open msrpc Microsoft Windows RPC 49154/tcp open msrpc Microsoft Windows RPC 49156/tcp open msrpc Microsoft Windows RPC 49157/tcp open msrpc Microsoft Windows RPC 49158/tcp open msrpc Microsoft Windows RPC Service Info: OS: Windows
Host script results: | smb-os-discovery: Windows 7 Ultimate 7601 Service Pack 1 | LAN Manager: Windows 7 Ultimate 6.1 | Name: WORKGROUP\RECEPTION-PC |_ System time: 2012-02-26 18:53:32 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 0: Not shown: 983 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http gSOAP httpd 2.7 |_ html-title: HP LaserJet CM1415fn 0 http://0/info_config_network.html?tab=Networking&menu=NetConfig 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 515/tcp open printer 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 8080/tcp open http gSOAP httpd 2.7 |_ html-title: HP LaserJet CM1415fn 0 8291/tcp open unknown 8292/tcp open unknown 8888/tcp open sun-answerbook? 9100/tcp open jetdirect? 9999/tcp open abyss?
Interesting ports on 1: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Router with realtek 8181 chipset http config (GoAhead-Webs embedded httpd) 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: Device: router
213.178.253.1/24
PORT STATE SERVICE VERSION 53/tcp open domain Microsoft DNS 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction 389/tcp open ldap 445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds 464/tcp open kpasswd5? 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 636/tcp open tcpwrapped 1026/tcp open msrpc Microsoft Windows RPC 1027/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 1045/tcp open msrpc Microsoft Windows RPC 1050/tcp open msrpc Microsoft Windows RPC 3389/tcp open microsoft-rdp Microsoft Terminal Service 5800/tcp open vnc-http RealVNC 4.0 (Resolution 400x250; VNC TCP port: 5900) 5900/tcp open vnc VNC (protocol 3.8) Service Info: OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on : Not shown: 562 closed ports, 435 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp vsftpd 2.0.4 |_ ftp-anon: Anonymous FTP login allowed 80/tcp open http Apache httpd 2.2.9 ((Unix) mod_ssl/2.2.9 OpenSSL/0.9.8a PHP/5.2.6) | html-title: POS |_ Requested resource was http:///pos/ 111/tcp open rpcbind | rpcinfo: | 100000 2 111/udp rpcbind | 100024 1 32768/udp status | 100000 2 111/tcp rpcbind |_ 100024 1 58437/tcp status Service Info: OS: Unix
Interesting ports on : Not shown: 973 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp vsftpd 1.1.0 |_ ftp-anon: Anonymous FTP login allowed 22/tcp filtered ssh 23/tcp filtered telnet 25/tcp open smtp Communigate Pro SMTP 4.1.8 80/tcp open http CommuniGate Pro httpd 4.1.8 |_ html-title: CommuniGate Pro Entrance: Unknown Domain 106/tcp open pop3pw CommuniGate Pro pop3 password change daemon 4.1.8 110/tcp open pop3 CommuniGate Pro 4.1.8 |_ pop3-capabilities: USER IMPLEMENTATION(CommuniGatePro) UIDL APOP TOP STLS PIPELINING LAST SASL(LOGIN PLAIN CRAM-MD5 DIGEST-MD5 MSN) 111/tcp open rpcbind | rpcinfo: | 100000 2 111/udp rpcbind | 100024 1 32768/udp status | 100000 2 111/tcp rpcbind | 100024 1 32768/tcp status |_ 391002 2 32771/tcp sgi_fam 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 143/tcp open imap CommuniGate Pro imapd waseela.aleppo.sc.db |_ imap-capabilities: LOGIN-REFERRALS QUOTA STARTTLS LISTEXT AUTH=LOGIN ID AUTH=DIGEST-MD5 CHILDREN BINARY IMAP4REV1 IMAP4 AUTH=MSN UIDPLUS AUTH=CRAM-MD5 AUTH=PLAIN ACL LITERAL+ IDLE NAMESPACE MULTIAPPEND 389/tcp open ldap (Anonymous bind OK) 636/tcp open ssl/ldap (Anonymous bind OK) 993/tcp open ssl/imap CommuniGate Pro imapd waseela.aleppo.sc.db |_ imap-capabilities: LOGIN-REFERRALS QUOTA AUTH=PLAIN LISTEXT AUTH=LOGIN ID AUTH=DIGEST-MD5 CHILDREN BINARY IMAP4REV1 IMAP4 AUTH=MSN UIDPLUS AUTH=CRAM-MD5 ACL LITERAL+ IDLE NAMESPACE MULTIAPPEND 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3050/tcp open firebird Firebird RDBMS Protocol version 10 4444/tcp filtered krb524 5060/tcp filtered sip 6000/tcp open X11 (access denied) 8010/tcp open http CommuniGate Pro httpd 4.1.8 |_ html-title: CommuniGate Pro waseela.aleppo.sc.db Setup 8021/tcp open ftp Communigate Pro ftpd 4.1.8 8100/tcp open http CommuniGate Pro httpd 4.1.8 |_ html-title: CommuniGate Pro Entrance: Unknown Domain 9010/tcp open ssl/http CommuniGate Pro httpd 4.1.8 |_ html-title: CommuniGate Pro waseela.aleppo.sc.db Setup 9100/tcp open jetdirect? 32768/tcp open rpcbind Service Info: Hosts: waseela.aleppo.sc.db, 4.1.8; OS: Unix
Interesting ports on : Not shown: 526 closed ports, 473 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access Service Info: OS: IOS
All 1000 scanned ports on are filtered
Interesting ports on : Not shown: 574 filtered ports, 425 closed ports PORT STATE SERVICE VERSION 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access Service Info: OS: IOS
Interesting ports on : Not shown: 974 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Mathopd httpd 1.1 |_ html-title: User Configuration Interface 443/tcp open ssl/https? |_ html-title: Site doesn't have a title (text/html). 10002/tcp closed unknown 10003/tcp closed unknown 10004/tcp closed unknown 10082/tcp closed amandaidx 10180/tcp closed unknown 11110/tcp closed unknown 12000/tcp closed cce4x 12174/tcp closed unknown 13456/tcp closed unknown 13783/tcp closed netbackup 14441/tcp closed unknown 14442/tcp closed unknown 15004/tcp closed unknown 15742/tcp closed unknown 16018/tcp closed unknown 17988/tcp closed unknown 18988/tcp closed unknown 19801/tcp closed unknown 19842/tcp closed unknown 20005/tcp closed btx 20031/tcp closed unknown 24444/tcp closed unknown 25735/tcp closed unknown 27352/tcp closed unknown
Interesting ports on 5: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 6: ----> Net Management SHERATON hotel Not shown: 729 closed ports, 259 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Microsoft ESMTP 6.0.2600.5512 | smtp-commands: EHLO ZYXEL Hello [88.191.90.106], SIZE 2097152, PIPELINING, DSN, ENHANCEDSTATUSCODES, 8bitmime, BINARYMIME, CHUNKING, VRFY |_ HELP This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH BDAT VRFY 80/tcp open http Microsoft IIS webserver 5.1 |_ html-title: Under Construction 443/tcp open https? 445/tcp open microsoft-ds Microsoft Windows XP microsoft-ds 1025/tcp open msrpc Microsoft Windows RPC 1035/tcp open multidropper? 1036/tcp open apc-agent APC PowerChute agent 1038/tcp open apc-agent APC PowerChute agent 3389/tcp open microsoft-rdp Microsoft Terminal Service 8089/tcp open unknown 8090/tcp open http Apache Tomcat/Coyote JSP engine 1.1 |_ html-title: ManageEngine ServiceDesk Plus 19780/tcp open unknown
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows XP | LAN Manager: Windows 2000 LAN Manager | Name: WORKGROUP\ZYXEL |_ System time: 2012-02-26 19:31:11 UTC+2
Interesting ports on 7: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction 7001/tcp open http WebLogic httpd |_ html-title: Error 404--Not Found Service Info: OS: Windows
Interesting ports on 0: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Microsoft ESMTP 6.0.3790.3959 110/tcp open tcpwrapped 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ sslv2: server still supports SSLv2 |_ html-title: Under Construction Service Info: Host: opcdaex02.opc.com; OS: Windows
Interesting ports on 5: Not shown: 628 filtered ports, 371 closed ports PORT STATE SERVICE VERSION 23/tcp open telnet Cisco router Service Info: OS: IOS; Device: router
Interesting ports on 6: Not shown: 905 closed ports, 92 filtered ports PORT STATE SERVICE VERSION 53/tcp open domain ISC BIND DNS 80/tcp open http Microsoft IIS |_ html-title: The page cannot be displayed 443/tcp open ssl/https? | html-title: Barracuda Link Balancer: Welcome |_ Requested resource was https://6/cgi-mod/index.cgi |_ sslv2: server still supports SSLv2
Interesting ports on 7: Not shown: 859 closed ports, 139 filtered ports PORT STATE SERVICE VERSION 80/tcp open http? | robots.txt: has 1 disallowed entry |_ / | html-title: Barracuda Link Balancer: Welcome |_ Requested resource was http://7/cgi-mod/index.cgi 443/tcp open ssl/https? |_ sslv2: server still supports SSLv2 | html-title: Barracuda Link Balancer: Welcome |_ Requested resource was https://7/cgi-mod/index.cgi
Interesting ports on 6: Not shown: 645 closed ports, 335 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Microsoft ESMTP 53/tcp open domain Microsoft DNS 6.1.7600 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: 403 - Forbidden: Access is denied. 88/tcp open kerberos-sec Microsoft Windows kerberos-sec 110/tcp open pop3 MS Exchange 2007 pop3d |_ pop3-capabilities: USER STLS UIDL TOP SASL(NTLM GSSAPI PLAIN) 443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ html-title: IIS7 |_ sslv2: server still supports SSLv2 445/tcp open netbios-ssn 464/tcp open kpasswd5? 587/tcp open smtp Microsoft ESMTP 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 625/tcp open smtp Microsoft ESMTP 808/tcp open ccproxy-http? 995/tcp open ssl/pop3 MS Exchange 2007 pop3d |_ pop3-capabilities: USER SASL(NTLM GSSAPI PLAIN) TOP UIDL 2301/tcp open http HP Proliant System Management 6.1.0.102 (CompaqHTTPServer 9.9) | html-title: HP System Management Homepage |_ Requested resource was http://6/red2301.html?RedirectUrl=/ 3268/tcp open ldap 3269/tcp open ssl/ldap |_ sslv2: server still supports SSLv2 3389/tcp open microsoft-rdp Microsoft Terminal Service 6001/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 6002/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 6004/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 Service Info: Host: ns-fpm01.nourship.local; OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows Server 2008 R2 Enterprise 7600 | LAN Manager: Windows Server 2008 R2 Enterprise 6.1 | Name: NOURSHIP\NS-FPM01 |_ System time: 2012-02-26 19:33:02 UTC+2
213.178.254.1/24
Interesting ports on : Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp open ssh Cisco SSH 1.25 (protocol 2.0) |_ ssh-hostkey: 1024 ce:6e:27:1f:06:6d:fa:75:14:dc:6a:ba:c0:e2:01:db (RSA) 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on : Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 2: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS |_ html-title: The page cannot be displayed |_ sslv2: server still supports SSLv2 Service Info: OS: Windows
Interesting ports on 3: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS |_ sslv2: server still supports SSLv2 |_ html-title: The page cannot be displayed 3389/tcp open microsoft-rdp Microsoft Terminal Service Service Info: OS: Windows
Interesting ports on 4: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS |_ html-title: The page cannot be displayed |_ sslv2: server still supports SSLv2 Service Info: OS: Windows
Interesting ports on 5: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS |_ sslv2: server still supports SSLv2 |_ html-title: The page cannot be displayed 3389/tcp open microsoft-rdp Microsoft Terminal Service Service Info: OS: Windows
Interesting ports on 6: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Microsoft ESMTP 6.0.3790.1830 | smtp-commands: EHLO mailserver.arabia.sy Hello [88.190.24.19], TURN, SIZE, ETRN, PIPELINING, DSN, ENHANCEDSTATUSCODES, 8bitmime, BINARYMIME, CHUNKING, VRFY, X-EXPS GSSAPI NTLM LOGIN, X-EXPS=LOGIN, AUTH GSSAPI NTLM LOGIN, AUTH=LOGIN, X-LINK2STATE, XEXCH50 |_ HELP This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH TURN ETRN BDAT VRFY 143/tcp open imap Microsoft Exchange Server 2003 imapd 6.5.6944.0 |_ imap-capabilities: LOGIN-REFERRALS IMAP4 AUTH=NTLM IMAP4rev1 MAILBOX-REFERRALS UIDPLUS LITERAL+ IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Microsoft IIS |_ html-title: The page cannot be displayed |_ sslv2: server still supports SSLv2 Service Info: Host: mailserver.arabia.sy; OS: Windows
213.178.225.1/24
Interesting ports on shmail.scs-net.org (): Not shown: 993 filtered ports PORT STATE SERVICE VERSION 25/tcp closed smtp 80/tcp open http Apache httpd |_ html-title: Site doesn't have a title (text/html). 110/tcp closed pop3 143/tcp closed imap 993/tcp closed imaps 995/tcp closed pop3s 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html).
Interesting ports on mailhosting1.scs-net.org (): Not shown: 993 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO mailhosting1.scs-net.org, PIPELINING, SIZE 15728640, ETRN, STARTTLS, AUTH LOGIN CRAM-MD5 DIGEST-MD5 PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 993/tcp open ssl/imap Courier Imapd (released 2004) |_ sslv2: server still supports SSLv2 |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA AUTH=PLAIN THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 995/tcp open ssl/pop3 Courier pop3d |_ sslv2: server still supports SSLv2 |_ pop3-capabilities: USER IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP LOGIN-DELAY(10) TOP 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html). Service Info: Hosts: mailhosting1.scs-net.org, localhost.localdomain
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 1.3.33 ((Win32) PHP/5.0.5) |_ html-title: Site doesn't have a title (text/html).
Interesting ports on : Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ sslv2: server still supports SSLv2 |_ html-title: Under Construction Service Info: OS: Windows
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd | robots.txt: has 11 disallowed entries | admin.php config header footer pntables referer /images |_ /includes /modules/NS- /pnadodb /themes-----------> reperdoires indexés (taper un wget dedans) |_ html-title: ALOOLA :: At your service
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 | html-title: \xD8\xA7\xD9\x84\xD8\xB1\xD8\xA6\xD9\x8A\xD8\xB3\xD9\x8A\xD8\xA9 |_ Requested resource was http:///portal/ Service Info: OS: Windows
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 | html-title: \xD8\xA7\xD9\x84\xD8\xB1\xD8\xA6\xD9\x8A\xD8\xB3\xD9\x8A\xD8\xA9 |_ Requested resource was http:///portal/ Service Info: OS: Windows
Interesting ports on webmail2.scs-net.org (): Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.2.3 ((Debian) mod_python/3.2.10 Python/2.4.4 PHP/5.2.0-8+etch10 mod_perl/2.0.2 Perl/v5.8.8) |_ html-title: Login to @Mail
Interesting ports on webmail3.scs-net.org (): Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.2.9 ((Debian) PHP/5.2.6-1+lenny13 with Suhosin-Patch mod_perl/2.0.4 Perl/v5.10.0) |_ html-title: SCS-Net 6.3.5 - Login Page
Interesting ports on webmail.scs-net.org (): Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.2.3 ((Debian) mod_python/3.2.10 Python/2.4.4 PHP/5.2.0-8+etch10 mod_perl/2.0.2 Perl/v5.8.8) |_ html-title: Login to @Mail
Interesting ports on scs-net.org (): Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 | html-title: Error |_ Requested resource was http:///portal/ Service Info: OS: Windows
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.2.3 ((CentOS)) | html-title: 404 Not Found |_ Requested resource was http:///hspc/index.php
Interesting ports on : Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Apache httpd 2.2.14 ((Ubuntu)) |_ html-title: 404 Not Found 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.2.3 ((Fedora)) | html-title: 404 Not Found |_ Requested resource was http:///hspc/index.php
Interesting ports on : Not shown: 995 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page 443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS)) |_ sslv2: server still supports SSLv2 |_ html-title: Default Parallels Plesk Panel Page 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html).
Interesting ports on testlat.scs-net.org (): Not shown: 995 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp Microsoft ftpd 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: Default Parallels Plesk Panel Page 443/tcp closed https 8443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ html-title: Site doesn't have a title (text/html). |_ sslv2: server still supports SSLv2 Service Info: OS: Windows
Interesting ports on organon-sy.com (): Not shown: 995 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp Microsoft ftpd 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Default PLESK Page 443/tcp closed https 8443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ html-title: Site doesn't have a title (text/html). |_ sslv2: server still supports SSLv2 Service Info: OS: Windows
Interesting ports on : Not shown: 995 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.2e 80/tcp open http Apache httpd |_ html-title: Default Parallels Plesk Panel Page 443/tcp closed https 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html).
Interesting ports on : Not shown: 996 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp Microsoft ftpd 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: Default Parallels Plesk Panel Page 443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ sslv2: server still supports SSLv2 |_ html-title: Domain Default page 8443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ html-title: Site doesn't have a title (text/html). |_ sslv2: server still supports SSLv2 Service Info: OS: Windows
Interesting ports on : Not shown: 991 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip
Interesting ports on : Not shown: 997 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Microsoft ESMTP 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: 403 - Forbidden: Access is denied. 443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ sslv2: server still supports SSLv2 |_ html-title: IIS7 Service Info: Host: STAFFMAIL.scs-net.local; OS: Windows
Interesting ports on 0: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Error Service Info: OS: Windows
Interesting ports on 1: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Dedicated Micros Digital Sprite 2 DVR http config (ADH-Web httpd) |_ html-title: Site doesn't have a title (text/html; charset=utf-8). 1025/tcp closed NFS-or-IIS Service Info: Device: media device
Interesting ports on 2: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open tcpwrapped
Interesting ports on 3: Not shown: 707 closed ports, 281 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction 81/tcp open http Microsoft IIS httpd 443/tcp open https? 444/tcp open ssl/http Microsoft IIS httpd |_ html-title: Site doesn't have a title (text/html). |_ sslv2: server still supports SSLv2 445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds 1044/tcp open msrpc Microsoft Windows RPC 1052/tcp open msrpc Microsoft Windows RPC 1801/tcp open unknown 2103/tcp open msrpc Microsoft Windows RPC 2105/tcp open msrpc Microsoft Windows RPC 2107/tcp open msrpc Microsoft Windows RPC 3389/tcp open microsoft-rdp Microsoft Terminal Service Service Info: OS: Windows
Host script results: | smb-os-discovery: Windows Server 2003 R2 3790 Service Pack 2 | LAN Manager: Windows Server 2003 R2 5.2 | Name: SCS-NET\OCSSRV |_ System time: 2012-02-26 20:24:35 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 7: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.2.12 ((Ubuntu)) |_ html-title: 404 Not Found
Interesting ports on 1: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.3c 25/tcp open smtp qmail smtpd | smtp-commands: EHLO syrianedu.scs-net.org, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME |_ HELP qmail home page: http://pobox.com/~djb/qmail.html 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page |_ sslv2: server still supports SSLv2 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html).
Interesting ports on 3: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO syriabook.scs-net.org, PIPELINING, SIZE 10240000, ETRN, STARTTLS, AUTH LOGIN CRAM-MD5 DIGEST-MD5 PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN 80/tcp open http Apache httpd | robots.txt: has 2 disallowed entries |_ /include/ /theme/ |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER IMPLEMENTATION(Courier Mail Server) UIDL APOP TOP STLS PIPELINING LOGIN-DELAY(10) SASL(LOGIN CRAM-MD5 PLAIN) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS AUTH=PLAIN THREAD=REFERENCES ACL2=UNION UIDPLUS ACL SORT IMAP4rev1 AUTH=CRAM-MD5 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ html-title: Default Parallels Plesk Panel Page | robots.txt: has 2 disallowed entries |_ /include/ /theme/ 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html). Service Info: Hosts: 192.168.11.110, syriabook.scs-net.org, localhost.localdomain; OS: Unix
Interesting ports on 5: Not shown: 991 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 1433/tcp open ms-sql-s Microsoft SQL Server 2008 8443/tcp closed https-alt 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at http://www.insecure.org/cgi-bin/servicefp-submit.cgi : SF-Port1433-TCP:V=5.00%I=7%D=2/26%Time=4F4A85DD%P=x86_64-unknown-linux-gnu SF:%r(ms-sql-s,25,"\x04\x01\0%\0\0\x01\0\0\0\x15\0\x06\x01\0\x1b\0\x01\x02 SF:\0\x1c\0\x01\x03\0\x1d\0\0\xff\n2\x06@\0\0\0\0"); Service Info: OS: Windows
Interesting ports on 8: Not shown: 994 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp Microsoft ftpd 25/tcp open smtp MailEnable smptd 5.10-- |_ smtp-commands: EHLO home [88.190.24.19], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN 80/tcp open http Microsoft IIS webserver 7.5 | html-title: \xD8\xA7\xD9\x84\xD9\x81\xD8\xB6\xD8\xA7\xD8\xA6\xD9\x8A\xD8\xA9 \xD8\xA7\xD9\x84\xD8\xAA\xD8\xB1\xD8\xA8\xD9\x88\xD9\x8A\xD8\xA9 |_ Requested resource was http://8/ETVPortalWebSite/ETVHomePage.aspx 110/tcp open pop3 MailEnable POP3 Server |_ pop3-capabilities: USER TOP UIDL 143/tcp open imap MailEnable imapd |_ imap-capabilities: IMAP4rev1 IMAP4 CHILDREN IDLE AUTH=LOGIN AUTH=CRAM-MD5 8443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ html-title: Site doesn't have a title (text/html). |_ sslv2: server still supports SSLv2 Service Info: Host: WIN-2594B9DPC9D.home; OS: Windows
Interesting ports on 9: Not shown: 636 filtered ports, 352 closed ports PORT STATE SERVICE VERSION 25/tcp open smtp Microsoft ESMTP 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: 403 - Forbidden: Access is denied. 110/tcp open pop3 MS Exchange 2007 pop3d |_ pop3-capabilities: STLS TOP UIDL 143/tcp open imap Microsoft Exchange 2007 imapd |_ imap-capabilities: IMAP4 STARTTLS IMAP4rev1 UIDPLUS LOGINDISABLED LITERAL+ IDLE NAMESPACE CHILDREN 443/tcp open https? |_ sslv2: server still supports SSLv2 |_ html-title: IIS7 993/tcp open ssl/imap Microsoft Exchange 2007 imapd |_ imap-capabilities: AUTH=GSSAPI IMAP4 AUTH=NTLM AUTH=PLAIN UIDPLUS IMAP4rev1 LITERAL+ IDLE NAMESPACE CHILDREN 995/tcp open pop3s? 6005/tcp open msrpc Microsoft Windows RPC 6006/tcp open X11:6? 6007/tcp open msrpc Microsoft Windows RPC 8080/tcp open http Apache Tomcat/Coyote JSP engine 1.1 |_ html-title: Site doesn't have a title (text/html;charset=UTF-8). 8443/tcp open https-alt? |_ html-title: Site doesn't have a title (text/html;charset=UTF-8). Service Info: Host: unexch1.undpprojects.local; OS: Windows
Interesting ports on 0: Not shown: 636 filtered ports, 354 closed ports PORT STATE SERVICE VERSION 25/tcp open smtp Microsoft ESMTP 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: 403 - Forbidden: Access is denied. 110/tcp open pop3 MS Exchange 2007 pop3d |_ pop3-capabilities: STLS TOP UIDL 143/tcp open imap Microsoft Exchange 2007 imapd |_ imap-capabilities: IMAP4 STARTTLS IMAP4rev1 UIDPLUS LOGINDISABLED LITERAL+ IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ html-title: IIS7 |_ sslv2: server still supports SSLv2 993/tcp open ssl/imap Microsoft Exchange 2007 imapd |_ imap-capabilities: AUTH=GSSAPI IMAP4 AUTH=NTLM AUTH=PLAIN UIDPLUS IMAP4rev1 LITERAL+ IDLE NAMESPACE CHILDREN 995/tcp open ssl/pop3 MS Exchange 2007 pop3d |_ pop3-capabilities: USER SASL(NTLM GSSAPI PLAIN) TOP UIDL 6005/tcp open msrpc Microsoft Windows RPC 6006/tcp open msrpc Microsoft Windows RPC 6007/tcp open msrpc Microsoft Windows RPC Service Info: Host: unexch2.undpprojects.local; OS: Windows
Interesting ports on 1: Not shown: 993 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp Microsoft ftpd 25/tcp open smtp MailEnable smptd 6.0-- |_ smtp-commands: EHLO home [88.190.24.19], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 MailEnable POP3 Server |_ pop3-capabilities: USER TOP UIDL 443/tcp closed https 8443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ sslv2: server still supports SSLv2 |_ html-title: Site doesn't have a title (text/html). Service Info: Host: WEB-WITNESS.home; OS: Windows
Interesting ports on 8: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp? 25/tcp open smtp MailEnable smptd 6.0-- |_ smtp-commands: EHLO home [88.190.24.19], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 MailEnable POP3 Server |_ pop3-capabilities: USER TOP UIDL 143/tcp open imap MailEnable imapd |_ imap-capabilities: IMAP4rev1 IMAP4 CHILDREN IDLE AUTH=LOGIN AUTH=CRAM-MD5 443/tcp closed https 8443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ sslv2: server still supports SSLv2 |_ html-title: Site doesn't have a title (text/html). Service Info: Host: IUST-SERVER.home; OS: Windows
Interesting ports on 9: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 6.0 | html-title: WebDemo Home |_ Requested resource was http://class5.svuonline.org/default.asp? 110/tcp closed pop3 143/tcp closed imap 443/tcp open tcpwrapped 8443/tcp closed https-alt Service Info: OS: Windows
Interesting ports on 0: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.3e 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO egov.sy, PIPELINING, SIZE 10240000, ETRN, STARTTLS, AUTH DIGEST-MD5 CRAM-MD5 LOGIN PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN 80/tcp open http Apache httpd |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER IMPLEMENTATION(Courier Mail Server) UIDL APOP TOP STLS PIPELINING LOGIN-DELAY(10) SASL(LOGIN CRAM-MD5 PLAIN) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS AUTH=PLAIN THREAD=REFERENCES ACL2=UNION UIDPLUS ACL SORT IMAP4rev1 AUTH=CRAM-MD5 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ html-title: Default Parallels Plesk Panel Page |_ sslv2: server still supports SSLv2 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html).
Interesting ports on 1: Not shown: 994 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp Microsoft ftpd 25/tcp open smtp MailEnable smptd 5.10-- |_ smtp-commands: EHLO home [88.190.24.19], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 MailEnable POP3 Server |_ pop3-capabilities: USER TOP UIDL 143/tcp open imap MailEnable imapd |_ imap-capabilities: IMAP4rev1 IMAP4 CHILDREN IDLE AUTH=LOGIN AUTH=CRAM-MD5 8443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ sslv2: server still supports SSLv2 |_ html-title: Site doesn't have a title (text/html). Service Info: Host: SYREDU-WIN.home; OS: Windows
Interesting ports on 3: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.3c 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO nationldialog.scs-net.org, PIPELINING, SIZE 10240000, ETRN, STARTTLS, AUTH LOGIN DIGEST-MD5 CRAM-MD5 PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN 80/tcp open http Apache httpd |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ sslv2: server still supports SSLv2 |_ html-title: Default Parallels Plesk Panel Page 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html).
Interesting ports on 4: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp closed http 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 8443/tcp closed https-alt
Interesting ports on 7: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.3c 25/tcp open smtp qmail smtpd | smtp-commands: EHLO bso.scs-net.org, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME |_ HELP qmail home page: http://pobox.com/~djb/qmail.html 80/tcp open http Apache httpd |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ sslv2: server still supports SSLv2 |_ html-title: Default Parallels Plesk Panel Page 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html).
Interesting ports on 8: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 6.0 | html-title: WebDemo Home |_ Requested resource was http://class1.svuonline.org/default.asp? 110/tcp closed pop3 143/tcp closed imap 443/tcp open tcpwrapped 8443/tcp closed https-alt Service Info: OS: Windows
Interesting ports on 9: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.3c |_ ftp-bounce: no banner 25/tcp open smtp | smtp-commands: EHLO moe.scs-net.org, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME |_ HELP qmail home page: http://pobox.com/~djb/qmail.html 80/tcp open http Apache httpd |_ html-title: Test Page for the Apache HTTP Server 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ sslv2: server still supports SSLv2 |_ html-title: Test Page for the Apache HTTP Server 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/plain; charset=utf-8).
Interesting ports on 0: Not shown: 993 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: \xC7\xE1\xE6\xDF\xC7\xE1\xC9 \xC7\xE1\xDA\xD1\xC8\xED\xC9 \xC7\xE1\xD3\xE6\xD1\xED\xC9 \xE1\xE1\xC3\xE4\xC8\xC7\xC1 - \xD3\xC7\xE4\xC7 - \xD3\xE6\xD1\xED\xC9 : \xC3\xCE\xC8\xC7\xD1 \xD3\xE6\xD1\xED\xC9 :: 110/tcp closed pop3 143/tcp closed imap 443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS)) |_ html-title: 401 Authorization Required | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = sana.sy
Interesting ports on 1: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.2.10 25/tcp open smtp qmail smtpd | smtp-commands: EHLO undpprojects.sy, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME |_ HELP qmail home page: http://pobox.com/~djb/qmail.html 80/tcp open http Apache httpd 2.0.49 ((Linux/SuSE)) |_ html-title: Default PLESK Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING LOGIN-DELAY(10) TOP 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd 2.0.49 ((Linux/SuSE)) |_ html-title: Default PLESK Page |_ sslv2: server still supports SSLv2 8443/tcp open http Apache httpd 1.3.33 ((Unix) mod_ssl/2.8.22 OpenSSL/0.9.7e PHP/5.0.4) | html-title: 302 Found |_ Did not follow redirect to https://UNDP.scs-net.org:8443 Service Info: OS: Unix
Interesting ports on 2: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http Microsoft IIS httpd |_ html-title: Site doesn't have a title (text/html). 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 8443/tcp closed https-alt
Interesting ports on 3: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp Microsoft ftpd |_ ftp-anon: Anonymous FTP login allowed 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 6.0 | html-title: WebDemo Home |_ Requested resource was http://class2.svuonline.org/default.asp? 110/tcp closed pop3 143/tcp closed imap 443/tcp open tcpwrapped 8443/tcp closed https-alt Service Info: OS: Windows
Interesting ports on 4: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.3c 25/tcp open smtp qmail smtpd | smtp-commands: EHLO esyria.scs-net.org, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME |_ HELP qmail home page: http://pobox.com/~djb/qmail.html 80/tcp open http Apache httpd |_ html-title: Site doesn't have a title (text/html). 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ sslv2: server still supports SSLv2 |_ html-title: Site doesn't have a title (text/html). 8443/tcp open http Apache httpd | html-title: 302 Found |_ Did not follow redirect to https://esyria.scs-net.org:8443 Service Info: Host: localhost.localdomain; OS: Unix
Interesting ports on 5: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http? | html-title: Site doesn't have a title (text/html). |_ Did not follow redirect to https://5/ 443/tcp open ssl/http VMware ESX Server httpd |_ html-title: " + ID_EESX_Welcome + "
Interesting ports on 8: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 6.0 | html-title: WebDemo Home |_ Requested resource was http://class6.svuonline.org/default.asp? 110/tcp closed pop3 143/tcp closed imap 443/tcp open tcpwrapped 8443/tcp closed https-alt Service Info: OS: Windows
Interesting ports on 9: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http? |_ html-title: Did not follow redirect to https://9/ and no page was returned. 110/tcp closed pop3 143/tcp closed imap 443/tcp open ssl/http VMware ESX Server httpd |_ html-title: " + ID_EESX_Welcome + " 8443/tcp closed https-alt
Interesting ports on 2: Not shown: 991 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp? 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO diflottery.scs-net.org, PIPELINING, SIZE 10240000, ETRN, STARTTLS, AUTH CRAM-MD5 DIGEST-MD5 LOGIN PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page |_ sslv2: server still supports SSLv2 3306/tcp open mysql MySQL 5.0.77 | mysql-info: Protocol: 10 | Version: 5.0.77 | Thread ID: 4756123 | Some Capabilities: Connect with DB, Compress, Transactions, Secure Connection | Status: Autocommit |_ Salt: =$<>cVh''/U?yhyKJptv 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html).
Interesting ports on 5: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http nginx web server |_ html-title: Parallels Server Bare Metal 5 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 8443/tcp closed https-alt
Interesting ports on 6: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 6.0 | html-title: WebDemo Home |_ Requested resource was http://class7.svuonline.org/default.asp? 110/tcp closed pop3 143/tcp closed imap 443/tcp open tcpwrapped 8443/tcp closed https-alt Service Info: OS: Windows
Interesting ports on 7: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 6.0 | html-title: WebDemo Home |_ Requested resource was http://class8.svuonline.org/default.asp? 110/tcp closed pop3 143/tcp closed imap 443/tcp open tcpwrapped 8443/tcp closed https-alt Service Info: OS: Windows
Interesting ports on 8: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 6.0 | html-title: WebDemo Home |_ Requested resource was http://class9.svuonline.org/default.asp? 110/tcp closed pop3 143/tcp closed imap 443/tcp open tcpwrapped 8443/tcp closed https-alt Service Info: OS: Windows
Interesting ports on 1: Not shown: 994 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp open smtp Exim smtpd | smtp-commands: EHLO mailer1.massar.sy Hello example.org [88.190.24.19], SIZE 52428800, PIPELINING, AUTH PLAIN LOGIN, STARTTLS, HELP |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP 80/tcp open http Apache httpd 2.2.14 ((Ubuntu)) 100/tcp open ssh OpenSSH 5.3p1 Debian 3ubuntu7 (protocol 2.0) |_ ssh-hostkey: 4096 e4:41:ac:30:68:75:24:73:4e:b2:89:90:30:e4:41:8f (RSA) 443/tcp open ssl/http Apache httpd 2.2.14 ((Ubuntu)) Service Info: OS: Linux
Interesting ports on 2: Not shown: 988 filtered ports PORT STATE SERVICE VERSION 21/tcp closed ftp 25/tcp open smtp Exim smtpd 4.72 | smtp-commands: EHLO massar.sy Hello example.org [88.190.24.19], SIZE 52428800, PIPELINING, AUTH PLAIN LOGIN, STARTTLS, HELP |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP 80/tcp open http Apache httpd |_ html-title: Website Down 100/tcp open ssh OpenSSH 5.1p1 Debian 5 (protocol 2.0) |_ ssh-hostkey: 4096 5e:b3:4d:ae:bd:06:c0:48:e3:40:5d:da:0e:fa:7d:33 (RSA) 110/tcp open pop3 |_ pop3-capabilities: USER CAPA RESP-CODES UIDL PIPELINING STLS TOP SASL(PLAIN LOGIN) 143/tcp open imap Dovecot imapd |_ imap-capabilities: LOGIN-REFERRALS ESEARCH UNSELECT QUOTA IMAP4rev1 AUTH=PLAIN STARTTLS AUTH=LOGIN ID CONDSTORE WITHIN CHILDREN LIST-EXTENDED SEARCHRES ESORT QRESYNC CONTEXT=SEARCH THREAD=REFS THREAD=REFERENCES I18NLEVEL=1 UIDPLUS NAMESPACE SORT ENABLE LITERAL+ IDLE SASL-IR MULTIAPPEND 443/tcp open ssl/http Apache httpd |_ sslv2: server still supports SSLv2 |_ html-title: Website Down 587/tcp open smtp Exim smtpd 4.72 | smtp-commands: EHLO massar.sy Hello example.org [88.190.24.19], SIZE 52428800, PIPELINING, AUTH PLAIN LOGIN, STARTTLS, HELP |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP 993/tcp open ssl/imap Dovecot imapd |_ sslv2: server still supports SSLv2 |_ imap-capabilities: LOGIN-REFERRALS ESEARCH UNSELECT IMAP4rev1 QUOTA AUTH=PLAIN AUTH=LOGIN ID CONDSTORE WITHIN CHILDREN LIST-EXTENDED SEARCHRES ESORT QRESYNC CONTEXT=SEARCH THREAD=REFS THREAD=REFERENCES I18NLEVEL=1 UIDPLUS NAMESPACE SORT ENABLE LITERAL+ IDLE SASL-IR MULTIAPPEND 995/tcp open ssl/pop3 |_ sslv2: server still supports SSLv2 |_ pop3-capabilities: USER CAPA UIDL PIPELINING RESP-CODES TOP SASL(PLAIN LOGIN) 33354/tcp closed unknown 33899/tcp closed unknown Service Info: Host: massar.sy; OS: Linux
Interesting ports on 4: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp Microsoft ftpd |_ ftp-anon: Anonymous FTP login allowed 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 6.0 | html-title: WebDemo Home |_ Requested resource was http://class3.svuonline.org/default.asp? 110/tcp closed pop3 143/tcp closed imap 443/tcp open tcpwrapped 8443/tcp closed https-alt Service Info: OS: Windows
Interesting ports on 9: Not shown: 994 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp Microsoft ftpd 25/tcp open smtp MailEnable smptd 5.02-- |_ smtp-commands: EHLO cbs-bank.com [88.190.24.19], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 MailEnable POP3 Server |_ pop3-capabilities: USER TOP UIDL 143/tcp open imap MailEnable imapd |_ imap-capabilities: IMAP4rev1 IMAP4 CHILDREN IDLE AUTH=LOGIN AUTH=CRAM-MD5 8443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ sslv2: server still supports SSLv2 |_ html-title: Site doesn't have a title (text/html). Service Info: Host: WIN-NHDLB9QHTPS.cbs-bank.com; OS: Windows
Interesting ports on 0: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.3c 25/tcp open smtp qmail smtpd | smtp-commands: EHLO mofa.gov.sy, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME |_ HELP qmail home page: http://pobox.com/~djb/qmail.html 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS)) |_ sslv2: server still supports SSLv2 |_ html-title: Default Parallels Plesk Panel Page 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html).
Interesting ports on 1: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD |_ ftp-anon: Anonymous FTP login allowed 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO mofa-web.scs-net.org, PIPELINING, SIZE 10240000, ETRN, STARTTLS, AUTH CRAM-MD5 LOGIN PLAIN DIGEST-MD5, ENHANCEDSTATUSCODES, 8BITMIME, DSN 80/tcp open http Apache httpd |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER IMPLEMENTATION(Courier Mail Server) UIDL APOP TOP STLS PIPELINING LOGIN-DELAY(10) SASL(LOGIN CRAM-MD5 PLAIN) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS AUTH=PLAIN THREAD=REFERENCES ACL2=UNION UIDPLUS ACL SORT IMAP4rev1 AUTH=CRAM-MD5 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ html-title: Default Parallels Plesk Panel Page |_ sslv2: server still supports SSLv2 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html; charset=UTF-8). Service Info: Hosts: 192.168.11.36, mofa-web.scs-net.org, localhost.localdomain; OS: Unix
Interesting ports on 2: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.3c 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO reefnet.scs-net.org, PIPELINING, SIZE 10240000, ETRN, STARTTLS, AUTH PLAIN DIGEST-MD5 CRAM-MD5 LOGIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN 80/tcp open http Apache httpd |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ sslv2: server still supports SSLv2 |_ html-title: Default Parallels Plesk Panel Page 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html).
Interesting ports on 4: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: \xE3\xE6\xDE\xDA \xE4\xD9\xC7\xE3 \xE3\xDA\xE1\xE6\xE3\xC7\xCA \xC7\xE1\xC8\xCD\xCB \xC7\xE1\xDA\xE1\xE3\xED \xE6\xC7\xE1\xCA\xD8\xE6\xED\xD1 \xC7\xE1\xCA\xDE\xC7\xE4\xED \xDD\xED \xD3\xE6\xD1\xED\xC7 Service Info: OS: Windows
Interesting ports on 7: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.1 25/tcp open smtp qmail smtpd | smtp-commands: EHLO commander.aloola.sy, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME |_ HELP qmail home page: http://pobox.com/~djb/qmail.html 80/tcp open http Apache httpd |_ html-title: Site doesn't have a title (text/html). 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ html-title: Site doesn't have a title (text/html). |_ sslv2: server still supports SSLv2 8443/tcp open http Apache httpd | html-title: 302 Found |_ Requested resource was https://commander.aloola.sy:8443/ Service Info: Host: localhost.localdomain; OS: Unix
Interesting ports on mail.syriatrust.org (0): Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp Microsoft ftpd 25/tcp open smtp MailEnable smptd 4.26-- |_ smtp-commands: EHLO syriatrust.org [88.190.24.19], this server offers 4 extensions, AUTH LOGIN, SIZE 10240000, HELP, AUTH=LOGIN 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 MailEnable POP3 Server |_ pop3-capabilities: USER TOP UIDL 143/tcp closed imap 443/tcp closed https 8443/tcp open ssl/http Microsoft IIS httpd 6.0 |_ html-title: Site doesn't have a title (text/html). |_ sslv2: server still supports SSLv2 Service Info: OS: Windows
Interesting ports on 4: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.3c 25/tcp open smtp qmail smtpd | smtp-commands: EHLO mail.esyria.sy, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME |_ HELP qmail home page: http://pobox.com/~djb/qmail.html 80/tcp open http Apache httpd |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ html-title: Default Parallels Plesk Panel Page |_ sslv2: server still supports SSLv2 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html).
Interesting ports on 5: Not shown: 994 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp Microsoft ftpd 25/tcp open smtp MailEnable smptd 5.02-- |_ smtp-commands: EHLO cbs-bank.com [88.190.24.19], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 MailEnable POP3 Server |_ pop3-capabilities: USER TOP UIDL 143/tcp open imap MailEnable imapd |_ imap-capabilities: IMAP4rev1 IMAP4 CHILDREN IDLE AUTH=LOGIN AUTH=CRAM-MD5 8443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ sslv2: server still supports SSLv2 |_ html-title: Site doesn't have a title (text/html). Service Info: Host: WIN-NHDLB9QHTPS.cbs-bank.com; OS: Windows
Interesting ports on 7: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp Microsoft ftpd |_ ftp-anon: Anonymous FTP login allowed 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 6.0 | html-title: WebDemo Home |_ Requested resource was http://class4.svuonline.org/default.asp? 110/tcp closed pop3 143/tcp closed imap 443/tcp open tcpwrapped 8443/tcp closed https-alt Service Info: OS: Windows
Interesting ports on 8: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.3e 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO mod.gov.sy, PIPELINING, SIZE 10240000, ETRN, STARTTLS, AUTH LOGIN DIGEST-MD5 PLAIN CRAM-MD5, ENHANCEDSTATUSCODES, 8BITMIME, DSN 80/tcp open http Apache httpd |_ html-title: Under Construction 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ html-title: Under Construction |_ sslv2: server still supports SSLv2 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html). 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at http://www.insecure.org/cgi-bin/servicefp-submit.cgi :
Interesting ports on 0: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Axiom 2.0 News Manager Login - Distributor version - Not for r... 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 8443/tcp closed https-alt Service Info: OS: Windows
Interesting ports on 4: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp? |_ ftp-bounce: no banner 25/tcp open smtp? 80/tcp open http? 110/tcp open pop3? 143/tcp open imap? 443/tcp open https? 8443/tcp open https-alt?
213.178.226.1/24
Starting Nmap 5.00 ( http://nmap.org ) at 2012-02-26 20:50 CET Interesting ports on : Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.1 25/tcp open smtp qmail smtpd 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Site doesn't have a title (text/html). 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Site doesn't have a title (text/html). |_ sslv2: server still supports SSLv2 8443/tcp open http Apache httpd | html-title: 302 Found |_ Did not follow redirect to https://mof.scs-net.org:8443 Service Info: Host: localhost.localdomain; OS: Unix
Interesting ports on : Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp vsftpd 2.0.5 25/tcp closed smtp 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: \xE6\xD2\xC7\xD1\xC9 \xC7\xE1\xCA\xDA\xE1\xED\xE3 \xC7\xE1\xDA\xC7\xE1\xED - \xE3\xE6\xDE\xDA \xC7\xE1\xE3\xDD\xC7\xD6\xE1\xC9 - 2011-2012 110/tcp closed pop3 143/tcp closed imap 443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS)) |_ html-title: \xE6\xD2\xC7\xD1\xC9 \xC7\xE1\xCA\xDA\xE1\xED\xE3 \xC7\xE1\xDA\xC7\xE1\xED - \xE3\xE6\xDE\xDA \xC7\xE1\xE3\xDD\xC7\xD6\xE1\xC9 - 2011-2012 8443/tcp closed https-alt Service Info: OS: Unix
Interesting ports on : Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp vsftpd 2.0.5 25/tcp closed smtp 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: \xE6\xD2\xC7\xD1\xC9 \xC7\xE1\xCA\xDA\xE1\xED\xE3 \xC7\xE1\xDA\xC7\xE1\xED - \xE3\xE6\xDE\xDA \xC7\xE1\xE3\xDD\xC7\xD6\xE1\xC9 - 2011-2012 110/tcp closed pop3 143/tcp closed imap 443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS)) |_ html-title: \xE6\xD2\xC7\xD1\xC9 \xC7\xE1\xCA\xDA\xE1\xED\xE3 \xC7\xE1\xDA\xC7\xE1\xED - \xE3\xE6\xDE\xDA \xC7\xE1\xE3\xDD\xC7\xD6\xE1\xC9 - 2011-2012 8443/tcp closed https-alt Service Info: OS: Unix
Interesting ports on : Not shown: 991 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip
Interesting ports on 8: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http? | html-title: PRTG Traffic Grapher - Monitoring Results - PRTG Traffic Graph... |_ Requested resource was http://8/login.htm | robots.txt: has 1 disallowed entry
213.178.227.1/24
Starting Nmap 5.00 ( http://nmap.org ) at 2012-02-26 20:51 CET Interesting ports on 213.178.227.1: Not shown: 991 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip
Interesting ports on 213.178.227.8: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http? 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 8443/tcp closed https-alt
Interesting ports on 213.178.227.9: Not shown: 990 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http? 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 8443/tcp closed https-alt 10000/tcp open snet-sensor-mgmt? 55555/tcp open unknown
Interesting ports on : Not shown: 990 filtered ports PORT STATE SERVICE VERSION 20/tcp open ftp-data? 21/tcp open ftp? |_ ftp-bounce: no banner 25/tcp open smtp? 80/tcp open http? 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 1433/tcp closed ms-sql-s 3389/tcp open ms-term-serv? 8443/tcp open https-alt?
All 1000 scanned ports on are closed (915) or filtered (85)
Interesting ports on : Not shown: 989 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp? |_ ftp-bounce: no banner 25/tcp open smtp? 80/tcp open http? 110/tcp open pop3? 143/tcp open imap? 443/tcp open https? 3306/tcp open mysql? 3389/tcp closed ms-term-serv 6789/tcp open ibm-db2-admin? 8443/tcp open https-alt?
Interesting ports on : Not shown: 989 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp? |_ ftp-bounce: no banner 25/tcp open smtp? 80/tcp open http? 110/tcp open pop3? 143/tcp open imap? 443/tcp open https? 3306/tcp open mysql? 3389/tcp closed ms-term-serv 6789/tcp closed ibm-db2-admin 8443/tcp open https-alt?
Interesting ports on : Not shown: 988 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp? |_ ftp-bounce: no banner 25/tcp open smtp? 53/tcp open domain? 110/tcp open pop3? 143/tcp open imap? 443/tcp open https? 3306/tcp open mysql? 3389/tcp closed ms-term-serv 6789/tcp closed ibm-db2-admin 8443/tcp open https-alt? 10000/tcp open snet-sensor-mgmt?
Interesting ports on : Not shown: 996 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp? 80/tcp open http? 110/tcp open pop3? 8443/tcp open https-alt?
Interesting ports on : Not shown: 989 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http? 110/tcp closed pop3 143/tcp closed imap 443/tcp open https? 3306/tcp closed mysql 3389/tcp closed ms-term-serv 6789/tcp closed ibm-db2-admin 8443/tcp open https-alt?
Interesting ports on : Not shown: 989 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp? |_ ftp-bounce: no banner 25/tcp open smtp? 80/tcp open http? 110/tcp open pop3? 143/tcp open imap? 443/tcp open https? 3306/tcp open mysql? 3389/tcp closed ms-term-serv 6789/tcp closed ibm-db2-admin 8443/tcp open https-alt?
Interesting ports on : Not shown: 990 filtered ports PORT STATE SERVICE VERSION 21/tcp closed ftp 25/tcp closed smtp 80/tcp closed http 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 3306/tcp closed mysql 3389/tcp closed ms-term-serv 6789/tcp closed ibm-db2-admin 8443/tcp open https-alt?
Interesting ports on : Not shown: 990 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http? 110/tcp closed pop3 143/tcp closed imap 443/tcp open https? 3306/tcp closed mysql 3389/tcp open ms-term-serv? 8443/tcp open https-alt?
Interesting ports on : Not shown: 990 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http? 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 3306/tcp closed mysql 3389/tcp open ms-term-serv? 8443/tcp open https-alt?
Interesting ports on : Not shown: 990 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http? 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 3306/tcp closed mysql 3389/tcp open ms-term-serv? 8443/tcp open https-alt?
All 1000 scanned ports on 7 are filtered
Interesting ports on 9: Not shown: 989 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp? |_ ftp-bounce: no banner 25/tcp open smtp? 80/tcp open http? 110/tcp open pop3? 143/tcp open imap? 443/tcp open https? 3306/tcp open mysql? 3389/tcp closed ms-term-serv 6789/tcp closed ibm-db2-admin 8443/tcp open https-alt?
Interesting ports on 2: Not shown: 996 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp? 80/tcp open http? 110/tcp open pop3? 8443/tcp open https-alt?
Interesting ports on 5: Not shown: 996 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp? 80/tcp open http? 110/tcp open pop3? 8443/tcp open https-alt?
Interesting ports on 6: Not shown: 996 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp? 80/tcp open http? 110/tcp open pop3? 8443/tcp open https-alt?
Interesting ports on 9: Not shown: 989 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.1 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO pewss.scs-net.org, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, AUTH CRAM-MD5 DIGEST-MD5 LOGIN PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page |_ sslv2: server still supports SSLv2 3306/tcp open mysql MySQL (unauthorized) 3389/tcp closed ms-term-serv 6789/tcp closed ibm-db2-admin 8443/tcp open ssl/http Apache httpd |_ sslv2: server still supports SSLv2 | html-title: VZPP Plesk - Log in to Plesk 9.3.0 |_ Requested resource was https://9:8443/vz/cp/panel/plesk/frameset Service Info: Hosts: pewss.scs-net.org, localhost.localdomain; OS: Unix
Interesting ports on 1:
Not shown: 989 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp ProFTPD 1.3.1
25/tcp open smtp Postfix smtpd
|_ smtp-commands: EHLO mod.scs-net.org, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, AUTH CRAM-MD5 DIGEST-MD5 LOGIN PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN
80/tcp open http Apache httpd 2.2.3 ((CentOS))
|_ html-title: Apache HTTP Server Test Page powered by CentOS
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10)
143/tcp open imap Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS))
|_ html-title: Apache HTTP Server Test Page powered by CentOS
3306/tcp open mysql MySQL 5.0.77
| mysql-info: Protocol: 10
| Version: 5.0.77
| Thread ID: 13846
| Some Capabilities: Connect with DB, Compress, Transactions, Secure Connection
| Status: Autocommit
|_ Salt: 4C5}:G7{'N6__?]65GEe
3389/tcp closed ms-term-serv
6789/tcp closed ibm-db2-admin
8443/tcp open ssl/http Apache httpd
| html-title: VZPP Plesk - Log in to Plesk 9.3.0
|_ Requested resource was https://1:8443/vz/cp/panel/plesk/frameset
|_ sslv2: server still supports SSLv2
Service Info: Hosts: mod.scs-net.org, localhost.localdomain; OS: Unix
Interesting ports on 2: Not shown: 989 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.1 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO localhost.localdomain, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, AUTH CRAM-MD5 DIGEST-MD5 LOGIN PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page |_ sslv2: server still supports SSLv2 3306/tcp open mysql MySQL 5.0.77 | mysql-info: Protocol: 10 | Version: 5.0.77 | Thread ID: 737230 | Some Capabilities: Connect with DB, Compress, Transactions, Secure Connection | Status: Autocommit |_ Salt: .pkJon[]Br6V/&o!ONz; 3389/tcp closed ms-term-serv 6789/tcp closed ibm-db2-admin 8443/tcp open ssl/http Apache httpd | html-title: VZPP Plesk - Log in to Plesk 9.3.0 |_ Requested resource was https://2:8443/vz/cp/panel/plesk/frameset |_ sslv2: server still supports SSLv2 Service Info: Host: localhost.localdomain; OS: Unix
Interesting ports on 7: Not shown: 989 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.1 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO youropinion.scs-net.org, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, AUTH CRAM-MD5 DIGEST-MD5 LOGIN PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page |_ sslv2: server still supports SSLv2 3306/tcp open mysql MySQL (unauthorized) 3389/tcp closed ms-term-serv 6789/tcp closed ibm-db2-admin 8443/tcp open ssl/http Apache httpd | html-title: VZPP Plesk - Log in to Plesk 9.3.0 |_ Requested resource was https://7:8443/vz/cp/panel/plesk/frameset |_ sslv2: server still supports SSLv2 Service Info: Hosts: youropinion.scs-net.org, localhost.localdomain; OS: Unix
Interesting ports on 4: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd |_ html-title: Site doesn't have a title (text/html). 443/tcp open ssl/http Apache httpd |_ html-title: Apache HTTP Server Test Page powered by CentOS 8443/tcp open http Apache SSL-only mode httpd |_ html-title: 400 Bad Request
Interesting ports on 1: Not shown: 993 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp? |_ ftp-bounce: no banner 25/tcp open smtp? 80/tcp open http? 110/tcp open pop3? 143/tcp open imap? 3389/tcp open ms-term-serv? 8443/tcp open https-alt?
Interesting ports on 2: Not shown: 993 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp Microsoft ftpd |_ ftp-anon: Anonymous FTP login allowed 25/tcp open smtp MailEnable smptd 5.10-- |_ smtp-commands: EHLO syrianeducation.org.sy [88.191.88.106], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN 80/tcp open http Microsoft IIS webserver 7.0 |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 MailEnable POP3 Server |_ pop3-capabilities: USER TOP UIDL 143/tcp open imap MailEnable imapd |_ imap-capabilities: IMAP4rev1 IMAP4 CHILDREN IDLE AUTH=LOGIN AUTH=CRAM-MD5 3389/tcp open microsoft-rdp Microsoft Terminal Service 8443/tcp open ssl/http Microsoft IIS webserver 7.0 |_ html-title: Site doesn't have a title (text/html). |_ sslv2: server still supports SSLv2 Service Info: Host: mail.syrianeducation.org.sy; OS: Windows
Interesting ports on 5: Not shown: 993 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp Microsoft ftpd 25/tcp open smtp MailEnable smptd 4.26-- |_ smtp-commands: EHLO home [88.191.88.106], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN 80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) |_ html-title: \xD8\xB3\xD9\x88\xD8\xB1\xD9\x8A\xD8\xA9 \xD8\xA7\xD9\x84\xD8\xAA\xD8\xB4\xD8\xA7\xD8\xB1\xD9\x83\xD9\x8A\xD8\xA9 110/tcp open pop3 MailEnable POP3 Server |_ pop3-capabilities: USER TOP UIDL 143/tcp open imap MailEnable imapd |_ imap-capabilities: IMAP4rev1 IMAP4 CHILDREN IDLE AUTH=LOGIN AUTH=CRAM-MD5 3389/tcp open microsoft-rdp Microsoft Terminal Service 8443/tcp open ssl/http Microsoft IIS webserver 7.0 |_ sslv2: server still supports SSLv2 |_ html-title: Site doesn't have a title (text/html). Service Info: Host: YOUROPINION.home; OS: Windows
Interesting ports on 6: Not shown: 990 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp Microsoft ftpd |_ ftp-anon: Anonymous FTP login allowed 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 7.0 |_ html-title: IIS7 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 3306/tcp closed mysql 3389/tcp open microsoft-rdp Microsoft Terminal Service 8443/tcp closed https-alt Service Info: OS: Windows
Interesting ports on 8: Not shown: 990 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp Microsoft ftpd 25/tcp closed smtp 80/tcp closed http 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 3306/tcp closed mysql 3389/tcp open microsoft-rdp Microsoft Terminal Service 8443/tcp open ssl/http Microsoft IIS webserver 7.0 |_ sslv2: server still supports SSLv2 | html-title: VZPP Plesk - Log in to Plesk |_ Requested resource was https://8:8443/vz/cp/panel/plesk/frameset Service Info: OS: Windows
213.178.228.1/24
Starting Nmap 5.00 ( http://nmap.org ) at 2012-02-26 21:27 CET Interesting ports on 213.178.228.1: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on : Not shown: 989 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 3: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open tcpwrapped
Interesting ports on 2: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Netscreen administrative web server (runs Virata-EmWeb/R6_0_1) |_ html-title: Login 443/tcp open ssl/http Netscreen administrative web server (runs Virata-EmWeb/R6_0_1) |_ html-title: Login |_ sslv2: server still supports SSLv2 Service Info: Device: firewall
Interesting ports on 5: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS |_ html-title: The page cannot be displayed Service Info: OS: Windows
Interesting ports on 9: Not shown: 981 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp HP JetDirect ftpd |_ ftp-anon: Anonymous FTP login allowed 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http HP Color LaserJet 4650 http config (HP-ChaiSOE 1.0) | html-title: HP LaserJet M3035 MFP Series |_ Requested resource was http://9/hp/device/this.LCDispatcher 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 280/tcp open http HP Color LaserJet 4650 http config (HP-ChaiSOE 1.0) | html-title: HP LaserJet M3035 MFP Series |_ Requested resource was http://9/hp/device/this.LCDispatcher 443/tcp open ssl/http HP Color LaserJet 4650 http config (HP-ChaiSOE 1.0) | html-title: HP LaserJet M3035 MFP Series |_ Requested resource was http://9/hp/device/this.LCDispatcher 445/tcp filtered microsoft-ds 515/tcp open printer 631/tcp open http HP Color LaserJet 4650 http config (HP-ChaiSOE 1.0) | html-title: HP LaserJet M3035 MFP Series |_ Requested resource was http://9/hp/device/this.LCDispatcher 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 1783/tcp open unknown 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 9100/tcp open jetdirect? 14000/tcp open tcpwrapped Service Info: Device: printer
213.178.229.1/24
Starting Nmap 5.00 ( http://nmap.org ) at 2012-02-26 21:44 CET Interesting ports on : Not shown: 978 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 53/tcp open domain Microsoft DNS 88/tcp open tcpwrapped 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 389/tcp open tcpwrapped 445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds 464/tcp open kpasswd5? 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 636/tcp open tcpwrapped 1026/tcp open LSA-or-nterm? 1027/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 1040/tcp open msrpc Microsoft Windows RPC 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3268/tcp open ldap 3269/tcp open tcpwrapped 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on : Not shown: 973 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 53/tcp open domain Microsoft DNS 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Site doesn't have a title (text/html). 88/tcp open kerberos-sec Microsoft Windows kerberos-sec 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 389/tcp open ldap 445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds 464/tcp open kpasswd5? 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 636/tcp open tcpwrapped 1026/tcp open msrpc Microsoft Windows RPC 1027/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 1055/tcp open msrpc Microsoft Windows RPC 1074/tcp open unknown 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2522/tcp open unknown 2638/tcp open tcpwrapped 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 7999/tcp open unknown 8443/tcp open ssl/https-alt? |_ html-title: Did not follow redirect to https:///symantec.html and no page was returned. 9090/tcp open zeus-admin?
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows Server 2003 3790 Service Pack 2 | LAN Manager: Windows Server 2003 5.2 | Name: UNSY\SYR03 |_ System time: 2012-02-26 20:58:50 UTC+3
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp closed https
Interesting ports on : Not shown: 987 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp VxWorks ftpd 5.5.1 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http? |_ html-title: LOGIN 111/tcp open rpcbind |_ rpcinfo: 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 8000/tcp open tcpwrapped
Interesting ports on :
Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp closed http
Interesting ports on : Not shown: 981 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open microsoft-ds Microsoft Windows 2000 microsoft-ds 1027/tcp open msrpc Microsoft Windows RPC 1029/tcp open msrpc Microsoft Windows RPC 1433/tcp open ms-sql-s Microsoft SQL Server 2000 8.00.194; RTM 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2301/tcp open http HP Proliant System Management 2.1.6.156 (CompaqHTTPServer 9.9) | html-title: Site doesn't have a title (text/html). |_ Requested resource was http:///red2301.html?RedirectUrl=/ 2381/tcp open http Apache SSL-only mode httpd |_ html-title: 400 Bad Request 3001/tcp open msrpc Microsoft Windows RPC 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 5800/tcp open http VNC Server Enterprise Edition httpd E4.4.2 r13117 (VNC port 5900) |_ html-title: VNC Viewer for Java 5900/tcp open vnc RealVNC Personal (protocol 4.0) Service Info: OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows 2000 | LAN Manager: Windows 2000 LAN Manager | Name: WORKGROUP\SYRIACALL01 |_ System time: 2012-02-26 22:34:35 UTC+2
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp closed http
Interesting ports on : Not shown: 978 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds 1025/tcp open msrpc Microsoft Windows RPC 1433/tcp open ms-sql-s Microsoft SQL Server 2005 9.00.1399; RTM 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2301/tcp open http HP Proliant System Management 2.1.15.210 (CompaqHTTPServer 9.9) | html-title: Site doesn't have a title (text/html). |_ Requested resource was http:///red2301.html?RedirectUrl=/ 2381/tcp open http Apache SSL-only mode httpd |_ html-title: 400 Bad Request 2383/tcp open ms-olap4? 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 5800/tcp open http VNC Server Enterprise Edition httpd E4.4.2 r13117 (VNC port 5900) |_ html-title: VNC Viewer for Java 5801/tcp open http VNC Server Enterprise Edition httpd E4.4.2 r13117 (VNC port 5901) |_ html-title: VNC Viewer for Java 5900/tcp open vnc RealVNC Personal (protocol 4.0) 5901/tcp open vnc RealVNC Personal (protocol 4.0) 8009/tcp open ajp13? 10000/tcp open http Apache Tomcat/Coyote JSP engine 1.1 |_ html-title: Apache Tomcat/5.5.27 Service Info: OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows Server 2003 3790 Service Pack 2 | LAN Manager: Windows Server 2003 5.2 | Name: WORKGROUP\SYRIACALL02 |_ System time: 2012-02-26 22:47:30 UTC+2
Interesting ports on : Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http? 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip
Interesting ports on : Not shown: 975 closed ports PORT STATE SERVICE VERSION 7/tcp open echo 9/tcp open discard? 13/tcp open daytime Microsoft Windows USA daytime 17/tcp open qotd Windows qotd 19/tcp open chargen 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Paessler PRTG Traffic Grapher httpd (Indy httpd 9.0.11) | html-title: PRTG Traffic Grapher - Monitoring Results - PRTG Traffic Graph... |_ Requested resource was http:///sensorlist.htm | robots.txt: has 1 disallowed entry |_ / 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open https? 445/tcp open netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3128/tcp open squid-http? | http-open-proxy: Potentially OPEN proxy. |_ Methods successfully tested: CONNECT 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 49152/tcp open msrpc Microsoft Windows RPC 49153/tcp open msrpc Microsoft Windows RPC 49154/tcp open msrpc Microsoft Windows RPC 49157/tcp open msrpc Microsoft Windows RPC 49158/tcp open msrpc Microsoft Windows RPC 49160/tcp open msrpc Microsoft Windows RPC
Host script results: | smb-os-discovery: Windows 7 Ultimate 7600 | LAN Manager: Windows 7 Ultimate 6.1 | Name: WORKGROUP\SCS-PC |_ System time: 2012-02-26 21:57:25 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 4: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ html-title: 403 Forbidden 995/tcp open ssl/pop3 MS Exchange 2007 pop3d |_ pop3-capabilities: USER SASL(GSSAPI PLAIN) TOP UIDL Service Info: OS: Windows
Interesting ports on 8: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 9: Not shown: 992 closed ports PORT STATE SERVICE VERSION 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 9: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction Service Info: OS: Windows
Interesting ports on 0: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ sslv2: server still supports SSLv2 |_ html-title: IIS7 Service Info: OS: Windows
Interesting ports on 2: Not shown: 973 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 80/tcp open http Microsoft IIS webserver 7.5 | http-auth: HTTP Service requires authentication |_ Auth type: NTLM 2048/tcp closed dls-monitor 2065/tcp closed dlsrpn 2068/tcp closed advocentkvm 2099/tcp closed unknown 2100/tcp closed unknown 2103/tcp open msrpc Microsoft Windows RPC 2105/tcp open msrpc Microsoft Windows RPC 2106/tcp closed ekshell 2107/tcp open msrpc Microsoft Windows RPC 2111/tcp closed kx 2119/tcp closed unknown 2121/tcp closed ccproxy-ftp 2126/tcp closed unknown 2135/tcp closed unknown 2144/tcp closed unknown 2160/tcp closed unknown 2161/tcp closed apc-agent 2170/tcp closed unknown 2179/tcp closed unknown 2190/tcp closed unknown 2191/tcp closed unknown 2196/tcp closed unknown 2200/tcp closed unknown 8081/tcp closed blackice-icecap Service Info: OS: Windows
Interesting ports on 3: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http-proxy SonicWALL SSL-VPN http proxy
Interesting ports on 4: Not shown: 993 closed ports PORT STATE SERVICE VERSION 23/tcp open telnet Cisco router 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS; Device: router
Interesting ports on 6: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ sslv2: server still supports SSLv2 | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = 6 |_ html-title: You are not authorized to view this page Service Info: OS: Windows
Interesting ports on 7: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache Tomcat/Coyote JSP engine 1.1 |_ html-title: Apache Tomcat/5.5.9 8080/tcp closed http-proxy
Interesting ports on 9: Not shown: 996 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp FileZilla ftpd 0.9.34 beta 80/tcp open http Apache httpd 2.2.11 ((Win32) mod_ssl/2.2.11 OpenSSL/0.9.8k) |_ html-title: Site doesn't have a title (text/html). 3306/tcp open mysql MySQL 5.1.41-community | mysql-info: Protocol: 10 | Version: 5.1.41-community | Thread ID: 45600 | Some Capabilities: Long Passwords, Connect with DB, Compress, ODBC, Transactions, Secure Connection | Status: Autocommit |_ Salt: m1J`(BS\TpWC)BQQ#WnF Service Info: OS: Windows
Interesting ports on 9: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Cisco IOS administrative httpd | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access |_ html-title: Site doesn't have a title. 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
213.178.230.1/24
Starting Nmap 5.00 ( http://nmap.org ) at 2012-02-26 21:48 CET Interesting ports on 213.178.230.3: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ html-title: Under Construction Service Info: OS: Windows
Interesting ports on 213.178.230.5: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS httpd 6.0 |_ html-title: SyriaTel eLearning Portal > Home Service Info: OS: Windows
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ html-title: Under Construction Service Info: OS: Windows
Interesting ports on : Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open tcpwrapped 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip
Interesting ports on : Not shown: 996 filtered ports PORT STATE SERVICE VERSION 25/tcp closed smtp 53/tcp closed domain 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Site doesn't have a title (text/html). 443/tcp closed https Service Info: OS: Windows
Interesting ports on : Not shown: 996 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Cisco PIX sanitized smtpd |_ smtp-commands: 53/tcp closed domain 80/tcp closed http 443/tcp open ssl/https? |_ sslv2: server still supports SSLv2 | html-title: Barracuda Spam & Virus Firewall: Welcome |_ Requested resource was https:///cgi-mod/index.cgi
Service Info: Device: firewall
Interesting ports on : Not shown: 996 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Cisco PIX sanitized smtpd |_ smtp-commands: 53/tcp closed domain 80/tcp open http Apache httpd 2.2.3 ((Red Hat)) |_ html-title: Test Page for the Apache HTTP Server on Red Hat Enterprise Linux 443/tcp open ssl/http Apache httpd 2.2.3 ((Red Hat)) |_ html-title: New Page 1 Service Info: Device: firewall
Interesting ports on : Not shown: 996 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Cisco PIX sanitized smtpd |_ smtp-commands: 53/tcp open domain ISC BIND 9.2.4 80/tcp open http Apache httpd 2.0.52 ((CentOS)) |_ html-title: Apache HTTP Server Test Page powered by CentOS 443/tcp open ssl/http Apache httpd 2.0.52 ((CentOS)) |_ html-title: Apache HTTP Server Test Page powered by CentOS |_ sslv2: server still supports SSLv2 Service Info: Device: firewall
Interesting ports on : Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 5.1 |_ html-title: Under Construction Service Info: OS: Windows
Interesting ports on 0: Not shown: 995 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.2.17 ((Win32) PHP/5.3.5) | html-title: SVUSurvey |_ Requested resource was http://survey.svuonline.org/limesurvey/ 81/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) |_ html-title: Bad Request 110/tcp closed pop3 443/tcp closed https 2222/tcp closed unknown Service Info: OS: Windows
Interesting ports on 3: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.2.16 ((Debian)) |_ html-title: \xD8\xA5\xD8\xB9\xD8\xA7\xD8\xAF\xD8\xA9 \xD8\xAA\xD9\x88\xD8\xAC\xD9\x8A\xD9\x87
Interesting ports on 5: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp Microsoft ftpd 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction Service Info: OS: Windows
Interesting ports on 6: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 5.0 |_ html-title: Under Construction Service Info: OS: Windows
Interesting ports on 8: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 5.0 |_ html-title: Under Construction Service Info: OS: Windows
Interesting ports on 9: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open ssl/ssl OpenSSL (SSLv3) |_ sslv2: server still supports SSLv2 | robots.txt: has 1 disallowed entry |_ / 443/tcp open ssl/ssl OpenSSL (SSLv3) |_ sslv2: server still supports SSLv2
Interesting ports on 2: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.2.16 ((Debian)) | html-title: Intelligent Student Information System |_ Requested resource was http://2/isis/index.php 443/tcp open ssl/http Apache httpd 2.2.16 ((Debian)) | html-title: Intelligent Student Information System |_ Requested resource was http://2/isis/index.php
Interesting ports on 4: Not shown: 995 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd |_ html-title: 403 Forbidden 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING LOGIN-DELAY(10) TOP 143/tcp open imap Courier Imapd (released 2005) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ sslv2: server still supports SSLv2 |_ html-title: Did not follow redirect to https://4/login.php and no page was returned. 2222/tcp open ssh OpenSSH 4.7 (protocol 2.0) | ssh-hostkey: 1024 4e:26:6d:85:f4:ae:c2:be:34:66:a4:fa:7d:9b:9d:90 (DSA) |_ 2048 3b:81:77:7e:02:c8:ce:b3:05:5e:fe:2d:89:db:19:b9 (RSA)
Interesting ports on 8: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ html-title: 403 Forbidden 587/tcp open smtp Exim smtpd | smtp-commands: EHLO mail.lead-ac.com Hello elmariachi.toonux.com [88.190.24.19], SIZE 52428800, PIPELINING, STARTTLS, HELP |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP Service Info: OS: Windows
Trackbacks/Pingbacks
[...] Details: https://fhimt.com/2012/02/29/opsyria-s04e02-the-iron-strike-investigation-now-open-for-fun-and-pr… [...]