Starting Nmap 5.51 ( http://nmap.org ) at 2011-10-08 09:54 GMT Daylight Time NSE: Loaded 57 scripts for scanning. Initiating Ping Scan at 09:54 Scanning 256 hosts [4 ports/host] Completed Ping Scan at 09:54, 10.52s elapsed (256 total hosts) Initiating Parallel DNS resolution of 256 hosts. at 09:54 Completed Parallel DNS resolution of 256 hosts. at 09:54, 11.42s elapsed Nmap scan report for 192.168.1.0 [host down] Nmap scan report for 192.168.1.2 [host down] Nmap scan report for 192.168.1.3 [host down] Nmap scan report for 192.168.1.4 [host down] Nmap scan report for 192.168.1.5 [host down] Nmap scan report for 192.168.1.6 [host down] Nmap scan report for 192.168.1.7 [host down] Nmap scan report for 192.168.1.8 [host down] Nmap scan report for 192.168.1.9 [host down] Nmap scan report for 192.168.1.10 [host down] Nmap scan report for 192.168.1.11 [host down] Nmap scan report for 192.168.1.12 [host down] Nmap scan report for 192.168.1.13 [host down] Nmap scan report for 192.168.1.14 [host down] Nmap scan report for 192.168.1.15 [host down] Nmap scan report for 192.168.1.16 [host down] Nmap scan report for 192.168.1.17 [host down] Nmap scan report for 192.168.1.18 [host down] Nmap scan report for 192.168.1.19 [host down] Nmap scan report for 192.168.1.20 [host down] Nmap scan report for 192.168.1.21 [host down] Nmap scan report for 192.168.1.22 [host down] Nmap scan report for 192.168.1.23 [host down] Nmap scan report for 192.168.1.24 [host down] Nmap scan report for 192.168.1.25 [host down] Nmap scan report for 192.168.1.26 [host down] Nmap scan report for 192.168.1.27 [host down] Nmap scan report for 192.168.1.28 [host down] Nmap scan report for 192.168.1.29 [host down] Nmap scan report for 192.168.1.30 [host down] Nmap scan report for 192.168.1.31 [host down] Nmap scan report for 192.168.1.32 [host down] Nmap scan report for 192.168.1.33 [host down] Nmap scan report for 192.168.1.34 [host down] Nmap scan report for 192.168.1.35 [host down] Nmap scan report for 192.168.1.36 [host down] Nmap scan report for 192.168.1.37 [host down] Nmap scan report for 192.168.1.38 [host down] Nmap scan report for 192.168.1.39 [host down] Nmap scan report for 192.168.1.40 [host down] Nmap scan report for 192.168.1.41 [host down] Nmap scan report for 192.168.1.42 [host down] Nmap scan report for 192.168.1.43 [host down] Nmap scan report for 192.168.1.44 [host down] Nmap scan report for 192.168.1.45 [host down] Nmap scan report for 192.168.1.46 [host down] Nmap scan report for 192.168.1.47 [host down] Nmap scan report for 192.168.1.48 [host down] Nmap scan report for 192.168.1.49 [host down] Nmap scan report for 192.168.1.50 [host down] Nmap scan report for 192.168.1.51 [host down] Nmap scan report for 192.168.1.52 [host down] Nmap scan report for 192.168.1.53 [host down] Nmap scan report for 192.168.1.54 [host down] Nmap scan report for 192.168.1.55 [host down] Nmap scan report for 192.168.1.56 [host down] Nmap scan report for 192.168.1.57 [host down] Nmap scan report for 192.168.1.58 [host down] Nmap scan report for 192.168.1.59 [host down] Nmap scan report for 192.168.1.60 [host down] Nmap scan report for 192.168.1.61 [host down] Nmap scan report for 192.168.1.62 [host down] Nmap scan report for 192.168.1.63 [host down] Nmap scan report for 192.168.1.65 [host down] Nmap scan report for 192.168.1.67 [host down] Nmap scan report for 192.168.1.68 [host down] Nmap scan report for 192.168.1.69 [host down] Nmap scan report for 192.168.1.70 [host down] Nmap scan report for 192.168.1.71 [host down] Nmap scan report for 192.168.1.73 [host down] Nmap scan report for 192.168.1.74 [host down] Nmap scan report for 192.168.1.75 [host down] Nmap scan report for 192.168.1.76 [host down] Nmap scan report for 192.168.1.77 [host down] Nmap scan report for 192.168.1.78 [host down] Nmap scan report for 192.168.1.80 [host down] Nmap scan report for 192.168.1.81 [host down] Nmap scan report for 192.168.1.82 [host down] Nmap scan report for 192.168.1.83 [host down] Nmap scan report for 192.168.1.84 [host down] Nmap scan report for 192.168.1.85 [host down] Nmap scan report for 192.168.1.86 [host down] Nmap scan report for 192.168.1.87 [host down] Nmap scan report for 192.168.1.88 [host down] Nmap scan report for 192.168.1.89 [host down] Nmap scan report for 192.168.1.90 [host down] Nmap scan report for 192.168.1.91 [host down] Nmap scan report for 192.168.1.92 [host down] Nmap scan report for 192.168.1.93 [host down] Nmap scan report for 192.168.1.94 [host down] Nmap scan report for 192.168.1.95 [host down] Nmap scan report for 192.168.1.96 [host down] Nmap scan report for 192.168.1.97 [host down] Nmap scan report for 192.168.1.98 [host down] Nmap scan report for 192.168.1.100 [host down] Nmap scan report for 192.168.1.101 [host down] Nmap scan report for 192.168.1.102 [host down] Nmap scan report for 192.168.1.103 [host down] Nmap scan report for 192.168.1.104 [host down] Nmap scan report for 192.168.1.105 [host down] Nmap scan report for 192.168.1.106 [host down] Nmap scan report for 192.168.1.107 [host down] Nmap scan report for 192.168.1.108 [host down] Nmap scan report for 192.168.1.109 [host down] Nmap scan report for 192.168.1.110 [host down] Nmap scan report for 192.168.1.111 [host down] Nmap scan report for 192.168.1.112 [host down] Nmap scan report for 192.168.1.113 [host down] Nmap scan report for 192.168.1.114 [host down] Nmap scan report for 192.168.1.115 [host down] Nmap scan report for 192.168.1.116 [host down] Nmap scan report for 192.168.1.117 [host down] Nmap scan report for 192.168.1.118 [host down] Nmap scan report for 192.168.1.119 [host down] Nmap scan report for 192.168.1.120 [host down] Nmap scan report for 192.168.1.121 [host down] Nmap scan report for 192.168.1.122 [host down] Nmap scan report for 192.168.1.123 [host down] Nmap scan report for 192.168.1.124 [host down] Nmap scan report for 192.168.1.125 [host down] Nmap scan report for 192.168.1.126 [host down] Nmap scan report for 192.168.1.127 [host down] Nmap scan report for 192.168.1.128 [host down] Nmap scan report for 192.168.1.129 [host down] Nmap scan report for 192.168.1.130 [host down] Nmap scan report for 192.168.1.131 [host down] Nmap scan report for 192.168.1.132 [host down] Nmap scan report for 192.168.1.133 [host down] Nmap scan report for 192.168.1.134 [host down] Nmap scan report for 192.168.1.135 [host down] Nmap scan report for 192.168.1.136 [host down] Nmap scan report for 192.168.1.137 [host down] Nmap scan report for 192.168.1.138 [host down] Nmap scan report for 192.168.1.139 [host down] Nmap scan report for 192.168.1.140 [host down] Nmap scan report for 192.168.1.141 [host down] Nmap scan report for 192.168.1.142 [host down] Nmap scan report for 192.168.1.143 [host down] Nmap scan report for 192.168.1.144 [host down] Nmap scan report for 192.168.1.145 [host down] Nmap scan report for 192.168.1.146 [host down] Nmap scan report for 192.168.1.147 [host down] Nmap scan report for 192.168.1.148 [host down] Nmap scan report for 192.168.1.149 [host down] Nmap scan report for 192.168.1.150 [host down] Nmap scan report for 192.168.1.151 [host down] Nmap scan report for 192.168.1.152 [host down] Nmap scan report for 192.168.1.153 [host down] Nmap scan report for 192.168.1.154 [host down] Nmap scan report for 192.168.1.155 [host down] Nmap scan report for 192.168.1.156 [host down] Nmap scan report for 192.168.1.157 [host down] Nmap scan report for 192.168.1.158 [host down] Nmap scan report for 192.168.1.159 [host down] Nmap scan report for 192.168.1.160 [host down] Nmap scan report for 192.168.1.161 [host down] Nmap scan report for 192.168.1.162 [host down] Nmap scan report for 192.168.1.163 [host down] Nmap scan report for 192.168.1.164 [host down] Nmap scan report for 192.168.1.165 [host down] Nmap scan report for 192.168.1.166 [host down] Nmap scan report for 192.168.1.167 [host down] Nmap scan report for 192.168.1.168 [host down] Nmap scan report for 192.168.1.169 [host down] Nmap scan report for 192.168.1.170 [host down] Nmap scan report for 192.168.1.171 [host down] Nmap scan report for 192.168.1.172 [host down] Nmap scan report for 192.168.1.173 [host down] Nmap scan report for 192.168.1.174 [host down] Nmap scan report for 192.168.1.175 [host down] Nmap scan report for 192.168.1.176 [host down] Nmap scan report for 192.168.1.177 [host down] Nmap scan report for 192.168.1.178 [host down] Nmap scan report for 192.168.1.179 [host down] Nmap scan report for 192.168.1.180 [host down] Nmap scan report for 192.168.1.181 [host down] Nmap scan report for 192.168.1.182 [host down] Nmap scan report for 192.168.1.183 [host down] Nmap scan report for 192.168.1.184 [host down] Nmap scan report for 192.168.1.185 [host down] Nmap scan report for 192.168.1.186 [host down] Nmap scan report for 192.168.1.187 [host down] Nmap scan report for 192.168.1.188 [host down] Nmap scan report for 192.168.1.189 [host down] Nmap scan report for 192.168.1.190 [host down] Nmap scan report for 192.168.1.191 [host down] Nmap scan report for 192.168.1.192 [host down] Nmap scan report for 192.168.1.193 [host down] Nmap scan report for 192.168.1.194 [host down] Nmap scan report for 192.168.1.195 [host down] Nmap scan report for 192.168.1.196 [host down] Nmap scan report for 192.168.1.197 [host down] Nmap scan report for 192.168.1.198 [host down] Nmap scan report for 192.168.1.199 [host down] Nmap scan report for 192.168.1.200 [host down] Nmap scan report for 192.168.1.201 [host down] Nmap scan report for 192.168.1.202 [host down] Nmap scan report for 192.168.1.203 [host down] Nmap scan report for 192.168.1.204 [host down] Nmap scan report for 192.168.1.205 [host down] Nmap scan report for 192.168.1.206 [host down] Nmap scan report for 192.168.1.207 [host down] Nmap scan report for 192.168.1.208 [host down] Nmap scan report for 192.168.1.209 [host down] Nmap scan report for 192.168.1.210 [host down] Nmap scan report for 192.168.1.211 [host down] Nmap scan report for 192.168.1.212 [host down] Nmap scan report for 192.168.1.213 [host down] Nmap scan report for 192.168.1.214 [host down] Nmap scan report for 192.168.1.215 [host down] Nmap scan report for 192.168.1.216 [host down] Nmap scan report for 192.168.1.217 [host down] Nmap scan report for 192.168.1.218 [host down] Nmap scan report for 192.168.1.219 [host down] Nmap scan report for 192.168.1.220 [host down] Nmap scan report for 192.168.1.221 [host down] Nmap scan report for 192.168.1.222 [host down] Nmap scan report for 192.168.1.223 [host down] Nmap scan report for 192.168.1.224 [host down] Nmap scan report for 192.168.1.225 [host down] Nmap scan report for 192.168.1.226 [host down] Nmap scan report for 192.168.1.227 [host down] Nmap scan report for 192.168.1.228 [host down] Nmap scan report for 192.168.1.229 [host down] Nmap scan report for 192.168.1.230 [host down] Nmap scan report for 192.168.1.231 [host down] Nmap scan report for 192.168.1.232 [host down] Nmap scan report for 192.168.1.233 [host down] Nmap scan report for 192.168.1.234 [host down] Nmap scan report for 192.168.1.235 [host down] Nmap scan report for 192.168.1.236 [host down] Nmap scan report for 192.168.1.237 [host down] Nmap scan report for 192.168.1.238 [host down] Nmap scan report for 192.168.1.239 [host down] Nmap scan report for 192.168.1.240 [host down] Nmap scan report for 192.168.1.241 [host down] Nmap scan report for 192.168.1.242 [host down] Nmap scan report for 192.168.1.243 [host down] Nmap scan report for 192.168.1.244 [host down] Nmap scan report for 192.168.1.245 [host down] Nmap scan report for 192.168.1.246 [host down] Nmap scan report for 192.168.1.247 [host down] Nmap scan report for 192.168.1.248 [host down] Nmap scan report for 192.168.1.249 [host down] Nmap scan report for 192.168.1.250 [host down] Nmap scan report for 192.168.1.251 [host down] Nmap scan report for 192.168.1.252 [host down] Nmap scan report for 192.168.1.255 [host down] Initiating SYN Stealth Scan at 09:54 Scanning 8 hosts [1000 ports/host] Discovered open port 445/tcp on 192.168.1.99 Discovered open port 23/tcp on 192.168.1.64 Discovered open port 139/tcp on 192.168.1.99 Discovered open port 22/tcp on 192.168.1.72 Discovered open port 139/tcp on 192.168.1.72 Discovered open port 80/tcp on 192.168.1.72 Discovered open port 135/tcp on 192.168.1.99 Discovered open port 445/tcp on 192.168.1.66 Discovered open port 23/tcp on 192.168.1.1 Discovered open port 111/tcp on 192.168.1.72 Discovered open port 445/tcp on 192.168.1.72 Discovered open port 1723/tcp on 192.168.1.254 Discovered open port 80/tcp on 192.168.1.254 Discovered open port 3306/tcp on 192.168.1.72 Discovered open port 21/tcp on 192.168.1.1 Discovered open port 139/tcp on 192.168.1.66 Discovered open port 80/tcp on 192.168.1.1 Discovered open port 80/tcp on 192.168.1.64 Discovered open port 443/tcp on 192.168.1.254 Discovered open port 8000/tcp on 192.168.1.254 Discovered open port 2105/tcp on 192.168.1.99 Discovered open port 5000/tcp on 192.168.1.79 Discovered open port 2107/tcp on 192.168.1.99 Discovered open port 554/tcp on 192.168.1.66 Discovered open port 79/tcp on 192.168.1.64 Discovered open port 2049/tcp on 192.168.1.72 Discovered open port 2103/tcp on 192.168.1.99 SYN Stealth Scan Timing: About 29.35% done; ETC: 09:56 (0:01:15 remaining) Discovered open port 1029/tcp on 192.168.1.99 Discovered open port 5357/tcp on 192.168.1.66 SYN Stealth Scan Timing: About 52.80% done; ETC: 09:56 (0:00:55 remaining) Discovered open port 515/tcp on 192.168.1.99 Discovered open port 2222/tcp on 192.168.1.79 Discovered open port 10243/tcp on 192.168.1.66 SYN Stealth Scan Timing: About 74.84% done; ETC: 09:56 (0:00:31 remaining) Completed SYN Stealth Scan against 192.168.1.72 in 93.68s (7 hosts left) Completed SYN Stealth Scan against 192.168.1.253 in 101.81s (6 hosts left) Completed SYN Stealth Scan against 192.168.1.64 in 101.82s (5 hosts left) Completed SYN Stealth Scan against 192.168.1.1 in 101.84s (4 hosts left) Discovered open port 2869/tcp on 192.168.1.99 Discovered open port 49155/tcp on 192.168.1.66 Completed SYN Stealth Scan against 192.168.1.79 in 112.47s (3 hosts left) Discovered open port 49152/tcp on 192.168.1.66 Discovered open port 8443/tcp on 192.168.1.254 Discovered open port 55555/tcp on 192.168.1.99 Discovered open port 2869/tcp on 192.168.1.66 Discovered open port 49156/tcp on 192.168.1.66 Completed SYN Stealth Scan against 192.168.1.254 in 138.77s (2 hosts left) Completed SYN Stealth Scan against 192.168.1.99 in 141.53s (1 host left) Discovered open port 49154/tcp on 192.168.1.66 Discovered open port 49153/tcp on 192.168.1.66 Completed SYN Stealth Scan at 09:57, 149.64s elapsed (8000 total ports) Initiating Service scan at 09:57 Scanning 41 services on 8 hosts Completed Service scan at 09:58, 84.28s elapsed (41 services on 8 hosts) Initiating RPCGrind Scan against 192.168.1.72 at 09:58 Completed RPCGrind Scan against 192.168.1.72 at 09:58, 0.03s elapsed (2 ports) Initiating OS detection (try #1) against 8 hosts Retrying OS detection (try #2) against 4 hosts Retrying OS detection (try #3) against 192.168.1.64 Retrying OS detection (try #4) against 192.168.1.64 Retrying OS detection (try #5) against 192.168.1.64 Initiating Traceroute at 09:58 Completed Traceroute at 09:58, 0.03s elapsed Initiating Parallel DNS resolution of 9 hosts. at 09:58 Completed Parallel DNS resolution of 9 hosts. at 09:59, 11.22s elapsed NSE: Script scanning 8 hosts. Initiating NSE at 09:59 Completed NSE at 09:59, 41.45s elapsed Nmap scan report for 192.168.1.1 Host is up (0.0086s latency). Not shown: 995 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp Netgear broadband router or ZyXel VoIP adapter ftpd 1.0 |_ftp-bounce: no banner 23/tcp open telnet Netgear broadband router or ZyXel VoIP adapter telnetd 80/tcp open http Allegro RomPager 4.07 UPnP/1.0 (ZyXEL ZyWALL 2) | http-methods: GET HEAD POST PUT | Potentially risky methods: PUT |_See http://nmap.org/nsedoc/scripts/http-methods.html |_http-title: Protected Object | http-auth: HTTP/1.1 401 Unauthorized | |_Basic realm=Arcor-DSL WLAN-Modem 200 1720/tcp filtered H.323/Q.931 8080/tcp filtered http-proxy Device type: firewall Running: ZyXEL ZyNOS 3.X OS details: ZyXEL ZyWALL 2 firewall or Prestige 660HW-61 ADSL router (ZyNOS 3.62) Network Distance: 2 hops TRACEROUTE (using port 445/tcp) HOP RTT ADDRESS 1 2.00 ms misspiggy.teratan.lan (192.168.66.50) 2 10.00 ms 192.168.1.1 Nmap scan report for 192.168.1.64 Host is up (0.0072s latency). Not shown: 996 closed ports PORT STATE SERVICE VERSION 23/tcp open telnet Cisco router 79/tcp open finger Cisco fingerd | finger: | Line User Host(s) Idle Location | * 1 vty 0 idle 00:00:00 misspiggy.home | |_ Interface User Mode Idle Peer Address 80/tcp open http Cisco IOS http config 1.0(1) (IOS 12.0) |_http-title: Switch Home Page |_http-methods: No Allow or Public header in OPTIONS response (status code 501) 1720/tcp filtered H.323/Q.931 No exact OS matches for host (If you know what OS is running on it, see http://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=5.51%D=10/8%OT=23%CT=1%CU=42281%PV=Y%DS=2%DC=T%G=Y%TM=4E901108%P= OS:i686-pc-windows-windows)SEQ(SP=108%GCD=1%ISR=109%TI=Z%CI=I%II=RI%TS=U)SE OS:Q(SP=107%GCD=1%ISR=109%TI=Z%CI=I%II=RI%TS=U)SEQ(CI=I%II=RI)OPS(O1=M5B4%O OS:2=M5B4%O3=M5B4%O4=M5B4%O5=M5B4%O6=M5B4)OPS(O1=%O2=%O3=%O4=%O5=%O6=)WIN(W OS:1=1020%W2=1020%W3=1020%W4=1020%W5=1020%W6=1020)ECN(R=Y%DF=N%T=FF%W=1020% OS:O=M5B4%CC=N%Q=)ECN(R=Y%DF=N%T=FF%W=1020%O=%CC=N%Q=)T1(R=Y%DF=N%T=FF%S=O% OS:A=S+%F=AS%RD=0%Q=)T1(R=Y%DF=N%T=FF%S=O%A=O%F=AS%RD=0%Q=)T1(R=Y%DF=N%T=FF OS:%S=O%A=O%F=A%RD=0%Q=)T2(R=N)T3(R=Y%DF=N%T=FF%W=1020%S=O%A=S+%F=AS%O=M5B4 OS:%RD=0%Q=)T3(R=Y%DF=N%T=FF%W=1020%S=O%A=O%F=AS%O=M5B4%RD=0%Q=)T3(R=Y%DF=N OS:%T=FF%W=1020%S=O%A=O%F=A%O=%RD=0%Q=)T4(R=Y%DF=N%T=FF%W=0%S=A%A=Z%F=R%O=% OS:RD=0%Q=)T5(R=Y%DF=N%T=FF%W=0%S=A%A=S+%F=AR%O=%RD=0%Q=)T6(R=Y%DF=N%T=FF%W OS:=0%S=A%A=Z%F=R%O=%RD=0%Q=)T7(R=Y%DF=N%T=FF%W=0%S=A%A=S%F=AR%O=%RD=0%Q=)U OS:1(R=Y%DF=N%T=FF%IPL=38%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI OS:=S%T=FF%CD=S) Network Distance: 2 hops Service Info: OS: IOS; Device: router TRACEROUTE (using port 5900/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 192.168.1.1 2 10.00 ms 192.168.1.64 Nmap scan report for 192.168.1.66 Host is up (0.010s latency). Not shown: 989 filtered ports PORT STATE SERVICE VERSION 139/tcp open netbios-ssn 445/tcp open netbios-ssn 554/tcp open rtsp? 2869/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) 5357/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) |_http-methods: No Allow or Public header in OPTIONS response (status code 503) |_http-title: Service Unavailable 10243/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) |_http-methods: No Allow or Public header in OPTIONS response (status code 404) |_http-title: Not Found 49152/tcp open msrpc Microsoft Windows RPC 49153/tcp open msrpc Microsoft Windows RPC 49154/tcp open msrpc Microsoft Windows RPC 49155/tcp open msrpc Microsoft Windows RPC 49156/tcp open msrpc Microsoft Windows RPC Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running: Microsoft Windows 2008|Vista|7 OS details: Microsoft Windows Server 2008, Microsoft Windows Server 2008 Beta 3, Microsoft Windows Vista SP0 or SP1, Server 2008 SP1, or Windows 7 Uptime guess: 0.009 days (since Sat Oct 08 09:47:03 2011) Network Distance: 2 hops TCP Sequence Prediction: Difficulty=259 (Good luck!) IP ID Sequence Generation: Busy server or unknown class Service Info: OS: Windows Host script results: | nbstat: | NetBIOS name: CARINA-HP, NetBIOS user: <unknown>, NetBIOS MAC: 1c:65:9d:74:be:2c (Liteon Technology) | Names | CARINA-HP<20> Flags: <unique><active> | CARINA-HP<00> Flags: <unique><active> | WORKGROUP<00> Flags: <group><active> | WORKGROUP<1e> Flags: <group><active> | WORKGROUP<1d> Flags: <unique><active> |_ \x01\x02__MSBROWSE__\x02<01> Flags: <group><active> |_smbv2-enabled: Server supports SMBv2 protocol | smb-os-discovery: | OS: Windows 7 Home Premium 7601 Service Pack 1 (Windows 7 Home Premium 6.1) | Name: WORKGROUP\CARINA-HP |_ System time: 2011-10-08 09:59:14 UTC+1 TRACEROUTE (using port 445/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 192.168.1.1 2 5.00 ms 192.168.1.66 Nmap scan report for 192.168.1.72 Host is up (0.0074s latency). Not shown: 991 closed ports PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 5.5 (protocol 2.0) | ssh-hostkey: 1024 cb:f2:37:a7:82:64:4e:33:b6:84:12:97:15:8b:c5:aa (DSA) |_2048 83:7c:45:b6:6b:2c:0f:ad:5a:9e:72:1d:be:22:ec:93 (RSA) 80/tcp open http Apache httpd 2.2.17 ((Fedora)) |_http-methods: No Allow or Public header in OPTIONS response (status code 403) |_http-title: 403 Forbidden 111/tcp open rpcbind 2-4 (rpc #100000) 139/tcp open netbios-ssn Samba smbd 3.X (workgroup: XLM) 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: XLM) 1037/tcp filtered ams 1720/tcp filtered H.323/Q.931 2049/tcp open nfs 2-4 (rpc #100003) 3306/tcp open mysql MySQL (unauthorized) Aggressive OS guesses: Linux 2.6.23 - 2.6.33 (95%), Linux 2.6.31 - 2.6.34 (95%), Linux 2.6.9 - 2.6.27 (95%), Linux 2.6.22 (Fedora Core 6) (95%), Linux 2.6.27 (Ubuntu 8.10) (94%), Linux 2.6.32 (94%), Linux 2.6.34 (94%), Linux 2.6.24 - 2.6.35 (93%), Linux 2.6.28 (Gentoo) (92%), Linux 2.6.15 - 2.6.27 (91%) No exact OS matches for host (test conditions non-ideal). Uptime guess: 0.003 days (since Sat Oct 08 09:55:57 2011) Network Distance: 2 hops TCP Sequence Prediction: Difficulty=201 (Good luck!) IP ID Sequence Generation: All zeros Host script results: |_smbv2-enabled: Server doesn't support SMBv2 protocol | smb-os-discovery: | OS: Unix (Samba 3.5.11-79.fc14) | Name: IC3NET.XLM\Unknown |_ System time: 2011-10-08 10:58:15 UTC-1 TRACEROUTE (using port 23/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 192.168.1.1 2 7.00 ms 192.168.1.72 Nmap scan report for 192.168.1.79 Host is up (0.0016s latency). Not shown: 998 filtered ports PORT STATE SERVICE VERSION 2222/tcp open ssh Dropbear sshd 0.52 (protocol 2.0) |_ssh-hostkey: 1040 62:bb:6a:12:b6:8a:60:b2:8c:5f:9d:d3:7a:f9:ec:12 (RSA) 5000/tcp open ssl/http Tomato WAP firmware httpd |_http-title: Error | http-auth: HTTP/1.0 401 Unauthorized | |_Basic realm=misspiggy Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: WAP|router|general purpose|VoIP phone Running: D-Link Linux 2.4.X, Netgear Linux 2.4.X, Linux 2.4.X, ShoreTel Linux 2.4.X OS details: D-Link DIR-100; or Netgear KWRGR614, RT614, or WG602 router (Linux 2.4), Linux 2.4.18 - 2.4.35 (likely embedded), Linux 2.4.21 - 2.4.27, ShoreTel 8800 VoIP phone (Linux 2.4) Uptime guess: 6.534 days (since Sat Oct 01 21:11:02 2011) Network Distance: 1 hop TCP Sequence Prediction: Difficulty=200 (Good luck!) IP ID Sequence Generation: All zeros Service Info: OS: Linux; Device: WAP TRACEROUTE (using port 5000/tcp) HOP RTT ADDRESS 1 1.00 ms 192.168.1.79 Nmap scan report for 192.168.1.99 Host is up (0.0074s latency). Not shown: 990 filtered ports PORT STATE SERVICE VERSION 135/tcp open msrpc Microsoft Windows RPC 139/tcp open netbios-ssn 445/tcp open netbios-ssn 515/tcp open printer 1029/tcp open msrpc Microsoft Windows RPC 2103/tcp open msrpc Microsoft Windows RPC 2105/tcp open msrpc Microsoft Windows RPC 2107/tcp open msrpc Microsoft Windows RPC 2869/tcp open icslap? 55555/tcp open http uTorrent WebUI |_http-title: Site doesn't have a title (text/html). Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running: Microsoft Windows 2008 OS details: Microsoft Windows Server 2008 SP2 Uptime guess: 2.702 days (since Wed Oct 05 17:09:20 2011) Network Distance: 2 hops TCP Sequence Prediction: Difficulty=263 (Good luck!) IP ID Sequence Generation: Busy server or unknown class Service Info: OS: Windows Host script results: | nbstat: | NetBIOS name: MIDNIGHTFALCON, NetBIOS user: <unknown>, NetBIOS MAC: b8:ac:6f:5c:d4:74 (Dell) | Names | MIDNIGHTFALCON<00> Flags: <unique><active> | IC3NET.XLM<00> Flags: <group><active> | MIDNIGHTFALCON<20> Flags: <unique><active> | IC3NET.XLM<1e> Flags: <group><active> | IC3NET.XLM<1d> Flags: <unique><active> |_ \x01\x02__MSBROWSE__\x02<01> Flags: <group><active> |_smbv2-enabled: Server supports SMBv2 protocol | smb-os-discovery: | OS: Windows 7 Ultimate 7600 (Windows 7 Ultimate 6.1) | Name: IC3NET.XLM\MIDNIGHTFALCON |_ System time: 2011-10-08 09:59:16 UTC+1 TRACEROUTE (using port 445/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 192.168.1.1 2 8.00 ms 192.168.1.99 Nmap scan report for 192.168.1.253 Host is up (0.0079s latency). Not shown: 999 closed ports PORT STATE SERVICE VERSION 1720/tcp filtered H.323/Q.931 Too many fingerprints match this host to give specific OS details Network Distance: 2 hops TRACEROUTE (using port 23/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 192.168.1.1 2 9.00 ms 192.168.1.253 Nmap scan report for 192.168.1.254 Host is up (0.0056s latency). Not shown: 994 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Mbedthis-Appweb 2.0.5 443/tcp open ssl/http Mbedthis-Appweb 2.0.5 | http-methods: OPTIONS TRACE GET POST | Potentially risky methods: TRACE |_See http://nmap.org/nsedoc/scripts/http-methods.html 1723/tcp open pptp? 5060/tcp closed sip 8000/tcp open http Alcatel/Thomson SpeedTouch ADSL http config 1.0 | http-title: HTTP/1.0 404 Not Found |_Did not follow redirect to http://192.168.1.254:80 8443/tcp open ssl/http Alcatel/Thomson SpeedTouch ADSL http config 1.0 |_http-methods: No Allow or Public header in OPTIONS response (status code 400) | http-title: HTTP/1.0 404 Not Found |_Did not follow redirect to http://192.168.1.254:80 Device type: broadband router|general purpose|switch|printer|WAP|router|storage-misc Running (JUST GUESSING): Thomson embedded (97%), Apple Mac OS X 10.3.X|10.4.X (92%), Netgear embedded (92%), Enterasys embedded (92%), HP embedded (92%), 3Com embedded (92%), Juniper embedded (91%), Dell embedded (90%) Aggressive OS guesses: Thomson ST 536i ADSL modem (97%), Apple Mac OS X 10.3.9 (Panther) - 10.4.7 (Tiger) (Darwin 7.9.0 - 8.7.8, PowerPC) (92%), Netgear GSM7224 switch (92%), Enterasys Matrix E1 switch (92%), HP LaserJet 4100N printer (92%), 3Com OfficeConnect 3CRWE554G72T wireless broadband router (92%), HP LaserJet 2200, 3030, or 4300 printer (92%), HP ProCurve 2524 switch or 9100c Digital Sender printer (92%), Juniper Networks ERX-700 router (91%), Apple Mac OS X Server 10.3.9 (Panther) (Darwin 7.9.0, PowerPC) (90%) No exact OS matches for host (test conditions non-ideal). Uptime guess: 1.987 days (since Thu Oct 06 10:18:50 2011) Network Distance: 2 hops TCP Sequence Prediction: Difficulty=255 (Good luck!) IP ID Sequence Generation: Incremental Service Info: Device: broadband router TRACEROUTE (using port 5060/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 192.168.1.1 2 9.00 ms 192.168.1.254 Read data files from: C:\Program Files (x86)\Nmap OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ . Nmap done: 256 IP addresses (8 hosts up) scanned in 323.57 seconds Raw packets sent: 19247 (854.034KB) | Rcvd: 5647 (252.658KB)