+ nmap -e eth4 -S 172.29.86.4 --send-eth -T4 -Pn -O -sV -sC -d 58.218.199.227 Starting Nmap 6.02 ( http://nmap.org ) at 2012-09-13 17:09 EDT PORTS: Using top 1000 ports found open (TCP:1000, UDP:0, SCTP:0) --------------- Timing report --------------- hostgroups: min 1, max 100000 rtt-timeouts: init 500, min 100, max 1250 max-scan-delay: TCP 10, UDP 1000, SCTP 10 parallelism: min 0, max 0 max-retries: 6, host-timeout: 0 min-rate: 0, max-rate: 0 --------------------------------------------- NSE: Using Lua 5.2. NSE: Loaded 104 scripts for scanning. NSE: Script Pre-scanning. NSE: Starting runlevel 1 (of 2) scan. NSE: Starting runlevel 2 (of 2) scan. mass_rdns: Using DNS server ::1 Initiating Parallel DNS resolution of 1 host. at 17:10 mass_rdns: 0.00s 0/1 [#: 1, OK: 0, NX: 0, DR: 0, SF: 0, TR: 1] Completed Parallel DNS resolution of 1 host. at 17:10, 0.00s elapsed DNS resolution of 1 IPs took 0.00s. Mode: Async [#: 1, OK: 0, NX: 1, DR: 0, SF: 0, TR: 1, CN: 0] Initiating SYN Stealth Scan at 17:10 Scanning 58.218.199.227 [1000 ports] Packet capture filter (device eth4): dst host 172.29.86.4 and (icmp or icmp6 or ((tcp or udp or sctp) and (src host 58.218.199.227))) Discovered open port 25/tcp on 58.218.199.227 Discovered open port 80/tcp on 58.218.199.227 Discovered open port 3389/tcp on 58.218.199.227 Discovered open port 1025/tcp on 58.218.199.227 Discovered open port 1028/tcp on 58.218.199.227 Increased max_successful_tryno for 58.218.199.227 to 1 (packet drop) Increased max_successful_tryno for 58.218.199.227 to 2 (packet drop) Discovered open port 1026/tcp on 58.218.199.227 Discovered open port 1027/tcp on 58.218.199.227 Completed SYN Stealth Scan at 17:10, 13.74s elapsed (1000 total ports) Overall sending rates: 86.89 packets / s, 3823.16 bytes / s. Initiating Service scan at 17:10 Scanning 7 services on 58.218.199.227 Completed Service scan at 17:11, 57.19s elapsed (7 services on 1 host) Packet capture filter (device eth4): dst host 172.29.86.4 and (icmp or (tcp and (src host 58.218.199.227))) Initiating OS detection (try #1) against 58.218.199.227 OS detection timingRatio() == (1347570671.937 - 1347570671.435) * 1000 / 500 == 1.002 NSE: Script scanning 58.218.199.227. NSE: Starting runlevel 1 (of 2) scan. NSE: Starting address-info against 58.218.199.227. NSE: Starting http-auth against 58.218.199.227:80. NSE: Starting http-cors against 58.218.199.227:80. NSE: Starting http-favicon against 58.218.199.227:80. NSE: Starting http-generator against 58.218.199.227:80. NSE: Starting http-git against 58.218.199.227:80. NSE: Starting http-methods against 58.218.199.227:80. NSE: Starting http-robots.txt against 58.218.199.227:80. NSE: Starting http-title against 58.218.199.227:80. NSE: Starting smtp-commands against 58.218.199.227:25. NSE: Starting ssl-cert against 58.218.199.227:25. NSE: Starting ssl-date against 58.218.199.227:25. Initiating NSE at 17:11 NSE: Finished address-info against 58.218.199.227. NSE: 554 5.7.3 Unable to initialize security subsystem NSE: STARTTLS failed or unavailable. Enable --script-trace to see what is happening. NSE: 554 5.7.3 Unable to initialize security subsystem NSE: STARTTLS failed or unavailable. Enable --script-trace to see what is happening. NSE: Finished ssl-date against 58.218.199.227:25. NSE: Finished ssl-cert against 58.218.199.227:25. NSE: Finished smtp-commands against 58.218.199.227:25. NSE: Finished http-generator against 58.218.199.227:80. NSE: http-methods: OPTIONS / failed. NSE: Finished http-methods against 58.218.199.227:80. NSE: Finished http-git against 58.218.199.227:80. NSE: Finished http-robots.txt against 58.218.199.227:80. NSE: Finished http-title against 58.218.199.227:80. NSE Timing: About 75.00% done; ETC: 17:11 (0:00:10 remaining) NSE: No favicon found. NSE: Finished http-favicon against 58.218.199.227:80. NSE: Finished http-auth against 58.218.199.227:80. NSE Timing: About 91.67% done; ETC: 17:12 (0:00:06 remaining) NSE: Finished http-cors against 58.218.199.227:80. Completed NSE at 17:12, 83.51s elapsed NSE: Starting runlevel 2 (of 2) scan. Nmap scan report for 58.218.199.227 Host is up, received user-set (0.24s latency). Scanned at 2012-09-13 17:10:00 EDT for 157s Not shown: 989 closed ports Reason: 989 resets PORT STATE SERVICE REASON VERSION 25/tcp open smtp syn-ack Microsoft ESMTP 6.0.3790.4675 | smtp-commands: DDISP-a20199227 Hello [74.95.187.106], TURN, SIZE 2097152, ETRN, PIPELINING, DSN, ENHANCEDSTATUSCODES, 8bitmime, BINARYMIME, CHUNKING, VRFY, OK, |_ This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH TURN ETRN BDAT VRFY 80/tcp open http syn-ack Microsoft IIS httpd 6.0 135/tcp filtered msrpc no-response 139/tcp filtered netbios-ssn no-response 445/tcp filtered microsoft-ds no-response 1025/tcp open msrpc syn-ack Microsoft Windows RPC 1026/tcp open msrpc syn-ack Microsoft Windows RPC 1027/tcp open msrpc syn-ack Microsoft Windows RPC 1028/tcp open msrpc syn-ack Microsoft Windows RPC 3389/tcp open ms-wbt-server syn-ack Microsoft Terminal Service 4444/tcp filtered krb524 no-response Device type: general purpose Running: Microsoft Windows 2003|XP OS CPE: cpe:/o:microsoft:windows_server_2003::sp1 cpe:/o:microsoft:windows_server_2003::sp2 cpe:/o:microsoft:windows_xp::sp2 OS details: Microsoft Windows Server 2003 SP1 - SP2, Microsoft Windows XP SP2 TCP/IP fingerprint: OS:SCAN(V=6.02%E=4%D=9/13%OT=25%CT=1%CU=31816%PV=N%DS=22%DC=I%G=N%TM=50524C OS:45%P=x86_64-unknown-linux-gnu)SEQ(SP=106%GCD=1%ISR=10E%TS=0)OPS(O1=M5B4N OS:W0NNT00NNS%O2=M5B4NW0NNT00NNS%O3=M5B4NW0NNT00%O4=M5B4NW0NNT00NNS%O5=M5B4 OS:NW0NNT00NNS%O6=M5B4NNT00NNS)WIN(W1=4000%W2=4000%W3=4000%W4=4000%W5=4000% OS:W6=4000)ECN(R=Y%DF=N%T=80%W=4000%O=M5B4NW0NNS%CC=N%Q=)T1(R=Y%DF=N%T=80%S OS:=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=Y%DF=N%T=80%W=0%S=A%A=O%F=R%O=%R OS:D=0%Q=)T5(R=Y%DF=N%T=80%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=Y%DF=N%T=80%W= OS:0%S=A%A=O%F=R%O=%RD=0%Q=)T7(R=N)U1(R=Y%DF=N%T=7F%IPL=B0%UN=0%RIPL=G%RID= OS:G%RIPCK=G%RUCK=G%RUD=G)IE(R=N) Network Distance: 22 hops TCP Sequence Prediction: Difficulty=262 (Good luck!) IP ID Sequence Generation: Busy server or unknown class Service Info: Host: DDISP-a20199227; OS: Windows; CPE: cpe:/o:microsoft:windows Final times for host: srtt: 243358 rttvar: 4818 to: 262630 NSE: Script Post-scanning. NSE: Starting runlevel 1 (of 2) scan. NSE: Starting runlevel 2 (of 2) scan. Read from /usr/local/bin/../share/nmap: nmap-os-db nmap-payloads nmap-service-probes nmap-services. OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 157.60 seconds Raw packets sent: 1222 (54.938KB) | Rcvd: 1201 (48.542KB)