Rebuild media

twitter reflets irc reflets feed rss reflets
Reflets
  • Technos
    • Rainbow Hat
    • Monkey Tools
  • Politique
  • France
  • Economie
  • Monde
  • Sagas
    • Bienvenue dans la com
    • Deep Packet Inspection
    • Bienvenue chez Amesys
    • High Frequency Trading
    • Bienvenue dans la presse
    • Bienvenue dans la zik
    • Le radar de Reflets.info
    • Retour sur un quinquennat Sarkozy
  • Entretiens
  • On s’en fout
    • Revue de Web
  • Littérature
  • Radio Reflets
  • Tribunes
Par bluetouff 29 février 2012

#OpSyria S04E02 : The Iron Strike investigation, now open for fun and profit

Greetings, Hackers and Freedom fighters. By the end of the Season 3 of #OpSyria, Telecomix, FHIMT and Reflets published 54Go of Syrian Censorship logs. The Season 4 is called « The...

Greetings, Hackers and Freedom fighters. By the end of the Season 3 of #OpSyria, Telecomix, FHIMT and Reflets published 54Go of Syrian Censorship logs. The Season 4 is called « The Iron Strike« , or how to strike the FastIron Cache of the syrian’s Net censorship infrastructure.

FastIron Cache is composed of 6 BlueCoat SG400, 4 NetApp and three others machines (ServerIron-S, ServerIron-M and Management : last one might host the management interface of the syrian censorship) probably very recently acquired by the Syrian regime thanks to an italian integrator, AreaSpa (sources here and here).

AreaSpa was not alone. This system includes americans BlueCoat and NetApp hardware providers, Qosmos Deep Packet Inspection software french provider, and Utimaco software german provider. AreaSpa and theses companies sold and set up this system last summer. They cannot tell they did not know that the purpose of it was to track and kill dissidents.

So we pushed our investigation further to localize theses machines. They’re in Syria, up and running.

Today, we share it with the world.

Enjoy.

The Target

The Syrian Computer Society is hosting Gov and some Corporate appliances or web applications. This ISP has been created by Bachar El Assad himself. You can find the Facebook SCS page here.

* netname: sy-scs-net
* mnt-routes: SCS-NOC
* mnt-routes: STEMNT-1
* descr: SCS-NET is an ISP based in Damascus Syria

BlueCoat devices are up and running

… And we found new ones !

  • http://213.178.224.130/BigIron_Secondry/view.htm?id={5F28B141-DCE8-45DB-8ECF-72345FC1C4BB}
  • http://213.178.224.130/1_BigIronMaster/view.htm?id={0875FCE9-AFAA-4A28-9D32-20B1C0CBF333}
  • http://213.178.224.130/sensor.htm?id=%7BDD150884-1A47-455E-9455-E0799E1F326F%7D
  • http://213.178.224.130/sensor.htm?id={EE91EE64-CFAC-4401-B8CB-449CC04E3008}

The censorship system might cache trafic and store requests done to the Bluecoat proxys. Government can do man in the middle attack against the whole population. Once stored, a huge database can index the requests, so the regime has the perfect tool to track any dissident web activities.

Monitoring systems uncovered

Monitoring systems are very interesting, they reveal more than the whole infrastructure and downtimes. They reveal interesting LAN IP. The PRTG used is old, very old… and not up to date, at all.

This is monitoring the IronFast Cache and more …

http://213.178.224.137/sensorlist.htm

… But Bachar’s monitoring is often down. No worry, you can download a useful pdf here.

This one is monitoring Gov machines (DHost2) and some Bluecoat devices can be found here

http://213.178.224.130/prtg.htm :

And here 3 others monitoring systems :

http://213.178.229.98/sensorlist.htm

http://213.178.224.153:8089/sensorlist.htm

http://213.178.226.208/ (password protected)

The FastIron Caches (Lan : 192.168.57.100)

  • BlueCoat : 77.44.210.13
  • BlueCoat : 77.44.210.179
  • BlueCoat : 77.44.210.178
  • BlueCoat : 213.178.244.14
  • BlueCoat : 213.178.244.175
  • BlueCoat : 213.178.244.174
  • NetApp : 77.44.210.6
  • NetApp : 213.178.244.5
  • NetApp : 213.178.244.173
  • NetApp : 77.44.210.176

Identification of the machines is confirmed by fingerprinting obtaine with the -A option of NMAP.

You can get their uptime thanks to HPING3 using this command :

# hping3 -c 2 -p 443 --tcp-timestamp -S 77.44.210.176  | grep uptime

Do yo like Cisco ?… Bachar does !

Just play with it : 
* 213.178.245.243 / Login : cisco / Password : cisco
* 213.178.245.242 / Login : cisco / Password : cisco
* 213.178.245.241 / Login : cisco / Password : cisco
* 213.178.245.225 / Login : cisco / Password : cisco
* 213.178.246.169 / Login : cisco / Password : cisco
* 213.178.250.70 / Login : cisco / Password : cisco
* 213.178.252.161 / Login : cisco / Password : cisco
* http://213.178.245.227:2002/

SCS’s hosted Bank printers can send you scans and more

Break into the Al-Sharq bank papers secrets.

http://213.178.228.169

Get the adress book, insert your mail and get notified…

http://213.178.228.169/hp/device/this.LCDispatcher?nav=hp.AddressBook

… or configure a remote wins server…

http://213.178.228.169/hp/device/this.LCDispatcher?nav=hp.Folders

Hey admins you seem to like young kids

Googling those specific SCS IP ranges we found this… a nasty bastard asking for some suggestive stuff on a russian board :

Dear Hisham, we come in peace

Hisham is developper, working on of the most interesting ranges with his laptop… Guess on what :

  • http://213.178.224.148:8088/
  • http://213.178.224.148:8088/callhome/
  • http://213.178.224.148:8088/callhome/conf/
Hisham’s laptop 
Interesting ports on 213.178.224.148
 Not shown: 975 closed ports
 PORT STATE SERVICE VERSION
 21/tcp open ftp FileZilla ftpd 0.9.39 beta
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http Jetty httpd 6.1.22
 |_ html-title: Error 404 NOT_FOUND
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 445/tcp open netbios-ssn
 990/tcp filtered ftps
 1099/tcp open jrmi Java RMI
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 2869/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
 4444/tcp filtered krb524
 5060/tcp filtered sip
 5357/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
 |_ html-title: Service Unavailable
 8080/tcp open http Jetty httpd 6.1.22
 |_ html-title: Error 404 - Not Found
 8088/tcp open http Jetty httpd 6.1.22
 |_ html-title: Error 404 - Not Found
 8443/tcp open ssl/http Jetty httpd 6.1.22
 |_ html-title: Error 404 - Not Found
 16993/tcp open tcpwrapped
 49152/tcp open msrpc Microsoft Windows RPC
 49153/tcp open msrpc Microsoft Windows RPC
 49154/tcp open msrpc Microsoft Windows RPC
 49158/tcp open msrpc Microsoft Windows RPC
 49159/tcp open unknown
 Service Info: OS: Windows
Host script results:
 | smb-os-discovery: Windows 7 Professional 7600
 | LAN Manager: Windows 7 Professional 6.1
 | Name: WORKGROUP\HISHAM-LAPTOP
 |_ System time: 2012-02-26 12:10:35 UTC+2
 |_ nbstat: ERROR: Name query failed: TIMEOUT

Reflets’ tourism office Syrian tour

Let’s take a tour on Bachar’s IP range.

77.44.210.1/24

Interesting ports on 77.44.210.6:
Not shown: 979 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
80/tcp open http?
|_ html-title: Access Denied
81/tcp open http-proxy NetApp NetCache http proxy 6.0.7
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
443/tcp open http-proxy NetApp NetCache http proxy 6.0.7
514/tcp open login Cisco/NetApp logind
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
3128/tcp open squid-http?
4444/tcp filtered krb524
5060/tcp filtered sip
8000/tcp open http-proxy NetApp NetCache http proxy 6.0.7
8008/tcp open http-proxy NetApp NetCache http proxy 6.0.7
8080/tcp open http-proxy?
8081/tcp open http-proxy NetApp NetCache http proxy 6.0.7
8088/tcp open http-proxy NetApp NetCache http proxy 6.0.7
8090/tcp open http-proxy NetApp NetCache http proxy 6.0.7
9090/tcp open http-proxy NetApp NetCache http proxy 6.0.7
Interesting ports on 77.44.210.7:
Not shown: 989 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
80/tcp open http-proxy NetApp NetCache http proxy 6.0.7
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
8080/tcp open http-proxy NetApp NetCache http proxy 6.0.7
Interesting ports on 77.44.210.15:
Not shown: 985 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
53/tcp open domain?
80/tcp open http?
|_ html-title: Access Denied
81/tcp open http-proxy BlueCoat SG-400 http proxy
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
3128/tcp open squid-http?
4444/tcp filtered krb524
5060/tcp filtered sip
8080/tcp open http-proxy?
8082/tcp open ssl/blackice-alerts?
|_ sslv2: server still supports SSLv2
Interesting ports on 77.44.210.176:
Not shown: 979 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
53/tcp open domain
80/tcp open http?
|_ html-title: Access Denied
81/tcp open http-proxy NetApp NetCache http proxy 6.0.7
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
443/tcp open http-proxy NetApp NetCache http proxy 6.0.7
514/tcp open login Cisco/NetApp logind
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
3128/tcp open squid-http?
4444/tcp filtered krb524
5060/tcp filtered sip
8000/tcp open http-proxy NetApp NetCache http proxy 6.0.7
8080/tcp open http-proxy?
8081/tcp open http-proxy NetApp NetCache http proxy 6.0.7
8088/tcp open http-proxy NetApp NetCache http proxy 6.0.7
8090/tcp open http-proxy NetApp NetCache http proxy 6.0.7
9090/tcp open http-proxy NetApp NetCache http proxy 6.0.7

 213.178.224.1/24

Interesting ports on 213.178.224.1:
 Not shown: 997 filtered ports
 PORT STATE SERVICE VERSION
 21/tcp open ftp FileZilla ftpd 0.9.37 beta
 443/tcp closed https
 3389/tcp open microsoft-rdp Microsoft Terminal Service
 Service Info: OS: Windows
Interesting ports on 213.178.224.5:
 Not shown: 983 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 25/tcp filtered smtp
 80/tcp open http?
 |_ html-title: Access Denied
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 280/tcp open tcpwrapped
 1718/tcp filtered unknown
 1719/tcp filtered unknown
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 3128/tcp open squid-http?
 4444/tcp filtered krb524
 5060/tcp filtered sip
 5061/tcp filtered sip-tls
 8080/tcp open http-proxy?
Interesting ports on 213.178.224.50:
 Not shown: 985 closed ports
 PORT STATE SERVICE VERSION
 21/tcp open ftp ProFTPD 1.3.2
 22/tcp filtered ssh
 23/tcp filtered telnet
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: WORKGROUP)
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 4444/tcp filtered krb524
 5060/tcp filtered sip
 8383/tcp open http Apache httpd 2.2.12 ((Ubuntu))
 |_ html-title: 401 Authorization Required
 | http-auth: HTTP Service requires authentication
 |_ Auth type: Basic, realm = Section Name
 12000/tcp open cce4x?
 16000/tcp open unknown
 16001/tcp open tcpwrapped
Host script results:
 | smb-os-discovery: Unix
 | LAN Manager: Samba 3.4.0
 | Name: Unknown\Unknown
 |_ System time: 2012-02-26 12:11:45 UTC+2
 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.224.100:
 Not shown: 993 filtered ports
 PORT STATE SERVICE VERSION
 80/tcp open http?
 |_ html-title: Site doesn't have a title (text/html).
 443/tcp open https?
 465/tcp open smtps?
 912/tcp open vmware-auth VMware Authentication Daemon 1.0 (Uses VNC, SOAP)
 993/tcp open imaps?
 995/tcp open pop3s?
 3389/tcp open ms-term-serv?
Interesting ports on 213.178.224.130:
 Not shown: 980 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http Paessler PRTG Traffic Grapher httpd (Indy httpd 9.0.11)
 | html-title: PRTG Traffic Monitor - Monitoring Results - PRTG Traffic Graph...
 |_ Requested resource was http://213.178.224.130/prtg.htm
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 445/tcp open netbios-ssn
 1110/tcp open tcpwrapped
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 3389/tcp open microsoft-rdp Microsoft Terminal Service
 4444/tcp filtered krb524
 5060/tcp filtered sip
 19780/tcp open unknown
 49152/tcp open msrpc Microsoft Windows RPC
 49153/tcp open msrpc Microsoft Windows RPC
 49154/tcp open msrpc Microsoft Windows RPC
 49155/tcp open msrpc Microsoft Windows RPC
 49156/tcp open msrpc Microsoft Windows RPC
 49159/tcp open msrpc Microsoft Windows RPC
 Service Info: OS: Windows
Host script results:
 |_ nbstat: ERROR: Name query failed: TIMEOUT
 | smb-os-discovery: Windows 7 Ultimate 7600
 | LAN Manager: Windows 7 Ultimate 6.1
 | Name: WORKGROUP\SCS-NET-PC
 |_ System time: 2012-02-26 12:10:54 UTC+2
Interesting ports on 213.178.224.137:
 Not shown: 986 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http Paessler PRTG Traffic Grapher httpd (Indy httpd 9.0.11)
 | html-title: PRTG Traffic Grapher - Monitoring Results - PRTG Traffic Graph...
 |_ Requested resource was http://213.178.224.137/sensorlist.htm
 | robots.txt: has 1 disallowed entry
 |_ /
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 445/tcp open tcpwrapped
 1025/tcp open msrpc Microsoft Windows RPC
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 3306/tcp open mysql MySQL 5.0.51b-community-nt
 | mysql-info: Protocol: 10
 | Version: 5.0.51b-community-nt
 | Thread ID: 283
 | Some Capabilities: Connect with DB, Compress, Transactions, Secure Connection
 | Status: Autocommit
 |_ Salt: !hiWV,v23ISHO5Y?q;qG
 3389/tcp open microsoft-rdp Microsoft Terminal Service
 4444/tcp filtered krb524
 5060/tcp filtered sip
 Service Info: OS: Windows
Host script results:
 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.224.148
 Not shown: 975 closed ports
 PORT STATE SERVICE VERSION
 21/tcp open ftp FileZilla ftpd 0.9.39 beta
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http Jetty httpd 6.1.22
 |_ html-title: Error 404 NOT_FOUND
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 445/tcp open netbios-ssn
 990/tcp filtered ftps
 1099/tcp open jrmi Java RMI
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 2869/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
 4444/tcp filtered krb524
 5060/tcp filtered sip
 5357/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
 |_ html-title: Service Unavailable
 8080/tcp open http Jetty httpd 6.1.22
 |_ html-title: Error 404 - Not Found
 8088/tcp open http Jetty httpd 6.1.22
 |_ html-title: Error 404 - Not Found
 8443/tcp open ssl/http Jetty httpd 6.1.22
 |_ html-title: Error 404 - Not Found
 16993/tcp open tcpwrapped
 49152/tcp open msrpc Microsoft Windows RPC
 49153/tcp open msrpc Microsoft Windows RPC
 49154/tcp open msrpc Microsoft Windows RPC
 49158/tcp open msrpc Microsoft Windows RPC
 49159/tcp open unknown
 Service Info: OS: Windows
Host script results:
 | smb-os-discovery: Windows 7 Professional 7600
 | LAN Manager: Windows 7 Professional 6.1
 | Name: WORKGROUP\HISHAM-LAPTOP
 |_ System time: 2012-02-26 12:10:35 UTC+2
 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.224.153:
 Not shown: 980 closed ports
 PORT STATE SERVICE VERSION
 21/tcp open ftp FileZilla ftpd 0.9.37 beta
 22/tcp filtered ssh
 23/tcp filtered telnet
 25/tcp open smtp Microsoft ESMTP 6.0.2600.5949
 | smtp-commands: EHLO hp-hp Hello [88.191.90.106], SIZE 2097152, PIPELINING, DSN, ENHANCEDSTATUSCODES, 8bitmime, BINARYMIME, CHUNKING, VRFY
 |_ HELP This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH BDAT VRFY
 80/tcp open http Microsoft IIS webserver 5.1
 |_ html-title: Site doesn't have a title (text/html).
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 443/tcp open https?
 445/tcp open microsoft-ds Microsoft Windows XP microsoft-ds
 912/tcp open vmware-auth VMware Authentication Daemon 1.0 (Uses VNC, SOAP)
 1028/tcp open msrpc Microsoft Windows RPC
 1110/tcp open tcpwrapped
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 3389/tcp open microsoft-rdp Microsoft Terminal Service
 4444/tcp filtered krb524
 5060/tcp filtered sip
 8089/tcp open http Paessler PRTG Traffic Grapher httpd (Indy httpd 9.0.11)
 | robots.txt: has 1 disallowed entry
 |_ /
 | html-title: PRTG Traffic Grapher - Monitoring Results - PRTG Traffic Graph...
 |_ Requested resource was http://213.178.224.153/sensorlist.htm
 19780/tcp open unknown
 Service Info: Host: hp-hp; OS: Windows
Host script results:
 |_ nbstat: ERROR: Name query failed: TIMEOUT
 | smb-os-discovery: Windows XP
 | LAN Manager: Windows 2000 LAN Manager
 | Name: WORKGROUP\HP-HP
 |_ System time: 2012-02-26 12:10:45 UTC+2
Interesting ports on 213.178.224.158:
 Not shown: 980 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 445/tcp filtered microsoft-ds
 912/tcp open vmware-auth VMware Authentication Daemon 1.0 (Uses VNC, SOAP)
 1110/tcp filtered nfsd-status
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 2869/tcp filtered unknown
 3389/tcp open microsoft-rdp Microsoft Terminal Service
 4444/tcp filtered krb524
 5060/tcp filtered sip
 19780/tcp filtered unknown
 49152/tcp open msrpc Microsoft Windows RPC
 49153/tcp open msrpc Microsoft Windows RPC
 49154/tcp open msrpc Microsoft Windows RPC
 49159/tcp open msrpc Microsoft Windows RPC
 49167/tcp open msrpc Microsoft Windows RPC
 Service Info: OS: Windows
Interesting ports on 213.178.224.171:
 Not shown: 984 closed ports
 PORT STATE SERVICE VERSION
 21/tcp open ftp ProFTPD
 |_ ftp-anon: Anonymous FTP login allowed
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http Apache httpd 1.3.34 ((Unix) mod_ssl/2.8.25 OpenSSL/0.9.7e)
 |_ html-title: Site doesn't have a title (text/html; charset=UTF-8).
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 443/tcp open ssl/http Apache httpd 1.3.34 ((Unix) mod_ssl/2.8.25 OpenSSL/0.9.7e)
 |_ html-title: Site doesn't have a title (text/html; charset=UTF-8).
 |_ sslv2: server still supports SSLv2
 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: WORKGROUP)
 873/tcp open rsync (protocol version 29)
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 4444/tcp filtered krb524
 5060/tcp filtered sip
 8873/tcp open ssl/unknown
 22939/tcp open ssl/unknown
 Service Info: Host: 213.178.224.171; OS: Unix
Host script results:
 | smb-os-discovery: Unix
 | LAN Manager: Samba 3.0.30-1.4.osstech
 | Name: WORKGROUP\Unknown
 |_ System time: 2012-02-26 12:10:27 UTC+2
 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.224.172:
 Not shown: 985 closed ports
 PORT STATE SERVICE VERSION
 21/tcp open ftp ProFTPD
 |_ ftp-anon: Anonymous FTP login allowed
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http Apache httpd 1.3.34 ((Unix))
 |_ html-title: Site doesn't have a title (text/html; charset=UTF-8).
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: WORKGROUP)
 873/tcp open rsync (protocol version 29)
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 4444/tcp filtered krb524
 5060/tcp filtered sip
 8873/tcp open ssl/unknown
 22939/tcp open ssl/unknown
 Service Info: Host: 213.178.224.172; OS: Unix
Host script results:
 | smb-os-discovery: Unix
 | LAN Manager: Samba 3.0.24-1.22_OSSTECH
 | Name: WORKGROUP\Unknown
 |_ System time: 2012-02-26 13:00:33 UTC+2
 |_ nbstat: ERROR: Name query failed: TIMEOUT

213.178.244.1/24

Interesting ports on 213.178.244.5:
 Not shown: 987 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http?
 |_ html-title: Access Denied
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 514/tcp open login Cisco/NetApp logind
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 3128/tcp open squid-http?
 4444/tcp filtered krb524
 5060/tcp filtered sip
 8080/tcp open http-proxy?
 3 services unrecognized despite returning data.
 Interesting ports on 213.178.244.16:
 Not shown: 984 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 53/tcp open domain?
 80/tcp open http-proxy BlueCoat SG-400 http proxy
 81/tcp open http-proxy BlueCoat SG-400 http proxy
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 3128/tcp open http-proxy BlueCoat SG-400 http proxy
 4444/tcp filtered krb524
 5060/tcp filtered sip
 8000/tcp open http-proxy BlueCoat SG-400 http proxy
 8080/tcp open http-proxy BlueCoat SG-400 http proxy
 8082/tcp open ssl/blackice-alerts?
 |_ sslv2: server still supports SSLv2
 Interesting ports on 213.178.244.173:
 Not shown: 980 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http?
 |_ html-title: Access Denied
 81/tcp open http-proxy NetApp NetCache http proxy 6.0.2
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 443/tcp open http-proxy NetApp NetCache http proxy 6.0.2
 514/tcp open login Cisco/NetApp logind
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 3128/tcp open squid-http?
 4444/tcp filtered krb524
 5060/tcp filtered sip
 8000/tcp open http-proxy NetApp NetCache http proxy 6.0.2
 8080/tcp open http-proxy?
 8081/tcp open http-proxy NetApp NetCache http proxy 6.0.2
 8088/tcp open http-proxy NetApp NetCache http proxy 6.0.2
 8090/tcp open http-proxy NetApp NetCache http proxy 6.0.2
 9090/tcp open http-proxy NetApp NetCache http proxy 6.0.2
 3 services unrecognized despite returning data.
 Interesting ports on 213.178.244.174:
 Not shown: 996 filtered ports
 PORT STATE SERVICE VERSION
 80/tcp open http-proxy BlueCoat SG-400 http proxy
 3128/tcp open http-proxy BlueCoat SG-400 http proxy
 8080/tcp open http-proxy BlueCoat SG-400 http proxy
 8082/tcp open ssl/http-proxy BlueCoat http proxy
 |_ sslv2: server still supports SSLv2

213.178.224.1/24

 Interesting ports on 213.178.224.1:
 Not shown: 997 filtered ports
 PORT STATE SERVICE VERSION
 21/tcp open ftp FileZilla ftpd 0.9.37 beta
 443/tcp closed https
 3389/tcp open microsoft-rdp Microsoft Terminal Service
 Service Info: OS: Windows
 Interesting ports on 213.178.224.5
 Not shown: 983 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 25/tcp filtered smtp
 80/tcp open http?
 |_ html-title: Access Denied
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 280/tcp open tcpwrapped
 1718/tcp filtered unknown
 1719/tcp filtered unknown
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 3128/tcp open squid-http?
 4444/tcp filtered krb524
 5060/tcp filtered sip
 5061/tcp filtered sip-tls
 8080/tcp open http-proxy?
 Interesting ports on 213.178.224.50:
 Not shown: 985 closed ports
 PORT STATE SERVICE VERSION
 21/tcp open ftp ProFTPD 1.3.2
 22/tcp filtered ssh
 23/tcp filtered telnet
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: WORKGROUP)
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 4444/tcp filtered krb524
 5060/tcp filtered sip
 8383/tcp open http Apache httpd 2.2.12 ((Ubuntu))
 |_ html-title: 401 Authorization Required
 | http-auth: HTTP Service requires authentication
 |_ Auth type: Basic, realm = Section Name
 12000/tcp open cce4x?
 16000/tcp open unknown
 16001/tcp open tcpwrapped
 Host script results:
 | smb-os-discovery: Unix
 | LAN Manager: Samba 3.4.0
 | Name: Unknown\Unknown
 |_ System time: 2012-02-26 12:11:45 UTC+2
 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.224.100:
 Not shown: 993 filtered ports
 PORT STATE SERVICE VERSION
 80/tcp open http? ------> teamviewer
 |_ html-title: Site doesn't have a title (text/html).
 443/tcp open https?
 465/tcp open smtps?
 912/tcp open vmware-auth VMware Authentication Daemon 1.0 (Uses VNC, SOAP)
 993/tcp open imaps?
 995/tcp open pop3s?
 3389/tcp open ms-term-serv?
 Interesting ports on 213.178.224.130:
 Not shown: 980 closed portsPORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http Paessler PRTG Traffic Grapher httpd (Indy httpd 9.0.11)
 | html-title: PRTG Traffic Monitor - Monitoring Results - PRTG Traffic Graph...
 |_ Requested resource was http://213.178.224.130/prtg.htm
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 445/tcp open netbios-ssn
 1110/tcp open tcpwrapped
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 3389/tcp open microsoft-rdp Microsoft Terminal Service
 4444/tcp filtered krb524
 5060/tcp filtered sip
 19780/tcp open unknown
 49152/tcp open msrpc Microsoft Windows RPC
 49153/tcp open msrpc Microsoft Windows RPC
 49154/tcp open msrpc Microsoft Windows RPC
 49155/tcp open msrpc Microsoft Windows RPC
 49156/tcp open msrpc Microsoft Windows RPC
 49159/tcp open msrpc Microsoft Windows RPC
 Service Info: OS: Windows
Host script results:
 |_ nbstat: ERROR: Name query failed: TIMEOUT
 | smb-os-discovery: Windows 7 Ultimate 7600
 | LAN Manager: Windows 7 Ultimate 6.1
 | Name: WORKGROUP\SCS-NET-PC
 |_ System time: 2012-02-26 12:10:54 UTC+2
Interesting ports on 213.178.224.137:
 Not shown: 986 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http Paessler PRTG Traffic Grapher httpd (Indy httpd 9.0.11)
 | html-title: PRTG Traffic Grapher - Monitoring Results - PRTG Traffic Graph...
 |_ Requested resource was http://213.178.224.137/sensorlist.htm
 | robots.txt: has 1 disallowed entry
 |_ /
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 445/tcp open tcpwrapped
 1025/tcp open msrpc Microsoft Windows RPC
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 3306/tcp open mysql MySQL 5.0.51b-community-nt
 | mysql-info: Protocol: 10
 | Version: 5.0.51b-community-nt
 | Thread ID: 283
 | Some Capabilities: Connect with DB, Compress, Transactions, Secure Connection
 | Status: Autocommit
 |_ Salt: !hiWV,v23ISHO5Y?q;qG
 3389/tcp open microsoft-rdp Microsoft Terminal Service
 4444/tcp filtered krb524
 5060/tcp filtered sip
 Service Info: OS: Windows
Host script results:
 |_ nbstat: ERROR: Name query failed: TIMEOUT
 Interesting ports on 213.178.224.153:
 Not shown: 980 closed ports
 PORT STATE SERVICE VERSION
 21/tcp open ftp FileZilla ftpd 0.9.37 beta
 22/tcp filtered ssh
 23/tcp filtered telnet
 25/tcp open smtp Microsoft ESMTP 6.0.2600.5949
 | smtp-commands: EHLO hp-hp Hello [88.191.90.106], SIZE 2097152, PIPELINING, DSN, ENHANCEDSTATUSCODES, 8bitmime, BINARYMIME, CHUNKING, VRFY
 |_ HELP This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH BDAT VRFY
 80/tcp open http Microsoft IIS webserver 5.1
 |_ html-title: Site doesn't have a title (text/html).
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 443/tcp open https?
 445/tcp open microsoft-ds Microsoft Windows XP microsoft-ds
 912/tcp open vmware-auth VMware Authentication Daemon 1.0 (Uses VNC, SOAP)
 1028/tcp open msrpc Microsoft Windows RPC
 1110/tcp open tcpwrapped
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 3389/tcp open microsoft-rdp Microsoft Terminal Service
 4444/tcp filtered krb524
 5060/tcp filtered sip
 8089/tcp open http Paessler PRTG Traffic Grapher httpd (Indy httpd 9.0.11)
 | robots.txt: has 1 disallowed entry
 |_ /
 | html-title: PRTG Traffic Grapher - Monitoring Results - PRTG Traffic Graph...
 |_ Requested resource was http://213.178.224.153/sensorlist.htm
 19780/tcp open unknown
 Service Info: Host: hp-hp; OS: Windows
Host script results:
 |_ nbstat: ERROR: Name query failed: TIMEOUT
 | smb-os-discovery: Windows XP
 | LAN Manager: Windows 2000 LAN Manager
 | Name: WORKGROUP\HP-HP
 |_ System time: 2012-02-26 12:10:45 UTC+2
Interesting ports on 213.178.224.158:
 Not shown: 980 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 445/tcp filtered microsoft-ds
 912/tcp open vmware-auth VMware Authentication Daemon 1.0 (Uses VNC, SOAP)
 1110/tcp filtered nfsd-status
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 2869/tcp filtered unknown
 3389/tcp open microsoft-rdp Microsoft Terminal Service
 4444/tcp filtered krb524
 5060/tcp filtered sip
 19780/tcp filtered unknown
 49152/tcp open msrpc Microsoft Windows RPC
 49153/tcp open msrpc Microsoft Windows RPC
 49154/tcp open msrpc Microsoft Windows RPC
 49159/tcp open msrpc Microsoft Windows RPC
 49167/tcp open msrpc Microsoft Windows RPC
 Service Info: OS: Windows
Interesting ports on 213.178.224.171:
 Not shown: 984 closed ports
 PORT STATE SERVICE VERSION
 21/tcp open ftp ProFTPD
 |_ ftp-anon: Anonymous FTP login allowed
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http Apache httpd 1.3.34 ((Unix) mod_ssl/2.8.25 OpenSSL/0.9.7e)
 |_ html-title: Site doesn't have a title (text/html; charset=UTF-8).
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 443/tcp open ssl/http Apache httpd 1.3.34 ((Unix) mod_ssl/2.8.25 OpenSSL/0.9.7e)
 |_ html-title: Site doesn't have a title (text/html; charset=UTF-8).
 |_ sslv2: server still supports SSLv2
 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: WORKGROUP)
 873/tcp open rsync (protocol version 29)
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 4444/tcp filtered krb524
 5060/tcp filtered sip
 8873/tcp open ssl/unknown
 22939/tcp open ssl/unknown
 Service Info: Host: 213.178.224.171; OS: Unix
Host script results:
 | smb-os-discovery: Unix
 | LAN Manager: Samba 3.0.30-1.4.osstech
 | Name: WORKGROUP\Unknown
 |_ System time: 2012-02-26 12:10:27 UTC+2
 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.224.172:
 Not shown: 985 closed ports
 PORT STATE SERVICE VERSION
 21/tcp open ftp ProFTPD
 |_ ftp-anon: Anonymous FTP login allowed
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http Apache httpd 1.3.34 ((Unix))
 |_ html-title: Site doesn't have a title (text/html; charset=UTF-8).
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: WORKGROUP)
 873/tcp open rsync (protocol version 29)
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 4444/tcp filtered krb524
 5060/tcp filtered sip
 8873/tcp open ssl/unknown
 22939/tcp open ssl/unknown
 Service Info: Host: 213.178.224.172; OS: Unix
Host script results:
 | smb-os-discovery: Unix
 | LAN Manager: Samba 3.0.24-1.22_OSSTECH
 | Name: WORKGROUP\Unknown
 |_ System time: 2012-02-26 13:00:33 UTC+2
 |_ nbstat: ERROR: Name query failed: TIMEOUT
 213.178.245.1/24
 Interesting ports on 213.178.245.34:
 Not shown: 986 closed ports
 PORT STATE SERVICE VERSION
 21/tcp open ftp MikroTik router ftpd 3.13
 22/tcp filtered ssh
 23/tcp filtered telnet
 53/tcp open domain?
 80/tcp open http MikroTik router http config
 |_ html-title: mikrotik routeros > administration
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 3986/tcp open mapper-ws_ethd?
 4444/tcp filtered krb524
 5060/tcp filtered sip
 8291/tcp open unknown
 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at http://www.insecure.org/cgi-bin/servicefp-submit.cgi :
 SF-Port53-TCP:V=5.00%I=7%D=2/26%Time=4F4A33E5%P=x86_64-unknown-linux-gnu%r
 SF:(DNSVersionBindReq,E,"\0\x0c\0\x06\x81\x84\0\0\0\0\0\0\0\0")%r(DNSStatu
 SF:sRequest,E,"\0\x0c\0\0\x90\x84\0\0\0\0\0\0\0\0");
 Service Info: Device: router
Interesting ports on 213.178.245.45:
 Not shown: 981 closed ports
 PORT STATE SERVICE VERSION
 21/tcp open ftp Microsoft ftpd
 |_ ftp-anon: Anonymous FTP login allowed
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http Microsoft IIS webserver 6.0
 |_ html-title: Under Construction
 119/tcp open nntp Microsoft NNTP Service 6.0.3790.3959 (posting ok)
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds
 563/tcp open snews?
 1025/tcp open msrpc Microsoft Windows RPC
 1026/tcp open msrpc Microsoft Windows RPC
 1027/tcp open msrpc Microsoft Windows RPC
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 3389/tcp open microsoft-rdp Microsoft Terminal Service
 4444/tcp filtered krb524
 5060/tcp filtered sip
 8099/tcp open http Microsoft IIS webserver 6.0
 |_ html-title: The page must be viewed over a secure channel
 Service Info: OS: Windows
Host script results:
 |_ nbstat: ERROR: Name query failed: TIMEOUT
 | smb-os-discovery: Windows Server 2003 3790 Service Pack 2
 | LAN Manager: Windows Server 2003 5.2
 | Name: WORKGROUP\AASTMTIC
 |_ System time: 2012-02-26 13:35:13 UTC-8
Interesting ports on 213.178.245.86:
 Not shown: 988 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http Cisco IOS administrative httpd
 |_ html-title: Site doesn't have a title.
 | http-auth: HTTP Service requires authentication
 |_ Auth type: Basic, realm = level_15_access
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 4444/tcp filtered krb524
 4567/tcp filtered unknown
 5060/tcp filtered sip
 48080/tcp filtered unknown
 Service Info: OS: IOS
 Interesting ports on 213.178.245.98:
 Not shown: 998 filtered ports
 PORT STATE SERVICE VERSION
 443/tcp open ssl/http Apache httpd
 |_ html-title: User Portal
 587/tcp open smtp Exim smtpd
 | smtp-commands: EHLO proxy.capmus.iust.edu.sy Hello sailor.toonux.com [88.191.88.106], SIZE 52428800, PIPELINING, STARTTLS, HELP
 |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
Interesting ports on 213.178.245.100:
 Not shown: 998 filtered ports
 PORT STATE SERVICE VERSION
 443/tcp open ssl/http Apache httpd
 |_ html-title: User Portal
 587/tcp open smtp Exim smtpd
 | smtp-commands: EHLO proxy.capmus.iust.edu.sy Hello 88-191-90-106.rev.dedibox.fr [88.191.90.106], SIZE 52428800, PIPELINING, STARTTLS, HELP
 |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
 Interesting ports on 213.178.245.225:
 Not shown: 990 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http Cisco IOS administrative httpd
 |_ html-title: Site doesn't have a title.
 | http-auth: HTTP Service requires authentication
 |_ Auth type: Basic, realm = level_15 or view_access
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 443/tcp open https?
 1720/tcp filtered H.323/Q.931
 2000/tcp filtered callbook
 4444/tcp filtered krb524
 5060/tcp filtered sip
 Service Info: OS: IOS
Interesting ports on 213.178.245.226:
 Not shown: 976 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 25/tcp open smtp Microsoft ESMTP
 80/tcp open http Microsoft IIS webserver 7.5
 |_ html-title: IIS7
 110/tcp open pop3 MS Exchange 2007 pop3d
 |_ pop3-capabilities: STLS TOP UIDL
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 443/tcp open ssl/http Microsoft IIS webserver 7.5
 |_ sslv2: server still supports SSLv2
 |_ html-title: IIS7
 445/tcp open netbios-ssn
 705/tcp open unknown
 995/tcp open ssl/pop3 MS Exchange 2007 pop3d
 |_ pop3-capabilities: USER SASL(NTLM GSSAPI PLAIN) TOP UIDL
 1025/tcp open msrpc Microsoft Windows RPC
 1026/tcp open msrpc Microsoft Windows RPC
 1027/tcp open msrpc Microsoft Windows RPC
 1028/tcp open msrpc Microsoft Windows RPC
 1046/tcp open msrpc Microsoft Windows RPC
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 3389/tcp open microsoft-rdp Microsoft Terminal Service
 4444/tcp filtered krb524
 5060/tcp filtered sip
 8021/tcp open remoting MS .NET Remoting services
 10000/tcp open snet-sensor-mgmt?
Host script results:
 | smb-os-discovery: Windows Server 2008 R2 Standard 7601 Service Pack 1
 | LAN Manager: Windows Server 2008 R2 Standard 6.1
 | Name: STD\STD-5
 |_ System time: 2012-02-26 14:33:00 UTC+2
 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.245.227:
 Not shown: 984 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 49/tcp open tcpwrapped
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds
 808/tcp open ccproxy-http?
 1025/tcp open msrpc Microsoft Windows RPC
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 2001/tcp open dc?
 2002/tcp open http Cisco Secure ACS login
 |_ html-title: CiscoSecure ACS Login
 3389/tcp open microsoft-rdp Microsoft Terminal Service
 4444/tcp filtered krb524
 5060/tcp filtered sip
 Host script results:
 | smb-os-discovery: Windows Server 2003 3790 Service Pack 2
 | LAN Manager: Windows Server 2003 5.2
 | Name: STD\ASC-1
 |_ System time: 2012-02-26 13:59:33 UTC+2
 |_ nbstat: ERROR: Name query failed: TIMEOUT
 Interesting ports on 213.178.245.241:
 Not shown: 989 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http Cisco IOS administrative httpd
 |_ html-title: Site doesn't have a title.
 | http-auth: HTTP Service requires authentication
 |_ Auth type: Basic, realm = level_15 or view_access
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 443/tcp open https?
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 4444/tcp filtered krb524
 5060/tcp filtered sip
 Service Info: OS: IOS
Interesting ports on 213.178.245.242:
 Not shown: 989 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http Cisco IOS administrative httpd
 |_ html-title: Site doesn't have a title.
 | http-auth: HTTP Service requires authentication
 |_ Auth type: Basic, realm = level_15 or view_access
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 443/tcp open https?
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 4444/tcp filtered krb524
 5060/tcp filtered sip
 Service Info: OS: IOS
Interesting ports on 213.178.245.243:
 Not shown: 989 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http Cisco IOS administrative httpd
 |_ html-title: Site doesn't have a title.
 | http-auth: HTTP Service requires authentication
 |_ Auth type: Basic, realm = level_15 or view_access
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 443/tcp open https?
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 4444/tcp filtered krb524
 5060/tcp filtered sip
 Service Info: OS: IOS

213.178.247.1/24

 Interesting ports on 213.178.247.65:
 Not shown: 992 closed ports
 PORT STATE SERVICE VERSION
 23/tcp open telnet Cisco IOS telnetd
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 4444/tcp filtered krb524
 5060/tcp filtered sip
 Service Info: OS: IOS; Device: switch
 Interesting ports on 213.178.247.98:
 Not shown: 990 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http Cisco IOS administrative httpd
 |_ html-title: Site doesn't have a title.
 | http-auth: HTTP Service requires authentication
 |_ Auth type: Basic, realm = level_15_access
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 4444/tcp filtered krb524
 5060/tcp filtered sip
 Service Info: OS: IOS
Interesting ports on 213.178.247.100:
 Not shown: 995 filtered ports
 PORT STATE SERVICE VERSION
 25/tcp open smtp Microsoft ESMTP 6.0.3790.3959
 | smtp-commands: EHLO exchange.uic.local Hello [88.190.24.19], TURN, SIZE, ETRN, PIPELINING, DSN, ENHANCEDSTATUSCODES, 8bitmime, BINARYMIME, CHUNKING, VRFY, X-EXPS GSSAPI NTLM LOGIN, X-EXPS=LOGIN, AUTH GSSAPI NTLM LOGIN, AUTH=LOGIN, X-LINK2STATE, XEXCH50
 |_ HELP This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH TURN ETRN BDAT VRFY
 80/tcp open http Microsoft IIS webserver 6.0
 |_ html-title: Under Construction
 110/tcp open pop3 MS Exchange 2003 pop3d 6.5.6944.0
 |_ pop3-capabilities: USER EXPIRE(NEVER) UIDL PIPELINING TOP SASL(NTLM)
 143/tcp open imap Microsoft Exchange Server 2003 imapd 6.5.6944.0
 |_ imap-capabilities: LOGIN-REFERRALS IMAP4 AUTH=NTLM IMAP4rev1 MAILBOX-REFERRALS UIDPLUS LITERAL+ IDLE NAMESPACE CHILDREN
 3389/tcp open microsoft-rdp Microsoft Terminal Service
 Service Info: Host: exchange.uic.local; OS: Windows
Interesting ports on 213.178.247.107:
 Not shown: 985 closed ports
 PORT STATE SERVICE VERSION
 21/tcp open ftp
 22/tcp filtered ssh
 23/tcp filtered telnet
 53/tcp filtered domain
 80/tcp open http?
 | http-auth: HTTP Service requires authentication
 |_ Auth type: Basic, realm = AG 3000
 |_ html-title: Site doesn't have a title (text/html).
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 301/tcp open tcpwrapped
 1111/tcp open http GoAhead-Webs embedded httpd
 | html-title: Site doesn't have a title (text/html).
 |_ Did not follow redirect to http://213.178.247.107:3111/usg/login
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 2111/tcp open http GoAhead-Webs embedded httpd
 | html-title: Site doesn't have a title (text/html).
 |_ Did not follow redirect to http://213.178.247.107:3111/usg/login
 4444/tcp filtered krb524
 5060/tcp filtered sip
 Interesting ports on 213.178.247.108:
 Not shown: 989 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http Apache httpd 2.2.3 ((CentOS))
 | html-title: Login
 |_ Requested resource was http://213.178.247.108/network/index.php
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 4444/tcp filtered krb524
 5060/tcp filtered sip
 5432/tcp open postgresql PostgreSQL DB
 Interesting ports on 213.178.247.213:
 Not shown: 999 filtered ports
 PORT STATE SERVICE VERSION
 80/tcp open http?
 |_ html-title: AIU | Student Area

http://213.178.247.213/
Interesting ports on 213.178.247.214:
 Not shown: 998 filtered ports
 PORT STATE SERVICE VERSION
 443/tcp open ssl/http VMware ESX Server httpd
 |_ html-title: " + ID_EESX_Welcome + "
 902/tcp open ssl/vmware-auth VMware Authentication Daemon 1.10 (Uses VNC, SOAP)
Interesting ports on 213.178.247.216:
 Not shown: 998 filtered ports
 PORT STATE SERVICE VERSION
 25/tcp open smtp
 | smtp-commands: EHLO mail.stds.aiu.edu.sy, AUTH CRAM-MD5 PLAIN LOGIN DIGEST-MD5, SIZE 3145728, STARTTLS, ENHANCEDSTATUSCODES, 8BITMIME, PIPELINING, ETRN, DSN, HELP
 |_ HELP 2.0.0 Commands: HELO EHLO MAIL RCPT DATA RSET NOOP VRFY QUIT STARTTLS
 443/tcp open ssl/https?
 | html-title: Kerio Connect WebMail
 |_ Requested resource was https://213.178.247.216/webmail/login/
 2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at http://www.insecure.org/cgi-bin/servicefp-submit.cgi :
Interesting ports on 213.178.247.217:
 Not shown: 999 filtered ports
 PORT STATE SERVICE VERSION
 80/tcp open http Apache Tomcat/Coyote JSP engine 1.1
 |_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.247.218:
 Not shown: 998 filtered ports
 PORT STATE SERVICE VERSION
 25/tcp open smtp Microsoft ESMTP 6.0.3790.4675
 | smtp-commands: EHLO webmail.aeu.ac.sy Hello [88.190.24.19], TURN, SIZE, ETRN, PIPELINING, DSN, ENHANCEDSTATUSCODES, 8bitmime, BINARYMIME, CHUNKING, VRFY, X-EXPS GSSAPI NTLM LOGIN, X-EXPS=LOGIN, AUTH GSSAPI NTLM LOGIN, AUTH=LOGIN, X-LINK2STATE, XEXCH50
 |_ HELP This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH TURN ETRN BDAT VRFY
 443/tcp open ssl/http Microsoft IIS webserver 6.0
 | html-title: Document Moved
 |_ Did not follow redirect to https://213.178.247.218/exchange/
 |_ sslv2: server still supports SSLv2
 Service Info: Host: webmail.aeu.ac.sy; OS: Windows
Interesting ports on 213.178.247.220:
 Not shown: 998 filtered ports
 PORT STATE SERVICE VERSION
 53/tcp open domain ISC BIND 4.X
 80/tcp open http Apache httpd 2.2.21 ((EL))
 |_ html-title: 400 Bad Request
Interesting ports on 213.178.247.225:
 Not shown: 999 filtered ports
 PORT STATE SERVICE VERSION
 443/tcp open tcpwrapped
Interesting ports on 213.178.247.238:
 Not shown: 997 filtered ports
 PORT STATE SERVICE VERSION
 25/tcp open smtp Cisco PIX sanitized smtpd
 110/tcp closed pop3
 443/tcp open ssl/http Microsoft IIS webserver 6.0
 |_ html-title: Under Construction
 |_ sslv2: server still supports SSLv2
 Service Info: OS: Windows; Device: firewall
Interesting ports on 213.178.247.241:
 Not shown: 999 filtered ports
 PORT STATE SERVICE VERSION
 443/tcp closed https
Interesting ports on 213.178.247.244:
 Not shown: 997 filtered ports
 PORT STATE SERVICE VERSION
 80/tcp open http Microsoft IIS webserver 6.0
 |_ html-title: Under Construction
 443/tcp closed https
 8080/tcp open http Apache Tomcat/Coyote JSP engine 1.0
 |_ html-title: Apache Tomcat/4.1.24-LE-jdk14 - Error report
 Service Info: OS: Windows
Interesting ports on 213.178.247.250:
 Not shown: 978 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 443/tcp open https?
 445/tcp filtered microsoft-ds
 554/tcp filtered rtsp
 1110/tcp filtered nfsd-status
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 2869/tcp filtered unknown
 3128/tcp open squid-http?
 3389/tcp filtered ms-term-serv
 4444/tcp filtered krb524
 5060/tcp filtered sip
 14000/tcp open http gSOAP httpd 2.7
 |_ html-title: Site doesn't have a title (text/xml; charset=utf-8).
 19780/tcp filtered unknown
 49152/tcp open msrpc Microsoft Windows RPC
 49153/tcp open msrpc Microsoft Windows RPC
 49154/tcp open msrpc Microsoft Windows RPC
 49155/tcp open msrpc Microsoft Windows RPC

 213.178.246.1/24

Interesting ports on 213.178.246.48:
 Not shown: 983 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http Cisco IOS administrative httpd
 |_ html-title: Site doesn't have a title.
 | http-auth: HTTP Service requires authentication
 |_ Auth type: Basic, realm = level_15_access
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 1000/tcp filtered cadlock
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 3031/tcp filtered unknown
 3998/tcp filtered unknown
 4444/tcp filtered krb524
 4899/tcp filtered radmin
 5060/tcp filtered sip
 9009/tcp filtered unknown
 14441/tcp filtered unknown
 50389/tcp filtered unknown
 Service Info: OS: IOS
Interesting ports on 213.178.246.51:
 Not shown: 971 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 53/tcp open domain Microsoft DNS 6.1.7601
 88/tcp open kerberos-sec Microsoft Windows kerberos-sec
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 389/tcp open ldap
 445/tcp open netbios-ssn
 464/tcp open kpasswd5?
 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0
 636/tcp open ssl/ldap
 |_ sslv2: server still supports SSLv2
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 3071/tcp open ssl/unknown
 3268/tcp open ldap
 3269/tcp open ssl/ldap
 |_ sslv2: server still supports SSLv2
 3389/tcp open microsoft-rdp Microsoft Terminal Service
 4444/tcp filtered krb524
 5060/tcp filtered sip
 6129/tcp open damewaremr DameWare Mini Remote Control
 14000/tcp open unknown
 49153/tcp open msrpc Microsoft Windows RPC
 49154/tcp open msrpc Microsoft Windows RPC
 49155/tcp open msrpc Microsoft Windows RPC
 49156/tcp open msrpc Microsoft Windows RPC
 49160/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0
 49161/tcp open msrpc Microsoft Windows RPC
 65000/tcp open ssl/unknown
 |_ sslv2: server still supports SSLv2
Host script results:
 |_ nbstat: ERROR: Name query failed: TIMEOUT
 | smb-os-discovery: Windows Server 2008 R2 Standard 7601 Service Pack 1
 | LAN Manager: Windows Server 2008 R2 Standard 6.1
 | Name: STD\STD-27
 |_ System time: 2012-02-26 16:41:37 UTC+2
Interesting ports on 213.178.246.65:
 Not shown: 989 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http Cisco IOS administrative httpd
 | http-auth: HTTP Service requires authentication
 |_ Auth type: Basic, realm = level_15_access
 |_ html-title: Site doesn't have a title.
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 4444/tcp filtered krb524
 5060/tcp filtered sip
 6881/tcp filtered bittorrent-tracker
 Service Info: OS: IOS
Interesting ports on 213.178.246.113:
 Not shown: 990 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http Cisco IOS administrative httpd
 |_ html-title: Site doesn't have a title.
 | http-auth: HTTP Service requires authentication
 |_ Auth type: Basic, realm = level_15_access
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 4444/tcp filtered krb524
 5060/tcp filtered sip
 Service Info: OS: IOS
Interesting ports on 213.178.246.121:
 Not shown: 990 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 443/tcp open ssl/http Cisco IOS administrative httpd
 | http-auth: HTTP Service requires authentication
 |_ Auth type: Basic, realm = level_15_access
 |_ html-title: Site doesn't have a title.
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 4444/tcp filtered krb524
 5060/tcp filtered sip
 Service Info: OS: IOS
Interesting ports on 213.178.246.122:
 Not shown: 990 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 443/tcp open ssl/http Cisco Adaptive Security Appliance http config
 | html-title: Cisco ASDM 6.1(5)
 |_ Requested resource was http://213.178.246.122/admin/public/index.html
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 4444/tcp filtered krb524
 5060/tcp filtered sip
 Service Info: Device: security-misc
Interesting ports on 213.178.246.123:
 Not shown: 999 filtered ports
 PORT STATE SERVICE VERSION
 443/tcp open ssl/http Cisco Adaptive Security Appliance http config
 | html-title: Cisco ASDM 6.1(5)
 |_ Requested resource was http://213.178.246.123/admin/public/index.html
 Service Info: Device: security-misc
Interesting ports on 213.178.246.135:
 Not shown: 972 closed ports
 PORT STATE SERVICE VERSION
 21/tcp open tcpwrapped
 22/tcp filtered ssh
 23/tcp filtered telnet
 53/tcp open domain Microsoft DNS
 88/tcp open kerberos-sec Microsoft Windows kerberos-sec
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 389/tcp open ldap
 445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds
 464/tcp open kpasswd5?
 548/tcp open afp?
 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0
 636/tcp open tcpwrapped
 1025/tcp open msrpc Microsoft Windows RPC
 1027/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0
 1034/tcp open msrpc Microsoft Windows RPC
 1041/tcp open msrpc Microsoft Windows RPC
 1042/tcp open msrpc Microsoft Windows RPC
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 2301/tcp open http HP Proliant System Management 2.1.10.186 (CompaqHTTPServer 9.9)
 | html-title: Site doesn't have a title (text/html).
 |_ Requested resource was http://213.178.246.135/red2301.html?RedirectUrl=/
 2381/tcp open http Apache SSL-only mode httpd
 |_ html-title: 400 Bad Request
 3268/tcp open ldap
 3269/tcp open tcpwrapped
 3389/tcp open microsoft-rdp Microsoft Terminal Service
 4444/tcp filtered krb524
 5060/tcp filtered sip
 Service Info: OS: Windows
Host script results:
 | smb-os-discovery: Windows Server 2003 3790 Service Pack 2
 | LAN Manager: Windows Server 2003 5.2
 | Name: AG\SERVER
 |_ System time: 2012-02-26 15:37:09 UTC+3
 |_ nbstat: ERROR: Name query failed: TIMEOUT
 Interesting ports on 213.178.246.165:
 Not shown: 957 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 53/tcp open domain Microsoft DNS
 80/tcp open http Microsoft IIS webserver 6.0
 |_ html-title: Under Construction
 88/tcp open kerberos-sec Microsoft Windows kerberos-sec
 111/tcp filtered rpcbind
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 389/tcp open ldap
 445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds
 464/tcp open kpasswd5?
 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0
 636/tcp open tcpwrapped
 714/tcp filtered unknown
 801/tcp filtered device
 902/tcp open ssl/vmware-auth VMware Authentication Daemon 1.10 (Uses VNC)
 912/tcp open ssl/vmware-auth VMware Authentication Daemon 1.10 (Uses VNC)
 1026/tcp open msrpc Microsoft Windows RPC
 1027/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0
 1030/tcp filtered iad1
 1042/tcp open msrpc Microsoft Windows RPC
 1059/tcp open msrpc Microsoft Windows RPC
 1076/tcp open msrpc Microsoft Windows RPC
 1433/tcp open ms-sql-s Microsoft SQL Server 2000 8.00.760; SP3
 1583/tcp filtered unknown
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 2002/tcp open ssl/globe?
 2301/tcp open http HP Proliant System Management 2.1.15.210 (CompaqHTTPServer 9.9)
 | html-title: Site doesn't have a title (text/html).
 |_ Requested resource was http://213.178.246.165/red2301.html?RedirectUrl=/
 2381/tcp open http Apache SSL-only mode httpd
 |_ html-title: 400 Bad Request
 3001/tcp filtered nessus
 3268/tcp open ldap
 3269/tcp open tcpwrapped
 3389/tcp open microsoft-rdp Microsoft Terminal Service
 4444/tcp filtered krb524
 5060/tcp filtered sip
 8080/tcp open http Apache Tomcat/Coyote JSP engine 1.1
 |_ html-title: Apache Tomcat/4.1.30 - Error report
 8081/tcp open http Network Associates ePolicy Orchestrator (Computername: GMSYRIA Version: 3.6.0.569)
 |_ html-title: Site doesn't have a title (text/xml).
 8443/tcp open ssl/http Apache Tomcat/Coyote JSP engine 1.1
 |_ html-title: Apache Tomcat/4.1.30 - Error report
 8600/tcp open unknown
 9594/tcp filtered msgsys
 20222/tcp filtered unknown
Host script results:
 | smb-os-discovery: Windows Server 2003 3790 Service Pack 2
 | LAN Manager: Windows Server 2003 5.2
 | Name: GLOBEMED-SYRIA\GMSYRIA
 |_ System time: 2012-02-26 16:33:58 UTC+2
 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.246.169:
 Not shown: 990 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http Cisco IOS administrative httpd
 |_ html-title: Site doesn't have a title.
 | http-auth: HTTP Service requires authentication
 |_ Auth type: Basic, realm = level_15_access
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 4444/tcp filtered krb524
 5060/tcp filtered sip
 Service Info: OS: IOS
Interesting ports on 213.178.246.173: ---> commercial bank of Syria
 Not shown: 998 filtered ports
 PORT STATE SERVICE VERSION
 80/tcp open http Microsoft IIS webserver 5.0
 | html-title: 302 Found
 |_ Did not follow redirect to https://213.178.246.173/
 443/tcp open ssl/http Microsoft IIS webserver 5.0
 |_ sslv2: server still supports SSLv2
 |_ html-title: Commercial Bank of Syria - National Payment Network
 | robots.txt: has 1 disallowed entry
 |_ /cgi-bin/
 Service Info: OS: Windows
Interesting ports on 213.178.246.217:
 Not shown: 990 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 80/tcp open http Cisco IOS administrative httpd
 | http-auth: HTTP Service requires authentication
 |_ Auth type: Basic, realm = level_15_access
 |_ html-title: Site doesn't have a title.
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 4444/tcp filtered krb524
 5060/tcp filtered sip
 Service Info: OS: IOS
Interesting ports on 213.178.246.220:
 Not shown: 974 closed ports
 PORT STATE SERVICE VERSION
 21/tcp filtered ftp
 22/tcp filtered ssh
 23/tcp filtered telnet
 25/tcp open smtp Alt-N MDaemon mail server 10.0.0
 80/tcp open http MS ISA httpd
 |_ html-title: The page cannot be displayed
 110/tcp open pop3
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 143/tcp open imap Alt-N MDaemon imapd 10.0.0
 366/tcp open smtp Alt-N MDaemon mail server 10.0.0
 445/tcp open tcpwrapped
 554/tcp filtered rtsp
 587/tcp open smtp MDaemon smtpd 10.0.0 (MSA support)
 1000/tcp open http World Client WDaemon httpd 3.0
 |_ html-title: WebAdmin
 | robots.txt: has 1 disallowed entry
 |_ /
 1025/tcp open msrpc Microsoft Windows RPC
 1174/tcp open msrpc Microsoft Windows RPC
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 1755/tcp filtered wms
 1935/tcp filtered rtmp
 2000/tcp filtered callbook
 3000/tcp open http World Client WDaemon httpd 10.0.0
 |_ html-title: WorldClient
 | robots.txt: has 1 disallowed entry
 |_ /
 3389/tcp open microsoft-rdp Microsoft Terminal Service
 4444/tcp filtered krb524
 5060/tcp filtered sip
 7070/tcp filtered realserver
Host script results:
 |_ nbstat: ERROR: Name query failed: TIMEOUT
 Interesting ports on 213.178.246.226:
 Not shown: 997 filtered ports
 PORT STATE SERVICE VERSION
 22/tcp open ssh OpenSSH 3.8.1p1 (protocol 2.0)
 | ssh-hostkey: 1024 0a:22:6c:c8:1f:83:07:46:bd:4d:72:ec:8b:95:22:88 (DSA)
 |_ 1024 77:0c:3e:3b:1d:39:49:b3:99:ad:a1:df:8f:96:d4:e1 (RSA)
 25/tcp closed smtp
 80/tcp open http Microsoft IIS
 |_ html-title: The page cannot be displayed
 Service Info: OS: Windows

 213.178.248.1/24

 Interesting ports on 213.178.248.20:
 Not shown: 999 filtered ports
 PORT STATE SERVICE VERSION
 443/tcp open ssl/http Microsoft IIS webserver 6.0
 |_ html-title: Welcome to Audi On-Line
 Service Info: OS: Windows
 Interesting ports on 213.178.248.32:
 Not shown: 999 filtered ports
 PORT STATE SERVICE VERSION
 80/tcp open http Cisco IOS administrative webserver
 | http-auth: HTTP Service requires authentication
 |_ Auth type: Basic, realm = level 15 access
 |_ html-title: Authorization Required
 Service Info: OS: IOS; Device: switch
 Interesting ports on 213.178.248.69:
 Not shown: 994 filtered ports
 PORT STATE SERVICE VERSION
 25/tcp open smtp Cisco PIX sanitized smtpd
 | smtp-commands: EHLO SVRHO18.BBSF.COM Hello example.org ([88.190.24.19]), pleased to meet you, XXXA, SIZE, PIPELINING
 |_ HELP Enter one of the following commands: HELO EHLO MAIL RCPT DATA RSET NOOP QUIT HELP
 53/tcp closed domain
 80/tcp open http Lotus Domino httpd
 |_ html-title: Site doesn't have a title (text/html; charset=UTF-8).
 110/tcp open pop3 Lotus Domino POP3 server 8.0.2
 |_ pop3-capabilities: USER TOP UIDL
 143/tcp closed imap
 443/tcp open ssl/http Lotus Domino httpd
 |_ html-title: Site doesn't have a title (text/html; charset=UTF-8).
 Service Info: Device: firewall
Interesting ports on 213.178.248.70:
 Not shown: 999 filtered ports
 PORT STATE SERVICE VERSION
 443/tcp open ssl/http Apache httpd 2.2.10 ((Win32) mod_ssl/2.2.10 OpenSSL/0.9.8i PHP/5.2.6)
 |_ sslv2: server still supports SSLv2
 |_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.248.71:
 Not shown: 998 filtered ports
 PORT STATE SERVICE VERSION
 80/tcp open http IBM HTTP Server 6.0 (Derived from Apache 2.0.47; Win32)
 |_ html-title: Redirecting...
 443/tcp open ssl/http IBM HTTP Server 6.0 (Derived from Apache 2.0.47; Win32)
 |_ html-title: BBSF e-banking
 |_ sslv2: server still supports SSLv2
Interesting ports on 213.178.248.73:
 Not shown: 998 filtered ports
 PORT STATE SERVICE VERSION
 80/tcp open http Microsoft IIS webserver 6.0
 | html-title: Document Moved
 |_ Did not follow redirect to https://www.onlinebbsf.com
 443/tcp open ssl/http Microsoft IIS webserver 6.0
 | html-title: ::Online Banking::
 |_ Requested resource was http://213.178.248.73/Default_Ar.aspx?ReturnUrl=%2f
 |_ sslv2: server still supports SSLv2
 Service Info: OS: Windows
Interesting ports on 213.178.248.74:
 Not shown: 998 filtered ports
 PORT STATE SERVICE VERSION
 80/tcp closed http
 8080/tcp closed http-proxy
 Interesting ports on 213.178.248.83:
 Not shown: 999 filtered ports
 PORT STATE SERVICE VERSION
 443/tcp open ssl/http Cisco ASA firewall http config (Cisco AWARE 2.0)
 | html-title: SSL VPN Service
 |_ Requested resource was http://213.178.248.83/+CSCOE+/logon.html
 Service Info: OS: IOS; Device: firewall
Interesting ports on 213.178.248.101:
 Not shown: 973 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 53/tcp open domain Microsoft DNS 6.1.7601
 88/tcp open kerberos-sec Microsoft Windows kerberos-sec
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 389/tcp open ldap
 445/tcp open netbios-ssn
 464/tcp open kpasswd5?
 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0
 636/tcp open ssl/ldap
 |_ sslv2: server still supports SSLv2
 705/tcp open unknown
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 3268/tcp open ldap
 3269/tcp open ssl/ldap
 |_ sslv2: server still supports SSLv2
 3389/tcp open microsoft-rdp Microsoft Terminal Service
 4444/tcp filtered krb524
 5060/tcp filtered sip
 6129/tcp open damewaremr DameWare Mini Remote Control
 49153/tcp open msrpc Microsoft Windows RPC
 49154/tcp open msrpc Microsoft Windows RPC
 49155/tcp open msrpc Microsoft Windows RPC
 49159/tcp open msrpc Microsoft Windows RPC
 49160/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0
 49161/tcp open msrpc Microsoft Windows RPC
 Service Info: OS: Windows
Host script results:
 | smb-os-discovery: Windows Server 2008 R2 Standard 7601 Service Pack 1
 | LAN Manager: Windows Server 2008 R2 Standard 6.1
 | Name: STD\STD-13
 |_ System time: 2012-02-26 17:27:54 UTC+2
 |_ nbstat: ERROR: Name query failed: TIMEOUT
 Interesting ports on 213.178.248.149:
 Not shown: 998 filtered ports
 PORT STATE SERVICE VERSION
 80/tcp open http Microsoft IIS
 |_ html-title: The page cannot be displayed
 443/tcp open ssl/http Microsoft IIS
 |_ html-title: The page cannot be displayed
 |_ sslv2: server still supports SSLv2
 Service Info: OS: Windows
Interesting ports on 213.178.248.150:
 Not shown: 999 filtered ports
 PORT STATE SERVICE VERSION
 80/tcp open http Microsoft IIS
 |_ html-title: The page cannot be displayed
 Service Info: OS: Windows
Interesting ports on 213.178.248.151:
 Not shown: 938 closed ports, 61 filtered ports
 PORT STATE SERVICE VERSION
 1998/tcp open x25-svc-port?
 Interesting ports on 213.178.248.194:
 Not shown: 998 filtered ports
 PORT STATE SERVICE VERSION
 25/tcp open smtp Exim smtpd
 | smtp-commands: EHLO proxy.capmus.iust.edu.sy Hello elmariachi.toonux.com [88.190.24.19], SIZE 52428800, PIPELINING, STARTTLS, HELP
 |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
 443/tcp open ssl/http Apache httpd
 |_ html-title: User Portal
Interesting ports on 213.178.248.230:
 Not shown: 998 filtered ports
 PORT STATE SERVICE VERSION
 25/tcp open smtp Microsoft ESMTP 6.0.3790.4675
 | smtp-commands: EHLO SY00-ExchFE.syria.abs Hello [88.190.24.19], TURN, SIZE 8388608, ETRN, PIPELINING, DSN, ENHANCEDSTATUSCODES, 8bitmime, BINARYMIME, CHUNKING, VRFY, X-EXPS GSSAPI NTLM LOGIN, X-EXPS=LOGIN, AUTH GSSAPI NTLM LOGIN, AUTH=LOGIN, X-LINK2STATE, XEXCH50
 |_ HELP This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH TURN ETRN BDAT VRFY
 443/tcp open ssl/http Microsoft IIS webserver 6.0
 |_ html-title: Under Construction
 |_ sslv2: server still supports SSLv2
 Service Info: Host: SY00-ExchFE.syria.abs; OS: Windows
Interesting ports on 213.178.248.232:
 Not shown: 998 filtered ports
 PORT STATE SERVICE VERSION
 80/tcp open http Oracle Application Server 10g httpd 10.1.2.0.2
 |_ html-title: 403 Forbidden
 443/tcp open ssl/http Oracle Application Server 10g httpd 10.1.2.0.2
 |_ sslv2: server still supports SSLv2
 |_ html-title: 403 Forbidden
Interesting ports on 213.178.248.236:
 Not shown: 999 filtered ports
 PORT STATE SERVICE VERSION
 443/tcp open ssl/http Microsoft IIS
 |_ html-title: The page cannot be displayed
 |_ sslv2: server still supports SSLv2
 Service Info: OS: Windows
Interesting ports on 213.178.248.237:
 Not shown: 989 closed ports
 PORT STATE SERVICE VERSION
 22/tcp filtered ssh
 23/tcp filtered telnet
 49/tcp open tcpwrapped
 135/tcp filtered msrpc
 139/tcp filtered netbios-ssn
 443/tcp open ssl/http Cisco IOS administrative httpd
 | http-auth: HTTP Service requires authentication
 |_ Auth type: Basic, realm = level_15_access
 |_ html-title: Site doesn't have a title.
 1720/tcp filtered H.323/Q.931
 1723/tcp filtered pptp
 2000/tcp filtered callbook
 4444/tcp filtered krb524
 5060/tcp filtered sip
 Service Info: OS: IOS
Interesting ports on 213.178.248.238:
 Not shown: 999 filtered ports
 PORT STATE SERVICE VERSION
 80/tcp open http Netscreen administrative web server (runs Virata-EmWeb/R6_0_1)
 |_ html-title: Login
 Service Info: Device: firewall

213.178.249.1/24

Interesting ports on 213.178.249.13:
Not shown: 994 filtered ports
PORT STATE SERVICE VERSION
80/tcp closed http
161/tcp closed snmp
443/tcp closed https
5666/tcp open tcpwrapped
8080/tcp closed http-proxy
8443/tcp closed https-alt
Interesting ports on 213.178.249.36:
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS webserver 6.0
|_ html-title: :: TICT :: Tartous International Container Termianl - An ICTSI...
110/tcp open pop3 MS Exchange 2003 pop3d 6.5.7638.1
|_ pop3-capabilities: USER EXPIRE(NEVER) UIDL PIPELINING TOP
443/tcp open ssl/http Microsoft IIS webserver 6.0
|_ sslv2: server still supports SSLv2
|_ html-title: :: TICT :: Tartous International Container Termianl - An ICTSI...
Service Info: Host: ICTSISRV09.ICTSI.sy; OS: Windows
Interesting ports on 213.178.249.54:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
Interesting ports on 213.178.249.60:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
Interesting ports on 213.178.249.91:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
All 1000 scanned ports on 213.178.249.97 are closed (959) or filtered (41)
Interesting ports on 213.178.249.98:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Microsoft IIS
|_ html-title: The page cannot be displayed
|_ sslv2: server still supports SSLv2
Service Info: OS: Windows

SCAN DU 213.178.250.1/24

Interesting ports on 213.178.250.33:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS webserver 6.0
|_ html-title: Under Construction
Service Info: OS: Windows
Interesting ports on 213.178.250.41:
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp closed ftp
80/tcp open http Apache httpd 2.2.0 ((Win32) DAV/2 mod_ssl/2.2.0 OpenSSL/0.9.8a mod_autoindex_color PHP/5.1.2)
|_ html-title: Site doesn't have a title (text/html).
443/tcp open ssl/http Apache httpd 2.2.0 ((Win32) DAV/2 mod_ssl/2.2.0 OpenSSL/0.9.8a mod_autoindex_color PHP/5.1.2)
|_ html-title: Site doesn't have a title (text/html).
|_ sslv2: server still supports SSLv2
3389/tcp open microsoft-rdp Microsoft Terminal Service
Service Info: OS: Windows
Interesting ports on 213.178.250.44:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.16 ((Debian))
|_ html-title: Site doesn't have a title (text/html; charset=utf-8).
Interesting ports on 213.178.250.70:
Not shown: 990 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
80/tcp open http Cisco IOS administrative httpd
|_ html-title: Site doesn't have a title.
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15_access
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Service Info: OS: IOS
Interesting ports on 213.178.250.79:
Not shown: 853 filtered ports, 145 closed ports
PORT STATE SERVICE VERSION
445/tcp open microsoft-ds?
3389/tcp open ms-term-serv?
Host script results:
|_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.250.80:
Not shown: 989 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
445/tcp open tcpwrapped
1110/tcp open tcpwrapped
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Host script results:
|_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.250.120:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Microsoft IIS webserver 6.0
| html-title: BSO Online
|_ Requested resource was http://213.178.250.120/index.aspx?ReturnUrl=%2fDefault.aspx
Service Info: OS: Windows
Interesting ports on 213.178.250.125:
Not shown: 990 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
80/tcp open http Cisco IOS administrative httpd
|_ html-title: Site doesn't have a title.
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15_access
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Service Info: OS: IOS
Interesting ports on 213.178.250.153:
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS webserver 7.5
| html-title: Document Moved
|_ Did not follow redirect to https://ebanking.chambank.com/iBanking/
443/tcp open ssl/http Microsoft IIS webserver 7.5
|_ sslv2: server still supports SSLv2
| html-title: Document Moved
|_ Did not follow redirect to https://ebanking.chambank.com/iBanking/
Service Info: OS: Windows
Interesting ports on 213.178.250.154:
Not shown: 994 filtered ports
PORT STATE SERVICE VERSION
25/tcp open smtp Postfix smtpd
|_ smtp-commands: EHLO dns1.chambank.sy, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, AUTH PLAIN LOGIN, AUTH=PLAIN LOGIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN
53/tcp open domain ISC BIND 9.7.3
80/tcp open http nginx web server 1.0.12
|_ html-title: Requested resource was http://www.chambank.sy/ and no page was returned.
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING LOGIN-DELAY(10) TOP
143/tcp open imap Courier Imapd (released 2011)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp open tcpwrapped
Service Info: Host: dns1.chambank.sy
Interesting ports on 213.178.250.214:
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 1.3.34 ((Unix) mod_ssl/2.8.25 OpenSSL/0.9.7e)
|_ html-title: Site doesn't have a title (text/html; charset=UTF-8).
898/tcp closed sun-manageconsole
5631/tcp closed pcanywheredata
6002/tcp closed X11:2
Interesting ports on 213.178.250.225:
Not shown: 990 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
443/tcp open ssl/http Cisco IOS administrative httpd
|_ html-title: Site doesn't have a title.
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15 or view_access
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Service Info: OS: IOS
Interesting ports on 213.178.250.242:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Microsoft IIS webserver 6.0
|_ html-title: SIIB Online
Service Info: OS: Windows
Interesting ports on 213.178.250.243:
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Microsoft IIS
|_ sslv2: server still supports SSLv2
|_ html-title: The page cannot be displayed
995/tcp open ssl/pop3
|_ pop3-capabilities: USER EXPIRE(1800 SECONDS) UIDL TOP SASL(GSSAPI)

 213.178.251.1/24

Interesting ports on 213.178.251.1:
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Microsoft IIS webserver 6.0
|_ sslv2: server still supports SSLv2
|_ html-title: Under Construction
3389/tcp open microsoft-rdp Microsoft Terminal Service
3390/tcp open microsoft-rdp Microsoft Terminal Service
Service Info: OS: Windows
Interesting ports on 213.178.251.20:
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
53/tcp open domain Microsoft DNS
80/tcp open http Microsoft IIS webserver 6.0
| html-title: Login
|_ Requested resource was http://213.178.251.20/Login.aspx?ReturnUrl=%2fDefault.aspx
443/tcp closed https
2222/tcp closed unknown
3389/tcp open microsoft-rdp Microsoft Terminal Service
Service Info: OS: Windows
Interesting ports on 213.178.251.22:
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS webserver 7.5
|_ html-title: 403 - Forbidden: Access is denied.
443/tcp open ssl/http Microsoft IIS webserver 7.5
|_ sslv2: server still supports SSLv2
|_ html-title: 401 - Unauthorized: Access is denied due to invalid credentials.
Service Info: OS: Windows
Interesting ports on 213.178.251.50:
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
21/tcp open ftp Microsoft ftpd
587/tcp open smtp Exim smtpd
| smtp-commands: EHLO proxy.capmus.iust.edu.sy Hello 88-191-90-106.rev.dedibox.fr [88.191.90.106], SIZE 52428800, PIPELINING, STARTTLS, HELP
|_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
Service Info: OS: Windows
Interesting ports on 213.178.251.51:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
587/tcp open smtp Exim smtpd
| smtp-commands: EHLO proxy.capmus.iust.edu.sy Hello 88-191-90-106.rev.dedibox.fr [88.191.90.106], SIZE 52428800, PIPELINING, STARTTLS, HELP
|_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
Interesting ports on 213.178.251.52:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
587/tcp open smtp Exim smtpd
| smtp-commands: EHLO proxy.capmus.iust.edu.sy Hello 88-191-90-106.rev.dedibox.fr [88.191.90.106], SIZE 52428800, PIPELINING, STARTTLS, HELP
|_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
Interesting ports on 213.178.251.60:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
587/tcp open smtp Exim smtpd
| smtp-commands: EHLO proxy.capmus.iust.edu.sy Hello 88-191-90-106.rev.dedibox.fr [88.191.90.106], SIZE 52428800, PIPELINING, STARTTLS, HELP
|_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
Interesting ports on 213.178.251.66:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Cisco Adaptive Security Appliance http config
| html-title: Cisco ASDM 6.2(3)
|_ Requested resource was http://213.178.251.66/admin/public/index.html
Service Info: Device: security-misc
Interesting ports on 213.178.251.97:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS webserver 6.0
| html-title: Document Moved
|_ Requested resource was http://213.178.251.97/reb
Service Info: OS: Windows
Interesting ports on 213.178.251.100:
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
443/tcp open ssl/http Microsoft IIS webserver 6.0
|_ sslv2: server still supports SSLv2
| html-title: Document Moved
|_ Requested resource was http://213.178.251.100/EBank
Service Info: OS: Windows
Interesting ports on 213.178.251.109:
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS webserver 5.1
|_ html-title: Under Construction
443/tcp open https?
3389/tcp open microsoft-rdp Microsoft Terminal Service
Service Info: OS: Windows
Interesting ports on 213.178.251.129:
Not shown: 711 closed ports, 288 filtered ports
PORT STATE SERVICE VERSION
1998/tcp open x25-svc-port?
Interesting ports on 213.178.251.177:
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
25/tcp open smtp Microsoft ESMTP
110/tcp open pop3 MS Exchange 2007 pop3d
|_ pop3-capabilities: TOP UIDL
443/tcp open ssl/http Microsoft IIS webserver 6.0
|_ html-title: Under Construction
|_ sslv2: server still supports SSLv2
Service Info: Host: mainserver.sskoc.com; OS: Windows
Interesting ports on 213.178.251.185:
Not shown: 990 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
443/tcp open ssl/http Cisco IOS administrative httpd
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15_access
|_ html-title: Site doesn't have a title.
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Service Info: OS: IOS
Interesting ports on 213.178.251.189:
Not shown: 706 closed ports, 291 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Cisco IOS administrative httpd
|_ html-title: Site doesn't have a title.
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15 or view_access
443/tcp open ssl/http Cisco IOS administrative httpd
|_ html-title: Site doesn't have a title.
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15 or view_access
5061/tcp open tcpwrapped
Service Info: OS: IOS
Interesting ports on 213.178.251.200:
Not shown: 988 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
80/tcp open http Cisco IOS administrative httpd
|_ html-title: Site doesn't have a title.
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15_access
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
444/tcp filtered snpp
1218/tcp filtered aeroflight-ads
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Service Info: OS: IOS

213.178.252.1/24

Interesting ports on 213.178.252.77:
Not shown: 989 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
80/tcp open http Cisco IOS administrative httpd
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15 or view_access
|_ html-title: Site doesn't have a title.
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
443/tcp open ssl/http Cisco IOS administrative httpd
|_ html-title: Site doesn't have a title.
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15 or view_access
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Service Info: OS: IOS
Interesting ports on 213.178.252.105:
Not shown: 990 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
80/tcp open http Cisco IOS administrative httpd
|_ html-title: Site doesn't have a title.
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15_access
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Service Info: OS: IOS
Interesting ports on 213.178.252.106:
Not shown: 988 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
445/tcp open microsoft-ds Microsoft Windows XP microsoft-ds
1433/tcp filtered ms-sql-s
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
3389/tcp open microsoft-rdp Microsoft Terminal Service
4444/tcp filtered krb524
5060/tcp filtered sip
Service Info: OS: Windows
Host script results:
|_ nbstat: ERROR: Name query failed: TIMEOUT
| smb-os-discovery: Windows XP
| LAN Manager: Windows 2000 LAN Manager
| Name: MSHOME\ESYRIA-5988D3E2
|_ System time: 2012-02-26 18:55:35 UTC+2
Interesting ports on 213.178.252.161:
Not shown: 990 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
80/tcp open http Cisco IOS administrative httpd
|_ html-title: Site doesn't have a title.
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15_access
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Service Info: OS: IOS
Interesting ports on 213.178.252.227:
Not shown: 981 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
445/tcp open netbios-ssn
1688/tcp open msrpc Microsoft Windows RPC
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
2869/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
|_ html-title: Service Unavailable
4444/tcp filtered krb524
5060/tcp filtered sip
5357/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
|_ html-title: Service Unavailable
49152/tcp open msrpc Microsoft Windows RPC
49153/tcp open msrpc Microsoft Windows RPC
49154/tcp open msrpc Microsoft Windows RPC
49156/tcp open msrpc Microsoft Windows RPC
49157/tcp open msrpc Microsoft Windows RPC
49158/tcp open msrpc Microsoft Windows RPC
Service Info: OS: Windows
Host script results:
| smb-os-discovery: Windows 7 Ultimate 7601 Service Pack 1
| LAN Manager: Windows 7 Ultimate 6.1
| Name: WORKGROUP\RECEPTION-PC
|_ System time: 2012-02-26 18:53:32 UTC+2
|_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.252.230:
Not shown: 983 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
80/tcp open http gSOAP httpd 2.7
|_ html-title: HP LaserJet CM1415fn   213.178.252.230

http://213.178.252.230/info_config_network.html?tab=Networking&menu=NetConfig

135/tcp filtered msrpc
139/tcp filtered netbios-ssn
515/tcp open printer
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
8080/tcp open http gSOAP httpd 2.7
|_ html-title: HP LaserJet CM1415fn   213.178.252.230
8291/tcp open unknown
8292/tcp open unknown
8888/tcp open sun-answerbook?
9100/tcp open jetdirect?
9999/tcp open abyss?
Interesting ports on 213.178.252.231:
Not shown: 990 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
80/tcp open http Router with realtek 8181 chipset http config (GoAhead-Webs embedded httpd)
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Service Info: Device: router

 213.178.253.1/24

PORT STATE SERVICE VERSION
53/tcp open domain Microsoft DNS
80/tcp open http Microsoft IIS webserver 6.0
|_ html-title: Under Construction
389/tcp open ldap
445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds
464/tcp open kpasswd5?
593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0
636/tcp open tcpwrapped
1026/tcp open msrpc Microsoft Windows RPC
1027/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0
1045/tcp open msrpc Microsoft Windows RPC
1050/tcp open msrpc Microsoft Windows RPC
3389/tcp open microsoft-rdp Microsoft Terminal Service
5800/tcp open vnc-http RealVNC 4.0 (Resolution 400x250; VNC TCP port: 5900)
5900/tcp open vnc VNC (protocol 3.8)
Service Info: OS: Windows
Host script results:
|_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.253.34:
Not shown: 562 closed ports, 435 filtered ports
PORT STATE SERVICE VERSION
21/tcp open ftp vsftpd 2.0.4
|_ ftp-anon: Anonymous FTP login allowed
80/tcp open http Apache httpd 2.2.9 ((Unix) mod_ssl/2.2.9 OpenSSL/0.9.8a PHP/5.2.6)
| html-title: POS
|_ Requested resource was http://213.178.253.34/pos/
111/tcp open rpcbind
| rpcinfo:
| 100000 2 111/udp rpcbind
| 100024 1 32768/udp status
| 100000 2 111/tcp rpcbind
|_ 100024 1 58437/tcp status
Service Info: OS: Unix
Interesting ports on 213.178.253.35:
Not shown: 973 closed ports
PORT STATE SERVICE VERSION
21/tcp open ftp vsftpd 1.1.0
|_ ftp-anon: Anonymous FTP login allowed
22/tcp filtered ssh
23/tcp filtered telnet
25/tcp open smtp Communigate Pro SMTP 4.1.8
80/tcp open http CommuniGate Pro httpd 4.1.8
|_ html-title: CommuniGate Pro Entrance: Unknown Domain
106/tcp open pop3pw CommuniGate Pro pop3 password change daemon 4.1.8
110/tcp open pop3 CommuniGate Pro 4.1.8
|_ pop3-capabilities: USER IMPLEMENTATION(CommuniGatePro) UIDL APOP TOP STLS PIPELINING LAST SASL(LOGIN PLAIN CRAM-MD5 DIGEST-MD5 MSN)
111/tcp open rpcbind
| rpcinfo:
| 100000 2 111/udp rpcbind
| 100024 1 32768/udp status
| 100000 2 111/tcp rpcbind
| 100024 1 32768/tcp status
|_ 391002 2 32771/tcp sgi_fam
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
143/tcp open imap CommuniGate Pro imapd waseela.aleppo.sc.db
|_ imap-capabilities: LOGIN-REFERRALS QUOTA STARTTLS LISTEXT AUTH=LOGIN ID AUTH=DIGEST-MD5 CHILDREN BINARY IMAP4REV1 IMAP4 AUTH=MSN UIDPLUS AUTH=CRAM-MD5 AUTH=PLAIN ACL LITERAL+ IDLE NAMESPACE MULTIAPPEND
389/tcp open ldap (Anonymous bind OK)
636/tcp open ssl/ldap (Anonymous bind OK)
993/tcp open ssl/imap CommuniGate Pro imapd waseela.aleppo.sc.db
|_ imap-capabilities: LOGIN-REFERRALS QUOTA AUTH=PLAIN LISTEXT AUTH=LOGIN ID AUTH=DIGEST-MD5 CHILDREN BINARY IMAP4REV1 IMAP4 AUTH=MSN UIDPLUS AUTH=CRAM-MD5 ACL LITERAL+ IDLE NAMESPACE MULTIAPPEND
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
3050/tcp open firebird Firebird RDBMS Protocol version 10
4444/tcp filtered krb524
5060/tcp filtered sip
6000/tcp open X11 (access denied)
8010/tcp open http CommuniGate Pro httpd 4.1.8
|_ html-title: CommuniGate Pro waseela.aleppo.sc.db Setup
8021/tcp open ftp Communigate Pro ftpd 4.1.8
8100/tcp open http CommuniGate Pro httpd 4.1.8
|_ html-title: CommuniGate Pro Entrance: Unknown Domain
9010/tcp open ssl/http CommuniGate Pro httpd 4.1.8
|_ html-title: CommuniGate Pro waseela.aleppo.sc.db Setup
9100/tcp open jetdirect?
32768/tcp open rpcbind
Service Info: Hosts: waseela.aleppo.sc.db, 4.1.8; OS: Unix
Interesting ports on 213.178.253.89:
Not shown: 526 closed ports, 473 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Cisco IOS administrative httpd
|_ html-title: Site doesn't have a title.
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15_access
Service Info: OS: IOS
All 1000 scanned ports on 213.178.253.90 are filtered
Interesting ports on 213.178.253.97:
Not shown: 574 filtered ports, 425 closed ports
PORT STATE SERVICE VERSION
80/tcp open http Cisco IOS administrative httpd
|_ html-title: Site doesn't have a title.
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15_access
Service Info: OS: IOS
Interesting ports on 213.178.253.98:
Not shown: 974 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Mathopd httpd 1.1
|_ html-title: User Configuration Interface
443/tcp open ssl/https?
|_ html-title: Site doesn't have a title (text/html).
10002/tcp closed unknown
10003/tcp closed unknown
10004/tcp closed unknown
10082/tcp closed amandaidx
10180/tcp closed unknown
11110/tcp closed unknown
12000/tcp closed cce4x
12174/tcp closed unknown
13456/tcp closed unknown
13783/tcp closed netbackup
14441/tcp closed unknown
14442/tcp closed unknown
15004/tcp closed unknown
15742/tcp closed unknown
16018/tcp closed unknown
17988/tcp closed unknown
18988/tcp closed unknown
19801/tcp closed unknown
19842/tcp closed unknown
20005/tcp closed btx
20031/tcp closed unknown
24444/tcp closed unknown
25735/tcp closed unknown
27352/tcp closed unknown
Interesting ports on 213.178.253.105:
Not shown: 990 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
80/tcp open http Cisco IOS administrative httpd
|_ html-title: Site doesn't have a title.
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15_access
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Service Info: OS: IOS
Interesting ports on 213.178.253.106: ----> Net Management SHERATON hotel
Not shown: 729 closed ports, 259 filtered ports
PORT STATE SERVICE VERSION
25/tcp open smtp Microsoft ESMTP 6.0.2600.5512
| smtp-commands: EHLO ZYXEL Hello [88.191.90.106], SIZE 2097152, PIPELINING, DSN, ENHANCEDSTATUSCODES, 8bitmime, BINARYMIME, CHUNKING, VRFY
|_ HELP This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH BDAT VRFY
80/tcp open http Microsoft IIS webserver 5.1
|_ html-title: Under Construction
443/tcp open https?
445/tcp open microsoft-ds Microsoft Windows XP microsoft-ds
1025/tcp open msrpc Microsoft Windows RPC
1035/tcp open multidropper?
1036/tcp open apc-agent APC PowerChute agent
1038/tcp open apc-agent APC PowerChute agent
3389/tcp open microsoft-rdp Microsoft Terminal Service
8089/tcp open unknown
8090/tcp open http Apache Tomcat/Coyote JSP engine 1.1
|_ html-title: ManageEngine ServiceDesk Plus
19780/tcp open unknown
Host script results:
|_ nbstat: ERROR: Name query failed: TIMEOUT
| smb-os-discovery: Windows XP
| LAN Manager: Windows 2000 LAN Manager
| Name: WORKGROUP\ZYXEL
|_ System time: 2012-02-26 19:31:11 UTC+2
Interesting ports on 213.178.253.137:
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS webserver 6.0
|_ html-title: Under Construction
7001/tcp open http WebLogic httpd
|_ html-title: Error 404--Not Found
Service Info: OS: Windows
Interesting ports on 213.178.253.140:
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
25/tcp open smtp Microsoft ESMTP 6.0.3790.3959
110/tcp open tcpwrapped
443/tcp open ssl/http Microsoft IIS webserver 6.0
|_ sslv2: server still supports SSLv2
|_ html-title: Under Construction
Service Info: Host: opcdaex02.opc.com; OS: Windows
Interesting ports on 213.178.253.185:
Not shown: 628 filtered ports, 371 closed ports
PORT STATE SERVICE VERSION
23/tcp open telnet Cisco router
Service Info: OS: IOS; Device: router
Interesting ports on 213.178.253.196:
Not shown: 905 closed ports, 92 filtered ports
PORT STATE SERVICE VERSION
53/tcp open domain ISC BIND DNS
80/tcp open http Microsoft IIS
|_ html-title: The page cannot be displayed
443/tcp open ssl/https?
| html-title: Barracuda Link Balancer: Welcome
|_ Requested resource was https://213.178.253.196/cgi-mod/index.cgi
|_ sslv2: server still supports SSLv2
Interesting ports on 213.178.253.197:
Not shown: 859 closed ports, 139 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
| robots.txt: has 1 disallowed entry
|_ /
| html-title: Barracuda Link Balancer: Welcome
|_ Requested resource was http://213.178.253.197/cgi-mod/index.cgi
443/tcp open ssl/https?
|_ sslv2: server still supports SSLv2
| html-title: Barracuda Link Balancer: Welcome
|_ Requested resource was https://213.178.253.197/cgi-mod/index.cgi
Interesting ports on 213.178.253.226:
Not shown: 645 closed ports, 335 filtered ports
PORT STATE SERVICE VERSION
25/tcp open smtp Microsoft ESMTP
53/tcp open domain Microsoft DNS 6.1.7600
80/tcp open http Microsoft IIS webserver 7.5
|_ html-title: 403 - Forbidden: Access is denied.
88/tcp open kerberos-sec Microsoft Windows kerberos-sec
110/tcp open pop3 MS Exchange 2007 pop3d
|_ pop3-capabilities: USER STLS UIDL TOP SASL(NTLM GSSAPI PLAIN)
443/tcp open ssl/http Microsoft IIS webserver 7.5
|_ html-title: IIS7
|_ sslv2: server still supports SSLv2
445/tcp open netbios-ssn
464/tcp open kpasswd5?
587/tcp open smtp Microsoft ESMTP
593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0
625/tcp open smtp Microsoft ESMTP
808/tcp open ccproxy-http?
995/tcp open ssl/pop3 MS Exchange 2007 pop3d
|_ pop3-capabilities: USER SASL(NTLM GSSAPI PLAIN) TOP UIDL
2301/tcp open http HP Proliant System Management 6.1.0.102 (CompaqHTTPServer 9.9)
| html-title: HP System Management Homepage
|_ Requested resource was http://213.178.253.226/red2301.html?RedirectUrl=/
3268/tcp open ldap
3269/tcp open ssl/ldap
|_ sslv2: server still supports SSLv2
3389/tcp open microsoft-rdp Microsoft Terminal Service
6001/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0
6002/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0
6004/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0
Service Info: Host: ns-fpm01.nourship.local; OS: Windows
Host script results:
|_ nbstat: ERROR: Name query failed: TIMEOUT
| smb-os-discovery: Windows Server 2008 R2 Enterprise 7600
| LAN Manager: Windows Server 2008 R2 Enterprise 6.1
| Name: NOURSHIP\NS-FPM01
|_ System time: 2012-02-26 19:33:02 UTC+2

213.178.254.1/24

Interesting ports on 213.178.254.65:
Not shown: 990 closed ports
PORT STATE SERVICE VERSION
22/tcp open ssh Cisco SSH 1.25 (protocol 2.0)
|_ ssh-hostkey: 1024 ce:6e:27:1f:06:6d:fa:75:14:dc:6a:ba:c0:e2:01:db (RSA)
80/tcp open http Cisco IOS administrative httpd
|_ html-title: Site doesn't have a title.
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15 or view_access
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
443/tcp open ssl/http Cisco IOS administrative httpd
|_ html-title: Site doesn't have a title.
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15 or view_access
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Service Info: OS: IOS
Interesting ports on 213.178.254.97:
Not shown: 990 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
80/tcp open http Cisco IOS administrative httpd
|_ html-title: Site doesn't have a title.
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15_access
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Service Info: OS: IOS
Interesting ports on 213.178.254.242:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Microsoft IIS
|_ html-title: The page cannot be displayed
|_ sslv2: server still supports SSLv2
Service Info: OS: Windows
Interesting ports on 213.178.254.243:
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Microsoft IIS
|_ sslv2: server still supports SSLv2
|_ html-title: The page cannot be displayed
3389/tcp open microsoft-rdp Microsoft Terminal Service
Service Info: OS: Windows
Interesting ports on 213.178.254.244:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Microsoft IIS
|_ html-title: The page cannot be displayed
|_ sslv2: server still supports SSLv2
Service Info: OS: Windows
Interesting ports on 213.178.254.245:
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Microsoft IIS
|_ sslv2: server still supports SSLv2
|_ html-title: The page cannot be displayed
3389/tcp open microsoft-rdp Microsoft Terminal Service
Service Info: OS: Windows
Interesting ports on 213.178.254.246:
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
25/tcp open smtp Microsoft ESMTP 6.0.3790.1830
| smtp-commands: EHLO mailserver.arabia.sy Hello [88.190.24.19], TURN, SIZE, ETRN, PIPELINING, DSN, ENHANCEDSTATUSCODES, 8bitmime, BINARYMIME, CHUNKING, VRFY, X-EXPS GSSAPI NTLM LOGIN, X-EXPS=LOGIN, AUTH GSSAPI NTLM LOGIN, AUTH=LOGIN, X-LINK2STATE, XEXCH50
|_ HELP This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH TURN ETRN BDAT VRFY
143/tcp open imap Microsoft Exchange Server 2003 imapd 6.5.6944.0
|_ imap-capabilities: LOGIN-REFERRALS IMAP4 AUTH=NTLM IMAP4rev1 MAILBOX-REFERRALS UIDPLUS LITERAL+ IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Microsoft IIS
|_ html-title: The page cannot be displayed
|_ sslv2: server still supports SSLv2
Service Info: Host: mailserver.arabia.sy; OS: Windows

213.178.225.1/24

Interesting ports on shmail.scs-net.org (213.178.225.17):
Not shown: 993 filtered ports
PORT STATE SERVICE VERSION
25/tcp closed smtp
80/tcp open http Apache httpd
|_ html-title: Site doesn't have a title (text/html).
110/tcp closed pop3
143/tcp closed imap
993/tcp closed imaps
995/tcp closed pop3s
8443/tcp open ssl/https-alt?
|_ html-title: Site doesn't have a title (text/html).
Interesting ports on mailhosting1.scs-net.org (213.178.225.24):
Not shown: 993 filtered ports
PORT STATE SERVICE VERSION
25/tcp open smtp Postfix smtpd
|_ smtp-commands: EHLO mailhosting1.scs-net.org, PIPELINING, SIZE 15728640, ETRN, STARTTLS, AUTH LOGIN CRAM-MD5 DIGEST-MD5 PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN
80/tcp open http Apache httpd 2.2.3 ((CentOS))
|_ html-title: Default Parallels Plesk Panel Page
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10)
143/tcp open imap Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
993/tcp open ssl/imap Courier Imapd (released 2004)
|_ sslv2: server still supports SSLv2
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA AUTH=PLAIN THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
995/tcp open ssl/pop3 Courier pop3d
|_ sslv2: server still supports SSLv2
|_ pop3-capabilities: USER IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP LOGIN-DELAY(10) TOP
8443/tcp open ssl/https-alt?
|_ html-title: Site doesn't have a title (text/html).
Service Info: Hosts: mailhosting1.scs-net.org, localhost.localdomain
Interesting ports on 213.178.225.35:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 1.3.33 ((Win32) PHP/5.0.5)
|_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.225.38:
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS webserver 6.0
|_ html-title: Under Construction
443/tcp open ssl/http Microsoft IIS webserver 6.0
|_ sslv2: server still supports SSLv2
|_ html-title: Under Construction
Service Info: OS: Windows
Interesting ports on 213.178.225.39:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
| robots.txt: has 11 disallowed entries
| admin.php config header footer pntables referer /images
|_ /includes /modules/NS- /pnadodb /themes-----------> reperdoires indexés (taper un wget dedans)
|_ html-title: ALOOLA :: At your service
Interesting ports on 213.178.225.41:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS webserver 6.0
| html-title: \xD8\xA7\xD9\x84\xD8\xB1\xD8\xA6\xD9\x8A\xD8\xB3\xD9\x8A\xD8\xA9
|_ Requested resource was http://213.178.225.41/portal/
Service Info: OS: Windows
Interesting ports on 213.178.225.42:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS webserver 6.0
| html-title: \xD8\xA7\xD9\x84\xD8\xB1\xD8\xA6\xD9\x8A\xD8\xB3\xD9\x8A\xD8\xA9
|_ Requested resource was http://213.178.225.42/portal/
Service Info: OS: Windows
Interesting ports on webmail2.scs-net.org (213.178.225.43):
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.3 ((Debian) mod_python/3.2.10 Python/2.4.4 PHP/5.2.0-8+etch10 mod_perl/2.0.2 Perl/v5.8.8)
|_ html-title: Login to @Mail
Interesting ports on webmail3.scs-net.org (213.178.225.44):
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.9 ((Debian) PHP/5.2.6-1+lenny13 with Suhosin-Patch mod_perl/2.0.4 Perl/v5.10.0)
|_ html-title: SCS-Net 6.3.5 - Login Page
Interesting ports on webmail.scs-net.org (213.178.225.45):
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.3 ((Debian) mod_python/3.2.10 Python/2.4.4 PHP/5.2.0-8+etch10 mod_perl/2.0.2 Perl/v5.8.8)
|_ html-title: Login to @Mail
Interesting ports on scs-net.org (213.178.225.50):
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS webserver 6.0
| html-title: Error
|_ Requested resource was http://213.178.225.50/portal/
Service Info: OS: Windows
Interesting ports on 213.178.225.57:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.3 ((CentOS))
| html-title: 404 Not Found
|_ Requested resource was http://213.178.225.57/hspc/index.php
Interesting ports on 213.178.225.58:
Not shown: 990 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
80/tcp open http Apache httpd 2.2.14 ((Ubuntu))
|_ html-title: 404 Not Found
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Interesting ports on 213.178.225.67:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.3 ((Fedora))
| html-title: 404 Not Found
|_ Requested resource was http://213.178.225.67/hspc/index.php
Interesting ports on 213.178.225.71:
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp closed ftp
80/tcp open http Apache httpd 2.2.3 ((CentOS))
|_ html-title: Default Parallels Plesk Panel Page
443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS))
|_ sslv2: server still supports SSLv2
|_ html-title: Default Parallels Plesk Panel Page
8443/tcp open ssl/https-alt?
|_ html-title: Site doesn't have a title (text/html).
Interesting ports on testlat.scs-net.org (213.178.225.72):
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp Microsoft ftpd
80/tcp open http Microsoft IIS webserver 7.5
|_ html-title: Default Parallels Plesk Panel Page
443/tcp closed https
8443/tcp open ssl/http Microsoft IIS webserver 7.5
|_ html-title: Site doesn't have a title (text/html).
|_ sslv2: server still supports SSLv2
Service Info: OS: Windows
Interesting ports on organon-sy.com (213.178.225.76):
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp Microsoft ftpd
80/tcp open http Microsoft IIS webserver 6.0
|_ html-title: Default PLESK Page
443/tcp closed https
8443/tcp open ssl/http Microsoft IIS webserver 6.0
|_ html-title: Site doesn't have a title (text/html).
|_ sslv2: server still supports SSLv2
Service Info: OS: Windows
Interesting ports on 213.178.225.83:
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp ProFTPD 1.3.2e
80/tcp open http Apache httpd
|_ html-title: Default Parallels Plesk Panel Page
443/tcp closed https
8443/tcp open ssl/https-alt?
|_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.225.88:
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
21/tcp open ftp Microsoft ftpd
80/tcp open http Microsoft IIS webserver 7.5
|_ html-title: Default Parallels Plesk Panel Page
443/tcp open ssl/http Microsoft IIS webserver 7.5
|_ sslv2: server still supports SSLv2
|_ html-title: Domain Default page
8443/tcp open ssl/http Microsoft IIS webserver 7.5
|_ html-title: Site doesn't have a title (text/html).
|_ sslv2: server still supports SSLv2
Service Info: OS: Windows
Interesting ports on 213.178.225.94:
Not shown: 991 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Interesting ports on 213.178.225.99:
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
25/tcp open smtp Microsoft ESMTP
80/tcp open http Microsoft IIS webserver 7.5
|_ html-title: 403 - Forbidden: Access is denied.
443/tcp open ssl/http Microsoft IIS webserver 7.5
|_ sslv2: server still supports SSLv2
|_ html-title: IIS7
Service Info: Host: STAFFMAIL.scs-net.local; OS: Windows
Interesting ports on 213.178.225.100:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS webserver 6.0
|_ html-title: Error
Service Info: OS: Windows
Interesting ports on 213.178.225.101:
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Dedicated Micros Digital Sprite 2 DVR http config (ADH-Web httpd)
|_ html-title: Site doesn't have a title (text/html; charset=utf-8).
1025/tcp closed NFS-or-IIS
Service Info: Device: media device
Interesting ports on 213.178.225.102:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open tcpwrapped
Interesting ports on 213.178.225.103:
Not shown: 707 closed ports, 281 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS webserver 6.0
|_ html-title: Under Construction
81/tcp open http Microsoft IIS httpd
443/tcp open https?
444/tcp open ssl/http Microsoft IIS httpd
|_ html-title: Site doesn't have a title (text/html).
|_ sslv2: server still supports SSLv2
445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds
1044/tcp open msrpc Microsoft Windows RPC
1052/tcp open msrpc Microsoft Windows RPC
1801/tcp open unknown
2103/tcp open msrpc Microsoft Windows RPC
2105/tcp open msrpc Microsoft Windows RPC
2107/tcp open msrpc Microsoft Windows RPC
3389/tcp open microsoft-rdp Microsoft Terminal Service
Service Info: OS: Windows
Host script results:
| smb-os-discovery: Windows Server 2003 R2 3790 Service Pack 2
| LAN Manager: Windows Server 2003 R2 5.2
| Name: SCS-NET\OCSSRV
|_ System time: 2012-02-26 20:24:35 UTC+2
|_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.225.107:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.12 ((Ubuntu))
|_ html-title: 404 Not Found
Interesting ports on 213.178.225.131:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp ProFTPD 1.3.3c
25/tcp open smtp qmail smtpd
| smtp-commands: EHLO syrianedu.scs-net.org, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME
|_ HELP qmail home page: http://pobox.com/~djb/qmail.html
80/tcp open http Apache httpd 2.2.3 ((CentOS))
|_ html-title: Default Parallels Plesk Panel Page
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10)
143/tcp open imap Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS))
|_ html-title: Default Parallels Plesk Panel Page
|_ sslv2: server still supports SSLv2
8443/tcp open ssl/https-alt?
|_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.225.133:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp ProFTPD
25/tcp open smtp Postfix smtpd
|_ smtp-commands: EHLO syriabook.scs-net.org, PIPELINING, SIZE 10240000, ETRN, STARTTLS, AUTH LOGIN CRAM-MD5 DIGEST-MD5 PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN
80/tcp open http Apache httpd
| robots.txt: has 2 disallowed entries
|_ /include/ /theme/
|_ html-title: Default Parallels Plesk Panel Page
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER IMPLEMENTATION(Courier Mail Server) UIDL APOP TOP STLS PIPELINING LOGIN-DELAY(10) SASL(LOGIN CRAM-MD5 PLAIN)
143/tcp open imap Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS AUTH=PLAIN THREAD=REFERENCES ACL2=UNION UIDPLUS ACL SORT IMAP4rev1 AUTH=CRAM-MD5 IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Apache httpd
|_ html-title: Default Parallels Plesk Panel Page
| robots.txt: has 2 disallowed entries
|_ /include/ /theme/
8443/tcp open ssl/https-alt?
|_ html-title: Site doesn't have a title (text/html).
Service Info: Hosts: 192.168.11.110, syriabook.scs-net.org, localhost.localdomain; OS: Unix
Interesting ports on 213.178.225.135:
Not shown: 991 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp closed ftp
25/tcp closed smtp
80/tcp open http Microsoft IIS webserver 6.0
|_ html-title: Under Construction
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
1433/tcp open ms-sql-s Microsoft SQL Server 2008
8443/tcp closed https-alt
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at http://www.insecure.org/cgi-bin/servicefp-submit.cgi :
SF-Port1433-TCP:V=5.00%I=7%D=2/26%Time=4F4A85DD%P=x86_64-unknown-linux-gnu
SF:%r(ms-sql-s,25,"\x04\x01\0%\0\0\x01\0\0\0\x15\0\x06\x01\0\x1b\0\x01\x02
SF:\0\x1c\0\x01\x03\0\x1d\0\0\xff\n2\x06@\0\0\0\0");
Service Info: OS: Windows
Interesting ports on 213.178.225.138:
Not shown: 994 filtered ports
PORT STATE SERVICE VERSION
21/tcp open ftp Microsoft ftpd
25/tcp open smtp MailEnable smptd 5.10--
|_ smtp-commands: EHLO home [88.190.24.19], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN
80/tcp open http Microsoft IIS webserver 7.5
| html-title: \xD8\xA7\xD9\x84\xD9\x81\xD8\xB6\xD8\xA7\xD8\xA6\xD9\x8A\xD8\xA9 \xD8\xA7\xD9\x84\xD8\xAA\xD8\xB1\xD8\xA8\xD9\x88\xD9\x8A\xD8\xA9
|_ Requested resource was http://213.178.225.138/ETVPortalWebSite/ETVHomePage.aspx
110/tcp open pop3 MailEnable POP3 Server
|_ pop3-capabilities: USER TOP UIDL
143/tcp open imap MailEnable imapd
|_ imap-capabilities: IMAP4rev1 IMAP4 CHILDREN IDLE AUTH=LOGIN AUTH=CRAM-MD5
8443/tcp open ssl/http Microsoft IIS webserver 7.5
|_ html-title: Site doesn't have a title (text/html).
|_ sslv2: server still supports SSLv2
Service Info: Host: WIN-2594B9DPC9D.home; OS: Windows
Interesting ports on 213.178.225.139:
Not shown: 636 filtered ports, 352 closed ports
PORT STATE SERVICE VERSION
25/tcp open smtp Microsoft ESMTP
80/tcp open http Microsoft IIS webserver 7.5
|_ html-title: 403 - Forbidden: Access is denied.
110/tcp open pop3 MS Exchange 2007 pop3d
|_ pop3-capabilities: STLS TOP UIDL
143/tcp open imap Microsoft Exchange 2007 imapd
|_ imap-capabilities: IMAP4 STARTTLS IMAP4rev1 UIDPLUS LOGINDISABLED LITERAL+ IDLE NAMESPACE CHILDREN
443/tcp open https?
|_ sslv2: server still supports SSLv2
|_ html-title: IIS7
993/tcp open ssl/imap Microsoft Exchange 2007 imapd
|_ imap-capabilities: AUTH=GSSAPI IMAP4 AUTH=NTLM AUTH=PLAIN UIDPLUS IMAP4rev1 LITERAL+ IDLE NAMESPACE CHILDREN
995/tcp open pop3s?
6005/tcp open msrpc Microsoft Windows RPC
6006/tcp open X11:6?
6007/tcp open msrpc Microsoft Windows RPC
8080/tcp open http Apache Tomcat/Coyote JSP engine 1.1
|_ html-title: Site doesn't have a title (text/html;charset=UTF-8).
8443/tcp open https-alt?
|_ html-title: Site doesn't have a title (text/html;charset=UTF-8).
Service Info: Host: unexch1.undpprojects.local; OS: Windows
Interesting ports on 213.178.225.140:
Not shown: 636 filtered ports, 354 closed ports
PORT STATE SERVICE VERSION
25/tcp open smtp Microsoft ESMTP
80/tcp open http Microsoft IIS webserver 7.5
|_ html-title: 403 - Forbidden: Access is denied.
110/tcp open pop3 MS Exchange 2007 pop3d
|_ pop3-capabilities: STLS TOP UIDL
143/tcp open imap Microsoft Exchange 2007 imapd
|_ imap-capabilities: IMAP4 STARTTLS IMAP4rev1 UIDPLUS LOGINDISABLED LITERAL+ IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Microsoft IIS webserver 7.5
|_ html-title: IIS7
|_ sslv2: server still supports SSLv2
993/tcp open ssl/imap Microsoft Exchange 2007 imapd
|_ imap-capabilities: AUTH=GSSAPI IMAP4 AUTH=NTLM AUTH=PLAIN UIDPLUS IMAP4rev1 LITERAL+ IDLE NAMESPACE CHILDREN
995/tcp open ssl/pop3 MS Exchange 2007 pop3d
|_ pop3-capabilities: USER SASL(NTLM GSSAPI PLAIN) TOP UIDL
6005/tcp open msrpc Microsoft Windows RPC
6006/tcp open msrpc Microsoft Windows RPC
6007/tcp open msrpc Microsoft Windows RPC
Service Info: Host: unexch2.undpprojects.local; OS: Windows
Interesting ports on 213.178.225.141:
Not shown: 993 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp Microsoft ftpd
25/tcp open smtp MailEnable smptd 6.0--
|_ smtp-commands: EHLO home [88.190.24.19], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN
80/tcp open http Microsoft IIS webserver 7.5
|_ html-title: Default Parallels Plesk Panel Page
110/tcp open pop3 MailEnable POP3 Server
|_ pop3-capabilities: USER TOP UIDL
443/tcp closed https
8443/tcp open ssl/http Microsoft IIS webserver 7.5
|_ sslv2: server still supports SSLv2
|_ html-title: Site doesn't have a title (text/html).
Service Info: Host: WEB-WITNESS.home; OS: Windows
Interesting ports on 213.178.225.188:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp?
25/tcp open smtp MailEnable smptd 6.0--
|_ smtp-commands: EHLO home [88.190.24.19], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN
80/tcp open http Microsoft IIS webserver 7.5
|_ html-title: Default Parallels Plesk Panel Page
110/tcp open pop3 MailEnable POP3 Server
|_ pop3-capabilities: USER TOP UIDL
143/tcp open imap MailEnable imapd
|_ imap-capabilities: IMAP4rev1 IMAP4 CHILDREN IDLE AUTH=LOGIN AUTH=CRAM-MD5
443/tcp closed https
8443/tcp open ssl/http Microsoft IIS webserver 7.5
|_ sslv2: server still supports SSLv2
|_ html-title: Site doesn't have a title (text/html).
Service Info: Host: IUST-SERVER.home; OS: Windows
Interesting ports on 213.178.225.189:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp closed ftp
25/tcp closed smtp
80/tcp open http Microsoft IIS webserver 6.0
| html-title: WebDemo Home
|_ Requested resource was http://class5.svuonline.org/default.asp?
110/tcp closed pop3
143/tcp closed imap
443/tcp open tcpwrapped
8443/tcp closed https-alt
Service Info: OS: Windows
Interesting ports on 213.178.225.190:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp ProFTPD 1.3.3e
25/tcp open smtp Postfix smtpd
|_ smtp-commands: EHLO egov.sy, PIPELINING, SIZE 10240000, ETRN, STARTTLS, AUTH DIGEST-MD5 CRAM-MD5 LOGIN PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN
80/tcp open http Apache httpd
|_ html-title: Default Parallels Plesk Panel Page
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER IMPLEMENTATION(Courier Mail Server) UIDL APOP TOP STLS PIPELINING LOGIN-DELAY(10) SASL(LOGIN CRAM-MD5 PLAIN)
143/tcp open imap Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS AUTH=PLAIN THREAD=REFERENCES ACL2=UNION UIDPLUS ACL SORT IMAP4rev1 AUTH=CRAM-MD5 IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Apache httpd
|_ html-title: Default Parallels Plesk Panel Page
|_ sslv2: server still supports SSLv2
8443/tcp open ssl/https-alt?
|_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.225.191:
Not shown: 994 filtered ports
PORT STATE SERVICE VERSION
21/tcp open ftp Microsoft ftpd
25/tcp open smtp MailEnable smptd 5.10--
|_ smtp-commands: EHLO home [88.190.24.19], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN
80/tcp open http Microsoft IIS webserver 7.5
|_ html-title: Default Parallels Plesk Panel Page
110/tcp open pop3 MailEnable POP3 Server
|_ pop3-capabilities: USER TOP UIDL
143/tcp open imap MailEnable imapd
|_ imap-capabilities: IMAP4rev1 IMAP4 CHILDREN IDLE AUTH=LOGIN AUTH=CRAM-MD5
8443/tcp open ssl/http Microsoft IIS webserver 7.5
|_ sslv2: server still supports SSLv2
|_ html-title: Site doesn't have a title (text/html).
Service Info: Host: SYREDU-WIN.home; OS: Windows
Interesting ports on 213.178.225.193:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp ProFTPD 1.3.3c
25/tcp open smtp Postfix smtpd
|_ smtp-commands: EHLO nationldialog.scs-net.org, PIPELINING, SIZE 10240000, ETRN, STARTTLS, AUTH LOGIN DIGEST-MD5 CRAM-MD5 PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN
80/tcp open http Apache httpd
|_ html-title: Default Parallels Plesk Panel Page
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10)
143/tcp open imap Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Apache httpd
|_ sslv2: server still supports SSLv2
|_ html-title: Default Parallels Plesk Panel Page
8443/tcp open ssl/https-alt?
|_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.225.194:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp closed ftp
25/tcp closed smtp
80/tcp closed http
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
8443/tcp closed https-alt
Interesting ports on 213.178.225.197:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp ProFTPD 1.3.3c
25/tcp open smtp qmail smtpd
| smtp-commands: EHLO bso.scs-net.org, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME
|_ HELP qmail home page: http://pobox.com/~djb/qmail.html
80/tcp open http Apache httpd
|_ html-title: Default Parallels Plesk Panel Page
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10)
143/tcp open imap Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Apache httpd
|_ sslv2: server still supports SSLv2
|_ html-title: Default Parallels Plesk Panel Page
8443/tcp open ssl/https-alt?
|_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.225.198:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp closed ftp
25/tcp closed smtp
80/tcp open http Microsoft IIS webserver 6.0
| html-title: WebDemo Home
|_ Requested resource was http://class1.svuonline.org/default.asp?
110/tcp closed pop3
143/tcp closed imap
443/tcp open tcpwrapped
8443/tcp closed https-alt
Service Info: OS: Windows
Interesting ports on 213.178.225.199:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp ProFTPD 1.3.3c
|_ ftp-bounce: no banner
25/tcp open smtp
| smtp-commands: EHLO moe.scs-net.org, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME
|_ HELP qmail home page: http://pobox.com/~djb/qmail.html
80/tcp open http Apache httpd
|_ html-title: Test Page for the Apache HTTP Server
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10)
143/tcp open imap Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Apache httpd
|_ sslv2: server still supports SSLv2
|_ html-title: Test Page for the Apache HTTP Server
8443/tcp open ssl/https-alt?
|_ html-title: Site doesn't have a title (text/plain; charset=utf-8).
Interesting ports on 213.178.225.200:
Not shown: 993 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp closed ftp
25/tcp closed smtp
80/tcp open http Apache httpd 2.2.3 ((CentOS))
|_ html-title: \xC7\xE1\xE6\xDF\xC7\xE1\xC9 \xC7\xE1\xDA\xD1\xC8\xED\xC9 \xC7\xE1\xD3\xE6\xD1\xED\xC9 \xE1\xE1\xC3\xE4\xC8\xC7\xC1 - \xD3\xC7\xE4\xC7 - \xD3\xE6\xD1\xED\xC9 : \xC3\xCE\xC8\xC7\xD1 \xD3\xE6\xD1\xED\xC9 ::
110/tcp closed pop3
143/tcp closed imap
443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS))
|_ html-title: 401 Authorization Required
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = sana.sy
Interesting ports on 213.178.225.201:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp ProFTPD 1.2.10
25/tcp open smtp qmail smtpd
| smtp-commands: EHLO undpprojects.sy, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME
|_ HELP qmail home page: http://pobox.com/~djb/qmail.html
80/tcp open http Apache httpd 2.0.49 ((Linux/SuSE))
|_ html-title: Default PLESK Page
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING LOGIN-DELAY(10) TOP
143/tcp open imap Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Apache httpd 2.0.49 ((Linux/SuSE))
|_ html-title: Default PLESK Page
|_ sslv2: server still supports SSLv2
8443/tcp open http Apache httpd 1.3.33 ((Unix) mod_ssl/2.8.22 OpenSSL/0.9.7e PHP/5.0.4)
| html-title: 302 Found
|_ Did not follow redirect to https://UNDP.scs-net.org:8443
Service Info: OS: Unix
Interesting ports on 213.178.225.202:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp closed ftp
25/tcp closed smtp
80/tcp open http Microsoft IIS httpd
|_ html-title: Site doesn't have a title (text/html).
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
8443/tcp closed https-alt
Interesting ports on 213.178.225.203:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp Microsoft ftpd
|_ ftp-anon: Anonymous FTP login allowed
25/tcp closed smtp
80/tcp open http Microsoft IIS webserver 6.0
| html-title: WebDemo Home
|_ Requested resource was http://class2.svuonline.org/default.asp?
110/tcp closed pop3
143/tcp closed imap
443/tcp open tcpwrapped
8443/tcp closed https-alt
Service Info: OS: Windows
Interesting ports on 213.178.225.204:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp ProFTPD 1.3.3c
25/tcp open smtp qmail smtpd
| smtp-commands: EHLO esyria.scs-net.org, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME
|_ HELP qmail home page: http://pobox.com/~djb/qmail.html
80/tcp open http Apache httpd
|_ html-title: Site doesn't have a title (text/html).
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10)
143/tcp open imap Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Apache httpd
|_ sslv2: server still supports SSLv2
|_ html-title: Site doesn't have a title (text/html).
8443/tcp open http Apache httpd
| html-title: 302 Found
|_ Did not follow redirect to https://esyria.scs-net.org:8443
Service Info: Host: localhost.localdomain; OS: Unix
Interesting ports on 213.178.225.205:
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
| html-title: Site doesn't have a title (text/html).
|_ Did not follow redirect to https://213.178.225.205/
443/tcp open ssl/http VMware ESX Server httpd
|_ html-title: " + ID_EESX_Welcome + "
Interesting ports on 213.178.225.208:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp closed ftp
25/tcp closed smtp
80/tcp open http Microsoft IIS webserver 6.0
| html-title: WebDemo Home
|_ Requested resource was http://class6.svuonline.org/default.asp?
110/tcp closed pop3
143/tcp closed imap
443/tcp open tcpwrapped
8443/tcp closed https-alt
Service Info: OS: Windows
Interesting ports on 213.178.225.209:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp closed ftp
25/tcp closed smtp
80/tcp open http?
|_ html-title: Did not follow redirect to https://213.178.225.209/ and no page was returned.
110/tcp closed pop3
143/tcp closed imap
443/tcp open ssl/http VMware ESX Server httpd
|_ html-title: " + ID_EESX_Welcome + "
8443/tcp closed https-alt
Interesting ports on 213.178.225.212:
Not shown: 991 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp?
25/tcp open smtp Postfix smtpd
|_ smtp-commands: EHLO diflottery.scs-net.org, PIPELINING, SIZE 10240000, ETRN, STARTTLS, AUTH CRAM-MD5 DIGEST-MD5 LOGIN PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN
80/tcp open http Apache httpd 2.2.3 ((CentOS))
|_ html-title: Default Parallels Plesk Panel Page
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10)
143/tcp open imap Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS))
|_ html-title: Default Parallels Plesk Panel Page
|_ sslv2: server still supports SSLv2
3306/tcp open mysql MySQL 5.0.77
| mysql-info: Protocol: 10
| Version: 5.0.77
| Thread ID: 4756123
| Some Capabilities: Connect with DB, Compress, Transactions, Secure Connection
| Status: Autocommit
|_ Salt: =$<>cVh''/U?yhyKJptv
8443/tcp open ssl/https-alt?
|_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.225.215:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp closed ftp
25/tcp closed smtp
80/tcp open http nginx web server
|_ html-title: Parallels Server Bare Metal 5
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
8443/tcp closed https-alt
Interesting ports on 213.178.225.216:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp closed ftp
25/tcp closed smtp
80/tcp open http Microsoft IIS webserver 6.0
| html-title: WebDemo Home
|_ Requested resource was http://class7.svuonline.org/default.asp?
110/tcp closed pop3
143/tcp closed imap
443/tcp open tcpwrapped
8443/tcp closed https-alt
Service Info: OS: Windows
Interesting ports on 213.178.225.217:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp closed ftp
25/tcp closed smtp
80/tcp open http Microsoft IIS webserver 6.0
| html-title: WebDemo Home
|_ Requested resource was http://class8.svuonline.org/default.asp?
110/tcp closed pop3
143/tcp closed imap
443/tcp open tcpwrapped
8443/tcp closed https-alt
Service Info: OS: Windows
Interesting ports on 213.178.225.218:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp closed ftp
25/tcp closed smtp
80/tcp open http Microsoft IIS webserver 6.0
| html-title: WebDemo Home
|_ Requested resource was http://class9.svuonline.org/default.asp?
110/tcp closed pop3
143/tcp closed imap
443/tcp open tcpwrapped
8443/tcp closed https-alt
Service Info: OS: Windows
Interesting ports on 213.178.225.221:
Not shown: 994 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp closed ftp
25/tcp open smtp Exim smtpd
| smtp-commands: EHLO mailer1.massar.sy Hello example.org [88.190.24.19], SIZE 52428800, PIPELINING, AUTH PLAIN LOGIN, STARTTLS, HELP
|_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
80/tcp open http Apache httpd 2.2.14 ((Ubuntu))
100/tcp open ssh OpenSSH 5.3p1 Debian 3ubuntu7 (protocol 2.0)
|_ ssh-hostkey: 4096 e4:41:ac:30:68:75:24:73:4e:b2:89:90:30:e4:41:8f (RSA)
443/tcp open ssl/http Apache httpd 2.2.14 ((Ubuntu))
Service Info: OS: Linux
Interesting ports on 213.178.225.222:
Not shown: 988 filtered ports
PORT STATE SERVICE VERSION
21/tcp closed ftp
25/tcp open smtp Exim smtpd 4.72
| smtp-commands: EHLO massar.sy Hello example.org [88.190.24.19], SIZE 52428800, PIPELINING, AUTH PLAIN LOGIN, STARTTLS, HELP
|_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
80/tcp open http Apache httpd
|_ html-title: Website Down
100/tcp open ssh OpenSSH 5.1p1 Debian 5 (protocol 2.0)
|_ ssh-hostkey: 4096 5e:b3:4d:ae:bd:06:c0:48:e3:40:5d:da:0e:fa:7d:33 (RSA)
110/tcp open pop3
|_ pop3-capabilities: USER CAPA RESP-CODES UIDL PIPELINING STLS TOP SASL(PLAIN LOGIN)
143/tcp open imap Dovecot imapd
|_ imap-capabilities: LOGIN-REFERRALS ESEARCH UNSELECT QUOTA IMAP4rev1 AUTH=PLAIN STARTTLS AUTH=LOGIN ID CONDSTORE WITHIN CHILDREN LIST-EXTENDED SEARCHRES ESORT QRESYNC CONTEXT=SEARCH THREAD=REFS THREAD=REFERENCES I18NLEVEL=1 UIDPLUS NAMESPACE SORT ENABLE LITERAL+ IDLE SASL-IR MULTIAPPEND
443/tcp open ssl/http Apache httpd
|_ sslv2: server still supports SSLv2
|_ html-title: Website Down
587/tcp open smtp Exim smtpd 4.72
| smtp-commands: EHLO massar.sy Hello example.org [88.190.24.19], SIZE 52428800, PIPELINING, AUTH PLAIN LOGIN, STARTTLS, HELP
|_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
993/tcp open ssl/imap Dovecot imapd
|_ sslv2: server still supports SSLv2
|_ imap-capabilities: LOGIN-REFERRALS ESEARCH UNSELECT IMAP4rev1 QUOTA AUTH=PLAIN AUTH=LOGIN ID CONDSTORE WITHIN CHILDREN LIST-EXTENDED SEARCHRES ESORT QRESYNC CONTEXT=SEARCH THREAD=REFS THREAD=REFERENCES I18NLEVEL=1 UIDPLUS NAMESPACE SORT ENABLE LITERAL+ IDLE SASL-IR MULTIAPPEND
995/tcp open ssl/pop3
|_ sslv2: server still supports SSLv2
|_ pop3-capabilities: USER CAPA UIDL PIPELINING RESP-CODES TOP SASL(PLAIN LOGIN)
33354/tcp closed unknown
33899/tcp closed unknown
Service Info: Host: massar.sy; OS: Linux
Interesting ports on 213.178.225.224:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp Microsoft ftpd
|_ ftp-anon: Anonymous FTP login allowed
25/tcp closed smtp
80/tcp open http Microsoft IIS webserver 6.0
| html-title: WebDemo Home
|_ Requested resource was http://class3.svuonline.org/default.asp?
110/tcp closed pop3
143/tcp closed imap
443/tcp open tcpwrapped
8443/tcp closed https-alt
Service Info: OS: Windows
Interesting ports on 213.178.225.229:
Not shown: 994 filtered ports
PORT STATE SERVICE VERSION
21/tcp open ftp Microsoft ftpd
25/tcp open smtp MailEnable smptd 5.02--
|_ smtp-commands: EHLO cbs-bank.com [88.190.24.19], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN
80/tcp open http Microsoft IIS webserver 7.5
|_ html-title: Default Parallels Plesk Panel Page
110/tcp open pop3 MailEnable POP3 Server
|_ pop3-capabilities: USER TOP UIDL
143/tcp open imap MailEnable imapd
|_ imap-capabilities: IMAP4rev1 IMAP4 CHILDREN IDLE AUTH=LOGIN AUTH=CRAM-MD5
8443/tcp open ssl/http Microsoft IIS webserver 7.5
|_ sslv2: server still supports SSLv2
|_ html-title: Site doesn't have a title (text/html).
Service Info: Host: WIN-NHDLB9QHTPS.cbs-bank.com; OS: Windows
Interesting ports on 213.178.225.230:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp ProFTPD 1.3.3c
25/tcp open smtp qmail smtpd
| smtp-commands: EHLO mofa.gov.sy, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME
|_ HELP qmail home page: http://pobox.com/~djb/qmail.html
80/tcp open http Apache httpd 2.2.3 ((CentOS))
|_ html-title: Default Parallels Plesk Panel Page
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10)
143/tcp open imap Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS))
|_ sslv2: server still supports SSLv2
|_ html-title: Default Parallels Plesk Panel Page
8443/tcp open ssl/https-alt?
|_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.225.231:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp ProFTPD
|_ ftp-anon: Anonymous FTP login allowed
25/tcp open smtp Postfix smtpd
|_ smtp-commands: EHLO mofa-web.scs-net.org, PIPELINING, SIZE 10240000, ETRN, STARTTLS, AUTH CRAM-MD5 LOGIN PLAIN DIGEST-MD5, ENHANCEDSTATUSCODES, 8BITMIME, DSN
80/tcp open http Apache httpd
|_ html-title: Default Parallels Plesk Panel Page
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER IMPLEMENTATION(Courier Mail Server) UIDL APOP TOP STLS PIPELINING LOGIN-DELAY(10) SASL(LOGIN CRAM-MD5 PLAIN)
143/tcp open imap Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS AUTH=PLAIN THREAD=REFERENCES ACL2=UNION UIDPLUS ACL SORT IMAP4rev1 AUTH=CRAM-MD5 IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Apache httpd
|_ html-title: Default Parallels Plesk Panel Page
|_ sslv2: server still supports SSLv2
8443/tcp open ssl/https-alt?
|_ html-title: Site doesn't have a title (text/html; charset=UTF-8).
Service Info: Hosts: 192.168.11.36, mofa-web.scs-net.org, localhost.localdomain; OS: Unix
Interesting ports on 213.178.225.232:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp ProFTPD 1.3.3c
25/tcp open smtp Postfix smtpd
|_ smtp-commands: EHLO reefnet.scs-net.org, PIPELINING, SIZE 10240000, ETRN, STARTTLS, AUTH PLAIN DIGEST-MD5 CRAM-MD5 LOGIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN
80/tcp open http Apache httpd
|_ html-title: Default Parallels Plesk Panel Page
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10)
143/tcp open imap Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Apache httpd
|_ sslv2: server still supports SSLv2
|_ html-title: Default Parallels Plesk Panel Page
8443/tcp open ssl/https-alt?
|_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.225.234:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS webserver 6.0
|_ html-title: \xE3\xE6\xDE\xDA \xE4\xD9\xC7\xE3 \xE3\xDA\xE1\xE6\xE3\xC7\xCA \xC7\xE1\xC8\xCD\xCB \xC7\xE1\xDA\xE1\xE3\xED \xE6\xC7\xE1\xCA\xD8\xE6\xED\xD1 \xC7\xE1\xCA\xDE\xC7\xE4\xED \xDD\xED \xD3\xE6\xD1\xED\xC7
Service Info: OS: Windows
Interesting ports on 213.178.225.237:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp ProFTPD 1.3.1
25/tcp open smtp qmail smtpd
| smtp-commands: EHLO commander.aloola.sy, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME
|_ HELP qmail home page: http://pobox.com/~djb/qmail.html
80/tcp open http Apache httpd
|_ html-title: Site doesn't have a title (text/html).
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10)
143/tcp open imap Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Apache httpd
|_ html-title: Site doesn't have a title (text/html).
|_ sslv2: server still supports SSLv2
8443/tcp open http Apache httpd
| html-title: 302 Found
|_ Requested resource was https://commander.aloola.sy:8443/
Service Info: Host: localhost.localdomain; OS: Unix
Interesting ports on mail.syriatrust.org (213.178.225.240):
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp Microsoft ftpd
25/tcp open smtp MailEnable smptd 4.26--
|_ smtp-commands: EHLO syriatrust.org [88.190.24.19], this server offers 4 extensions, AUTH LOGIN, SIZE 10240000, HELP, AUTH=LOGIN
80/tcp open http Microsoft IIS webserver 6.0
|_ html-title: Default Parallels Plesk Panel Page
110/tcp open pop3 MailEnable POP3 Server
|_ pop3-capabilities: USER TOP UIDL
143/tcp closed imap
443/tcp closed https
8443/tcp open ssl/http Microsoft IIS httpd 6.0
|_ html-title: Site doesn't have a title (text/html).
|_ sslv2: server still supports SSLv2
Service Info: OS: Windows
Interesting ports on 213.178.225.244:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp ProFTPD 1.3.3c
25/tcp open smtp qmail smtpd
| smtp-commands: EHLO mail.esyria.sy, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME
|_ HELP qmail home page: http://pobox.com/~djb/qmail.html
80/tcp open http Apache httpd
|_ html-title: Default Parallels Plesk Panel Page
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10)
143/tcp open imap Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Apache httpd
|_ html-title: Default Parallels Plesk Panel Page
|_ sslv2: server still supports SSLv2
8443/tcp open ssl/https-alt?
|_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.225.245:
Not shown: 994 filtered ports
PORT STATE SERVICE VERSION
21/tcp open ftp Microsoft ftpd
25/tcp open smtp MailEnable smptd 5.02--
|_ smtp-commands: EHLO cbs-bank.com [88.190.24.19], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN
80/tcp open http Microsoft IIS webserver 7.5
|_ html-title: Default Parallels Plesk Panel Page
110/tcp open pop3 MailEnable POP3 Server
|_ pop3-capabilities: USER TOP UIDL
143/tcp open imap MailEnable imapd
|_ imap-capabilities: IMAP4rev1 IMAP4 CHILDREN IDLE AUTH=LOGIN AUTH=CRAM-MD5
8443/tcp open ssl/http Microsoft IIS webserver 7.5
|_ sslv2: server still supports SSLv2
|_ html-title: Site doesn't have a title (text/html).
Service Info: Host: WIN-NHDLB9QHTPS.cbs-bank.com; OS: Windows
Interesting ports on 213.178.225.247:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp Microsoft ftpd
|_ ftp-anon: Anonymous FTP login allowed
25/tcp closed smtp
80/tcp open http Microsoft IIS webserver 6.0
| html-title: WebDemo Home
|_ Requested resource was http://class4.svuonline.org/default.asp?
110/tcp closed pop3
143/tcp closed imap
443/tcp open tcpwrapped
8443/tcp closed https-alt
Service Info: OS: Windows
Interesting ports on 213.178.225.248:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp ProFTPD 1.3.3e
25/tcp open smtp Postfix smtpd
|_ smtp-commands: EHLO mod.gov.sy, PIPELINING, SIZE 10240000, ETRN, STARTTLS, AUTH LOGIN DIGEST-MD5 PLAIN CRAM-MD5, ENHANCEDSTATUSCODES, 8BITMIME, DSN
80/tcp open http Apache httpd
|_ html-title: Under Construction
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10)
143/tcp open imap Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Apache httpd
|_ html-title: Under Construction
|_ sslv2: server still supports SSLv2
8443/tcp open ssl/https-alt?
|_ html-title: Site doesn't have a title (text/html).
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at http://www.insecure.org/cgi-bin/servicefp-submit.cgi :
Interesting ports on 213.178.225.250:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp closed ftp
25/tcp closed smtp
80/tcp open http Microsoft IIS webserver 6.0
|_ html-title: Axiom 2.0 News Manager Login - Distributor version - Not for r...
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
8443/tcp closed https-alt
Service Info: OS: Windows
Interesting ports on 213.178.225.254:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp?
|_ ftp-bounce: no banner
25/tcp open smtp?
80/tcp open http?
110/tcp open pop3?
143/tcp open imap?
443/tcp open https?
8443/tcp open https-alt?

213.178.226.1/24

Starting Nmap 5.00 ( http://nmap.org ) at 2012-02-26 20:50 CET
Interesting ports on 213.178.226.49:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp ProFTPD 1.3.1
25/tcp open smtp qmail smtpd
80/tcp open http Apache httpd 2.2.3 ((CentOS))
|_ html-title: Site doesn't have a title (text/html).
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10)
143/tcp open imap Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS))
|_ html-title: Site doesn't have a title (text/html).
|_ sslv2: server still supports SSLv2
8443/tcp open http Apache httpd
| html-title: 302 Found
|_ Did not follow redirect to https://mof.scs-net.org:8443
Service Info: Host: localhost.localdomain; OS: Unix
Interesting ports on 213.178.226.52:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp vsftpd 2.0.5
25/tcp closed smtp
80/tcp open http Apache httpd 2.2.3 ((CentOS))
|_ html-title: \xE6\xD2\xC7\xD1\xC9 \xC7\xE1\xCA\xDA\xE1\xED\xE3 \xC7\xE1\xDA\xC7\xE1\xED - \xE3\xE6\xDE\xDA \xC7\xE1\xE3\xDD\xC7\xD6\xE1\xC9 - 2011-2012
110/tcp closed pop3
143/tcp closed imap
443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS))
|_ html-title: \xE6\xD2\xC7\xD1\xC9 \xC7\xE1\xCA\xDA\xE1\xED\xE3 \xC7\xE1\xDA\xC7\xE1\xED - \xE3\xE6\xDE\xDA \xC7\xE1\xE3\xDD\xC7\xD6\xE1\xC9 - 2011-2012
8443/tcp closed https-alt
Service Info: OS: Unix
Interesting ports on 213.178.226.53:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp vsftpd 2.0.5
25/tcp closed smtp
80/tcp open http Apache httpd 2.2.3 ((CentOS))
|_ html-title: \xE6\xD2\xC7\xD1\xC9 \xC7\xE1\xCA\xDA\xE1\xED\xE3 \xC7\xE1\xDA\xC7\xE1\xED - \xE3\xE6\xDE\xDA \xC7\xE1\xE3\xDD\xC7\xD6\xE1\xC9 - 2011-2012
110/tcp closed pop3
143/tcp closed imap
443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS))
|_ html-title: \xE6\xD2\xC7\xD1\xC9 \xC7\xE1\xCA\xDA\xE1\xED\xE3 \xC7\xE1\xDA\xC7\xE1\xED - \xE3\xE6\xDE\xDA \xC7\xE1\xE3\xDD\xC7\xD6\xE1\xC9 - 2011-2012
8443/tcp closed https-alt
Service Info: OS: Unix
Interesting ports on 213.178.226.62:
Not shown: 991 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Interesting ports on 213.178.226.208:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
| html-title: PRTG Traffic Grapher - Monitoring Results - PRTG Traffic Graph...
|_ Requested resource was http://213.178.226.208/login.htm
| robots.txt: has 1 disallowed entry

213.178.227.1/24

Starting Nmap 5.00 ( http://nmap.org ) at 2012-02-26 20:51 CET
Interesting ports on 213.178.227.1:
Not shown: 991 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Interesting ports on 213.178.227.8:
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp closed ftp
25/tcp closed smtp
80/tcp open http?
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
8443/tcp closed https-alt
Interesting ports on 213.178.227.9:
Not shown: 990 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp closed ftp
25/tcp closed smtp
80/tcp open http?
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
8443/tcp closed https-alt
10000/tcp open snet-sensor-mgmt?
55555/tcp open unknown
Interesting ports on 213.178.227.10:
Not shown: 990 filtered ports
PORT STATE SERVICE VERSION
20/tcp open ftp-data?
21/tcp open ftp?
|_ ftp-bounce: no banner
25/tcp open smtp?
80/tcp open http?
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
1433/tcp closed ms-sql-s
3389/tcp open ms-term-serv?
8443/tcp open https-alt?
All 1000 scanned ports on 213.178.227.33 are closed (915) or filtered (85)
Interesting ports on 213.178.227.34:
Not shown: 989 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp?
|_ ftp-bounce: no banner
25/tcp open smtp?
80/tcp open http?
110/tcp open pop3?
143/tcp open imap?
443/tcp open https?
3306/tcp open mysql?
3389/tcp closed ms-term-serv
6789/tcp open ibm-db2-admin?
8443/tcp open https-alt?
Interesting ports on 213.178.227.37:
Not shown: 989 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp?
|_ ftp-bounce: no banner
25/tcp open smtp?
80/tcp open http?
110/tcp open pop3?
143/tcp open imap?
443/tcp open https?
3306/tcp open mysql?
3389/tcp closed ms-term-serv
6789/tcp closed ibm-db2-admin
8443/tcp open https-alt?
Interesting ports on 213.178.227.39:
Not shown: 988 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp?
|_ ftp-bounce: no banner
25/tcp open smtp?
53/tcp open domain?
110/tcp open pop3?
143/tcp open imap?
443/tcp open https?
3306/tcp open mysql?
3389/tcp closed ms-term-serv
6789/tcp closed ibm-db2-admin
8443/tcp open https-alt?
10000/tcp open snet-sensor-mgmt?
Interesting ports on 213.178.227.40:
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
25/tcp open smtp?
80/tcp open http?
110/tcp open pop3?
8443/tcp open https-alt?
Interesting ports on 213.178.227.43:
Not shown: 989 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp closed ftp
25/tcp closed smtp
80/tcp open http?
110/tcp closed pop3
143/tcp closed imap
443/tcp open https?
3306/tcp closed mysql
3389/tcp closed ms-term-serv
6789/tcp closed ibm-db2-admin
8443/tcp open https-alt?
Interesting ports on 213.178.227.50:
Not shown: 989 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp?
|_ ftp-bounce: no banner
25/tcp open smtp?
80/tcp open http?
110/tcp open pop3?
143/tcp open imap?
443/tcp open https?
3306/tcp open mysql?
3389/tcp closed ms-term-serv
6789/tcp closed ibm-db2-admin
8443/tcp open https-alt?
Interesting ports on 213.178.227.58:
Not shown: 990 filtered ports
PORT STATE SERVICE VERSION
21/tcp closed ftp
25/tcp closed smtp
80/tcp closed http
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
3306/tcp closed mysql
3389/tcp closed ms-term-serv
6789/tcp closed ibm-db2-admin
8443/tcp open https-alt?
Interesting ports on 213.178.227.70:
Not shown: 990 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp closed ftp
25/tcp closed smtp
80/tcp open http?
110/tcp closed pop3
143/tcp closed imap
443/tcp open https?
3306/tcp closed mysql
3389/tcp open ms-term-serv?
8443/tcp open https-alt?
Interesting ports on 213.178.227.73:
Not shown: 990 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp closed ftp
25/tcp closed smtp
80/tcp open http?
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
3306/tcp closed mysql
3389/tcp open ms-term-serv?
8443/tcp open https-alt?
Interesting ports on 213.178.227.74:
Not shown: 990 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp closed ftp
25/tcp closed smtp
80/tcp open http?
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
3306/tcp closed mysql
3389/tcp open ms-term-serv?
8443/tcp open https-alt?
All 1000 scanned ports on 213.178.227.137 are filtered
Interesting ports on 213.178.227.139:
Not shown: 989 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp?
|_ ftp-bounce: no banner
25/tcp open smtp?
80/tcp open http?
110/tcp open pop3?
143/tcp open imap?
443/tcp open https?
3306/tcp open mysql?
3389/tcp closed ms-term-serv
6789/tcp closed ibm-db2-admin
8443/tcp open https-alt?
Interesting ports on 213.178.227.142:
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
25/tcp open smtp?
80/tcp open http?
110/tcp open pop3?
8443/tcp open https-alt?
Interesting ports on 213.178.227.145:
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
25/tcp open smtp?
80/tcp open http?
110/tcp open pop3?
8443/tcp open https-alt?
Interesting ports on 213.178.227.146:
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
25/tcp open smtp?
80/tcp open http?
110/tcp open pop3?
8443/tcp open https-alt?
Interesting ports on 213.178.227.149:
Not shown: 989 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp ProFTPD 1.3.1
25/tcp open smtp Postfix smtpd
|_ smtp-commands: EHLO pewss.scs-net.org, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, AUTH CRAM-MD5 DIGEST-MD5 LOGIN PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN
80/tcp open http Apache httpd 2.2.3 ((CentOS))
|_ html-title: Default Parallels Plesk Panel Page
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10)
143/tcp open imap Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS))
|_ html-title: Default Parallels Plesk Panel Page
|_ sslv2: server still supports SSLv2
3306/tcp open mysql MySQL (unauthorized)
3389/tcp closed ms-term-serv
6789/tcp closed ibm-db2-admin
8443/tcp open ssl/http Apache httpd
|_ sslv2: server still supports SSLv2
| html-title: VZPP Plesk - Log in to Plesk 9.3.0
|_ Requested resource was https://213.178.227.149:8443/vz/cp/panel/plesk/frameset
Service Info: Hosts: pewss.scs-net.org, localhost.localdomain; OS: Unix
Interesting ports on 213.178.227.151:
Not shown: 989 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp ProFTPD 1.3.1
25/tcp open smtp Postfix smtpd
|_ smtp-commands: EHLO mod.scs-net.org, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, AUTH CRAM-MD5 DIGEST-MD5 LOGIN PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN
80/tcp open http Apache httpd 2.2.3 ((CentOS))
|_ html-title: Apache HTTP Server Test Page powered by CentOS
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10)
143/tcp open imap Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS))
|_ html-title: Apache HTTP Server Test Page powered by CentOS
3306/tcp open mysql MySQL 5.0.77
| mysql-info: Protocol: 10
| Version: 5.0.77
| Thread ID: 13846
| Some Capabilities: Connect with DB, Compress, Transactions, Secure Connection
| Status: Autocommit
|_ Salt: 4C5}:G7{'N6__?]65GEe
3389/tcp closed ms-term-serv
6789/tcp closed ibm-db2-admin
8443/tcp open ssl/http Apache httpd
| html-title: VZPP Plesk - Log in to Plesk 9.3.0
|_ Requested resource was https://213.178.227.151:8443/vz/cp/panel/plesk/frameset
|_ sslv2: server still supports SSLv2
Service Info: Hosts: mod.scs-net.org, localhost.localdomain; OS: Unix
Interesting ports on 213.178.227.152:
Not shown: 989 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp ProFTPD 1.3.1
25/tcp open smtp Postfix smtpd
|_ smtp-commands: EHLO localhost.localdomain, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, AUTH CRAM-MD5 DIGEST-MD5 LOGIN PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN
80/tcp open http Apache httpd 2.2.3 ((CentOS))
|_ html-title: Default Parallels Plesk Panel Page
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10)
143/tcp open imap Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS))
|_ html-title: Default Parallels Plesk Panel Page
|_ sslv2: server still supports SSLv2
3306/tcp open mysql MySQL 5.0.77
| mysql-info: Protocol: 10
| Version: 5.0.77
| Thread ID: 737230
| Some Capabilities: Connect with DB, Compress, Transactions, Secure Connection
| Status: Autocommit
|_ Salt: .pkJon[]Br6V/&o!ONz;
3389/tcp closed ms-term-serv
6789/tcp closed ibm-db2-admin
8443/tcp open ssl/http Apache httpd
| html-title: VZPP Plesk - Log in to Plesk 9.3.0
|_ Requested resource was https://213.178.227.152:8443/vz/cp/panel/plesk/frameset
|_ sslv2: server still supports SSLv2
Service Info: Host: localhost.localdomain; OS: Unix
Interesting ports on 213.178.227.157:
Not shown: 989 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp ProFTPD 1.3.1
25/tcp open smtp Postfix smtpd
|_ smtp-commands: EHLO youropinion.scs-net.org, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, AUTH CRAM-MD5 DIGEST-MD5 LOGIN PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN
80/tcp open http Apache httpd 2.2.3 ((CentOS))
|_ html-title: Default Parallels Plesk Panel Page
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10)
143/tcp open imap Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS))
|_ html-title: Default Parallels Plesk Panel Page
|_ sslv2: server still supports SSLv2
3306/tcp open mysql MySQL (unauthorized)
3389/tcp closed ms-term-serv
6789/tcp closed ibm-db2-admin
8443/tcp open ssl/http Apache httpd
| html-title: VZPP Plesk - Log in to Plesk 9.3.0
|_ Requested resource was https://213.178.227.157:8443/vz/cp/panel/plesk/frameset
|_ sslv2: server still supports SSLv2
Service Info: Hosts: youropinion.scs-net.org, localhost.localdomain; OS: Unix
Interesting ports on 213.178.227.194:
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
|_ html-title: Site doesn't have a title (text/html).
443/tcp open ssl/http Apache httpd
|_ html-title: Apache HTTP Server Test Page powered by CentOS
8443/tcp open http Apache SSL-only mode httpd
|_ html-title: 400 Bad Request
Interesting ports on 213.178.227.231:
Not shown: 993 filtered ports
PORT STATE SERVICE VERSION
21/tcp open ftp?
|_ ftp-bounce: no banner
25/tcp open smtp?
80/tcp open http?
110/tcp open pop3?
143/tcp open imap?
3389/tcp open ms-term-serv?
8443/tcp open https-alt?
Interesting ports on 213.178.227.232:
Not shown: 993 filtered ports
PORT STATE SERVICE VERSION
21/tcp open ftp Microsoft ftpd
|_ ftp-anon: Anonymous FTP login allowed
25/tcp open smtp MailEnable smptd 5.10--
|_ smtp-commands: EHLO syrianeducation.org.sy [88.191.88.106], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN
80/tcp open http Microsoft IIS webserver 7.0
|_ html-title: Default Parallels Plesk Panel Page
110/tcp open pop3 MailEnable POP3 Server
|_ pop3-capabilities: USER TOP UIDL
143/tcp open imap MailEnable imapd
|_ imap-capabilities: IMAP4rev1 IMAP4 CHILDREN IDLE AUTH=LOGIN AUTH=CRAM-MD5
3389/tcp open microsoft-rdp Microsoft Terminal Service
8443/tcp open ssl/http Microsoft IIS webserver 7.0
|_ html-title: Site doesn't have a title (text/html).
|_ sslv2: server still supports SSLv2
Service Info: Host: mail.syrianeducation.org.sy; OS: Windows
Interesting ports on 213.178.227.235:
Not shown: 993 filtered ports
PORT STATE SERVICE VERSION
21/tcp open ftp Microsoft ftpd
25/tcp open smtp MailEnable smptd 4.26--
|_ smtp-commands: EHLO home [88.191.88.106], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
|_ html-title: \xD8\xB3\xD9\x88\xD8\xB1\xD9\x8A\xD8\xA9 \xD8\xA7\xD9\x84\xD8\xAA\xD8\xB4\xD8\xA7\xD8\xB1\xD9\x83\xD9\x8A\xD8\xA9
110/tcp open pop3 MailEnable POP3 Server
|_ pop3-capabilities: USER TOP UIDL
143/tcp open imap MailEnable imapd
|_ imap-capabilities: IMAP4rev1 IMAP4 CHILDREN IDLE AUTH=LOGIN AUTH=CRAM-MD5
3389/tcp open microsoft-rdp Microsoft Terminal Service
8443/tcp open ssl/http Microsoft IIS webserver 7.0
|_ sslv2: server still supports SSLv2
|_ html-title: Site doesn't have a title (text/html).
Service Info: Host: YOUROPINION.home; OS: Windows
Interesting ports on 213.178.227.236:
Not shown: 990 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp Microsoft ftpd
|_ ftp-anon: Anonymous FTP login allowed
25/tcp closed smtp
80/tcp open http Microsoft IIS webserver 7.0
|_ html-title: IIS7
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
3306/tcp closed mysql
3389/tcp open microsoft-rdp Microsoft Terminal Service
8443/tcp closed https-alt
Service Info: OS: Windows
Interesting ports on 213.178.227.238:
Not shown: 990 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp Microsoft ftpd
25/tcp closed smtp
80/tcp closed http
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
3306/tcp closed mysql
3389/tcp open microsoft-rdp Microsoft Terminal Service
8443/tcp open ssl/http Microsoft IIS webserver 7.0
|_ sslv2: server still supports SSLv2
| html-title: VZPP Plesk - Log in to Plesk
|_ Requested resource was https://213.178.227.238:8443/vz/cp/panel/plesk/frameset
Service Info: OS: Windows

213.178.228.1/24

Starting Nmap 5.00 ( http://nmap.org ) at 2012-02-26 21:27 CET
Interesting ports on 213.178.228.1:
Not shown: 990 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
80/tcp open http Cisco IOS administrative httpd
|_ html-title: Site doesn't have a title.
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15_access
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Service Info: OS: IOS
Interesting ports on 213.178.228.71:
Not shown: 989 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
80/tcp open http Cisco IOS administrative httpd
|_ html-title: Site doesn't have a title.
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15 or view_access
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
443/tcp open ssl/http Cisco IOS administrative httpd
|_ html-title: Site doesn't have a title.
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15 or view_access
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Service Info: OS: IOS
Interesting ports on 213.178.228.113:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open tcpwrapped
Interesting ports on 213.178.228.162:
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Netscreen administrative web server (runs Virata-EmWeb/R6_0_1)
|_ html-title: Login
443/tcp open ssl/http Netscreen administrative web server (runs Virata-EmWeb/R6_0_1)
|_ html-title: Login
|_ sslv2: server still supports SSLv2
Service Info: Device: firewall
Interesting ports on 213.178.228.165:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS
|_ html-title: The page cannot be displayed
Service Info: OS: Windows
Interesting ports on 213.178.228.169:
Not shown: 981 closed ports
PORT STATE SERVICE VERSION
21/tcp open ftp HP JetDirect ftpd
|_ ftp-anon: Anonymous FTP login allowed
22/tcp filtered ssh
23/tcp filtered telnet
80/tcp open http HP Color LaserJet 4650 http config (HP-ChaiSOE 1.0)
| html-title: HP LaserJet M3035 MFP Series
|_ Requested resource was http://213.178.228.169/hp/device/this.LCDispatcher
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
280/tcp open http HP Color LaserJet 4650 http config (HP-ChaiSOE 1.0)
| html-title: HP LaserJet M3035 MFP Series
|_ Requested resource was http://213.178.228.169/hp/device/this.LCDispatcher
443/tcp open ssl/http HP Color LaserJet 4650 http config (HP-ChaiSOE 1.0)
| html-title: HP LaserJet M3035 MFP Series
|_ Requested resource was http://213.178.228.169/hp/device/this.LCDispatcher
445/tcp filtered microsoft-ds
515/tcp open printer
631/tcp open http HP Color LaserJet 4650 http config (HP-ChaiSOE 1.0)
| html-title: HP LaserJet M3035 MFP Series
|_ Requested resource was http://213.178.228.169/hp/device/this.LCDispatcher
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
1783/tcp open unknown
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
9100/tcp open jetdirect?
14000/tcp open tcpwrapped
Service Info: Device: printer

213.178.229.1/24

Starting Nmap 5.00 ( http://nmap.org ) at 2012-02-26 21:44 CET
Interesting ports on 213.178.229.10:
Not shown: 978 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
53/tcp open domain Microsoft DNS
88/tcp open tcpwrapped
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
389/tcp open tcpwrapped
445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds
464/tcp open kpasswd5?
593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0
636/tcp open tcpwrapped
1026/tcp open LSA-or-nterm?
1027/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0
1040/tcp open msrpc Microsoft Windows RPC
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
3268/tcp open ldap
3269/tcp open tcpwrapped
3389/tcp open microsoft-rdp Microsoft Terminal Service
4444/tcp filtered krb524
5060/tcp filtered sip
Service Info: OS: Windows
Host script results:
|_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.229.12:
Not shown: 973 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
53/tcp open domain Microsoft DNS
80/tcp open http Microsoft IIS webserver 6.0
|_ html-title: Site doesn't have a title (text/html).
88/tcp open kerberos-sec Microsoft Windows kerberos-sec
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
389/tcp open ldap
445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds
464/tcp open kpasswd5?
593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0
636/tcp open tcpwrapped
1026/tcp open msrpc Microsoft Windows RPC
1027/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0
1055/tcp open msrpc Microsoft Windows RPC
1074/tcp open unknown
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
2522/tcp open unknown
2638/tcp open tcpwrapped
3389/tcp open microsoft-rdp Microsoft Terminal Service
4444/tcp filtered krb524
5060/tcp filtered sip
7999/tcp open unknown
8443/tcp open ssl/https-alt?
|_ html-title: Did not follow redirect to https://213.178.229.12/symantec.html and no page was returned.
9090/tcp open zeus-admin?
Host script results:
|_ nbstat: ERROR: Name query failed: TIMEOUT
| smb-os-discovery: Windows Server 2003 3790 Service Pack 2
| LAN Manager: Windows Server 2003 5.2
| Name: UNSY\SYR03
|_ System time: 2012-02-26 20:58:50 UTC+3
Interesting ports on 213.178.229.46:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp closed https
Interesting ports on 213.178.229.54:
Not shown: 987 closed ports
PORT STATE SERVICE VERSION
21/tcp open ftp VxWorks ftpd 5.5.1
22/tcp filtered ssh
23/tcp filtered telnet
80/tcp open http?
|_ html-title: LOGIN
111/tcp open rpcbind
|_ rpcinfo:
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
8000/tcp open tcpwrapped
Interesting ports on 213.178.229.73:
Not shown: 990 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
80/tcp open http Cisco IOS administrative httpd
|_ html-title: Site doesn't have a title.
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15_access
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Service Info: OS: IOS
Interesting ports on 213.178.229.80:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp closed http
Interesting ports on 213.178.229.82:
Not shown: 981 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
445/tcp open microsoft-ds Microsoft Windows 2000 microsoft-ds
1027/tcp open msrpc Microsoft Windows RPC
1029/tcp open msrpc Microsoft Windows RPC
1433/tcp open ms-sql-s Microsoft SQL Server 2000 8.00.194; RTM
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
2301/tcp open http HP Proliant System Management 2.1.6.156 (CompaqHTTPServer 9.9)
| html-title: Site doesn't have a title (text/html).
|_ Requested resource was http://213.178.229.82/red2301.html?RedirectUrl=/
2381/tcp open http Apache SSL-only mode httpd
|_ html-title: 400 Bad Request
3001/tcp open msrpc Microsoft Windows RPC
3389/tcp open microsoft-rdp Microsoft Terminal Service
4444/tcp filtered krb524
5060/tcp filtered sip
5800/tcp open http VNC Server Enterprise Edition httpd E4.4.2 r13117 (VNC port 5900)
|_ html-title: VNC Viewer for Java
5900/tcp open vnc RealVNC Personal (protocol 4.0)
Service Info: OS: Windows
Host script results:
|_ nbstat: ERROR: Name query failed: TIMEOUT
| smb-os-discovery: Windows 2000
| LAN Manager: Windows 2000 LAN Manager
| Name: WORKGROUP\SYRIACALL01
|_ System time: 2012-02-26 22:34:35 UTC+2
Interesting ports on 213.178.229.83:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp closed http
Interesting ports on 213.178.229.91:
Not shown: 978 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds
1025/tcp open msrpc Microsoft Windows RPC
1433/tcp open ms-sql-s Microsoft SQL Server 2005 9.00.1399; RTM
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
2301/tcp open http HP Proliant System Management 2.1.15.210 (CompaqHTTPServer 9.9)
| html-title: Site doesn't have a title (text/html).
|_ Requested resource was http://213.178.229.91/red2301.html?RedirectUrl=/
2381/tcp open http Apache SSL-only mode httpd
|_ html-title: 400 Bad Request
2383/tcp open ms-olap4?
3389/tcp open microsoft-rdp Microsoft Terminal Service
4444/tcp filtered krb524
5060/tcp filtered sip
5800/tcp open http VNC Server Enterprise Edition httpd E4.4.2 r13117 (VNC port 5900)
|_ html-title: VNC Viewer for Java
5801/tcp open http VNC Server Enterprise Edition httpd E4.4.2 r13117 (VNC port 5901)
|_ html-title: VNC Viewer for Java
5900/tcp open vnc RealVNC Personal (protocol 4.0)
5901/tcp open vnc RealVNC Personal (protocol 4.0)
8009/tcp open ajp13?
10000/tcp open http Apache Tomcat/Coyote JSP engine 1.1
|_ html-title: Apache Tomcat/5.5.27
Service Info: OS: Windows
Host script results:
|_ nbstat: ERROR: Name query failed: TIMEOUT
| smb-os-discovery: Windows Server 2003 3790 Service Pack 2
| LAN Manager: Windows Server 2003 5.2
| Name: WORKGROUP\SYRIACALL02
|_ System time: 2012-02-26 22:47:30 UTC+2
Interesting ports on 213.178.229.97:
Not shown: 990 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
80/tcp open http?
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Interesting ports on 213.178.229.98:
Not shown: 975 closed ports
PORT STATE SERVICE VERSION
7/tcp open echo
9/tcp open discard?
13/tcp open daytime Microsoft Windows USA daytime
17/tcp open qotd Windows qotd
19/tcp open chargen
22/tcp filtered ssh
23/tcp filtered telnet
80/tcp open http Paessler PRTG Traffic Grapher httpd (Indy httpd 9.0.11)
| html-title: PRTG Traffic Grapher - Monitoring Results - PRTG Traffic Graph...
|_ Requested resource was http://213.178.229.98/sensorlist.htm
| robots.txt: has 1 disallowed entry
|_ /
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
443/tcp open https?
445/tcp open netbios-ssn
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
3128/tcp open squid-http?
| http-open-proxy: Potentially OPEN proxy.
|_ Methods successfully tested: CONNECT
3389/tcp open microsoft-rdp Microsoft Terminal Service
4444/tcp filtered krb524
5060/tcp filtered sip
49152/tcp open msrpc Microsoft Windows RPC
49153/tcp open msrpc Microsoft Windows RPC
49154/tcp open msrpc Microsoft Windows RPC
49157/tcp open msrpc Microsoft Windows RPC
49158/tcp open msrpc Microsoft Windows RPC
49160/tcp open msrpc Microsoft Windows RPC
Host script results:
| smb-os-discovery: Windows 7 Ultimate 7600
| LAN Manager: Windows 7 Ultimate 6.1
| Name: WORKGROUP\SCS-PC
|_ System time: 2012-02-26 21:57:25 UTC+2
|_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.229.114:
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Microsoft IIS webserver 7.5
|_ html-title: 403 Forbidden
995/tcp open ssl/pop3 MS Exchange 2007 pop3d
|_ pop3-capabilities: USER SASL(GSSAPI PLAIN) TOP UIDL
Service Info: OS: Windows
Interesting ports on 213.178.229.118:
Not shown: 990 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
80/tcp open http Cisco IOS administrative httpd
|_ html-title: Site doesn't have a title.
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15_access
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Service Info: OS: IOS
Interesting ports on 213.178.229.129:
Not shown: 992 closed ports
PORT STATE SERVICE VERSION
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
443/tcp open ssl/http Cisco IOS administrative httpd
|_ html-title: Site doesn't have a title.
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15_access
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Service Info: OS: IOS
Interesting ports on 213.178.229.209:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS webserver 6.0
|_ html-title: Under Construction
Service Info: OS: Windows
Interesting ports on 213.178.229.210:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Microsoft IIS webserver 7.5
|_ sslv2: server still supports SSLv2
|_ html-title: IIS7
Service Info: OS: Windows
Interesting ports on 213.178.229.212:
Not shown: 973 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp closed ftp
80/tcp open http Microsoft IIS webserver 7.5
| http-auth: HTTP Service requires authentication
|_ Auth type: NTLM
2048/tcp closed dls-monitor
2065/tcp closed dlsrpn
2068/tcp closed advocentkvm
2099/tcp closed unknown
2100/tcp closed unknown
2103/tcp open msrpc Microsoft Windows RPC
2105/tcp open msrpc Microsoft Windows RPC
2106/tcp closed ekshell
2107/tcp open msrpc Microsoft Windows RPC
2111/tcp closed kx
2119/tcp closed unknown
2121/tcp closed ccproxy-ftp
2126/tcp closed unknown
2135/tcp closed unknown
2144/tcp closed unknown
2160/tcp closed unknown
2161/tcp closed apc-agent
2170/tcp closed unknown
2179/tcp closed unknown
2190/tcp closed unknown
2191/tcp closed unknown
2196/tcp closed unknown
2200/tcp closed unknown
8081/tcp closed blackice-icecap
Service Info: OS: Windows
Interesting ports on 213.178.229.213:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http-proxy SonicWALL SSL-VPN http proxy
Interesting ports on 213.178.229.214:
Not shown: 993 closed ports
PORT STATE SERVICE VERSION
23/tcp open telnet Cisco router
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
1720/tcp filtered H.323/Q.931
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Service Info: OS: IOS; Device: router
Interesting ports on 213.178.229.216:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Microsoft IIS webserver 6.0
|_ sslv2: server still supports SSLv2
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = 213.178.229.216
|_ html-title: You are not authorized to view this page
Service Info: OS: Windows
Interesting ports on 213.178.229.217:
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache Tomcat/Coyote JSP engine 1.1
|_ html-title: Apache Tomcat/5.5.9
8080/tcp closed http-proxy
Interesting ports on 213.178.229.219:
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp FileZilla ftpd 0.9.34 beta
80/tcp open http Apache httpd 2.2.11 ((Win32) mod_ssl/2.2.11 OpenSSL/0.9.8k)
|_ html-title: Site doesn't have a title (text/html).
3306/tcp open mysql MySQL 5.1.41-community
| mysql-info: Protocol: 10
| Version: 5.1.41-community
| Thread ID: 45600
| Some Capabilities: Long Passwords, Connect with DB, Compress, ODBC, Transactions, Secure Connection
| Status: Autocommit
|_ Salt: m1J`(BS\TpWC)BQQ#WnF
Service Info: OS: Windows
Interesting ports on 213.178.229.229:
Not shown: 990 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
443/tcp open ssl/http Cisco IOS administrative httpd
| http-auth: HTTP Service requires authentication
|_ Auth type: Basic, realm = level_15_access
|_ html-title: Site doesn't have a title.
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Service Info: OS: IOS

213.178.230.1/24

Starting Nmap 5.00 ( http://nmap.org ) at 2012-02-26 21:48 CET
Interesting ports on 213.178.230.3:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Microsoft IIS webserver 6.0
|_ html-title: Under Construction
Service Info: OS: Windows
Interesting ports on 213.178.230.5:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 6.0
|_ html-title: SyriaTel eLearning Portal > Home
Service Info: OS: Windows
Interesting ports on 213.178.230.15:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Microsoft IIS webserver 6.0
|_ html-title: Under Construction
Service Info: OS: Windows
Interesting ports on 213.178.230.29:
Not shown: 990 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
23/tcp filtered telnet
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
443/tcp open tcpwrapped
1720/tcp filtered H.323/Q.931
1723/tcp filtered pptp
2000/tcp filtered callbook
4444/tcp filtered krb524
5060/tcp filtered sip
Interesting ports on 213.178.230.33:
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
25/tcp closed smtp
53/tcp closed domain
80/tcp open http Microsoft IIS webserver 6.0
|_ html-title: Site doesn't have a title (text/html).
443/tcp closed https
Service Info: OS: Windows
Interesting ports on 213.178.230.34:
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
25/tcp open smtp Cisco PIX sanitized smtpd
|_ smtp-commands:
53/tcp closed domain
80/tcp closed http
443/tcp open ssl/https?
|_ sslv2: server still supports SSLv2
| html-title: Barracuda Spam & Virus Firewall: Welcome
|_ Requested resource was https://213.178.230.34/cgi-mod/index.cgi
Service Info: Device: firewall
Interesting ports on 213.178.230.35:
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
25/tcp open smtp Cisco PIX sanitized smtpd
|_ smtp-commands:
53/tcp closed domain
80/tcp open http Apache httpd 2.2.3 ((Red Hat))
|_ html-title: Test Page for the Apache HTTP Server on Red Hat Enterprise Linux
443/tcp open ssl/http Apache httpd 2.2.3 ((Red Hat))
|_ html-title: New Page 1
Service Info: Device: firewall
Interesting ports on 213.178.230.38:
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
25/tcp open smtp Cisco PIX sanitized smtpd
|_ smtp-commands:
53/tcp open domain ISC BIND 9.2.4
80/tcp open http Apache httpd 2.0.52 ((CentOS))
|_ html-title: Apache HTTP Server Test Page powered by CentOS
443/tcp open ssl/http Apache httpd 2.0.52 ((CentOS))
|_ html-title: Apache HTTP Server Test Page powered by CentOS
|_ sslv2: server still supports SSLv2
Service Info: Device: firewall
Interesting ports on 213.178.230.87:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS webserver 5.1
|_ html-title: Under Construction
Service Info: OS: Windows
Interesting ports on 213.178.230.160:
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.17 ((Win32) PHP/5.3.5)
| html-title: SVUSurvey
|_ Requested resource was http://survey.svuonline.org/limesurvey/
81/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
|_ html-title: Bad Request
110/tcp closed pop3
443/tcp closed https
2222/tcp closed unknown
Service Info: OS: Windows
Interesting ports on 213.178.230.163:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.16 ((Debian))
|_ html-title: \xD8\xA5\xD8\xB9\xD8\xA7\xD8\xAF\xD8\xA9 \xD8\xAA\xD9\x88\xD8\xAC\xD9\x8A\xD9\x87
Interesting ports on 213.178.230.165:
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
21/tcp open ftp Microsoft ftpd
80/tcp open http Microsoft IIS webserver 6.0
|_ html-title: Under Construction
Service Info: OS: Windows
Interesting ports on 213.178.230.166:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS webserver 5.0
|_ html-title: Under Construction
Service Info: OS: Windows
Interesting ports on 213.178.230.168:
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS webserver 5.0
|_ html-title: Under Construction
Service Info: OS: Windows
Interesting ports on 213.178.230.169:
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open ssl/ssl OpenSSL (SSLv3)
|_ sslv2: server still supports SSLv2
| robots.txt: has 1 disallowed entry
|_ /
443/tcp open ssl/ssl OpenSSL (SSLv3)
|_ sslv2: server still supports SSLv2
Interesting ports on 213.178.230.172:
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.16 ((Debian))
| html-title: Intelligent Student Information System
|_ Requested resource was http://213.178.230.172/isis/index.php
443/tcp open ssl/http Apache httpd 2.2.16 ((Debian))
| html-title: Intelligent Student Information System
|_ Requested resource was http://213.178.230.172/isis/index.php
Interesting ports on 213.178.230.174:
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
|_ html-title: 403 Forbidden
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING LOGIN-DELAY(10) TOP
143/tcp open imap Courier Imapd (released 2005)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Apache httpd
|_ sslv2: server still supports SSLv2
|_ html-title: Did not follow redirect to https://213.178.230.174/login.php and no page was returned.
2222/tcp open ssh OpenSSH 4.7 (protocol 2.0)
| ssh-hostkey: 1024 4e:26:6d:85:f4:ae:c2:be:34:66:a4:fa:7d:9b:9d:90 (DSA)
|_ 2048 3b:81:77:7e:02:c8:ce:b3:05:5e:fe:2d:89:db:19:b9 (RSA)
Interesting ports on 213.178.230.178:
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Microsoft IIS webserver 7.5
|_ html-title: 403 Forbidden
587/tcp open smtp Exim smtpd
| smtp-commands: EHLO mail.lead-ac.com Hello elmariachi.toonux.com [88.190.24.19], SIZE 52428800, PIPELINING, STARTTLS, HELP
|_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
Service Info: OS: Windows

 

 

Billets en relation :

  • #OpSyria S04E01 : The Iron Strike
  • Ethique en toc…
  • #OpSyria : BlueCoat maître artisan de la censure syrienne
  • #Syria #Leak: le pilote ou l’avion
  • Ah tiens, Qosmos commence à nettoyer les intertubes
Facebook 49 Twitter 109 Google+ 3 Print Mail

Envoyer cet article par courriel

Quel est votre nom

Veuillez indiquer ci-dessous les adresses courriel de ceux à qui vous souhaitez envoyer cet article: #OpSyria S04E02 : The Iron Strike investigation, now open for fun and profit

Entrez une adresse courriel par ligne sans dépasser un total de 5.

Envoyer

Fermer

Posté dans: A la Une, Deep Packet Inspection, Rainbow Hat, Technos

S'abonner

Si vous avez apprécié cet article, abonnez vous gratuitement pour ne plus rien manquer.

Subscribe via RSS Feed Rejoignez-nous sur Twitter

56 commentaires sur "#OpSyria S04E02 : The Iron Strike investigation, now open for fun and profit"

Trackback | Feed RSS des commentaires

  1. keller dit :
    29 février 2012 à 16 h 03 min

    Monitoring systems aRE very interesting, … (je suppose)

    • Fabrice Epelboin dit :
      29 février 2012 à 16 h 12 min

      corrigé, thanks :-)

  2. Beuhsse dit :
    29 février 2012 à 16 h 13 min

    La « management », ça pourrait pas être un Director ?
    Le Director c’est une appliance de management pour pousser la même conf sur plein de BlueCoats d’un coup :
    http://www.bluecoat.com/products/proxysg/addons/director

    • bluetouff dit :
      29 février 2012 à 16 h 24 min

      Possible, en tout cas il a une ip bien à lui sur leur lan.

  3. Baronsed dit :
    29 février 2012 à 16 h 27 min

    so hardcore oO
    Et vous leur avez laissé des surprises ou c’est pour faire réagir ?

    • bluetouff dit :
      29 février 2012 à 16 h 28 min

      Nous avons bien une idée en tête

      • duck dit :
        29 février 2012 à 19 h 56 min

        Roo les cachottiers =D

  4. Saf dit :
    29 février 2012 à 18 h 28 min

    Bravo pour TOUT le travail…………..

    Fidèlement.

  5. Fabio Chiusi dit :
    29 février 2012 à 20 h 06 min

    The Bloomberg Businessweek link you provided on Area Spa is broken.

    • estya_ dit :
      29 février 2012 à 20 h 11 min

      it works for me. fixed or ..?

    • bluetouff dit :
      29 février 2012 à 21 h 42 min

      I fixed it yep ;)

  6. estya_ dit :
    29 février 2012 à 20 h 10 min

    omagad…
    z’êtes sûrs que c’est pas des serveurs de test de Qosmos hein ?
    des fois que …

    • estya_ dit :
      29 février 2012 à 20 h 12 min

      oops my bad, le lien est pas bon en effet.

    • estya_ dit :
      29 février 2012 à 20 h 32 min

      chuis super balèze ce soir en plus je me réponds à côté -_-’

  7. duck dit :
    29 février 2012 à 21 h 27 min

    Les cisco/cisco ont changé =(

    • bluetouff dit :
      29 février 2012 à 21 h 36 min

      Non par exemple celui la http://213.178.246.169/ passe encore très bien

  8. hdg dit :
    1 mars 2012 à 10 h 21 min

    La partie « Hey admins you seem to like young kids » est tout simplement à gerber et cela confirme mon envie de vociférer des noms scientifiques d’oiseaux.

    Courage à la rédaction.

  9. Madouf dit :
    1 mars 2012 à 11 h 46 min

    C’est une incitation à attaquer, pour commencer sa phrase par:
    « Greetings, Hackers and Freedom fighters »

    • Madouf dit :
      1 mars 2012 à 11 h 46 min

      ?

      • Madouf dit :
        1 mars 2012 à 11 h 47 min

        Je suis curieux de savoir si la DST tolere ce genre d’actes de guerre.

        • Madouf dit :
          1 mars 2012 à 11 h 55 min

          http://info.france2.fr/sciences-tech/hacker-est-un-acte-de-guerre-selon-les-usa-69011570.html

    • bluetouff dit :
      1 mars 2012 à 11 h 53 min

      1° Tes trolls systématiques commencent à me gonfler Madouf.

      2° Pour ta gouverne la DST n’existe plus, c’est la DCRI maintenant.

      3° Tu es pénaliste international pour parler d’acte de guerre ?

      • Madouf dit :
        1 mars 2012 à 11 h 57 min

        DST, DCRI, c’est le concept qui est derrière qui compte, par le nom ou mon erudition…

        Troll ou pas troll, tu sais…

        • Madouf dit :
          1 mars 2012 à 11 h 57 min

          Le truc c’est qu’apres tu veux crier au troll quand on te reprochera d’etre une officine de la CIA (voir autre sujet sur la syrie)

          • Giloux dit :
            1 mars 2012 à 12 h 14 min

            Les grandes agences telles que la CIA n’ont à mon avis pas besoins de ça.

            Il faut réaliser que « le reseau » est un nouvel acteur mondial à prendre en compte. Il n’est à la solde de personne et est incontrôlable. A mon sens ceci en est l’une des manifestations.

            Mais c’est juste mon avis hein…

          • Madouf dit :
            1 mars 2012 à 12 h 25 min

            on s’en fout que blutouff et reflets soient ou non des officines de la CIA.

            C’est simple: je fais tout comme si j’etais quelque chose et quand on me le reproche, je crie au troll.
            voila, ce que je critique.

  10. Madouf dit :
    1 mars 2012 à 11 h 55 min

    http://info.france2.fr/sciences-tech/hacker-est-un-acte-de-guerre-selon-les-usa-69011570.html

    lire ici

    • Madouf dit :
      1 mars 2012 à 12 h 12 min

      apres un jour, tu t’etonneras d’avoir des problemes avec donc la DCRI et tu feras un papier pour la defense de la liberté d’expression, la ou en fait, tu pousses à t’en prendre aux interets souverain de certains pays.
      Par exemple la france…

      Bon, la j’en suis certain, elle te soutient, mais dans l’absolu tu n’es pas censé faire des appels qui sonnent comme des appels à t’en prendre aux interets des etats.
      Il est certain que tot ou tard, ca ne sera plus tolerable…

      Ce n’est pas pour troller, je donne juste mon opinion, je ne cherche pas à provoquer des quantités de reactions hostiles ou favorable.
      Souviens toi de ce que je te dis.
      Si ca te reussi alors je me poserai d’autres questions.

      • bluetouff dit :
        1 mars 2012 à 12 h 28 min

        Nan mais on est balaises nous, on est une officine de la CIA qui a infiltré radio libertaire :)

      • bluetouff dit :
        1 mars 2012 à 12 h 31 min

        Et moi je suis un agent de la CIA qui a défendu et défend bec et ongles Wikileaks : http://bluetouff.com/geekstuff/net/cablegate-net/

        c’est original non ?

        • Madouf dit :
          1 mars 2012 à 12 h 35 min

          Discuter de ça serait effectivement assez interminable.

          Je regarde a quoi meme cet article, c’est tout.

        • Gilles dit :
          1 mars 2012 à 12 h 37 min

          c’est une bonne couverture ! :-)

        • Madouf dit :
          1 mars 2012 à 12 h 37 min

          http://fr.wikipedia.org/wiki/Idiot_utile

          • Fabrice Epelboin dit :
            1 mars 2012 à 22 h 17 min

            Pas sûr que tu soit si utile que ça Madouf :D

          • bluetouff dit :
            1 mars 2012 à 22 h 19 min

            tatatata, laisse moi préparer le terrain libyen pour la CIA http://bluetouff.com/2012/03/01/gerard-longuet-en-vrp-de-la-mort-en-libye/

      • Fabrice Epelboin dit :
        1 mars 2012 à 23 h 21 min

        apres un jour, tu t’etonneras d’avoir des problemes avec donc la DCRI

        MOUAHAHAHAHAHAHAHAHA

        C’est la meilleur de l’année…

        • Madouf dit :
          2 mars 2012 à 0 h 11 min

          pourquoi, ils sont d’accord ?

        • Jondoe dit :
          2 mars 2012 à 9 h 47 min

          Madouf a parfaitement raison et c’est ce que je m’échine à vous expliquer M Ebelpoin.Tout comme vous je suis hostile au « dpi »(en temps de paix)cela peut vous paraitre étrange mais c’est comme ça.Actuellement vous menez des attaques informatiques hostiles contre un pays souverain confronté à une rébellion armée dont les valeurs et les choix de société sont à mille lieux des vôtres,ce malheureux pays est profondément déstabilisé par des puissance étrangères.Au même titre que ceux qui financent les groupes armés,pareil à ceux qui arment ces mêmes groupes vous vous livrez en temps de guerre à des actes, même à distance , qui peuvent être considérés comme des actes de guerre.Vous vous placez donc clairement dans un camp et ceci de manière active,vous ajoutez le chaos et le désordre dans une situation tendue à l’extrême,vous envenimez une situation déjà dangereuse.En êtes vous parfaitement conscient ?

          • Jondoe dit :
            2 mars 2012 à 10 h 09 min

            M Ebelpoin,le simple fait que vous puissiez et publiquement en plus organiser et orchestrer ces attaques prouve de facto que vous avez une autorisation tacite(dans le cas contraire…vous seriez déjà entendus) .Vous êtes donc parfaitement « sous contrôle » et je pense même qu’à l’avenir s’il vous arrivait des « ennuies » avec vos autorités vous pourriez allégrement faire valoir ces « faits d’armes ». Ce sont des choses qui ne s’oublient pas, surtout quand elles ont été commises sciemment.

  11. Madouf dit :
    1 mars 2012 à 12 h 49 min

    Tiens un autre concept interessant:

    « la guerre par proxy »

    http://fr.wikipedia.org/wiki/Guerre_par_procuration

  12. keller dit :
    1 mars 2012 à 13 h 34 min

    Madouf, pourrais tu synthétiser tes idées dans un commentaire plutôt que dans plusieurs (par exemple : 1 mars 2012 at 11 h 46 min), cela est difficile rend la lecture difficile et l’argumentaire n’en ai que moins sérieux … Tu passes, à mon sens, pour un gamin excité.

    Quand aux actes de guerre de notre rédacteur : c’est effectivement un agent de la CIA (ou NSA ?!) avec une excellente couverture et en tant que tel il a tous les droits (bah oui les USA toussa toussa)

    • Madouf dit :
      1 mars 2012 à 14 h 26 min

      « Madouf, pourrais tu synthétiser tes idées dans un commentaire  » >> non, je suis un gamin excité.

      « Quand aux actes de guerre de notre rédacteur : c’est effectivement un agent de la CIA (ou NSA ?!) avec une excellente couverture et en tant que tel il a tous les droits (bah oui les USA toussa toussa) » >>

      si tu le dis… je me preoccupe juste du fait que si c’etait le cas, il ne ferait peut etre pas autre chose que ce qu’il fait en ecrivant cet article… (que j’interprete comme un appel au piratage d’une infrastructure d’un etat etranger)
      C’est juste que les gentils et les mechants, on nous les designe à coup de propagande (sans consideration des consequences geopolitiques, si on mettait quelqu’un d’autre à la place).
      Tiens, je suis sur que Israel serait ravie d’avoir des islamistes en Syrie…

      • Madouf dit :
        1 mars 2012 à 14 h 36 min

        Je suis sur aussi que la turquie sera ravie d’avoir une zone de guerre (donc avec des armes en circulation), juste a coté du kurdistan.

        Il ne faut pas jouer avec le feu et aller gueuler des slogans « anti armement » et « anti militariste » quand on seme la guerre.

    • Madouf dit :
      1 mars 2012 à 14 h 28 min

      En fait, tu sais ce que je suis ?
      Je suis un justicier dans la ligné des combattant espagnol de 36 !
      Un insurgé anarchiste qui se bat contre l’oppression, « no passaran, no passaran »…
      C’est juste que je ne vois pas les fils que le marionnettiste à mis derrière mon dos…

      • duck dit :
        1 mars 2012 à 19 h 28 min

        Le conseil de structurer tes commentaires te permettrais de passer pour plus sérieux. Alors pourquoi refuser ?

        • Madouf dit :
          1 mars 2012 à 19 h 37 min

          et l’article, t’en pense quoi ?

  13. Madouf dit :
    1 mars 2012 à 22 h 35 min

    Tiens, grace à cet article j’ai compris comment on fera pour nous enroler dans une eventuelle guerre:
    Il suffira de dire que tous les activistes, pour la liberté, pour la démocratie, pour plus justice, sont en fait les responsables du fait que la situation degenere…
    Il faut juste trouver un moyen credible pour que tout le monde mette le doigt dans l’engrenage.
    Genre anonymous responsable de la 3eme guerre mondiale… mais nous serons tous anonymous…

    Par exemple, pour transformer les journalistes en info-guerrier, c’est facile:

    - le journaliste a besoin de la liberté d’expression.
    - la liberté d’expression a besoin d’un systeme qui la permette.
    - donc le journaliste est contre le totalitarisme.
    - le jounaliste n’est donc, a priori, pas neutre dans un conflit censé faire tomber une dictature.

    et donc le journaliste:
    - va dans un pays pour servir de bouclier humain à des combattants nommés « civils ».
    - donne des informations pour mettre à mal une infrastructure etrangere (mais des qu’il s’agit de nos forces à nous, on meuble le vide, cf guerre d’irak de 1991).
    - m’explique, sans rire, qu’un bombardement de civils fait 18 morts en bombardant de manière intensive (l’artilleur doit etre mauvais).

    Et finalement, m’explique qu’il presente les choses de manière objective… ben voyons…
    (ne vous inquietez pas, vous aurez la vérité quand tout sera fini et le journaliste admettra avoir forcé un peu le trait, mais il n’avait pas le choix, vous comprenez).

    Allez donc faire la guerre…
    Apres tout, ceux qui ont interet à la faire, sont ceux qui ont des armes et dont le systeme s’ecroule…
    Or, vous etes donc tout aussi content, quand le systeme se pete la gueule.
    C’est juste que ceux qui nous commandent ne l’accepteront pas et vous ne faites que jouer leur jeu…

    J’espere que vous garderez à l’esprit que tuer des gens, c’est mal.

    • Madouf dit :
      1 mars 2012 à 22 h 46 min

      ce n’est meme pas original, ce que je raconte:
      http://en.wikipedia.org/wiki/Gavrilo_Princip

      • jaquotte75 dit :
        2 mars 2012 à 11 h 54 min

        C’est tellement évident Madouf que je n’arrive toujours pas à comprendre comment des gens supposément intelligent puissent tomber dans une telle manipulation.Le jeune age? le manque de recul?
        Dans les années 70 il y avait des groupes de combats installés dans toute l’Europe par les USA et l’OTAN ils avaient pour nom Gladio, ils ont été impliqués dans des attentats terroristes des meurtres politiques ,gare de Bologne aussi dans l’attentat à la fête de la bière à Munich.Ces réseaux atlantistes doivent toujours exister en parallèle aujourd’hui nous avons la nébuleuse anonymous bien moins dangereuse mais tout aussi efficace dans le cyber espace.
        Le plus drôle de l’histoire si on peut dire c’est qu’ils ne se rendent même pas compte des intérêts qu’ils servent,ils sont habilement guidés , gérés.
        Ceux qui se permettent d’attaquer des « cibles amis » sont sanctionnés,arrestations d’anonymous par ci par là qui ne fait que renforcer le sentiment « rebelle » de cette masse qui agit inconsciemment aux ordres.Prenez un peu de recul et regardez quels sont les derniers pays victimes , ils coïncident parfaitement aux ambitions néo coloniales des Occidentaux et de leurs alliés d’aujourd’hui les Monarchies du Golfe.

        • kitetoa dit :
          2 mars 2012 à 12 h 03 min

          Vous avez oublié de préciser que Reflets.info est à la solde de la CIA et de Al Qaeda. Touff est barbu, ce qui est une preuve évidente, il me semble. Quant à moi, tout le monde sait que je suis un crypto-anarcho-gauchiste manipulé par les Etats-Unis et Israël.

          • M.duck dit :
            2 mars 2012 à 12 h 26 min

            et pédo-nazis il ne faut pas le cacher.

          • Anonyme dit :
            2 mars 2012 à 13 h 52 min

            Vous êtes au mieux totalement inconscients des enjeux géostratégiques actuels et de leurs conséquences à venir au pire …..(je vous laisse compléter).
            Ce que je peux remarquer c’est que vous n’avez aucun mais strictement aucun argument qui pourraient me contredire dans le choix de vos cibles,choix qui coïncide parfaitement aux actions belliqueuses atlantistes.

            Vous êtes des petits soldats numériques »Otanesques » de l’Occident et de ses alliés actuels les pires régimes moyenâgeux du Golfe.
            Vos seules tentatives de réfutations sont soit une dérision pathétique , soit qualifier votre contradicteur d’extrême droite ou proche.

          • Sweetsurfer dit :
            2 mars 2012 à 19 h 00 min

            D’ailleurs si on prend les lettres de FABRICE EPELBOIN on trouve facilement:
            REEL PION CIA !!! Etonnant non!?
            Et là vous me dites il reste FBEB !
            FB = Federal Builduing !
            EB = Etage B

            3e bureau à droite, demander JoHn Doe !

            Ah ah ah! Ca rigole moins là! Le masque tombe !

            Bon ok, j’y vais !

            Sinon continuez comme çà! Bien à vous !

  14. GeoOrw dit :
    2 mars 2012 à 13 h 00 min

    Une petite vulgarisation serait possible pour les néophytes comme moi?
    Juste en 2-3 phrases ce que vous avez trouvé parce que là, à part qu’ils ont laissé des login cisco/cisco, je comprends pas la trouvaille.

  15. MrT dit :
    2 mars 2012 à 13 h 03 min

    Je suis un nouveau lecteur de reflets et je suis tellement déçu que vous ne soyez que des agents du GRAND COMPLOT (ouais ouais, vous savez maintenant que je sais pour votre alliance avec la CIA …). Bon trêves de plaisanteries ;)

    Il est vrai que nous n’avons qu’un point de vue partiel de ce qui se passe dans de nombreux pays.
    Il ne nous appartient pas de juger un régime sous prétexte que ses valeurs sont éloignées des nôtres.

    Cependant, il existe une notion assez ancienne, qu’on appelle l’humanisme (le pays des bisounours toussa …).
    Cette notion transcende à mon sens les frontières et ne devrait faire l’objet d’aucun enjeu partisan.
    Il ne s’agit pas du « droit d’ingérence » si cher à Kouchner mais bien de l’idée que tous les peuples sont égaux et ont un minimum de droits.

    Faisons le parallèle avec les bisounours justement (les « civils »). Nous n’avons pas à les armer pour contrer le professeur Sans Cœur au risque qu’ils deviennent eux mêmes de futures menaces
    pour d’autres bisounours…
    Mais quand les bisounours se font taper sur la tête et marcher sur les pieds, on a le droit de leur offrir des casques et des chaussures de sécurité.
    Et peu importe qu’il existe des bisounours barbus et enturbannés qui prônent des idées contraires aux nôtres …
    Quand quelqu’un meure de faim ou est blessé, on a le droit de lui donner de la nourriture ou des soins (quelques soient ses idées).

    A mon sens, les actions des divers hackers sont légitimes.

    Ce qui est discutable, c’est la volonté de certains pays d’agir directement sur les choix politiques d’un peuple.
    Ce qui est intolérable c’est de ramener une lutte pour la survie à une simple guerre de religions (ou de civilisations, au choix de M. Guéant ;) )
    Ce qui est ridicule c’est de nier des faits en les mettant sur le compte du GRAND COMPLOT.

    N’oublions pas qu’en démocratie on peut choisir nos dirigeants et les inciter à accompagner les changements politiques des pays voisins plutôt que de chercher à en profiter.
    Encore faudrait-il qu’on ait une certaine transparence de la part des responsables politiques … mais il existe toujours wikileaks et d’autres sources pour faire son choix ;)

  16. duck dit :
    3 mars 2012 à 22 h 39 min

    Voilà un commentaire pertinent je trouve !

Pas Sage En Seine 2013

Teweetin’ Reflets

)( Amesys et la surveillance de masse : du fantasme à la dure réalité goo.gl/fb/Vk6hT

Il y a une heure De reflets.info's Twitter via Google

@THD_IT Star Wars, ze return of ze return ? @epelboin

Hier De reflets.info's Twitter via Twitter for Mac

@epelboin Yes we can. What's next ?

Hier De reflets.info's Twitter via Twitter for Mac

@vincib @_Kitetoa_ @iteanu #cnil #spam le jour ou ils decouvriront un tracker bittorrent en ip crowding....

Hier De reflets.info's Twitter via Plume for Android

RT @Mou_Gui #Déportation #Épuration Je n'avais pas vu ce dernier titre-vomi de @BVoltaire -> bvoltaire.fr/christinetasin… Quelle bande de crevards...

Il y a 2 jours De reflets.info's Twitter via Twitter for Mac

faire un don

  • À propos
  • Comment faire un don ?
  • F.A.Q.
  • Rebuildicious
  • Reflets IRC
  • Epic IRC Quotes
  • AntholoTweets
  • Goodies
    • Traveling Goodies…
  • SPANOU : le best of
  • Contacts

Hackito

NosuchCon

THSF

Pas Sage en Seine

Radio Reflets

  • Radio Reflets #1
  • Radio Reflets #2
  • Radio Reflets #3
  • Radio Reflets Bêta-0.1

Articles récents

  • Amesys et la surveillance de masse : du fantasme à la dure réalité
  • Le Monde est-il encore un journal d’information ?
  • Ma contre-histoire de l’internet
  • Dites donc, chers représentants, vous n’avez pas honte ?
  • Reflets et Telecomix inspirent un épisode de The Good Wife
  • #Apple #SIRI et la conservation de données biométriques
  • L’Arabie Saoudite cherche à surveiller #WhatsApp et #Viber (et bien d’autres…)
  • Amesys, DGSE, DRM, et si…
  • Le Quai d’Orsay se dote d’un expert es-numérique
  • Qui vole un œuf violera un jour la bouchère
  • @Marianne2fr, TOR, le poids des mots, le choc des pixels : plongée dans le journalisme à la con
  • Amesys : Reflets.info invite Laurent Fabius à aller au delà des mots
  • On aimerait tant pouvoir croire les démocraties…
  • PNIJ Leak : la plateforme nationale des interceptions judiciaires ou l’histoire d’une fuite
  • La Justice relaxe le co-fondateur de Reflets dans une rocambolesque affaire de piratage supposé de données publiques
  • Arnaque à la résiliation par #SFR ? Ceci est un article préventif (poke @SFR_SAV)
  • Radio Reflets #3
  • #UnBonJuif et la fin de la Ve République
  • Dieu est-il homosexuel ?
  • La politique française, c’est comme le porno

Archives

  • mai 2013 (12)
  • avril 2013 (25)
  • mars 2013 (29)
  • février 2013 (19)
  • janvier 2013 (33)
  • décembre 2012 (12)
  • novembre 2012 (26)
  • octobre 2012 (33)
  • septembre 2012 (29)
  • août 2012 (42)
  • juillet 2012 (74)
  • juin 2012 (34)
  • mai 2012 (38)
  • avril 2012 (37)
  • mars 2012 (47)
  • février 2012 (42)
  • janvier 2012 (74)
  • décembre 2011 (47)
  • novembre 2011 (65)
  • octobre 2011 (78)
  • septembre 2011 (58)
  • août 2011 (49)
  • juillet 2011 (26)
  • juin 2011 (70)
  • mai 2011 (68)
  • avril 2011 (53)
  • mars 2011 (66)
  • février 2011 (73)
  • janvier 2011 (72)
  • décembre 2010 (2)

Derniers articles

  • Amesys et la surveillance de masse : du fantasme à la dure réalité 18 mai 2013
  • Le Monde est-il encore un journal d’information ? 16 mai 2013
  • Ma contre-histoire de l’internet 16 mai 2013
  • Dites donc, chers représentants, vous n’avez pas honte ? 16 mai 2013
  • Reflets et Telecomix inspirent un épisode de The Good Wife 14 mai 2013
  • #Apple #SIRI et la conservation de données biométriques 14 mai 2013
  • L’Arabie Saoudite cherche à surveiller #WhatsApp et #Viber (et bien d’autres…) 14 mai 2013
  • Amesys, DGSE, DRM, et si… 14 mai 2013
  • Le Quai d’Orsay se dote d’un expert es-numérique 13 mai 2013
  • Qui vole un œuf violera un jour la bouchère 13 mai 2013

Mots-clefs

#rev11 Amesys Anonymous Banques Bienvenue dans la com Bull CDS Censure Crise de la dette souveraine Crise financière Deep Packet Inspection DPI démocratie Eagle Economie Espagne Europe Facebook featured FMI France François Hollande Google Grèce HADOPI Internet Kadhafi Libye Maroc Neutralité du Net OpSyria Politique Presse Qosmos Reflets Sarkozy Sarkozy Surveillance Syrie Sécurité Telecomix TMG Tunisie UMP Égypte

Commentaires récents

  • kitetoa dans Ma contre-histoire de l’internet
  • kitetoa dans Amesys et la surveillance de masse : du fantasme à la dure réalité
  • manhack dans Ma contre-histoire de l’internet

Les plus commentés

  • Fleur Pellerin annonce la mise à mort de la neutralité du net
    363 comments
  • Reflets met les pieds dans le plat des présidentielles
    204 comments
  • DiY : une maison bio-climatique autonome en énergie, why not ?
    175 comments
  • La surveillance numérique : une arme de guerre (presque) assumée
    174 comments
  • Le PUR fail : Ze blaireau takedown #agenceh #eurorscg #hadopi
    170 comments

© 2013 Reflets. | Mentions Légales | Hosted by Toonux