#OpSyria S04E02 : The Iron Strike investigation, now open for fun and profit
Greetings, Hackers and Freedom fighters. By the end of the Season 3 of #OpSyria, Telecomix, FHIMT and Reflets published 54Go of Syrian Censorship logs. The Season 4 is called « The Iron Strike« , or how to strike the FastIron Cache of the syrian’s Net censorship infrastructure.
FastIron Cache is composed of 6 BlueCoat SG400, 4 NetApp and three others machines (ServerIron-S, ServerIron-M and Management : last one might host the management interface of the syrian censorship) probably very recently acquired by the Syrian regime thanks to an italian integrator, AreaSpa (sources here and here).
AreaSpa was not alone. This system includes americans BlueCoat and NetApp hardware providers, Qosmos Deep Packet Inspection software french provider, and Utimaco software german provider. AreaSpa and theses companies sold and set up this system last summer. They cannot tell they did not know that the purpose of it was to track and kill dissidents.
So we pushed our investigation further to localize theses machines. They’re in Syria, up and running.
Today, we share it with the world.
Enjoy.
The Target
The Syrian Computer Society is hosting Gov and some Corporate appliances or web applications. This ISP has been created by Bachar El Assad himself. You can find the Facebook SCS page here.
* netname: sy-scs-net * mnt-routes: SCS-NOC * mnt-routes: STEMNT-1 * descr: SCS-NET is an ISP based in Damascus Syria
BlueCoat devices are up and running
… And we found new ones !
-
http://213.178.224.130/BigIron_Secondry/view.htm?id={5F28B141-DCE8-45DB-8ECF-72345FC1C4BB} -
http://213.178.224.130/1_BigIronMaster/view.htm?id={0875FCE9-AFAA-4A28-9D32-20B1C0CBF333} -
http://213.178.224.130/sensor.htm?id=%7BDD150884-1A47-455E-9455-E0799E1F326F%7D
-
http://213.178.224.130/sensor.htm?id={EE91EE64-CFAC-4401-B8CB-449CC04E3008}
The censorship system might cache trafic and store requests done to the Bluecoat proxys. Government can do man in the middle attack against the whole population. Once stored, a huge database can index the requests, so the regime has the perfect tool to track any dissident web activities.
Monitoring systems uncovered
Monitoring systems are very interesting, they reveal more than the whole infrastructure and downtimes. They reveal interesting LAN IP. The PRTG used is old, very old… and not up to date, at all.
This is monitoring the IronFast Cache and more …
http://213.178.224.137/sensorlist.htm
… But Bachar’s monitoring is often down. No worry, you can download a useful pdf here.
This one is monitoring Gov machines (DHost2) and some Bluecoat devices can be found here
http://213.178.224.130/prtg.htm :
And here 3 others monitoring systems :
http://213.178.229.98/sensorlist.htm http://213.178.224.153:8089/sensorlist.htm http://213.178.226.208/ (password protected)
The FastIron Caches (Lan : 192.168.57.100)
- BlueCoat : 77.44.210.13
- BlueCoat : 77.44.210.179
- BlueCoat : 77.44.210.178
- BlueCoat : 213.178.244.14
- BlueCoat : 213.178.244.175
- BlueCoat : 213.178.244.174
- NetApp : 77.44.210.6
- NetApp : 213.178.244.5
- NetApp : 213.178.244.173
- NetApp : 77.44.210.176
Identification of the machines is confirmed by fingerprinting obtaine with the -A option of NMAP.
You can get their uptime thanks to HPING3 using this command :
# hping3 -c 2 -p 443 --tcp-timestamp -S 77.44.210.176 | grep uptime
Do yo like Cisco ?… Bachar does !
* 213.178.245.243 / Login : cisco / Password : cisco * 213.178.245.242 / Login : cisco / Password : cisco * 213.178.245.241 / Login : cisco / Password : cisco * 213.178.245.225 / Login : cisco / Password : cisco * 213.178.246.169 / Login : cisco / Password : cisco * 213.178.250.70 / Login : cisco / Password : cisco * 213.178.252.161 / Login : cisco / Password : cisco * http://213.178.245.227:2002/
SCS’s hosted Bank printers can send you scans and more
Break into the Al-Sharq bank papers secrets.
http://213.178.228.169
Get the adress book, insert your mail and get notified…
http://213.178.228.169/hp/device/this.LCDispatcher?nav=hp.AddressBook
… or configure a remote wins server…
http://213.178.228.169/hp/device/this.LCDispatcher?nav=hp.Folders
Hey admins you seem to like young kids
Googling those specific SCS IP ranges we found this… a nasty bastard asking for some suggestive stuff on a russian board :
Dear Hisham, we come in peace
Hisham is developper, working on of the most interesting ranges with his laptop… Guess on what :
Interesting ports on 213.178.224.148 Not shown: 975 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp FileZilla ftpd 0.9.39 beta 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Jetty httpd 6.1.22 |_ html-title: Error 404 NOT_FOUND 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open netbios-ssn 990/tcp filtered ftps 1099/tcp open jrmi Java RMI 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2869/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) 4444/tcp filtered krb524 5060/tcp filtered sip 5357/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) |_ html-title: Service Unavailable 8080/tcp open http Jetty httpd 6.1.22 |_ html-title: Error 404 - Not Found 8088/tcp open http Jetty httpd 6.1.22 |_ html-title: Error 404 - Not Found 8443/tcp open ssl/http Jetty httpd 6.1.22 |_ html-title: Error 404 - Not Found 16993/tcp open tcpwrapped 49152/tcp open msrpc Microsoft Windows RPC 49153/tcp open msrpc Microsoft Windows RPC 49154/tcp open msrpc Microsoft Windows RPC 49158/tcp open msrpc Microsoft Windows RPC 49159/tcp open unknown Service Info: OS: Windows
Host script results: | smb-os-discovery: Windows 7 Professional 7600 | LAN Manager: Windows 7 Professional 6.1 | Name: WORKGROUP\HISHAM-LAPTOP |_ System time: 2012-02-26 12:10:35 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Reflets’ tourism office Syrian tour
Let’s take a tour on Bachar’s IP range.
77.44.210.1/24
Interesting ports on 77.44.210.6: Not shown: 979 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http? |_ html-title: Access Denied 81/tcp open http-proxy NetApp NetCache http proxy 6.0.7 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open http-proxy NetApp NetCache http proxy 6.0.7 514/tcp open login Cisco/NetApp logind 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3128/tcp open squid-http? 4444/tcp filtered krb524 5060/tcp filtered sip 8000/tcp open http-proxy NetApp NetCache http proxy 6.0.7 8008/tcp open http-proxy NetApp NetCache http proxy 6.0.7 8080/tcp open http-proxy? 8081/tcp open http-proxy NetApp NetCache http proxy 6.0.7 8088/tcp open http-proxy NetApp NetCache http proxy 6.0.7 8090/tcp open http-proxy NetApp NetCache http proxy 6.0.7 9090/tcp open http-proxy NetApp NetCache http proxy 6.0.7
Interesting ports on 77.44.210.7: Not shown: 989 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http-proxy NetApp NetCache http proxy 6.0.7 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 8080/tcp open http-proxy NetApp NetCache http proxy 6.0.7
Interesting ports on 77.44.210.15: Not shown: 985 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 53/tcp open domain? 80/tcp open http? |_ html-title: Access Denied 81/tcp open http-proxy BlueCoat SG-400 http proxy 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3128/tcp open squid-http? 4444/tcp filtered krb524 5060/tcp filtered sip 8080/tcp open http-proxy? 8082/tcp open ssl/blackice-alerts? |_ sslv2: server still supports SSLv2
Interesting ports on 77.44.210.176: Not shown: 979 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 53/tcp open domain 80/tcp open http? |_ html-title: Access Denied 81/tcp open http-proxy NetApp NetCache http proxy 6.0.7 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open http-proxy NetApp NetCache http proxy 6.0.7 514/tcp open login Cisco/NetApp logind 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3128/tcp open squid-http? 4444/tcp filtered krb524 5060/tcp filtered sip 8000/tcp open http-proxy NetApp NetCache http proxy 6.0.7 8080/tcp open http-proxy? 8081/tcp open http-proxy NetApp NetCache http proxy 6.0.7 8088/tcp open http-proxy NetApp NetCache http proxy 6.0.7 8090/tcp open http-proxy NetApp NetCache http proxy 6.0.7 9090/tcp open http-proxy NetApp NetCache http proxy 6.0.7
213.178.224.1/24
Interesting ports on 213.178.224.1: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp FileZilla ftpd 0.9.37 beta 443/tcp closed https 3389/tcp open microsoft-rdp Microsoft Terminal Service Service Info: OS: Windows
Interesting ports on 213.178.224.5: Not shown: 983 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 25/tcp filtered smtp 80/tcp open http? |_ html-title: Access Denied 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 280/tcp open tcpwrapped 1718/tcp filtered unknown 1719/tcp filtered unknown 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3128/tcp open squid-http? 4444/tcp filtered krb524 5060/tcp filtered sip 5061/tcp filtered sip-tls 8080/tcp open http-proxy?
Interesting ports on 213.178.224.50: Not shown: 985 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp ProFTPD 1.3.2 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: WORKGROUP) 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 8383/tcp open http Apache httpd 2.2.12 ((Ubuntu)) |_ html-title: 401 Authorization Required | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = Section Name 12000/tcp open cce4x? 16000/tcp open unknown 16001/tcp open tcpwrapped
Host script results: | smb-os-discovery: Unix | LAN Manager: Samba 3.4.0 | Name: Unknown\Unknown |_ System time: 2012-02-26 12:11:45 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.224.100: Not shown: 993 filtered ports PORT STATE SERVICE VERSION 80/tcp open http? |_ html-title: Site doesn't have a title (text/html). 443/tcp open https? 465/tcp open smtps? 912/tcp open vmware-auth VMware Authentication Daemon 1.0 (Uses VNC, SOAP) 993/tcp open imaps? 995/tcp open pop3s? 3389/tcp open ms-term-serv?
Interesting ports on 213.178.224.130: Not shown: 980 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Paessler PRTG Traffic Grapher httpd (Indy httpd 9.0.11) | html-title: PRTG Traffic Monitor - Monitoring Results - PRTG Traffic Graph... |_ Requested resource was http://213.178.224.130/prtg.htm 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open netbios-ssn 1110/tcp open tcpwrapped 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 19780/tcp open unknown 49152/tcp open msrpc Microsoft Windows RPC 49153/tcp open msrpc Microsoft Windows RPC 49154/tcp open msrpc Microsoft Windows RPC 49155/tcp open msrpc Microsoft Windows RPC 49156/tcp open msrpc Microsoft Windows RPC 49159/tcp open msrpc Microsoft Windows RPC Service Info: OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows 7 Ultimate 7600 | LAN Manager: Windows 7 Ultimate 6.1 | Name: WORKGROUP\SCS-NET-PC |_ System time: 2012-02-26 12:10:54 UTC+2
Interesting ports on 213.178.224.137: Not shown: 986 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Paessler PRTG Traffic Grapher httpd (Indy httpd 9.0.11) | html-title: PRTG Traffic Grapher - Monitoring Results - PRTG Traffic Graph... |_ Requested resource was http://213.178.224.137/sensorlist.htm | robots.txt: has 1 disallowed entry |_ / 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open tcpwrapped 1025/tcp open msrpc Microsoft Windows RPC 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3306/tcp open mysql MySQL 5.0.51b-community-nt | mysql-info: Protocol: 10 | Version: 5.0.51b-community-nt | Thread ID: 283 | Some Capabilities: Connect with DB, Compress, Transactions, Secure Connection | Status: Autocommit |_ Salt: !hiWV,v23ISHO5Y?q;qG 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.224.148 Not shown: 975 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp FileZilla ftpd 0.9.39 beta 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Jetty httpd 6.1.22 |_ html-title: Error 404 NOT_FOUND 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open netbios-ssn 990/tcp filtered ftps 1099/tcp open jrmi Java RMI 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2869/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) 4444/tcp filtered krb524 5060/tcp filtered sip 5357/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) |_ html-title: Service Unavailable 8080/tcp open http Jetty httpd 6.1.22 |_ html-title: Error 404 - Not Found 8088/tcp open http Jetty httpd 6.1.22 |_ html-title: Error 404 - Not Found 8443/tcp open ssl/http Jetty httpd 6.1.22 |_ html-title: Error 404 - Not Found 16993/tcp open tcpwrapped 49152/tcp open msrpc Microsoft Windows RPC 49153/tcp open msrpc Microsoft Windows RPC 49154/tcp open msrpc Microsoft Windows RPC 49158/tcp open msrpc Microsoft Windows RPC 49159/tcp open unknown Service Info: OS: Windows
Host script results: | smb-os-discovery: Windows 7 Professional 7600 | LAN Manager: Windows 7 Professional 6.1 | Name: WORKGROUP\HISHAM-LAPTOP |_ System time: 2012-02-26 12:10:35 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.224.153: Not shown: 980 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp FileZilla ftpd 0.9.37 beta 22/tcp filtered ssh 23/tcp filtered telnet 25/tcp open smtp Microsoft ESMTP 6.0.2600.5949 | smtp-commands: EHLO hp-hp Hello [88.191.90.106], SIZE 2097152, PIPELINING, DSN, ENHANCEDSTATUSCODES, 8bitmime, BINARYMIME, CHUNKING, VRFY |_ HELP This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH BDAT VRFY 80/tcp open http Microsoft IIS webserver 5.1 |_ html-title: Site doesn't have a title (text/html). 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open https? 445/tcp open microsoft-ds Microsoft Windows XP microsoft-ds 912/tcp open vmware-auth VMware Authentication Daemon 1.0 (Uses VNC, SOAP) 1028/tcp open msrpc Microsoft Windows RPC 1110/tcp open tcpwrapped 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 8089/tcp open http Paessler PRTG Traffic Grapher httpd (Indy httpd 9.0.11) | robots.txt: has 1 disallowed entry |_ / | html-title: PRTG Traffic Grapher - Monitoring Results - PRTG Traffic Graph... |_ Requested resource was http://213.178.224.153/sensorlist.htm 19780/tcp open unknown Service Info: Host: hp-hp; OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows XP | LAN Manager: Windows 2000 LAN Manager | Name: WORKGROUP\HP-HP |_ System time: 2012-02-26 12:10:45 UTC+2
Interesting ports on 213.178.224.158: Not shown: 980 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp filtered microsoft-ds 912/tcp open vmware-auth VMware Authentication Daemon 1.0 (Uses VNC, SOAP) 1110/tcp filtered nfsd-status 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2869/tcp filtered unknown 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 19780/tcp filtered unknown 49152/tcp open msrpc Microsoft Windows RPC 49153/tcp open msrpc Microsoft Windows RPC 49154/tcp open msrpc Microsoft Windows RPC 49159/tcp open msrpc Microsoft Windows RPC 49167/tcp open msrpc Microsoft Windows RPC Service Info: OS: Windows
Interesting ports on 213.178.224.171: Not shown: 984 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp ProFTPD |_ ftp-anon: Anonymous FTP login allowed 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Apache httpd 1.3.34 ((Unix) mod_ssl/2.8.25 OpenSSL/0.9.7e) |_ html-title: Site doesn't have a title (text/html; charset=UTF-8). 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Apache httpd 1.3.34 ((Unix) mod_ssl/2.8.25 OpenSSL/0.9.7e) |_ html-title: Site doesn't have a title (text/html; charset=UTF-8). |_ sslv2: server still supports SSLv2 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: WORKGROUP) 873/tcp open rsync (protocol version 29) 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 8873/tcp open ssl/unknown 22939/tcp open ssl/unknown Service Info: Host: 213.178.224.171; OS: Unix
Host script results: | smb-os-discovery: Unix | LAN Manager: Samba 3.0.30-1.4.osstech | Name: WORKGROUP\Unknown |_ System time: 2012-02-26 12:10:27 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.224.172: Not shown: 985 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp ProFTPD |_ ftp-anon: Anonymous FTP login allowed 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Apache httpd 1.3.34 ((Unix)) |_ html-title: Site doesn't have a title (text/html; charset=UTF-8). 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: WORKGROUP) 873/tcp open rsync (protocol version 29) 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 8873/tcp open ssl/unknown 22939/tcp open ssl/unknown Service Info: Host: 213.178.224.172; OS: Unix
Host script results: | smb-os-discovery: Unix | LAN Manager: Samba 3.0.24-1.22_OSSTECH | Name: WORKGROUP\Unknown |_ System time: 2012-02-26 13:00:33 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
213.178.244.1/24
Interesting ports on 213.178.244.5: Not shown: 987 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http? |_ html-title: Access Denied 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 514/tcp open login Cisco/NetApp logind 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3128/tcp open squid-http? 4444/tcp filtered krb524 5060/tcp filtered sip 8080/tcp open http-proxy? 3 services unrecognized despite returning data.
Interesting ports on 213.178.244.16: Not shown: 984 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 53/tcp open domain? 80/tcp open http-proxy BlueCoat SG-400 http proxy 81/tcp open http-proxy BlueCoat SG-400 http proxy 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3128/tcp open http-proxy BlueCoat SG-400 http proxy 4444/tcp filtered krb524 5060/tcp filtered sip 8000/tcp open http-proxy BlueCoat SG-400 http proxy 8080/tcp open http-proxy BlueCoat SG-400 http proxy 8082/tcp open ssl/blackice-alerts? |_ sslv2: server still supports SSLv2
Interesting ports on 213.178.244.173: Not shown: 980 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http? |_ html-title: Access Denied 81/tcp open http-proxy NetApp NetCache http proxy 6.0.2 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open http-proxy NetApp NetCache http proxy 6.0.2 514/tcp open login Cisco/NetApp logind 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3128/tcp open squid-http? 4444/tcp filtered krb524 5060/tcp filtered sip 8000/tcp open http-proxy NetApp NetCache http proxy 6.0.2 8080/tcp open http-proxy? 8081/tcp open http-proxy NetApp NetCache http proxy 6.0.2 8088/tcp open http-proxy NetApp NetCache http proxy 6.0.2 8090/tcp open http-proxy NetApp NetCache http proxy 6.0.2 9090/tcp open http-proxy NetApp NetCache http proxy 6.0.2 3 services unrecognized despite returning data.
Interesting ports on 213.178.244.174: Not shown: 996 filtered ports PORT STATE SERVICE VERSION 80/tcp open http-proxy BlueCoat SG-400 http proxy 3128/tcp open http-proxy BlueCoat SG-400 http proxy 8080/tcp open http-proxy BlueCoat SG-400 http proxy 8082/tcp open ssl/http-proxy BlueCoat http proxy |_ sslv2: server still supports SSLv2
213.178.224.1/24
Interesting ports on 213.178.224.1: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp FileZilla ftpd 0.9.37 beta 443/tcp closed https 3389/tcp open microsoft-rdp Microsoft Terminal Service Service Info: OS: Windows
Interesting ports on 213.178.224.5 Not shown: 983 closed ports
PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 25/tcp filtered smtp 80/tcp open http? |_ html-title: Access Denied 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 280/tcp open tcpwrapped 1718/tcp filtered unknown 1719/tcp filtered unknown 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3128/tcp open squid-http? 4444/tcp filtered krb524 5060/tcp filtered sip 5061/tcp filtered sip-tls 8080/tcp open http-proxy?
Interesting ports on 213.178.224.50: Not shown: 985 closed ports
PORT STATE SERVICE VERSION 21/tcp open ftp ProFTPD 1.3.2 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: WORKGROUP) 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 8383/tcp open http Apache httpd 2.2.12 ((Ubuntu)) |_ html-title: 401 Authorization Required | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = Section Name 12000/tcp open cce4x? 16000/tcp open unknown 16001/tcp open tcpwrapped Host script results: | smb-os-discovery: Unix | LAN Manager: Samba 3.4.0 | Name: Unknown\Unknown |_ System time: 2012-02-26 12:11:45 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.224.100: Not shown: 993 filtered ports PORT STATE SERVICE VERSION 80/tcp open http? ------> teamviewer |_ html-title: Site doesn't have a title (text/html). 443/tcp open https? 465/tcp open smtps? 912/tcp open vmware-auth VMware Authentication Daemon 1.0 (Uses VNC, SOAP) 993/tcp open imaps? 995/tcp open pop3s? 3389/tcp open ms-term-serv?
Interesting ports on 213.178.224.130: Not shown: 980 closed portsPORT STATE SERVICE VERSION
22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Paessler PRTG Traffic Grapher httpd (Indy httpd 9.0.11) | html-title: PRTG Traffic Monitor - Monitoring Results - PRTG Traffic Graph... |_ Requested resource was http://213.178.224.130/prtg.htm 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open netbios-ssn 1110/tcp open tcpwrapped 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 19780/tcp open unknown 49152/tcp open msrpc Microsoft Windows RPC 49153/tcp open msrpc Microsoft Windows RPC 49154/tcp open msrpc Microsoft Windows RPC 49155/tcp open msrpc Microsoft Windows RPC 49156/tcp open msrpc Microsoft Windows RPC 49159/tcp open msrpc Microsoft Windows RPC Service Info: OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows 7 Ultimate 7600 | LAN Manager: Windows 7 Ultimate 6.1 | Name: WORKGROUP\SCS-NET-PC |_ System time: 2012-02-26 12:10:54 UTC+2
Interesting ports on 213.178.224.137: Not shown: 986 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Paessler PRTG Traffic Grapher httpd (Indy httpd 9.0.11) | html-title: PRTG Traffic Grapher - Monitoring Results - PRTG Traffic Graph... |_ Requested resource was http://213.178.224.137/sensorlist.htm | robots.txt: has 1 disallowed entry |_ / 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open tcpwrapped 1025/tcp open msrpc Microsoft Windows RPC 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3306/tcp open mysql MySQL 5.0.51b-community-nt | mysql-info: Protocol: 10 | Version: 5.0.51b-community-nt | Thread ID: 283 | Some Capabilities: Connect with DB, Compress, Transactions, Secure Connection | Status: Autocommit |_ Salt: !hiWV,v23ISHO5Y?q;qG 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT Interesting ports on 213.178.224.153: Not shown: 980 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp FileZilla ftpd 0.9.37 beta 22/tcp filtered ssh 23/tcp filtered telnet 25/tcp open smtp Microsoft ESMTP 6.0.2600.5949 | smtp-commands: EHLO hp-hp Hello [88.191.90.106], SIZE 2097152, PIPELINING, DSN, ENHANCEDSTATUSCODES, 8bitmime, BINARYMIME, CHUNKING, VRFY |_ HELP This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH BDAT VRFY 80/tcp open http Microsoft IIS webserver 5.1 |_ html-title: Site doesn't have a title (text/html). 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open https? 445/tcp open microsoft-ds Microsoft Windows XP microsoft-ds 912/tcp open vmware-auth VMware Authentication Daemon 1.0 (Uses VNC, SOAP) 1028/tcp open msrpc Microsoft Windows RPC 1110/tcp open tcpwrapped 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 8089/tcp open http Paessler PRTG Traffic Grapher httpd (Indy httpd 9.0.11) | robots.txt: has 1 disallowed entry |_ / | html-title: PRTG Traffic Grapher - Monitoring Results - PRTG Traffic Graph... |_ Requested resource was http://213.178.224.153/sensorlist.htm 19780/tcp open unknown Service Info: Host: hp-hp; OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows XP | LAN Manager: Windows 2000 LAN Manager | Name: WORKGROUP\HP-HP |_ System time: 2012-02-26 12:10:45 UTC+2
Interesting ports on 213.178.224.158: Not shown: 980 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp filtered microsoft-ds 912/tcp open vmware-auth VMware Authentication Daemon 1.0 (Uses VNC, SOAP) 1110/tcp filtered nfsd-status 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2869/tcp filtered unknown 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 19780/tcp filtered unknown 49152/tcp open msrpc Microsoft Windows RPC 49153/tcp open msrpc Microsoft Windows RPC 49154/tcp open msrpc Microsoft Windows RPC 49159/tcp open msrpc Microsoft Windows RPC 49167/tcp open msrpc Microsoft Windows RPC Service Info: OS: Windows
Interesting ports on 213.178.224.171: Not shown: 984 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp ProFTPD |_ ftp-anon: Anonymous FTP login allowed 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Apache httpd 1.3.34 ((Unix) mod_ssl/2.8.25 OpenSSL/0.9.7e) |_ html-title: Site doesn't have a title (text/html; charset=UTF-8). 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Apache httpd 1.3.34 ((Unix) mod_ssl/2.8.25 OpenSSL/0.9.7e) |_ html-title: Site doesn't have a title (text/html; charset=UTF-8). |_ sslv2: server still supports SSLv2 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: WORKGROUP) 873/tcp open rsync (protocol version 29) 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 8873/tcp open ssl/unknown 22939/tcp open ssl/unknown Service Info: Host: 213.178.224.171; OS: Unix
Host script results: | smb-os-discovery: Unix | LAN Manager: Samba 3.0.30-1.4.osstech | Name: WORKGROUP\Unknown |_ System time: 2012-02-26 12:10:27 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.224.172: Not shown: 985 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp ProFTPD |_ ftp-anon: Anonymous FTP login allowed 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Apache httpd 1.3.34 ((Unix)) |_ html-title: Site doesn't have a title (text/html; charset=UTF-8). 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open netbios-ssn Samba smbd 3.X (workgroup: WORKGROUP) 873/tcp open rsync (protocol version 29) 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 8873/tcp open ssl/unknown 22939/tcp open ssl/unknown Service Info: Host: 213.178.224.172; OS: Unix
Host script results: | smb-os-discovery: Unix | LAN Manager: Samba 3.0.24-1.22_OSSTECH | Name: WORKGROUP\Unknown |_ System time: 2012-02-26 13:00:33 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT 213.178.245.1/24 Interesting ports on 213.178.245.34: Not shown: 986 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp MikroTik router ftpd 3.13 22/tcp filtered ssh 23/tcp filtered telnet 53/tcp open domain? 80/tcp open http MikroTik router http config |_ html-title: mikrotik routeros > administration 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3986/tcp open mapper-ws_ethd? 4444/tcp filtered krb524 5060/tcp filtered sip 8291/tcp open unknown 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at http://www.insecure.org/cgi-bin/servicefp-submit.cgi : SF-Port53-TCP:V=5.00%I=7%D=2/26%Time=4F4A33E5%P=x86_64-unknown-linux-gnu%r SF:(DNSVersionBindReq,E,"\0\x0c\0\x06\x81\x84\0\0\0\0\0\0\0\0")%r(DNSStatu SF:sRequest,E,"\0\x0c\0\0\x90\x84\0\0\0\0\0\0\0\0"); Service Info: Device: router
Interesting ports on 213.178.245.45: Not shown: 981 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp Microsoft ftpd |_ ftp-anon: Anonymous FTP login allowed 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction 119/tcp open nntp Microsoft NNTP Service 6.0.3790.3959 (posting ok) 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds 563/tcp open snews? 1025/tcp open msrpc Microsoft Windows RPC 1026/tcp open msrpc Microsoft Windows RPC 1027/tcp open msrpc Microsoft Windows RPC 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 8099/tcp open http Microsoft IIS webserver 6.0 |_ html-title: The page must be viewed over a secure channel Service Info: OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows Server 2003 3790 Service Pack 2 | LAN Manager: Windows Server 2003 5.2 | Name: WORKGROUP\AASTMTIC |_ System time: 2012-02-26 13:35:13 UTC-8
Interesting ports on 213.178.245.86: Not shown: 988 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 4567/tcp filtered unknown 5060/tcp filtered sip 48080/tcp filtered unknown Service Info: OS: IOS Interesting ports on 213.178.245.98: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Apache httpd |_ html-title: User Portal 587/tcp open smtp Exim smtpd | smtp-commands: EHLO proxy.capmus.iust.edu.sy Hello sailor.toonux.com [88.191.88.106], SIZE 52428800, PIPELINING, STARTTLS, HELP |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
Interesting ports on 213.178.245.100: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Apache httpd |_ html-title: User Portal 587/tcp open smtp Exim smtpd | smtp-commands: EHLO proxy.capmus.iust.edu.sy Hello 88-191-90-106.rev.dedibox.fr [88.191.90.106], SIZE 52428800, PIPELINING, STARTTLS, HELP |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
Interesting ports on 213.178.245.225: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open https? 1720/tcp filtered H.323/Q.931 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.245.226: Not shown: 976 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 25/tcp open smtp Microsoft ESMTP 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: IIS7 110/tcp open pop3 MS Exchange 2007 pop3d |_ pop3-capabilities: STLS TOP UIDL 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ sslv2: server still supports SSLv2 |_ html-title: IIS7 445/tcp open netbios-ssn 705/tcp open unknown 995/tcp open ssl/pop3 MS Exchange 2007 pop3d |_ pop3-capabilities: USER SASL(NTLM GSSAPI PLAIN) TOP UIDL 1025/tcp open msrpc Microsoft Windows RPC 1026/tcp open msrpc Microsoft Windows RPC 1027/tcp open msrpc Microsoft Windows RPC 1028/tcp open msrpc Microsoft Windows RPC 1046/tcp open msrpc Microsoft Windows RPC 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 8021/tcp open remoting MS .NET Remoting services 10000/tcp open snet-sensor-mgmt?
Host script results: | smb-os-discovery: Windows Server 2008 R2 Standard 7601 Service Pack 1 | LAN Manager: Windows Server 2008 R2 Standard 6.1 | Name: STD\STD-5 |_ System time: 2012-02-26 14:33:00 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.245.227: Not shown: 984 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 49/tcp open tcpwrapped 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds 808/tcp open ccproxy-http? 1025/tcp open msrpc Microsoft Windows RPC 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2001/tcp open dc? 2002/tcp open http Cisco Secure ACS login |_ html-title: CiscoSecure ACS Login 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip Host script results: | smb-os-discovery: Windows Server 2003 3790 Service Pack 2 | LAN Manager: Windows Server 2003 5.2 | Name: STD\ASC-1 |_ System time: 2012-02-26 13:59:33 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.245.241: Not shown: 989 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open https? 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.245.242: Not shown: 989 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open https? 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.245.243: Not shown: 989 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open https? 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
213.178.247.1/24
Interesting ports on 213.178.247.65: Not shown: 992 closed ports PORT STATE SERVICE VERSION 23/tcp open telnet Cisco IOS telnetd 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS; Device: switch Interesting ports on 213.178.247.98: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.247.100: Not shown: 995 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Microsoft ESMTP 6.0.3790.3959 | smtp-commands: EHLO exchange.uic.local Hello [88.190.24.19], TURN, SIZE, ETRN, PIPELINING, DSN, ENHANCEDSTATUSCODES, 8bitmime, BINARYMIME, CHUNKING, VRFY, X-EXPS GSSAPI NTLM LOGIN, X-EXPS=LOGIN, AUTH GSSAPI NTLM LOGIN, AUTH=LOGIN, X-LINK2STATE, XEXCH50 |_ HELP This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH TURN ETRN BDAT VRFY 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction 110/tcp open pop3 MS Exchange 2003 pop3d 6.5.6944.0 |_ pop3-capabilities: USER EXPIRE(NEVER) UIDL PIPELINING TOP SASL(NTLM) 143/tcp open imap Microsoft Exchange Server 2003 imapd 6.5.6944.0 |_ imap-capabilities: LOGIN-REFERRALS IMAP4 AUTH=NTLM IMAP4rev1 MAILBOX-REFERRALS UIDPLUS LITERAL+ IDLE NAMESPACE CHILDREN 3389/tcp open microsoft-rdp Microsoft Terminal Service Service Info: Host: exchange.uic.local; OS: Windows
Interesting ports on 213.178.247.107: Not shown: 985 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp 22/tcp filtered ssh 23/tcp filtered telnet 53/tcp filtered domain 80/tcp open http? | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = AG 3000 |_ html-title: Site doesn't have a title (text/html). 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 301/tcp open tcpwrapped 1111/tcp open http GoAhead-Webs embedded httpd | html-title: Site doesn't have a title (text/html). |_ Did not follow redirect to http://213.178.247.107:3111/usg/login 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2111/tcp open http GoAhead-Webs embedded httpd | html-title: Site doesn't have a title (text/html). |_ Did not follow redirect to http://213.178.247.107:3111/usg/login 4444/tcp filtered krb524 5060/tcp filtered sip Interesting ports on 213.178.247.108: Not shown: 989 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Apache httpd 2.2.3 ((CentOS)) | html-title: Login |_ Requested resource was http://213.178.247.108/network/index.php 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 5432/tcp open postgresql PostgreSQL DB Interesting ports on 213.178.247.213: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http? |_ html-title: AIU | Student Area http://213.178.247.213/
Interesting ports on 213.178.247.214: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http VMware ESX Server httpd |_ html-title: " + ID_EESX_Welcome + " 902/tcp open ssl/vmware-auth VMware Authentication Daemon 1.10 (Uses VNC, SOAP)
Interesting ports on 213.178.247.216: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp | smtp-commands: EHLO mail.stds.aiu.edu.sy, AUTH CRAM-MD5 PLAIN LOGIN DIGEST-MD5, SIZE 3145728, STARTTLS, ENHANCEDSTATUSCODES, 8BITMIME, PIPELINING, ETRN, DSN, HELP |_ HELP 2.0.0 Commands: HELO EHLO MAIL RCPT DATA RSET NOOP VRFY QUIT STARTTLS 443/tcp open ssl/https? | html-title: Kerio Connect WebMail |_ Requested resource was https://213.178.247.216/webmail/login/ 2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at http://www.insecure.org/cgi-bin/servicefp-submit.cgi :
Interesting ports on 213.178.247.217: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache Tomcat/Coyote JSP engine 1.1 |_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.247.218: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Microsoft ESMTP 6.0.3790.4675 | smtp-commands: EHLO webmail.aeu.ac.sy Hello [88.190.24.19], TURN, SIZE, ETRN, PIPELINING, DSN, ENHANCEDSTATUSCODES, 8bitmime, BINARYMIME, CHUNKING, VRFY, X-EXPS GSSAPI NTLM LOGIN, X-EXPS=LOGIN, AUTH GSSAPI NTLM LOGIN, AUTH=LOGIN, X-LINK2STATE, XEXCH50 |_ HELP This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH TURN ETRN BDAT VRFY 443/tcp open ssl/http Microsoft IIS webserver 6.0 | html-title: Document Moved |_ Did not follow redirect to https://213.178.247.218/exchange/ |_ sslv2: server still supports SSLv2 Service Info: Host: webmail.aeu.ac.sy; OS: Windows
Interesting ports on 213.178.247.220: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 53/tcp open domain ISC BIND 4.X 80/tcp open http Apache httpd 2.2.21 ((EL)) |_ html-title: 400 Bad Request
Interesting ports on 213.178.247.225: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open tcpwrapped
Interesting ports on 213.178.247.238: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Cisco PIX sanitized smtpd 110/tcp closed pop3 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ html-title: Under Construction |_ sslv2: server still supports SSLv2 Service Info: OS: Windows; Device: firewall
Interesting ports on 213.178.247.241: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp closed https
Interesting ports on 213.178.247.244: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction 443/tcp closed https 8080/tcp open http Apache Tomcat/Coyote JSP engine 1.0 |_ html-title: Apache Tomcat/4.1.24-LE-jdk14 - Error report Service Info: OS: Windows
Interesting ports on 213.178.247.250: Not shown: 978 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open https? 445/tcp filtered microsoft-ds 554/tcp filtered rtsp 1110/tcp filtered nfsd-status 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2869/tcp filtered unknown 3128/tcp open squid-http? 3389/tcp filtered ms-term-serv 4444/tcp filtered krb524 5060/tcp filtered sip 14000/tcp open http gSOAP httpd 2.7 |_ html-title: Site doesn't have a title (text/xml; charset=utf-8). 19780/tcp filtered unknown 49152/tcp open msrpc Microsoft Windows RPC 49153/tcp open msrpc Microsoft Windows RPC 49154/tcp open msrpc Microsoft Windows RPC 49155/tcp open msrpc Microsoft Windows RPC
213.178.246.1/24
Interesting ports on 213.178.246.48: Not shown: 983 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1000/tcp filtered cadlock 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3031/tcp filtered unknown 3998/tcp filtered unknown 4444/tcp filtered krb524 4899/tcp filtered radmin 5060/tcp filtered sip 9009/tcp filtered unknown 14441/tcp filtered unknown 50389/tcp filtered unknown Service Info: OS: IOS
Interesting ports on 213.178.246.51: Not shown: 971 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 53/tcp open domain Microsoft DNS 6.1.7601 88/tcp open kerberos-sec Microsoft Windows kerberos-sec 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 389/tcp open ldap 445/tcp open netbios-ssn 464/tcp open kpasswd5? 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 636/tcp open ssl/ldap |_ sslv2: server still supports SSLv2 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3071/tcp open ssl/unknown 3268/tcp open ldap 3269/tcp open ssl/ldap |_ sslv2: server still supports SSLv2 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 6129/tcp open damewaremr DameWare Mini Remote Control 14000/tcp open unknown 49153/tcp open msrpc Microsoft Windows RPC 49154/tcp open msrpc Microsoft Windows RPC 49155/tcp open msrpc Microsoft Windows RPC 49156/tcp open msrpc Microsoft Windows RPC 49160/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 49161/tcp open msrpc Microsoft Windows RPC 65000/tcp open ssl/unknown |_ sslv2: server still supports SSLv2
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows Server 2008 R2 Standard 7601 Service Pack 1 | LAN Manager: Windows Server 2008 R2 Standard 6.1 | Name: STD\STD-27 |_ System time: 2012-02-26 16:41:37 UTC+2
Interesting ports on 213.178.246.65: Not shown: 989 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access |_ html-title: Site doesn't have a title. 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 6881/tcp filtered bittorrent-tracker Service Info: OS: IOS
Interesting ports on 213.178.246.113: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.246.121: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Cisco IOS administrative httpd | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access |_ html-title: Site doesn't have a title. 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.246.122: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Cisco Adaptive Security Appliance http config | html-title: Cisco ASDM 6.1(5) |_ Requested resource was http://213.178.246.122/admin/public/index.html 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: Device: security-misc
Interesting ports on 213.178.246.123: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Cisco Adaptive Security Appliance http config | html-title: Cisco ASDM 6.1(5) |_ Requested resource was http://213.178.246.123/admin/public/index.html Service Info: Device: security-misc
Interesting ports on 213.178.246.135: Not shown: 972 closed ports PORT STATE SERVICE VERSION 21/tcp open tcpwrapped 22/tcp filtered ssh 23/tcp filtered telnet 53/tcp open domain Microsoft DNS 88/tcp open kerberos-sec Microsoft Windows kerberos-sec 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 389/tcp open ldap 445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds 464/tcp open kpasswd5? 548/tcp open afp? 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 636/tcp open tcpwrapped 1025/tcp open msrpc Microsoft Windows RPC 1027/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 1034/tcp open msrpc Microsoft Windows RPC 1041/tcp open msrpc Microsoft Windows RPC 1042/tcp open msrpc Microsoft Windows RPC 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2301/tcp open http HP Proliant System Management 2.1.10.186 (CompaqHTTPServer 9.9) | html-title: Site doesn't have a title (text/html). |_ Requested resource was http://213.178.246.135/red2301.html?RedirectUrl=/ 2381/tcp open http Apache SSL-only mode httpd |_ html-title: 400 Bad Request 3268/tcp open ldap 3269/tcp open tcpwrapped 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: Windows
Host script results: | smb-os-discovery: Windows Server 2003 3790 Service Pack 2 | LAN Manager: Windows Server 2003 5.2 | Name: AG\SERVER |_ System time: 2012-02-26 15:37:09 UTC+3 |_ nbstat: ERROR: Name query failed: TIMEOUT Interesting ports on 213.178.246.165: Not shown: 957 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 53/tcp open domain Microsoft DNS 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction 88/tcp open kerberos-sec Microsoft Windows kerberos-sec 111/tcp filtered rpcbind 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 389/tcp open ldap 445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds 464/tcp open kpasswd5? 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 636/tcp open tcpwrapped 714/tcp filtered unknown 801/tcp filtered device 902/tcp open ssl/vmware-auth VMware Authentication Daemon 1.10 (Uses VNC) 912/tcp open ssl/vmware-auth VMware Authentication Daemon 1.10 (Uses VNC) 1026/tcp open msrpc Microsoft Windows RPC 1027/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 1030/tcp filtered iad1 1042/tcp open msrpc Microsoft Windows RPC 1059/tcp open msrpc Microsoft Windows RPC 1076/tcp open msrpc Microsoft Windows RPC 1433/tcp open ms-sql-s Microsoft SQL Server 2000 8.00.760; SP3 1583/tcp filtered unknown 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2002/tcp open ssl/globe? 2301/tcp open http HP Proliant System Management 2.1.15.210 (CompaqHTTPServer 9.9) | html-title: Site doesn't have a title (text/html). |_ Requested resource was http://213.178.246.165/red2301.html?RedirectUrl=/ 2381/tcp open http Apache SSL-only mode httpd |_ html-title: 400 Bad Request 3001/tcp filtered nessus 3268/tcp open ldap 3269/tcp open tcpwrapped 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 8080/tcp open http Apache Tomcat/Coyote JSP engine 1.1 |_ html-title: Apache Tomcat/4.1.30 - Error report 8081/tcp open http Network Associates ePolicy Orchestrator (Computername: GMSYRIA Version: 3.6.0.569) |_ html-title: Site doesn't have a title (text/xml). 8443/tcp open ssl/http Apache Tomcat/Coyote JSP engine 1.1 |_ html-title: Apache Tomcat/4.1.30 - Error report 8600/tcp open unknown 9594/tcp filtered msgsys 20222/tcp filtered unknown
Host script results: | smb-os-discovery: Windows Server 2003 3790 Service Pack 2 | LAN Manager: Windows Server 2003 5.2 | Name: GLOBEMED-SYRIA\GMSYRIA |_ System time: 2012-02-26 16:33:58 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.246.169: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.246.173: ---> commercial bank of Syria Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 5.0 | html-title: 302 Found |_ Did not follow redirect to https://213.178.246.173/ 443/tcp open ssl/http Microsoft IIS webserver 5.0 |_ sslv2: server still supports SSLv2 |_ html-title: Commercial Bank of Syria - National Payment Network | robots.txt: has 1 disallowed entry |_ /cgi-bin/ Service Info: OS: Windows
Interesting ports on 213.178.246.217: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access |_ html-title: Site doesn't have a title. 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.246.220: Not shown: 974 closed ports PORT STATE SERVICE VERSION 21/tcp filtered ftp 22/tcp filtered ssh 23/tcp filtered telnet 25/tcp open smtp Alt-N MDaemon mail server 10.0.0 80/tcp open http MS ISA httpd |_ html-title: The page cannot be displayed 110/tcp open pop3 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 143/tcp open imap Alt-N MDaemon imapd 10.0.0 366/tcp open smtp Alt-N MDaemon mail server 10.0.0 445/tcp open tcpwrapped 554/tcp filtered rtsp 587/tcp open smtp MDaemon smtpd 10.0.0 (MSA support) 1000/tcp open http World Client WDaemon httpd 3.0 |_ html-title: WebAdmin | robots.txt: has 1 disallowed entry |_ / 1025/tcp open msrpc Microsoft Windows RPC 1174/tcp open msrpc Microsoft Windows RPC 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 1755/tcp filtered wms 1935/tcp filtered rtmp 2000/tcp filtered callbook 3000/tcp open http World Client WDaemon httpd 10.0.0 |_ html-title: WorldClient | robots.txt: has 1 disallowed entry |_ / 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 7070/tcp filtered realserver
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT Interesting ports on 213.178.246.226: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 3.8.1p1 (protocol 2.0) | ssh-hostkey: 1024 0a:22:6c:c8:1f:83:07:46:bd:4d:72:ec:8b:95:22:88 (DSA) |_ 1024 77:0c:3e:3b:1d:39:49:b3:99:ad:a1:df:8f:96:d4:e1 (RSA) 25/tcp closed smtp 80/tcp open http Microsoft IIS |_ html-title: The page cannot be displayed Service Info: OS: Windows
213.178.248.1/24
Interesting ports on 213.178.248.20: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ html-title: Welcome to Audi On-Line Service Info: OS: Windows Interesting ports on 213.178.248.32: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Cisco IOS administrative webserver | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level 15 access |_ html-title: Authorization Required Service Info: OS: IOS; Device: switch Interesting ports on 213.178.248.69: Not shown: 994 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Cisco PIX sanitized smtpd | smtp-commands: EHLO SVRHO18.BBSF.COM Hello example.org ([88.190.24.19]), pleased to meet you, XXXA, SIZE, PIPELINING |_ HELP Enter one of the following commands: HELO EHLO MAIL RCPT DATA RSET NOOP QUIT HELP 53/tcp closed domain 80/tcp open http Lotus Domino httpd |_ html-title: Site doesn't have a title (text/html; charset=UTF-8). 110/tcp open pop3 Lotus Domino POP3 server 8.0.2 |_ pop3-capabilities: USER TOP UIDL 143/tcp closed imap 443/tcp open ssl/http Lotus Domino httpd |_ html-title: Site doesn't have a title (text/html; charset=UTF-8). Service Info: Device: firewall
Interesting ports on 213.178.248.70: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Apache httpd 2.2.10 ((Win32) mod_ssl/2.2.10 OpenSSL/0.9.8i PHP/5.2.6) |_ sslv2: server still supports SSLv2 |_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.248.71: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http IBM HTTP Server 6.0 (Derived from Apache 2.0.47; Win32) |_ html-title: Redirecting... 443/tcp open ssl/http IBM HTTP Server 6.0 (Derived from Apache 2.0.47; Win32) |_ html-title: BBSF e-banking |_ sslv2: server still supports SSLv2
Interesting ports on 213.178.248.73: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 | html-title: Document Moved |_ Did not follow redirect to https://www.onlinebbsf.com 443/tcp open ssl/http Microsoft IIS webserver 6.0 | html-title: ::Online Banking:: |_ Requested resource was http://213.178.248.73/Default_Ar.aspx?ReturnUrl=%2f |_ sslv2: server still supports SSLv2 Service Info: OS: Windows
Interesting ports on 213.178.248.74: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp closed http 8080/tcp closed http-proxy Interesting ports on 213.178.248.83: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Cisco ASA firewall http config (Cisco AWARE 2.0) | html-title: SSL VPN Service |_ Requested resource was http://213.178.248.83/+CSCOE+/logon.html Service Info: OS: IOS; Device: firewall
Interesting ports on 213.178.248.101: Not shown: 973 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 53/tcp open domain Microsoft DNS 6.1.7601 88/tcp open kerberos-sec Microsoft Windows kerberos-sec 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 389/tcp open ldap 445/tcp open netbios-ssn 464/tcp open kpasswd5? 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 636/tcp open ssl/ldap |_ sslv2: server still supports SSLv2 705/tcp open unknown 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3268/tcp open ldap 3269/tcp open ssl/ldap |_ sslv2: server still supports SSLv2 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 6129/tcp open damewaremr DameWare Mini Remote Control 49153/tcp open msrpc Microsoft Windows RPC 49154/tcp open msrpc Microsoft Windows RPC 49155/tcp open msrpc Microsoft Windows RPC 49159/tcp open msrpc Microsoft Windows RPC 49160/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 49161/tcp open msrpc Microsoft Windows RPC Service Info: OS: Windows
Host script results: | smb-os-discovery: Windows Server 2008 R2 Standard 7601 Service Pack 1 | LAN Manager: Windows Server 2008 R2 Standard 6.1 | Name: STD\STD-13 |_ System time: 2012-02-26 17:27:54 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT Interesting ports on 213.178.248.149: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS |_ html-title: The page cannot be displayed 443/tcp open ssl/http Microsoft IIS |_ html-title: The page cannot be displayed |_ sslv2: server still supports SSLv2 Service Info: OS: Windows
Interesting ports on 213.178.248.150: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS |_ html-title: The page cannot be displayed Service Info: OS: Windows
Interesting ports on 213.178.248.151: Not shown: 938 closed ports, 61 filtered ports PORT STATE SERVICE VERSION 1998/tcp open x25-svc-port? Interesting ports on 213.178.248.194: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Exim smtpd | smtp-commands: EHLO proxy.capmus.iust.edu.sy Hello elmariachi.toonux.com [88.190.24.19], SIZE 52428800, PIPELINING, STARTTLS, HELP |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP 443/tcp open ssl/http Apache httpd |_ html-title: User Portal
Interesting ports on 213.178.248.230: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Microsoft ESMTP 6.0.3790.4675 | smtp-commands: EHLO SY00-ExchFE.syria.abs Hello [88.190.24.19], TURN, SIZE 8388608, ETRN, PIPELINING, DSN, ENHANCEDSTATUSCODES, 8bitmime, BINARYMIME, CHUNKING, VRFY, X-EXPS GSSAPI NTLM LOGIN, X-EXPS=LOGIN, AUTH GSSAPI NTLM LOGIN, AUTH=LOGIN, X-LINK2STATE, XEXCH50 |_ HELP This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH TURN ETRN BDAT VRFY 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ html-title: Under Construction |_ sslv2: server still supports SSLv2 Service Info: Host: SY00-ExchFE.syria.abs; OS: Windows
Interesting ports on 213.178.248.232: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Oracle Application Server 10g httpd 10.1.2.0.2 |_ html-title: 403 Forbidden 443/tcp open ssl/http Oracle Application Server 10g httpd 10.1.2.0.2 |_ sslv2: server still supports SSLv2 |_ html-title: 403 Forbidden
Interesting ports on 213.178.248.236: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS |_ html-title: The page cannot be displayed |_ sslv2: server still supports SSLv2 Service Info: OS: Windows
Interesting ports on 213.178.248.237: Not shown: 989 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 49/tcp open tcpwrapped 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Cisco IOS administrative httpd | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access |_ html-title: Site doesn't have a title. 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.248.238: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Netscreen administrative web server (runs Virata-EmWeb/R6_0_1) |_ html-title: Login Service Info: Device: firewall
213.178.249.1/24
Interesting ports on 213.178.249.13: Not shown: 994 filtered ports PORT STATE SERVICE VERSION 80/tcp closed http 161/tcp closed snmp 443/tcp closed https 5666/tcp open tcpwrapped 8080/tcp closed http-proxy 8443/tcp closed https-alt
Interesting ports on 213.178.249.36: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: :: TICT :: Tartous International Container Termianl - An ICTSI... 110/tcp open pop3 MS Exchange 2003 pop3d 6.5.7638.1 |_ pop3-capabilities: USER EXPIRE(NEVER) UIDL PIPELINING TOP 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ sslv2: server still supports SSLv2 |_ html-title: :: TICT :: Tartous International Container Termianl - An ICTSI... Service Info: Host: ICTSISRV09.ICTSI.sy; OS: Windows
Interesting ports on 213.178.249.54: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http?
Interesting ports on 213.178.249.60: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http?
Interesting ports on 213.178.249.91: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http?
All 1000 scanned ports on 213.178.249.97 are closed (959) or filtered (41)
Interesting ports on 213.178.249.98: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS |_ html-title: The page cannot be displayed |_ sslv2: server still supports SSLv2 Service Info: OS: Windows
SCAN DU 213.178.250.1/24
Interesting ports on 213.178.250.33: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction Service Info: OS: Windows
Interesting ports on 213.178.250.41: Not shown: 995 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 80/tcp open http Apache httpd 2.2.0 ((Win32) DAV/2 mod_ssl/2.2.0 OpenSSL/0.9.8a mod_autoindex_color PHP/5.1.2) |_ html-title: Site doesn't have a title (text/html). 443/tcp open ssl/http Apache httpd 2.2.0 ((Win32) DAV/2 mod_ssl/2.2.0 OpenSSL/0.9.8a mod_autoindex_color PHP/5.1.2) |_ html-title: Site doesn't have a title (text/html). |_ sslv2: server still supports SSLv2 3389/tcp open microsoft-rdp Microsoft Terminal Service Service Info: OS: Windows
Interesting ports on 213.178.250.44: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.2.16 ((Debian)) |_ html-title: Site doesn't have a title (text/html; charset=utf-8).
Interesting ports on 213.178.250.70: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.250.79: Not shown: 853 filtered ports, 145 closed ports PORT STATE SERVICE VERSION 445/tcp open microsoft-ds? 3389/tcp open ms-term-serv?
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.250.80: Not shown: 989 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open tcpwrapped 1110/tcp open tcpwrapped 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.250.120: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS webserver 6.0 | html-title: BSO Online |_ Requested resource was http://213.178.250.120/index.aspx?ReturnUrl=%2fDefault.aspx Service Info: OS: Windows
Interesting ports on 213.178.250.125: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.250.153: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 7.5 | html-title: Document Moved |_ Did not follow redirect to https://ebanking.chambank.com/iBanking/ 443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ sslv2: server still supports SSLv2 | html-title: Document Moved |_ Did not follow redirect to https://ebanking.chambank.com/iBanking/ Service Info: OS: Windows
Interesting ports on 213.178.250.154: Not shown: 994 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO dns1.chambank.sy, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, AUTH PLAIN LOGIN, AUTH=PLAIN LOGIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN 53/tcp open domain ISC BIND 9.7.3 80/tcp open http nginx web server 1.0.12 |_ html-title: Requested resource was http://www.chambank.sy/ and no page was returned. 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING LOGIN-DELAY(10) TOP 143/tcp open imap Courier Imapd (released 2011) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open tcpwrapped Service Info: Host: dns1.chambank.sy
Interesting ports on 213.178.250.214: Not shown: 996 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 1.3.34 ((Unix) mod_ssl/2.8.25 OpenSSL/0.9.7e) |_ html-title: Site doesn't have a title (text/html; charset=UTF-8). 898/tcp closed sun-manageconsole 5631/tcp closed pcanywheredata 6002/tcp closed X11:2
Interesting ports on 213.178.250.225: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.250.242: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ html-title: SIIB Online Service Info: OS: Windows
Interesting ports on 213.178.250.243: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS |_ sslv2: server still supports SSLv2 |_ html-title: The page cannot be displayed 995/tcp open ssl/pop3 |_ pop3-capabilities: USER EXPIRE(1800 SECONDS) UIDL TOP SASL(GSSAPI)
213.178.251.1/24
Interesting ports on 213.178.251.1: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ sslv2: server still supports SSLv2 |_ html-title: Under Construction 3389/tcp open microsoft-rdp Microsoft Terminal Service 3390/tcp open microsoft-rdp Microsoft Terminal Service Service Info: OS: Windows
Interesting ports on 213.178.251.20: Not shown: 995 filtered ports PORT STATE SERVICE VERSION 53/tcp open domain Microsoft DNS 80/tcp open http Microsoft IIS webserver 6.0 | html-title: Login |_ Requested resource was http://213.178.251.20/Login.aspx?ReturnUrl=%2fDefault.aspx 443/tcp closed https 2222/tcp closed unknown 3389/tcp open microsoft-rdp Microsoft Terminal Service Service Info: OS: Windows
Interesting ports on 213.178.251.22: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: 403 - Forbidden: Access is denied. 443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ sslv2: server still supports SSLv2 |_ html-title: 401 - Unauthorized: Access is denied due to invalid credentials. Service Info: OS: Windows
Interesting ports on 213.178.251.50: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp Microsoft ftpd 587/tcp open smtp Exim smtpd | smtp-commands: EHLO proxy.capmus.iust.edu.sy Hello 88-191-90-106.rev.dedibox.fr [88.191.90.106], SIZE 52428800, PIPELINING, STARTTLS, HELP |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP Service Info: OS: Windows
Interesting ports on 213.178.251.51: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 587/tcp open smtp Exim smtpd | smtp-commands: EHLO proxy.capmus.iust.edu.sy Hello 88-191-90-106.rev.dedibox.fr [88.191.90.106], SIZE 52428800, PIPELINING, STARTTLS, HELP |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
Interesting ports on 213.178.251.52: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 587/tcp open smtp Exim smtpd | smtp-commands: EHLO proxy.capmus.iust.edu.sy Hello 88-191-90-106.rev.dedibox.fr [88.191.90.106], SIZE 52428800, PIPELINING, STARTTLS, HELP |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
Interesting ports on 213.178.251.60: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 587/tcp open smtp Exim smtpd | smtp-commands: EHLO proxy.capmus.iust.edu.sy Hello 88-191-90-106.rev.dedibox.fr [88.191.90.106], SIZE 52428800, PIPELINING, STARTTLS, HELP |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
Interesting ports on 213.178.251.66: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Cisco Adaptive Security Appliance http config | html-title: Cisco ASDM 6.2(3) |_ Requested resource was http://213.178.251.66/admin/public/index.html Service Info: Device: security-misc
Interesting ports on 213.178.251.97: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 | html-title: Document Moved |_ Requested resource was http://213.178.251.97/reb Service Info: OS: Windows
Interesting ports on 213.178.251.100: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http? 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ sslv2: server still supports SSLv2 | html-title: Document Moved |_ Requested resource was http://213.178.251.100/EBank Service Info: OS: Windows
Interesting ports on 213.178.251.109: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 5.1 |_ html-title: Under Construction 443/tcp open https? 3389/tcp open microsoft-rdp Microsoft Terminal Service Service Info: OS: Windows
Interesting ports on 213.178.251.129: Not shown: 711 closed ports, 288 filtered ports PORT STATE SERVICE VERSION 1998/tcp open x25-svc-port?
Interesting ports on 213.178.251.177: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Microsoft ESMTP 110/tcp open pop3 MS Exchange 2007 pop3d |_ pop3-capabilities: TOP UIDL 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ html-title: Under Construction |_ sslv2: server still supports SSLv2 Service Info: Host: mainserver.sskoc.com; OS: Windows
Interesting ports on 213.178.251.185: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Cisco IOS administrative httpd | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access |_ html-title: Site doesn't have a title. 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.251.189: Not shown: 706 closed ports, 291 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 443/tcp open ssl/http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 5061/tcp open tcpwrapped Service Info: OS: IOS
Interesting ports on 213.178.251.200: Not shown: 988 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 444/tcp filtered snpp 1218/tcp filtered aeroflight-ads 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
213.178.252.1/24
Interesting ports on 213.178.252.77: Not shown: 989 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access |_ html-title: Site doesn't have a title. 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.252.105: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.252.106: Not shown: 988 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open microsoft-ds Microsoft Windows XP microsoft-ds 1433/tcp filtered ms-sql-s 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows XP | LAN Manager: Windows 2000 LAN Manager | Name: MSHOME\ESYRIA-5988D3E2 |_ System time: 2012-02-26 18:55:35 UTC+2
Interesting ports on 213.178.252.161: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.252.227: Not shown: 981 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open netbios-ssn 1688/tcp open msrpc Microsoft Windows RPC 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2869/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) |_ html-title: Service Unavailable 4444/tcp filtered krb524 5060/tcp filtered sip 5357/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) |_ html-title: Service Unavailable 49152/tcp open msrpc Microsoft Windows RPC 49153/tcp open msrpc Microsoft Windows RPC 49154/tcp open msrpc Microsoft Windows RPC 49156/tcp open msrpc Microsoft Windows RPC 49157/tcp open msrpc Microsoft Windows RPC 49158/tcp open msrpc Microsoft Windows RPC Service Info: OS: Windows
Host script results: | smb-os-discovery: Windows 7 Ultimate 7601 Service Pack 1 | LAN Manager: Windows 7 Ultimate 6.1 | Name: WORKGROUP\RECEPTION-PC |_ System time: 2012-02-26 18:53:32 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.252.230: Not shown: 983 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http gSOAP httpd 2.7 |_ html-title: HP LaserJet CM1415fn 213.178.252.230 http://213.178.252.230/info_config_network.html?tab=Networking&menu=NetConfig 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 515/tcp open printer 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 8080/tcp open http gSOAP httpd 2.7 |_ html-title: HP LaserJet CM1415fn 213.178.252.230 8291/tcp open unknown 8292/tcp open unknown 8888/tcp open sun-answerbook? 9100/tcp open jetdirect? 9999/tcp open abyss?
Interesting ports on 213.178.252.231: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Router with realtek 8181 chipset http config (GoAhead-Webs embedded httpd) 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: Device: router
213.178.253.1/24
PORT STATE SERVICE VERSION 53/tcp open domain Microsoft DNS 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction 389/tcp open ldap 445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds 464/tcp open kpasswd5? 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 636/tcp open tcpwrapped 1026/tcp open msrpc Microsoft Windows RPC 1027/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 1045/tcp open msrpc Microsoft Windows RPC 1050/tcp open msrpc Microsoft Windows RPC 3389/tcp open microsoft-rdp Microsoft Terminal Service 5800/tcp open vnc-http RealVNC 4.0 (Resolution 400x250; VNC TCP port: 5900) 5900/tcp open vnc VNC (protocol 3.8) Service Info: OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.253.34: Not shown: 562 closed ports, 435 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp vsftpd 2.0.4 |_ ftp-anon: Anonymous FTP login allowed 80/tcp open http Apache httpd 2.2.9 ((Unix) mod_ssl/2.2.9 OpenSSL/0.9.8a PHP/5.2.6) | html-title: POS |_ Requested resource was http://213.178.253.34/pos/ 111/tcp open rpcbind | rpcinfo: | 100000 2 111/udp rpcbind | 100024 1 32768/udp status | 100000 2 111/tcp rpcbind |_ 100024 1 58437/tcp status Service Info: OS: Unix
Interesting ports on 213.178.253.35: Not shown: 973 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp vsftpd 1.1.0 |_ ftp-anon: Anonymous FTP login allowed 22/tcp filtered ssh 23/tcp filtered telnet 25/tcp open smtp Communigate Pro SMTP 4.1.8 80/tcp open http CommuniGate Pro httpd 4.1.8 |_ html-title: CommuniGate Pro Entrance: Unknown Domain 106/tcp open pop3pw CommuniGate Pro pop3 password change daemon 4.1.8 110/tcp open pop3 CommuniGate Pro 4.1.8 |_ pop3-capabilities: USER IMPLEMENTATION(CommuniGatePro) UIDL APOP TOP STLS PIPELINING LAST SASL(LOGIN PLAIN CRAM-MD5 DIGEST-MD5 MSN) 111/tcp open rpcbind | rpcinfo: | 100000 2 111/udp rpcbind | 100024 1 32768/udp status | 100000 2 111/tcp rpcbind | 100024 1 32768/tcp status |_ 391002 2 32771/tcp sgi_fam 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 143/tcp open imap CommuniGate Pro imapd waseela.aleppo.sc.db |_ imap-capabilities: LOGIN-REFERRALS QUOTA STARTTLS LISTEXT AUTH=LOGIN ID AUTH=DIGEST-MD5 CHILDREN BINARY IMAP4REV1 IMAP4 AUTH=MSN UIDPLUS AUTH=CRAM-MD5 AUTH=PLAIN ACL LITERAL+ IDLE NAMESPACE MULTIAPPEND 389/tcp open ldap (Anonymous bind OK) 636/tcp open ssl/ldap (Anonymous bind OK) 993/tcp open ssl/imap CommuniGate Pro imapd waseela.aleppo.sc.db |_ imap-capabilities: LOGIN-REFERRALS QUOTA AUTH=PLAIN LISTEXT AUTH=LOGIN ID AUTH=DIGEST-MD5 CHILDREN BINARY IMAP4REV1 IMAP4 AUTH=MSN UIDPLUS AUTH=CRAM-MD5 ACL LITERAL+ IDLE NAMESPACE MULTIAPPEND 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3050/tcp open firebird Firebird RDBMS Protocol version 10 4444/tcp filtered krb524 5060/tcp filtered sip 6000/tcp open X11 (access denied) 8010/tcp open http CommuniGate Pro httpd 4.1.8 |_ html-title: CommuniGate Pro waseela.aleppo.sc.db Setup 8021/tcp open ftp Communigate Pro ftpd 4.1.8 8100/tcp open http CommuniGate Pro httpd 4.1.8 |_ html-title: CommuniGate Pro Entrance: Unknown Domain 9010/tcp open ssl/http CommuniGate Pro httpd 4.1.8 |_ html-title: CommuniGate Pro waseela.aleppo.sc.db Setup 9100/tcp open jetdirect? 32768/tcp open rpcbind Service Info: Hosts: waseela.aleppo.sc.db, 4.1.8; OS: Unix
Interesting ports on 213.178.253.89: Not shown: 526 closed ports, 473 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access Service Info: OS: IOS
All 1000 scanned ports on 213.178.253.90 are filtered
Interesting ports on 213.178.253.97: Not shown: 574 filtered ports, 425 closed ports PORT STATE SERVICE VERSION 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access Service Info: OS: IOS
Interesting ports on 213.178.253.98: Not shown: 974 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Mathopd httpd 1.1 |_ html-title: User Configuration Interface 443/tcp open ssl/https? |_ html-title: Site doesn't have a title (text/html). 10002/tcp closed unknown 10003/tcp closed unknown 10004/tcp closed unknown 10082/tcp closed amandaidx 10180/tcp closed unknown 11110/tcp closed unknown 12000/tcp closed cce4x 12174/tcp closed unknown 13456/tcp closed unknown 13783/tcp closed netbackup 14441/tcp closed unknown 14442/tcp closed unknown 15004/tcp closed unknown 15742/tcp closed unknown 16018/tcp closed unknown 17988/tcp closed unknown 18988/tcp closed unknown 19801/tcp closed unknown 19842/tcp closed unknown 20005/tcp closed btx 20031/tcp closed unknown 24444/tcp closed unknown 25735/tcp closed unknown 27352/tcp closed unknown
Interesting ports on 213.178.253.105: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.253.106: ----> Net Management SHERATON hotel Not shown: 729 closed ports, 259 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Microsoft ESMTP 6.0.2600.5512 | smtp-commands: EHLO ZYXEL Hello [88.191.90.106], SIZE 2097152, PIPELINING, DSN, ENHANCEDSTATUSCODES, 8bitmime, BINARYMIME, CHUNKING, VRFY |_ HELP This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH BDAT VRFY 80/tcp open http Microsoft IIS webserver 5.1 |_ html-title: Under Construction 443/tcp open https? 445/tcp open microsoft-ds Microsoft Windows XP microsoft-ds 1025/tcp open msrpc Microsoft Windows RPC 1035/tcp open multidropper? 1036/tcp open apc-agent APC PowerChute agent 1038/tcp open apc-agent APC PowerChute agent 3389/tcp open microsoft-rdp Microsoft Terminal Service 8089/tcp open unknown 8090/tcp open http Apache Tomcat/Coyote JSP engine 1.1 |_ html-title: ManageEngine ServiceDesk Plus 19780/tcp open unknown
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows XP | LAN Manager: Windows 2000 LAN Manager | Name: WORKGROUP\ZYXEL |_ System time: 2012-02-26 19:31:11 UTC+2
Interesting ports on 213.178.253.137: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction 7001/tcp open http WebLogic httpd |_ html-title: Error 404--Not Found Service Info: OS: Windows
Interesting ports on 213.178.253.140: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Microsoft ESMTP 6.0.3790.3959 110/tcp open tcpwrapped 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ sslv2: server still supports SSLv2 |_ html-title: Under Construction Service Info: Host: opcdaex02.opc.com; OS: Windows
Interesting ports on 213.178.253.185: Not shown: 628 filtered ports, 371 closed ports PORT STATE SERVICE VERSION 23/tcp open telnet Cisco router Service Info: OS: IOS; Device: router
Interesting ports on 213.178.253.196: Not shown: 905 closed ports, 92 filtered ports PORT STATE SERVICE VERSION 53/tcp open domain ISC BIND DNS 80/tcp open http Microsoft IIS |_ html-title: The page cannot be displayed 443/tcp open ssl/https? | html-title: Barracuda Link Balancer: Welcome |_ Requested resource was https://213.178.253.196/cgi-mod/index.cgi |_ sslv2: server still supports SSLv2
Interesting ports on 213.178.253.197: Not shown: 859 closed ports, 139 filtered ports PORT STATE SERVICE VERSION 80/tcp open http? | robots.txt: has 1 disallowed entry |_ / | html-title: Barracuda Link Balancer: Welcome |_ Requested resource was http://213.178.253.197/cgi-mod/index.cgi 443/tcp open ssl/https? |_ sslv2: server still supports SSLv2 | html-title: Barracuda Link Balancer: Welcome |_ Requested resource was https://213.178.253.197/cgi-mod/index.cgi
Interesting ports on 213.178.253.226: Not shown: 645 closed ports, 335 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Microsoft ESMTP 53/tcp open domain Microsoft DNS 6.1.7600 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: 403 - Forbidden: Access is denied. 88/tcp open kerberos-sec Microsoft Windows kerberos-sec 110/tcp open pop3 MS Exchange 2007 pop3d |_ pop3-capabilities: USER STLS UIDL TOP SASL(NTLM GSSAPI PLAIN) 443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ html-title: IIS7 |_ sslv2: server still supports SSLv2 445/tcp open netbios-ssn 464/tcp open kpasswd5? 587/tcp open smtp Microsoft ESMTP 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 625/tcp open smtp Microsoft ESMTP 808/tcp open ccproxy-http? 995/tcp open ssl/pop3 MS Exchange 2007 pop3d |_ pop3-capabilities: USER SASL(NTLM GSSAPI PLAIN) TOP UIDL 2301/tcp open http HP Proliant System Management 6.1.0.102 (CompaqHTTPServer 9.9) | html-title: HP System Management Homepage |_ Requested resource was http://213.178.253.226/red2301.html?RedirectUrl=/ 3268/tcp open ldap 3269/tcp open ssl/ldap |_ sslv2: server still supports SSLv2 3389/tcp open microsoft-rdp Microsoft Terminal Service 6001/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 6002/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 6004/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 Service Info: Host: ns-fpm01.nourship.local; OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows Server 2008 R2 Enterprise 7600 | LAN Manager: Windows Server 2008 R2 Enterprise 6.1 | Name: NOURSHIP\NS-FPM01 |_ System time: 2012-02-26 19:33:02 UTC+2
213.178.254.1/24
Interesting ports on 213.178.254.65: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp open ssh Cisco SSH 1.25 (protocol 2.0) |_ ssh-hostkey: 1024 ce:6e:27:1f:06:6d:fa:75:14:dc:6a:ba:c0:e2:01:db (RSA) 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.254.97: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.254.242: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS |_ html-title: The page cannot be displayed |_ sslv2: server still supports SSLv2 Service Info: OS: Windows
Interesting ports on 213.178.254.243: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS |_ sslv2: server still supports SSLv2 |_ html-title: The page cannot be displayed 3389/tcp open microsoft-rdp Microsoft Terminal Service Service Info: OS: Windows
Interesting ports on 213.178.254.244: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS |_ html-title: The page cannot be displayed |_ sslv2: server still supports SSLv2 Service Info: OS: Windows
Interesting ports on 213.178.254.245: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS |_ sslv2: server still supports SSLv2 |_ html-title: The page cannot be displayed 3389/tcp open microsoft-rdp Microsoft Terminal Service Service Info: OS: Windows
Interesting ports on 213.178.254.246: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Microsoft ESMTP 6.0.3790.1830 | smtp-commands: EHLO mailserver.arabia.sy Hello [88.190.24.19], TURN, SIZE, ETRN, PIPELINING, DSN, ENHANCEDSTATUSCODES, 8bitmime, BINARYMIME, CHUNKING, VRFY, X-EXPS GSSAPI NTLM LOGIN, X-EXPS=LOGIN, AUTH GSSAPI NTLM LOGIN, AUTH=LOGIN, X-LINK2STATE, XEXCH50 |_ HELP This server supports the following commands: HELO EHLO STARTTLS RCPT DATA RSET MAIL QUIT HELP AUTH TURN ETRN BDAT VRFY 143/tcp open imap Microsoft Exchange Server 2003 imapd 6.5.6944.0 |_ imap-capabilities: LOGIN-REFERRALS IMAP4 AUTH=NTLM IMAP4rev1 MAILBOX-REFERRALS UIDPLUS LITERAL+ IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Microsoft IIS |_ html-title: The page cannot be displayed |_ sslv2: server still supports SSLv2 Service Info: Host: mailserver.arabia.sy; OS: Windows
213.178.225.1/24
Interesting ports on shmail.scs-net.org (213.178.225.17): Not shown: 993 filtered ports PORT STATE SERVICE VERSION 25/tcp closed smtp 80/tcp open http Apache httpd |_ html-title: Site doesn't have a title (text/html). 110/tcp closed pop3 143/tcp closed imap 993/tcp closed imaps 995/tcp closed pop3s 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html).
Interesting ports on mailhosting1.scs-net.org (213.178.225.24): Not shown: 993 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO mailhosting1.scs-net.org, PIPELINING, SIZE 15728640, ETRN, STARTTLS, AUTH LOGIN CRAM-MD5 DIGEST-MD5 PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 993/tcp open ssl/imap Courier Imapd (released 2004) |_ sslv2: server still supports SSLv2 |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA AUTH=PLAIN THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 995/tcp open ssl/pop3 Courier pop3d |_ sslv2: server still supports SSLv2 |_ pop3-capabilities: USER IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP LOGIN-DELAY(10) TOP 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html). Service Info: Hosts: mailhosting1.scs-net.org, localhost.localdomain
Interesting ports on 213.178.225.35: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 1.3.33 ((Win32) PHP/5.0.5) |_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.225.38: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ sslv2: server still supports SSLv2 |_ html-title: Under Construction Service Info: OS: Windows
Interesting ports on 213.178.225.39: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd | robots.txt: has 11 disallowed entries | admin.php config header footer pntables referer /images |_ /includes /modules/NS- /pnadodb /themes-----------> reperdoires indexés (taper un wget dedans) |_ html-title: ALOOLA :: At your service
Interesting ports on 213.178.225.41: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 | html-title: \xD8\xA7\xD9\x84\xD8\xB1\xD8\xA6\xD9\x8A\xD8\xB3\xD9\x8A\xD8\xA9 |_ Requested resource was http://213.178.225.41/portal/ Service Info: OS: Windows
Interesting ports on 213.178.225.42: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 | html-title: \xD8\xA7\xD9\x84\xD8\xB1\xD8\xA6\xD9\x8A\xD8\xB3\xD9\x8A\xD8\xA9 |_ Requested resource was http://213.178.225.42/portal/ Service Info: OS: Windows
Interesting ports on webmail2.scs-net.org (213.178.225.43): Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.2.3 ((Debian) mod_python/3.2.10 Python/2.4.4 PHP/5.2.0-8+etch10 mod_perl/2.0.2 Perl/v5.8.8) |_ html-title: Login to @Mail
Interesting ports on webmail3.scs-net.org (213.178.225.44): Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.2.9 ((Debian) PHP/5.2.6-1+lenny13 with Suhosin-Patch mod_perl/2.0.4 Perl/v5.10.0) |_ html-title: SCS-Net 6.3.5 - Login Page
Interesting ports on webmail.scs-net.org (213.178.225.45): Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.2.3 ((Debian) mod_python/3.2.10 Python/2.4.4 PHP/5.2.0-8+etch10 mod_perl/2.0.2 Perl/v5.8.8) |_ html-title: Login to @Mail
Interesting ports on scs-net.org (213.178.225.50): Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 | html-title: Error |_ Requested resource was http://213.178.225.50/portal/ Service Info: OS: Windows
Interesting ports on 213.178.225.57: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.2.3 ((CentOS)) | html-title: 404 Not Found |_ Requested resource was http://213.178.225.57/hspc/index.php
Interesting ports on 213.178.225.58: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Apache httpd 2.2.14 ((Ubuntu)) |_ html-title: 404 Not Found 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip
Interesting ports on 213.178.225.67: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.2.3 ((Fedora)) | html-title: 404 Not Found |_ Requested resource was http://213.178.225.67/hspc/index.php
Interesting ports on 213.178.225.71: Not shown: 995 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page 443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS)) |_ sslv2: server still supports SSLv2 |_ html-title: Default Parallels Plesk Panel Page 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html).
Interesting ports on testlat.scs-net.org (213.178.225.72): Not shown: 995 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp Microsoft ftpd 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: Default Parallels Plesk Panel Page 443/tcp closed https 8443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ html-title: Site doesn't have a title (text/html). |_ sslv2: server still supports SSLv2 Service Info: OS: Windows
Interesting ports on organon-sy.com (213.178.225.76): Not shown: 995 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp Microsoft ftpd 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Default PLESK Page 443/tcp closed https 8443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ html-title: Site doesn't have a title (text/html). |_ sslv2: server still supports SSLv2 Service Info: OS: Windows
Interesting ports on 213.178.225.83: Not shown: 995 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.2e 80/tcp open http Apache httpd |_ html-title: Default Parallels Plesk Panel Page 443/tcp closed https 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.225.88: Not shown: 996 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp Microsoft ftpd 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: Default Parallels Plesk Panel Page 443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ sslv2: server still supports SSLv2 |_ html-title: Domain Default page 8443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ html-title: Site doesn't have a title (text/html). |_ sslv2: server still supports SSLv2 Service Info: OS: Windows
Interesting ports on 213.178.225.94: Not shown: 991 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip
Interesting ports on 213.178.225.99: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Microsoft ESMTP 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: 403 - Forbidden: Access is denied. 443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ sslv2: server still supports SSLv2 |_ html-title: IIS7 Service Info: Host: STAFFMAIL.scs-net.local; OS: Windows
Interesting ports on 213.178.225.100: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Error Service Info: OS: Windows
Interesting ports on 213.178.225.101: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Dedicated Micros Digital Sprite 2 DVR http config (ADH-Web httpd) |_ html-title: Site doesn't have a title (text/html; charset=utf-8). 1025/tcp closed NFS-or-IIS Service Info: Device: media device
Interesting ports on 213.178.225.102: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open tcpwrapped
Interesting ports on 213.178.225.103: Not shown: 707 closed ports, 281 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction 81/tcp open http Microsoft IIS httpd 443/tcp open https? 444/tcp open ssl/http Microsoft IIS httpd |_ html-title: Site doesn't have a title (text/html). |_ sslv2: server still supports SSLv2 445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds 1044/tcp open msrpc Microsoft Windows RPC 1052/tcp open msrpc Microsoft Windows RPC 1801/tcp open unknown 2103/tcp open msrpc Microsoft Windows RPC 2105/tcp open msrpc Microsoft Windows RPC 2107/tcp open msrpc Microsoft Windows RPC 3389/tcp open microsoft-rdp Microsoft Terminal Service Service Info: OS: Windows
Host script results: | smb-os-discovery: Windows Server 2003 R2 3790 Service Pack 2 | LAN Manager: Windows Server 2003 R2 5.2 | Name: SCS-NET\OCSSRV |_ System time: 2012-02-26 20:24:35 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.225.107: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.2.12 ((Ubuntu)) |_ html-title: 404 Not Found
Interesting ports on 213.178.225.131: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.3c 25/tcp open smtp qmail smtpd | smtp-commands: EHLO syrianedu.scs-net.org, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME |_ HELP qmail home page: http://pobox.com/~djb/qmail.html 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page |_ sslv2: server still supports SSLv2 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.225.133: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO syriabook.scs-net.org, PIPELINING, SIZE 10240000, ETRN, STARTTLS, AUTH LOGIN CRAM-MD5 DIGEST-MD5 PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN 80/tcp open http Apache httpd | robots.txt: has 2 disallowed entries |_ /include/ /theme/ |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER IMPLEMENTATION(Courier Mail Server) UIDL APOP TOP STLS PIPELINING LOGIN-DELAY(10) SASL(LOGIN CRAM-MD5 PLAIN) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS AUTH=PLAIN THREAD=REFERENCES ACL2=UNION UIDPLUS ACL SORT IMAP4rev1 AUTH=CRAM-MD5 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ html-title: Default Parallels Plesk Panel Page | robots.txt: has 2 disallowed entries |_ /include/ /theme/ 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html). Service Info: Hosts: 192.168.11.110, syriabook.scs-net.org, localhost.localdomain; OS: Unix
Interesting ports on 213.178.225.135: Not shown: 991 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 1433/tcp open ms-sql-s Microsoft SQL Server 2008 8443/tcp closed https-alt 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at http://www.insecure.org/cgi-bin/servicefp-submit.cgi : SF-Port1433-TCP:V=5.00%I=7%D=2/26%Time=4F4A85DD%P=x86_64-unknown-linux-gnu SF:%r(ms-sql-s,25,"\x04\x01\0%\0\0\x01\0\0\0\x15\0\x06\x01\0\x1b\0\x01\x02 SF:\0\x1c\0\x01\x03\0\x1d\0\0\xff\n2\x06@\0\0\0\0"); Service Info: OS: Windows
Interesting ports on 213.178.225.138: Not shown: 994 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp Microsoft ftpd 25/tcp open smtp MailEnable smptd 5.10-- |_ smtp-commands: EHLO home [88.190.24.19], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN 80/tcp open http Microsoft IIS webserver 7.5 | html-title: \xD8\xA7\xD9\x84\xD9\x81\xD8\xB6\xD8\xA7\xD8\xA6\xD9\x8A\xD8\xA9 \xD8\xA7\xD9\x84\xD8\xAA\xD8\xB1\xD8\xA8\xD9\x88\xD9\x8A\xD8\xA9 |_ Requested resource was http://213.178.225.138/ETVPortalWebSite/ETVHomePage.aspx 110/tcp open pop3 MailEnable POP3 Server |_ pop3-capabilities: USER TOP UIDL 143/tcp open imap MailEnable imapd |_ imap-capabilities: IMAP4rev1 IMAP4 CHILDREN IDLE AUTH=LOGIN AUTH=CRAM-MD5 8443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ html-title: Site doesn't have a title (text/html). |_ sslv2: server still supports SSLv2 Service Info: Host: WIN-2594B9DPC9D.home; OS: Windows
Interesting ports on 213.178.225.139: Not shown: 636 filtered ports, 352 closed ports PORT STATE SERVICE VERSION 25/tcp open smtp Microsoft ESMTP 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: 403 - Forbidden: Access is denied. 110/tcp open pop3 MS Exchange 2007 pop3d |_ pop3-capabilities: STLS TOP UIDL 143/tcp open imap Microsoft Exchange 2007 imapd |_ imap-capabilities: IMAP4 STARTTLS IMAP4rev1 UIDPLUS LOGINDISABLED LITERAL+ IDLE NAMESPACE CHILDREN 443/tcp open https? |_ sslv2: server still supports SSLv2 |_ html-title: IIS7 993/tcp open ssl/imap Microsoft Exchange 2007 imapd |_ imap-capabilities: AUTH=GSSAPI IMAP4 AUTH=NTLM AUTH=PLAIN UIDPLUS IMAP4rev1 LITERAL+ IDLE NAMESPACE CHILDREN 995/tcp open pop3s? 6005/tcp open msrpc Microsoft Windows RPC 6006/tcp open X11:6? 6007/tcp open msrpc Microsoft Windows RPC 8080/tcp open http Apache Tomcat/Coyote JSP engine 1.1 |_ html-title: Site doesn't have a title (text/html;charset=UTF-8). 8443/tcp open https-alt? |_ html-title: Site doesn't have a title (text/html;charset=UTF-8). Service Info: Host: unexch1.undpprojects.local; OS: Windows
Interesting ports on 213.178.225.140: Not shown: 636 filtered ports, 354 closed ports PORT STATE SERVICE VERSION 25/tcp open smtp Microsoft ESMTP 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: 403 - Forbidden: Access is denied. 110/tcp open pop3 MS Exchange 2007 pop3d |_ pop3-capabilities: STLS TOP UIDL 143/tcp open imap Microsoft Exchange 2007 imapd |_ imap-capabilities: IMAP4 STARTTLS IMAP4rev1 UIDPLUS LOGINDISABLED LITERAL+ IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ html-title: IIS7 |_ sslv2: server still supports SSLv2 993/tcp open ssl/imap Microsoft Exchange 2007 imapd |_ imap-capabilities: AUTH=GSSAPI IMAP4 AUTH=NTLM AUTH=PLAIN UIDPLUS IMAP4rev1 LITERAL+ IDLE NAMESPACE CHILDREN 995/tcp open ssl/pop3 MS Exchange 2007 pop3d |_ pop3-capabilities: USER SASL(NTLM GSSAPI PLAIN) TOP UIDL 6005/tcp open msrpc Microsoft Windows RPC 6006/tcp open msrpc Microsoft Windows RPC 6007/tcp open msrpc Microsoft Windows RPC Service Info: Host: unexch2.undpprojects.local; OS: Windows
Interesting ports on 213.178.225.141: Not shown: 993 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp Microsoft ftpd 25/tcp open smtp MailEnable smptd 6.0-- |_ smtp-commands: EHLO home [88.190.24.19], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 MailEnable POP3 Server |_ pop3-capabilities: USER TOP UIDL 443/tcp closed https 8443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ sslv2: server still supports SSLv2 |_ html-title: Site doesn't have a title (text/html). Service Info: Host: WEB-WITNESS.home; OS: Windows
Interesting ports on 213.178.225.188: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp? 25/tcp open smtp MailEnable smptd 6.0-- |_ smtp-commands: EHLO home [88.190.24.19], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 MailEnable POP3 Server |_ pop3-capabilities: USER TOP UIDL 143/tcp open imap MailEnable imapd |_ imap-capabilities: IMAP4rev1 IMAP4 CHILDREN IDLE AUTH=LOGIN AUTH=CRAM-MD5 443/tcp closed https 8443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ sslv2: server still supports SSLv2 |_ html-title: Site doesn't have a title (text/html). Service Info: Host: IUST-SERVER.home; OS: Windows
Interesting ports on 213.178.225.189: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 6.0 | html-title: WebDemo Home |_ Requested resource was http://class5.svuonline.org/default.asp? 110/tcp closed pop3 143/tcp closed imap 443/tcp open tcpwrapped 8443/tcp closed https-alt Service Info: OS: Windows
Interesting ports on 213.178.225.190: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.3e 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO egov.sy, PIPELINING, SIZE 10240000, ETRN, STARTTLS, AUTH DIGEST-MD5 CRAM-MD5 LOGIN PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN 80/tcp open http Apache httpd |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER IMPLEMENTATION(Courier Mail Server) UIDL APOP TOP STLS PIPELINING LOGIN-DELAY(10) SASL(LOGIN CRAM-MD5 PLAIN) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS AUTH=PLAIN THREAD=REFERENCES ACL2=UNION UIDPLUS ACL SORT IMAP4rev1 AUTH=CRAM-MD5 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ html-title: Default Parallels Plesk Panel Page |_ sslv2: server still supports SSLv2 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.225.191: Not shown: 994 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp Microsoft ftpd 25/tcp open smtp MailEnable smptd 5.10-- |_ smtp-commands: EHLO home [88.190.24.19], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 MailEnable POP3 Server |_ pop3-capabilities: USER TOP UIDL 143/tcp open imap MailEnable imapd |_ imap-capabilities: IMAP4rev1 IMAP4 CHILDREN IDLE AUTH=LOGIN AUTH=CRAM-MD5 8443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ sslv2: server still supports SSLv2 |_ html-title: Site doesn't have a title (text/html). Service Info: Host: SYREDU-WIN.home; OS: Windows
Interesting ports on 213.178.225.193: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.3c 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO nationldialog.scs-net.org, PIPELINING, SIZE 10240000, ETRN, STARTTLS, AUTH LOGIN DIGEST-MD5 CRAM-MD5 PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN 80/tcp open http Apache httpd |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ sslv2: server still supports SSLv2 |_ html-title: Default Parallels Plesk Panel Page 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.225.194: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp closed http 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 8443/tcp closed https-alt
Interesting ports on 213.178.225.197: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.3c 25/tcp open smtp qmail smtpd | smtp-commands: EHLO bso.scs-net.org, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME |_ HELP qmail home page: http://pobox.com/~djb/qmail.html 80/tcp open http Apache httpd |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ sslv2: server still supports SSLv2 |_ html-title: Default Parallels Plesk Panel Page 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.225.198: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 6.0 | html-title: WebDemo Home |_ Requested resource was http://class1.svuonline.org/default.asp? 110/tcp closed pop3 143/tcp closed imap 443/tcp open tcpwrapped 8443/tcp closed https-alt Service Info: OS: Windows
Interesting ports on 213.178.225.199: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.3c |_ ftp-bounce: no banner 25/tcp open smtp | smtp-commands: EHLO moe.scs-net.org, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME |_ HELP qmail home page: http://pobox.com/~djb/qmail.html 80/tcp open http Apache httpd |_ html-title: Test Page for the Apache HTTP Server 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ sslv2: server still supports SSLv2 |_ html-title: Test Page for the Apache HTTP Server 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/plain; charset=utf-8).
Interesting ports on 213.178.225.200: Not shown: 993 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: \xC7\xE1\xE6\xDF\xC7\xE1\xC9 \xC7\xE1\xDA\xD1\xC8\xED\xC9 \xC7\xE1\xD3\xE6\xD1\xED\xC9 \xE1\xE1\xC3\xE4\xC8\xC7\xC1 - \xD3\xC7\xE4\xC7 - \xD3\xE6\xD1\xED\xC9 : \xC3\xCE\xC8\xC7\xD1 \xD3\xE6\xD1\xED\xC9 :: 110/tcp closed pop3 143/tcp closed imap 443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS)) |_ html-title: 401 Authorization Required | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = sana.sy
Interesting ports on 213.178.225.201: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.2.10 25/tcp open smtp qmail smtpd | smtp-commands: EHLO undpprojects.sy, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME |_ HELP qmail home page: http://pobox.com/~djb/qmail.html 80/tcp open http Apache httpd 2.0.49 ((Linux/SuSE)) |_ html-title: Default PLESK Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING LOGIN-DELAY(10) TOP 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd 2.0.49 ((Linux/SuSE)) |_ html-title: Default PLESK Page |_ sslv2: server still supports SSLv2 8443/tcp open http Apache httpd 1.3.33 ((Unix) mod_ssl/2.8.22 OpenSSL/0.9.7e PHP/5.0.4) | html-title: 302 Found |_ Did not follow redirect to https://UNDP.scs-net.org:8443 Service Info: OS: Unix
Interesting ports on 213.178.225.202: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http Microsoft IIS httpd |_ html-title: Site doesn't have a title (text/html). 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 8443/tcp closed https-alt
Interesting ports on 213.178.225.203: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp Microsoft ftpd |_ ftp-anon: Anonymous FTP login allowed 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 6.0 | html-title: WebDemo Home |_ Requested resource was http://class2.svuonline.org/default.asp? 110/tcp closed pop3 143/tcp closed imap 443/tcp open tcpwrapped 8443/tcp closed https-alt Service Info: OS: Windows
Interesting ports on 213.178.225.204: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.3c 25/tcp open smtp qmail smtpd | smtp-commands: EHLO esyria.scs-net.org, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME |_ HELP qmail home page: http://pobox.com/~djb/qmail.html 80/tcp open http Apache httpd |_ html-title: Site doesn't have a title (text/html). 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ sslv2: server still supports SSLv2 |_ html-title: Site doesn't have a title (text/html). 8443/tcp open http Apache httpd | html-title: 302 Found |_ Did not follow redirect to https://esyria.scs-net.org:8443 Service Info: Host: localhost.localdomain; OS: Unix
Interesting ports on 213.178.225.205: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http? | html-title: Site doesn't have a title (text/html). |_ Did not follow redirect to https://213.178.225.205/ 443/tcp open ssl/http VMware ESX Server httpd |_ html-title: " + ID_EESX_Welcome + "
Interesting ports on 213.178.225.208: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 6.0 | html-title: WebDemo Home |_ Requested resource was http://class6.svuonline.org/default.asp? 110/tcp closed pop3 143/tcp closed imap 443/tcp open tcpwrapped 8443/tcp closed https-alt Service Info: OS: Windows
Interesting ports on 213.178.225.209: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http? |_ html-title: Did not follow redirect to https://213.178.225.209/ and no page was returned. 110/tcp closed pop3 143/tcp closed imap 443/tcp open ssl/http VMware ESX Server httpd |_ html-title: " + ID_EESX_Welcome + " 8443/tcp closed https-alt
Interesting ports on 213.178.225.212: Not shown: 991 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp? 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO diflottery.scs-net.org, PIPELINING, SIZE 10240000, ETRN, STARTTLS, AUTH CRAM-MD5 DIGEST-MD5 LOGIN PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page |_ sslv2: server still supports SSLv2 3306/tcp open mysql MySQL 5.0.77 | mysql-info: Protocol: 10 | Version: 5.0.77 | Thread ID: 4756123 | Some Capabilities: Connect with DB, Compress, Transactions, Secure Connection | Status: Autocommit |_ Salt: =$<>cVh''/U?yhyKJptv 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.225.215: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http nginx web server |_ html-title: Parallels Server Bare Metal 5 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 8443/tcp closed https-alt
Interesting ports on 213.178.225.216: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 6.0 | html-title: WebDemo Home |_ Requested resource was http://class7.svuonline.org/default.asp? 110/tcp closed pop3 143/tcp closed imap 443/tcp open tcpwrapped 8443/tcp closed https-alt Service Info: OS: Windows
Interesting ports on 213.178.225.217: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 6.0 | html-title: WebDemo Home |_ Requested resource was http://class8.svuonline.org/default.asp? 110/tcp closed pop3 143/tcp closed imap 443/tcp open tcpwrapped 8443/tcp closed https-alt Service Info: OS: Windows
Interesting ports on 213.178.225.218: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 6.0 | html-title: WebDemo Home |_ Requested resource was http://class9.svuonline.org/default.asp? 110/tcp closed pop3 143/tcp closed imap 443/tcp open tcpwrapped 8443/tcp closed https-alt Service Info: OS: Windows
Interesting ports on 213.178.225.221: Not shown: 994 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp open smtp Exim smtpd | smtp-commands: EHLO mailer1.massar.sy Hello example.org [88.190.24.19], SIZE 52428800, PIPELINING, AUTH PLAIN LOGIN, STARTTLS, HELP |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP 80/tcp open http Apache httpd 2.2.14 ((Ubuntu)) 100/tcp open ssh OpenSSH 5.3p1 Debian 3ubuntu7 (protocol 2.0) |_ ssh-hostkey: 4096 e4:41:ac:30:68:75:24:73:4e:b2:89:90:30:e4:41:8f (RSA) 443/tcp open ssl/http Apache httpd 2.2.14 ((Ubuntu)) Service Info: OS: Linux
Interesting ports on 213.178.225.222: Not shown: 988 filtered ports PORT STATE SERVICE VERSION 21/tcp closed ftp 25/tcp open smtp Exim smtpd 4.72 | smtp-commands: EHLO massar.sy Hello example.org [88.190.24.19], SIZE 52428800, PIPELINING, AUTH PLAIN LOGIN, STARTTLS, HELP |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP 80/tcp open http Apache httpd |_ html-title: Website Down 100/tcp open ssh OpenSSH 5.1p1 Debian 5 (protocol 2.0) |_ ssh-hostkey: 4096 5e:b3:4d:ae:bd:06:c0:48:e3:40:5d:da:0e:fa:7d:33 (RSA) 110/tcp open pop3 |_ pop3-capabilities: USER CAPA RESP-CODES UIDL PIPELINING STLS TOP SASL(PLAIN LOGIN) 143/tcp open imap Dovecot imapd |_ imap-capabilities: LOGIN-REFERRALS ESEARCH UNSELECT QUOTA IMAP4rev1 AUTH=PLAIN STARTTLS AUTH=LOGIN ID CONDSTORE WITHIN CHILDREN LIST-EXTENDED SEARCHRES ESORT QRESYNC CONTEXT=SEARCH THREAD=REFS THREAD=REFERENCES I18NLEVEL=1 UIDPLUS NAMESPACE SORT ENABLE LITERAL+ IDLE SASL-IR MULTIAPPEND 443/tcp open ssl/http Apache httpd |_ sslv2: server still supports SSLv2 |_ html-title: Website Down 587/tcp open smtp Exim smtpd 4.72 | smtp-commands: EHLO massar.sy Hello example.org [88.190.24.19], SIZE 52428800, PIPELINING, AUTH PLAIN LOGIN, STARTTLS, HELP |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP 993/tcp open ssl/imap Dovecot imapd |_ sslv2: server still supports SSLv2 |_ imap-capabilities: LOGIN-REFERRALS ESEARCH UNSELECT IMAP4rev1 QUOTA AUTH=PLAIN AUTH=LOGIN ID CONDSTORE WITHIN CHILDREN LIST-EXTENDED SEARCHRES ESORT QRESYNC CONTEXT=SEARCH THREAD=REFS THREAD=REFERENCES I18NLEVEL=1 UIDPLUS NAMESPACE SORT ENABLE LITERAL+ IDLE SASL-IR MULTIAPPEND 995/tcp open ssl/pop3 |_ sslv2: server still supports SSLv2 |_ pop3-capabilities: USER CAPA UIDL PIPELINING RESP-CODES TOP SASL(PLAIN LOGIN) 33354/tcp closed unknown 33899/tcp closed unknown Service Info: Host: massar.sy; OS: Linux
Interesting ports on 213.178.225.224: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp Microsoft ftpd |_ ftp-anon: Anonymous FTP login allowed 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 6.0 | html-title: WebDemo Home |_ Requested resource was http://class3.svuonline.org/default.asp? 110/tcp closed pop3 143/tcp closed imap 443/tcp open tcpwrapped 8443/tcp closed https-alt Service Info: OS: Windows
Interesting ports on 213.178.225.229: Not shown: 994 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp Microsoft ftpd 25/tcp open smtp MailEnable smptd 5.02-- |_ smtp-commands: EHLO cbs-bank.com [88.190.24.19], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 MailEnable POP3 Server |_ pop3-capabilities: USER TOP UIDL 143/tcp open imap MailEnable imapd |_ imap-capabilities: IMAP4rev1 IMAP4 CHILDREN IDLE AUTH=LOGIN AUTH=CRAM-MD5 8443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ sslv2: server still supports SSLv2 |_ html-title: Site doesn't have a title (text/html). Service Info: Host: WIN-NHDLB9QHTPS.cbs-bank.com; OS: Windows
Interesting ports on 213.178.225.230: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.3c 25/tcp open smtp qmail smtpd | smtp-commands: EHLO mofa.gov.sy, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME |_ HELP qmail home page: http://pobox.com/~djb/qmail.html 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS)) |_ sslv2: server still supports SSLv2 |_ html-title: Default Parallels Plesk Panel Page 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.225.231: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD |_ ftp-anon: Anonymous FTP login allowed 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO mofa-web.scs-net.org, PIPELINING, SIZE 10240000, ETRN, STARTTLS, AUTH CRAM-MD5 LOGIN PLAIN DIGEST-MD5, ENHANCEDSTATUSCODES, 8BITMIME, DSN 80/tcp open http Apache httpd |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER IMPLEMENTATION(Courier Mail Server) UIDL APOP TOP STLS PIPELINING LOGIN-DELAY(10) SASL(LOGIN CRAM-MD5 PLAIN) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS AUTH=PLAIN THREAD=REFERENCES ACL2=UNION UIDPLUS ACL SORT IMAP4rev1 AUTH=CRAM-MD5 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ html-title: Default Parallels Plesk Panel Page |_ sslv2: server still supports SSLv2 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html; charset=UTF-8). Service Info: Hosts: 192.168.11.36, mofa-web.scs-net.org, localhost.localdomain; OS: Unix
Interesting ports on 213.178.225.232: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.3c 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO reefnet.scs-net.org, PIPELINING, SIZE 10240000, ETRN, STARTTLS, AUTH PLAIN DIGEST-MD5 CRAM-MD5 LOGIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN 80/tcp open http Apache httpd |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ sslv2: server still supports SSLv2 |_ html-title: Default Parallels Plesk Panel Page 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.225.234: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: \xE3\xE6\xDE\xDA \xE4\xD9\xC7\xE3 \xE3\xDA\xE1\xE6\xE3\xC7\xCA \xC7\xE1\xC8\xCD\xCB \xC7\xE1\xDA\xE1\xE3\xED \xE6\xC7\xE1\xCA\xD8\xE6\xED\xD1 \xC7\xE1\xCA\xDE\xC7\xE4\xED \xDD\xED \xD3\xE6\xD1\xED\xC7 Service Info: OS: Windows
Interesting ports on 213.178.225.237: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.1 25/tcp open smtp qmail smtpd | smtp-commands: EHLO commander.aloola.sy, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME |_ HELP qmail home page: http://pobox.com/~djb/qmail.html 80/tcp open http Apache httpd |_ html-title: Site doesn't have a title (text/html). 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ html-title: Site doesn't have a title (text/html). |_ sslv2: server still supports SSLv2 8443/tcp open http Apache httpd | html-title: 302 Found |_ Requested resource was https://commander.aloola.sy:8443/ Service Info: Host: localhost.localdomain; OS: Unix
Interesting ports on mail.syriatrust.org (213.178.225.240): Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp Microsoft ftpd 25/tcp open smtp MailEnable smptd 4.26-- |_ smtp-commands: EHLO syriatrust.org [88.190.24.19], this server offers 4 extensions, AUTH LOGIN, SIZE 10240000, HELP, AUTH=LOGIN 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 MailEnable POP3 Server |_ pop3-capabilities: USER TOP UIDL 143/tcp closed imap 443/tcp closed https 8443/tcp open ssl/http Microsoft IIS httpd 6.0 |_ html-title: Site doesn't have a title (text/html). |_ sslv2: server still supports SSLv2 Service Info: OS: Windows
Interesting ports on 213.178.225.244: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.3c 25/tcp open smtp qmail smtpd | smtp-commands: EHLO mail.esyria.sy, AUTH=LOGIN CRAM-MD5 PLAIN, AUTH LOGIN CRAM-MD5 PLAIN, STARTTLS, PIPELINING, 8BITMIME |_ HELP qmail home page: http://pobox.com/~djb/qmail.html 80/tcp open http Apache httpd |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ html-title: Default Parallels Plesk Panel Page |_ sslv2: server still supports SSLv2 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html).
Interesting ports on 213.178.225.245: Not shown: 994 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp Microsoft ftpd 25/tcp open smtp MailEnable smptd 5.02-- |_ smtp-commands: EHLO cbs-bank.com [88.190.24.19], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN 80/tcp open http Microsoft IIS webserver 7.5 |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 MailEnable POP3 Server |_ pop3-capabilities: USER TOP UIDL 143/tcp open imap MailEnable imapd |_ imap-capabilities: IMAP4rev1 IMAP4 CHILDREN IDLE AUTH=LOGIN AUTH=CRAM-MD5 8443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ sslv2: server still supports SSLv2 |_ html-title: Site doesn't have a title (text/html). Service Info: Host: WIN-NHDLB9QHTPS.cbs-bank.com; OS: Windows
Interesting ports on 213.178.225.247: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp Microsoft ftpd |_ ftp-anon: Anonymous FTP login allowed 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 6.0 | html-title: WebDemo Home |_ Requested resource was http://class4.svuonline.org/default.asp? 110/tcp closed pop3 143/tcp closed imap 443/tcp open tcpwrapped 8443/tcp closed https-alt Service Info: OS: Windows
Interesting ports on 213.178.225.248: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.3e 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO mod.gov.sy, PIPELINING, SIZE 10240000, ETRN, STARTTLS, AUTH LOGIN DIGEST-MD5 PLAIN CRAM-MD5, ENHANCEDSTATUSCODES, 8BITMIME, DSN 80/tcp open http Apache httpd |_ html-title: Under Construction 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ html-title: Under Construction |_ sslv2: server still supports SSLv2 8443/tcp open ssl/https-alt? |_ html-title: Site doesn't have a title (text/html). 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at http://www.insecure.org/cgi-bin/servicefp-submit.cgi :
Interesting ports on 213.178.225.250: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Axiom 2.0 News Manager Login - Distributor version - Not for r... 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 8443/tcp closed https-alt Service Info: OS: Windows
Interesting ports on 213.178.225.254: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp? |_ ftp-bounce: no banner 25/tcp open smtp? 80/tcp open http? 110/tcp open pop3? 143/tcp open imap? 443/tcp open https? 8443/tcp open https-alt?
213.178.226.1/24
Starting Nmap 5.00 ( http://nmap.org ) at 2012-02-26 20:50 CET Interesting ports on 213.178.226.49: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.1 25/tcp open smtp qmail smtpd 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Site doesn't have a title (text/html). 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Site doesn't have a title (text/html). |_ sslv2: server still supports SSLv2 8443/tcp open http Apache httpd | html-title: 302 Found |_ Did not follow redirect to https://mof.scs-net.org:8443 Service Info: Host: localhost.localdomain; OS: Unix
Interesting ports on 213.178.226.52: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp vsftpd 2.0.5 25/tcp closed smtp 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: \xE6\xD2\xC7\xD1\xC9 \xC7\xE1\xCA\xDA\xE1\xED\xE3 \xC7\xE1\xDA\xC7\xE1\xED - \xE3\xE6\xDE\xDA \xC7\xE1\xE3\xDD\xC7\xD6\xE1\xC9 - 2011-2012 110/tcp closed pop3 143/tcp closed imap 443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS)) |_ html-title: \xE6\xD2\xC7\xD1\xC9 \xC7\xE1\xCA\xDA\xE1\xED\xE3 \xC7\xE1\xDA\xC7\xE1\xED - \xE3\xE6\xDE\xDA \xC7\xE1\xE3\xDD\xC7\xD6\xE1\xC9 - 2011-2012 8443/tcp closed https-alt Service Info: OS: Unix
Interesting ports on 213.178.226.53: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp vsftpd 2.0.5 25/tcp closed smtp 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: \xE6\xD2\xC7\xD1\xC9 \xC7\xE1\xCA\xDA\xE1\xED\xE3 \xC7\xE1\xDA\xC7\xE1\xED - \xE3\xE6\xDE\xDA \xC7\xE1\xE3\xDD\xC7\xD6\xE1\xC9 - 2011-2012 110/tcp closed pop3 143/tcp closed imap 443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS)) |_ html-title: \xE6\xD2\xC7\xD1\xC9 \xC7\xE1\xCA\xDA\xE1\xED\xE3 \xC7\xE1\xDA\xC7\xE1\xED - \xE3\xE6\xDE\xDA \xC7\xE1\xE3\xDD\xC7\xD6\xE1\xC9 - 2011-2012 8443/tcp closed https-alt Service Info: OS: Unix
Interesting ports on 213.178.226.62: Not shown: 991 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip
Interesting ports on 213.178.226.208: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http? | html-title: PRTG Traffic Grapher - Monitoring Results - PRTG Traffic Graph... |_ Requested resource was http://213.178.226.208/login.htm | robots.txt: has 1 disallowed entry
213.178.227.1/24
Starting Nmap 5.00 ( http://nmap.org ) at 2012-02-26 20:51 CET Interesting ports on 213.178.227.1: Not shown: 991 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip
Interesting ports on 213.178.227.8: Not shown: 992 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http? 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 8443/tcp closed https-alt
Interesting ports on 213.178.227.9: Not shown: 990 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http? 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 8443/tcp closed https-alt 10000/tcp open snet-sensor-mgmt? 55555/tcp open unknown
Interesting ports on 213.178.227.10: Not shown: 990 filtered ports PORT STATE SERVICE VERSION 20/tcp open ftp-data? 21/tcp open ftp? |_ ftp-bounce: no banner 25/tcp open smtp? 80/tcp open http? 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 1433/tcp closed ms-sql-s 3389/tcp open ms-term-serv? 8443/tcp open https-alt?
All 1000 scanned ports on 213.178.227.33 are closed (915) or filtered (85)
Interesting ports on 213.178.227.34: Not shown: 989 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp? |_ ftp-bounce: no banner 25/tcp open smtp? 80/tcp open http? 110/tcp open pop3? 143/tcp open imap? 443/tcp open https? 3306/tcp open mysql? 3389/tcp closed ms-term-serv 6789/tcp open ibm-db2-admin? 8443/tcp open https-alt?
Interesting ports on 213.178.227.37: Not shown: 989 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp? |_ ftp-bounce: no banner 25/tcp open smtp? 80/tcp open http? 110/tcp open pop3? 143/tcp open imap? 443/tcp open https? 3306/tcp open mysql? 3389/tcp closed ms-term-serv 6789/tcp closed ibm-db2-admin 8443/tcp open https-alt?
Interesting ports on 213.178.227.39: Not shown: 988 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp? |_ ftp-bounce: no banner 25/tcp open smtp? 53/tcp open domain? 110/tcp open pop3? 143/tcp open imap? 443/tcp open https? 3306/tcp open mysql? 3389/tcp closed ms-term-serv 6789/tcp closed ibm-db2-admin 8443/tcp open https-alt? 10000/tcp open snet-sensor-mgmt?
Interesting ports on 213.178.227.40: Not shown: 996 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp? 80/tcp open http? 110/tcp open pop3? 8443/tcp open https-alt?
Interesting ports on 213.178.227.43: Not shown: 989 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http? 110/tcp closed pop3 143/tcp closed imap 443/tcp open https? 3306/tcp closed mysql 3389/tcp closed ms-term-serv 6789/tcp closed ibm-db2-admin 8443/tcp open https-alt?
Interesting ports on 213.178.227.50: Not shown: 989 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp? |_ ftp-bounce: no banner 25/tcp open smtp? 80/tcp open http? 110/tcp open pop3? 143/tcp open imap? 443/tcp open https? 3306/tcp open mysql? 3389/tcp closed ms-term-serv 6789/tcp closed ibm-db2-admin 8443/tcp open https-alt?
Interesting ports on 213.178.227.58: Not shown: 990 filtered ports PORT STATE SERVICE VERSION 21/tcp closed ftp 25/tcp closed smtp 80/tcp closed http 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 3306/tcp closed mysql 3389/tcp closed ms-term-serv 6789/tcp closed ibm-db2-admin 8443/tcp open https-alt?
Interesting ports on 213.178.227.70: Not shown: 990 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http? 110/tcp closed pop3 143/tcp closed imap 443/tcp open https? 3306/tcp closed mysql 3389/tcp open ms-term-serv? 8443/tcp open https-alt?
Interesting ports on 213.178.227.73: Not shown: 990 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http? 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 3306/tcp closed mysql 3389/tcp open ms-term-serv? 8443/tcp open https-alt?
Interesting ports on 213.178.227.74: Not shown: 990 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 25/tcp closed smtp 80/tcp open http? 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 3306/tcp closed mysql 3389/tcp open ms-term-serv? 8443/tcp open https-alt?
All 1000 scanned ports on 213.178.227.137 are filtered
Interesting ports on 213.178.227.139: Not shown: 989 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp? |_ ftp-bounce: no banner 25/tcp open smtp? 80/tcp open http? 110/tcp open pop3? 143/tcp open imap? 443/tcp open https? 3306/tcp open mysql? 3389/tcp closed ms-term-serv 6789/tcp closed ibm-db2-admin 8443/tcp open https-alt?
Interesting ports on 213.178.227.142: Not shown: 996 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp? 80/tcp open http? 110/tcp open pop3? 8443/tcp open https-alt?
Interesting ports on 213.178.227.145: Not shown: 996 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp? 80/tcp open http? 110/tcp open pop3? 8443/tcp open https-alt?
Interesting ports on 213.178.227.146: Not shown: 996 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp? 80/tcp open http? 110/tcp open pop3? 8443/tcp open https-alt?
Interesting ports on 213.178.227.149: Not shown: 989 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.1 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO pewss.scs-net.org, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, AUTH CRAM-MD5 DIGEST-MD5 LOGIN PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page |_ sslv2: server still supports SSLv2 3306/tcp open mysql MySQL (unauthorized) 3389/tcp closed ms-term-serv 6789/tcp closed ibm-db2-admin 8443/tcp open ssl/http Apache httpd |_ sslv2: server still supports SSLv2 | html-title: VZPP Plesk - Log in to Plesk 9.3.0 |_ Requested resource was https://213.178.227.149:8443/vz/cp/panel/plesk/frameset Service Info: Hosts: pewss.scs-net.org, localhost.localdomain; OS: Unix
Interesting ports on 213.178.227.151:
Not shown: 989 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp ProFTPD 1.3.1
25/tcp open smtp Postfix smtpd
|_ smtp-commands: EHLO mod.scs-net.org, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, AUTH CRAM-MD5 DIGEST-MD5 LOGIN PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN
80/tcp open http Apache httpd 2.2.3 ((CentOS))
|_ html-title: Apache HTTP Server Test Page powered by CentOS
110/tcp open pop3 Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10)
143/tcp open imap Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS))
|_ html-title: Apache HTTP Server Test Page powered by CentOS
3306/tcp open mysql MySQL 5.0.77
| mysql-info: Protocol: 10
| Version: 5.0.77
| Thread ID: 13846
| Some Capabilities: Connect with DB, Compress, Transactions, Secure Connection
| Status: Autocommit
|_ Salt: 4C5}:G7{'N6__?]65GEe
3389/tcp closed ms-term-serv
6789/tcp closed ibm-db2-admin
8443/tcp open ssl/http Apache httpd
| html-title: VZPP Plesk - Log in to Plesk 9.3.0
|_ Requested resource was https://213.178.227.151:8443/vz/cp/panel/plesk/frameset
|_ sslv2: server still supports SSLv2
Service Info: Hosts: mod.scs-net.org, localhost.localdomain; OS: Unix
Interesting ports on 213.178.227.152: Not shown: 989 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.1 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO localhost.localdomain, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, AUTH CRAM-MD5 DIGEST-MD5 LOGIN PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page |_ sslv2: server still supports SSLv2 3306/tcp open mysql MySQL 5.0.77 | mysql-info: Protocol: 10 | Version: 5.0.77 | Thread ID: 737230 | Some Capabilities: Connect with DB, Compress, Transactions, Secure Connection | Status: Autocommit |_ Salt: .pkJon[]Br6V/&o!ONz; 3389/tcp closed ms-term-serv 6789/tcp closed ibm-db2-admin 8443/tcp open ssl/http Apache httpd | html-title: VZPP Plesk - Log in to Plesk 9.3.0 |_ Requested resource was https://213.178.227.152:8443/vz/cp/panel/plesk/frameset |_ sslv2: server still supports SSLv2 Service Info: Host: localhost.localdomain; OS: Unix
Interesting ports on 213.178.227.157: Not shown: 989 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp ProFTPD 1.3.1 25/tcp open smtp Postfix smtpd |_ smtp-commands: EHLO youropinion.scs-net.org, PIPELINING, SIZE 10240000, VRFY, ETRN, STARTTLS, AUTH CRAM-MD5 DIGEST-MD5 LOGIN PLAIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN 80/tcp open http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10) 143/tcp open imap Courier Imapd (released 2004) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd 2.2.3 ((CentOS)) |_ html-title: Default Parallels Plesk Panel Page |_ sslv2: server still supports SSLv2 3306/tcp open mysql MySQL (unauthorized) 3389/tcp closed ms-term-serv 6789/tcp closed ibm-db2-admin 8443/tcp open ssl/http Apache httpd | html-title: VZPP Plesk - Log in to Plesk 9.3.0 |_ Requested resource was https://213.178.227.157:8443/vz/cp/panel/plesk/frameset |_ sslv2: server still supports SSLv2 Service Info: Hosts: youropinion.scs-net.org, localhost.localdomain; OS: Unix
Interesting ports on 213.178.227.194: Not shown: 997 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd |_ html-title: Site doesn't have a title (text/html). 443/tcp open ssl/http Apache httpd |_ html-title: Apache HTTP Server Test Page powered by CentOS 8443/tcp open http Apache SSL-only mode httpd |_ html-title: 400 Bad Request
Interesting ports on 213.178.227.231: Not shown: 993 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp? |_ ftp-bounce: no banner 25/tcp open smtp? 80/tcp open http? 110/tcp open pop3? 143/tcp open imap? 3389/tcp open ms-term-serv? 8443/tcp open https-alt?
Interesting ports on 213.178.227.232: Not shown: 993 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp Microsoft ftpd |_ ftp-anon: Anonymous FTP login allowed 25/tcp open smtp MailEnable smptd 5.10-- |_ smtp-commands: EHLO syrianeducation.org.sy [88.191.88.106], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN 80/tcp open http Microsoft IIS webserver 7.0 |_ html-title: Default Parallels Plesk Panel Page 110/tcp open pop3 MailEnable POP3 Server |_ pop3-capabilities: USER TOP UIDL 143/tcp open imap MailEnable imapd |_ imap-capabilities: IMAP4rev1 IMAP4 CHILDREN IDLE AUTH=LOGIN AUTH=CRAM-MD5 3389/tcp open microsoft-rdp Microsoft Terminal Service 8443/tcp open ssl/http Microsoft IIS webserver 7.0 |_ html-title: Site doesn't have a title (text/html). |_ sslv2: server still supports SSLv2 Service Info: Host: mail.syrianeducation.org.sy; OS: Windows
Interesting ports on 213.178.227.235: Not shown: 993 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp Microsoft ftpd 25/tcp open smtp MailEnable smptd 4.26-- |_ smtp-commands: EHLO home [88.191.88.106], this server offers 4 extensions, AUTH LOGIN, SIZE 5120000, HELP, AUTH=LOGIN 80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) |_ html-title: \xD8\xB3\xD9\x88\xD8\xB1\xD9\x8A\xD8\xA9 \xD8\xA7\xD9\x84\xD8\xAA\xD8\xB4\xD8\xA7\xD8\xB1\xD9\x83\xD9\x8A\xD8\xA9 110/tcp open pop3 MailEnable POP3 Server |_ pop3-capabilities: USER TOP UIDL 143/tcp open imap MailEnable imapd |_ imap-capabilities: IMAP4rev1 IMAP4 CHILDREN IDLE AUTH=LOGIN AUTH=CRAM-MD5 3389/tcp open microsoft-rdp Microsoft Terminal Service 8443/tcp open ssl/http Microsoft IIS webserver 7.0 |_ sslv2: server still supports SSLv2 |_ html-title: Site doesn't have a title (text/html). Service Info: Host: YOUROPINION.home; OS: Windows
Interesting ports on 213.178.227.236: Not shown: 990 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp Microsoft ftpd |_ ftp-anon: Anonymous FTP login allowed 25/tcp closed smtp 80/tcp open http Microsoft IIS webserver 7.0 |_ html-title: IIS7 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 3306/tcp closed mysql 3389/tcp open microsoft-rdp Microsoft Terminal Service 8443/tcp closed https-alt Service Info: OS: Windows
Interesting ports on 213.178.227.238: Not shown: 990 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp Microsoft ftpd 25/tcp closed smtp 80/tcp closed http 110/tcp closed pop3 143/tcp closed imap 443/tcp closed https 3306/tcp closed mysql 3389/tcp open microsoft-rdp Microsoft Terminal Service 8443/tcp open ssl/http Microsoft IIS webserver 7.0 |_ sslv2: server still supports SSLv2 | html-title: VZPP Plesk - Log in to Plesk |_ Requested resource was https://213.178.227.238:8443/vz/cp/panel/plesk/frameset Service Info: OS: Windows
213.178.228.1/24
Starting Nmap 5.00 ( http://nmap.org ) at 2012-02-26 21:27 CET Interesting ports on 213.178.228.1: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.228.71: Not shown: 989 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15 or view_access 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.228.113: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open tcpwrapped
Interesting ports on 213.178.228.162: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Netscreen administrative web server (runs Virata-EmWeb/R6_0_1) |_ html-title: Login 443/tcp open ssl/http Netscreen administrative web server (runs Virata-EmWeb/R6_0_1) |_ html-title: Login |_ sslv2: server still supports SSLv2 Service Info: Device: firewall
Interesting ports on 213.178.228.165: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS |_ html-title: The page cannot be displayed Service Info: OS: Windows
Interesting ports on 213.178.228.169: Not shown: 981 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp HP JetDirect ftpd |_ ftp-anon: Anonymous FTP login allowed 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http HP Color LaserJet 4650 http config (HP-ChaiSOE 1.0) | html-title: HP LaserJet M3035 MFP Series |_ Requested resource was http://213.178.228.169/hp/device/this.LCDispatcher 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 280/tcp open http HP Color LaserJet 4650 http config (HP-ChaiSOE 1.0) | html-title: HP LaserJet M3035 MFP Series |_ Requested resource was http://213.178.228.169/hp/device/this.LCDispatcher 443/tcp open ssl/http HP Color LaserJet 4650 http config (HP-ChaiSOE 1.0) | html-title: HP LaserJet M3035 MFP Series |_ Requested resource was http://213.178.228.169/hp/device/this.LCDispatcher 445/tcp filtered microsoft-ds 515/tcp open printer 631/tcp open http HP Color LaserJet 4650 http config (HP-ChaiSOE 1.0) | html-title: HP LaserJet M3035 MFP Series |_ Requested resource was http://213.178.228.169/hp/device/this.LCDispatcher 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 1783/tcp open unknown 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 9100/tcp open jetdirect? 14000/tcp open tcpwrapped Service Info: Device: printer
213.178.229.1/24
Starting Nmap 5.00 ( http://nmap.org ) at 2012-02-26 21:44 CET Interesting ports on 213.178.229.10: Not shown: 978 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 53/tcp open domain Microsoft DNS 88/tcp open tcpwrapped 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 389/tcp open tcpwrapped 445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds 464/tcp open kpasswd5? 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 636/tcp open tcpwrapped 1026/tcp open LSA-or-nterm? 1027/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 1040/tcp open msrpc Microsoft Windows RPC 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3268/tcp open ldap 3269/tcp open tcpwrapped 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.229.12: Not shown: 973 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 53/tcp open domain Microsoft DNS 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Site doesn't have a title (text/html). 88/tcp open kerberos-sec Microsoft Windows kerberos-sec 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 389/tcp open ldap 445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds 464/tcp open kpasswd5? 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 636/tcp open tcpwrapped 1026/tcp open msrpc Microsoft Windows RPC 1027/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 1055/tcp open msrpc Microsoft Windows RPC 1074/tcp open unknown 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2522/tcp open unknown 2638/tcp open tcpwrapped 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 7999/tcp open unknown 8443/tcp open ssl/https-alt? |_ html-title: Did not follow redirect to https://213.178.229.12/symantec.html and no page was returned. 9090/tcp open zeus-admin?
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows Server 2003 3790 Service Pack 2 | LAN Manager: Windows Server 2003 5.2 | Name: UNSY\SYR03 |_ System time: 2012-02-26 20:58:50 UTC+3
Interesting ports on 213.178.229.46: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp closed https
Interesting ports on 213.178.229.54: Not shown: 987 closed ports PORT STATE SERVICE VERSION 21/tcp open ftp VxWorks ftpd 5.5.1 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http? |_ html-title: LOGIN 111/tcp open rpcbind |_ rpcinfo: 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip 8000/tcp open tcpwrapped
Interesting ports on 213.178.229.73:
Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.229.80: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp closed http
Interesting ports on 213.178.229.82: Not shown: 981 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open microsoft-ds Microsoft Windows 2000 microsoft-ds 1027/tcp open msrpc Microsoft Windows RPC 1029/tcp open msrpc Microsoft Windows RPC 1433/tcp open ms-sql-s Microsoft SQL Server 2000 8.00.194; RTM 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2301/tcp open http HP Proliant System Management 2.1.6.156 (CompaqHTTPServer 9.9) | html-title: Site doesn't have a title (text/html). |_ Requested resource was http://213.178.229.82/red2301.html?RedirectUrl=/ 2381/tcp open http Apache SSL-only mode httpd |_ html-title: 400 Bad Request 3001/tcp open msrpc Microsoft Windows RPC 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 5800/tcp open http VNC Server Enterprise Edition httpd E4.4.2 r13117 (VNC port 5900) |_ html-title: VNC Viewer for Java 5900/tcp open vnc RealVNC Personal (protocol 4.0) Service Info: OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows 2000 | LAN Manager: Windows 2000 LAN Manager | Name: WORKGROUP\SYRIACALL01 |_ System time: 2012-02-26 22:34:35 UTC+2
Interesting ports on 213.178.229.83: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp closed http
Interesting ports on 213.178.229.91: Not shown: 978 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 445/tcp open microsoft-ds Microsoft Windows 2003 microsoft-ds 1025/tcp open msrpc Microsoft Windows RPC 1433/tcp open ms-sql-s Microsoft SQL Server 2005 9.00.1399; RTM 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 2301/tcp open http HP Proliant System Management 2.1.15.210 (CompaqHTTPServer 9.9) | html-title: Site doesn't have a title (text/html). |_ Requested resource was http://213.178.229.91/red2301.html?RedirectUrl=/ 2381/tcp open http Apache SSL-only mode httpd |_ html-title: 400 Bad Request 2383/tcp open ms-olap4? 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 5800/tcp open http VNC Server Enterprise Edition httpd E4.4.2 r13117 (VNC port 5900) |_ html-title: VNC Viewer for Java 5801/tcp open http VNC Server Enterprise Edition httpd E4.4.2 r13117 (VNC port 5901) |_ html-title: VNC Viewer for Java 5900/tcp open vnc RealVNC Personal (protocol 4.0) 5901/tcp open vnc RealVNC Personal (protocol 4.0) 8009/tcp open ajp13? 10000/tcp open http Apache Tomcat/Coyote JSP engine 1.1 |_ html-title: Apache Tomcat/5.5.27 Service Info: OS: Windows
Host script results: |_ nbstat: ERROR: Name query failed: TIMEOUT | smb-os-discovery: Windows Server 2003 3790 Service Pack 2 | LAN Manager: Windows Server 2003 5.2 | Name: WORKGROUP\SYRIACALL02 |_ System time: 2012-02-26 22:47:30 UTC+2
Interesting ports on 213.178.229.97: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http? 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip
Interesting ports on 213.178.229.98: Not shown: 975 closed ports PORT STATE SERVICE VERSION 7/tcp open echo 9/tcp open discard? 13/tcp open daytime Microsoft Windows USA daytime 17/tcp open qotd Windows qotd 19/tcp open chargen 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Paessler PRTG Traffic Grapher httpd (Indy httpd 9.0.11) | html-title: PRTG Traffic Grapher - Monitoring Results - PRTG Traffic Graph... |_ Requested resource was http://213.178.229.98/sensorlist.htm | robots.txt: has 1 disallowed entry |_ / 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open https? 445/tcp open netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 3128/tcp open squid-http? | http-open-proxy: Potentially OPEN proxy. |_ Methods successfully tested: CONNECT 3389/tcp open microsoft-rdp Microsoft Terminal Service 4444/tcp filtered krb524 5060/tcp filtered sip 49152/tcp open msrpc Microsoft Windows RPC 49153/tcp open msrpc Microsoft Windows RPC 49154/tcp open msrpc Microsoft Windows RPC 49157/tcp open msrpc Microsoft Windows RPC 49158/tcp open msrpc Microsoft Windows RPC 49160/tcp open msrpc Microsoft Windows RPC
Host script results: | smb-os-discovery: Windows 7 Ultimate 7600 | LAN Manager: Windows 7 Ultimate 6.1 | Name: WORKGROUP\SCS-PC |_ System time: 2012-02-26 21:57:25 UTC+2 |_ nbstat: ERROR: Name query failed: TIMEOUT
Interesting ports on 213.178.229.114: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ html-title: 403 Forbidden 995/tcp open ssl/pop3 MS Exchange 2007 pop3d |_ pop3-capabilities: USER SASL(GSSAPI PLAIN) TOP UIDL Service Info: OS: Windows
Interesting ports on 213.178.229.118: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 80/tcp open http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.229.129: Not shown: 992 closed ports PORT STATE SERVICE VERSION 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Cisco IOS administrative httpd |_ html-title: Site doesn't have a title. | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
Interesting ports on 213.178.229.209: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction Service Info: OS: Windows
Interesting ports on 213.178.229.210: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ sslv2: server still supports SSLv2 |_ html-title: IIS7 Service Info: OS: Windows
Interesting ports on 213.178.229.212: Not shown: 973 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp closed ftp 80/tcp open http Microsoft IIS webserver 7.5 | http-auth: HTTP Service requires authentication |_ Auth type: NTLM 2048/tcp closed dls-monitor 2065/tcp closed dlsrpn 2068/tcp closed advocentkvm 2099/tcp closed unknown 2100/tcp closed unknown 2103/tcp open msrpc Microsoft Windows RPC 2105/tcp open msrpc Microsoft Windows RPC 2106/tcp closed ekshell 2107/tcp open msrpc Microsoft Windows RPC 2111/tcp closed kx 2119/tcp closed unknown 2121/tcp closed ccproxy-ftp 2126/tcp closed unknown 2135/tcp closed unknown 2144/tcp closed unknown 2160/tcp closed unknown 2161/tcp closed apc-agent 2170/tcp closed unknown 2179/tcp closed unknown 2190/tcp closed unknown 2191/tcp closed unknown 2196/tcp closed unknown 2200/tcp closed unknown 8081/tcp closed blackice-icecap Service Info: OS: Windows
Interesting ports on 213.178.229.213: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http-proxy SonicWALL SSL-VPN http proxy
Interesting ports on 213.178.229.214: Not shown: 993 closed ports PORT STATE SERVICE VERSION 23/tcp open telnet Cisco router 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 1720/tcp filtered H.323/Q.931 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS; Device: router
Interesting ports on 213.178.229.216: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ sslv2: server still supports SSLv2 | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = 213.178.229.216 |_ html-title: You are not authorized to view this page Service Info: OS: Windows
Interesting ports on 213.178.229.217: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache Tomcat/Coyote JSP engine 1.1 |_ html-title: Apache Tomcat/5.5.9 8080/tcp closed http-proxy
Interesting ports on 213.178.229.219: Not shown: 996 filtered ports PORT STATE SERVICE VERSION 20/tcp closed ftp-data 21/tcp open ftp FileZilla ftpd 0.9.34 beta 80/tcp open http Apache httpd 2.2.11 ((Win32) mod_ssl/2.2.11 OpenSSL/0.9.8k) |_ html-title: Site doesn't have a title (text/html). 3306/tcp open mysql MySQL 5.1.41-community | mysql-info: Protocol: 10 | Version: 5.1.41-community | Thread ID: 45600 | Some Capabilities: Long Passwords, Connect with DB, Compress, ODBC, Transactions, Secure Connection | Status: Autocommit |_ Salt: m1J`(BS\TpWC)BQQ#WnF Service Info: OS: Windows
Interesting ports on 213.178.229.229: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open ssl/http Cisco IOS administrative httpd | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = level_15_access |_ html-title: Site doesn't have a title. 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip Service Info: OS: IOS
213.178.230.1/24
Starting Nmap 5.00 ( http://nmap.org ) at 2012-02-26 21:48 CET Interesting ports on 213.178.230.3: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ html-title: Under Construction Service Info: OS: Windows
Interesting ports on 213.178.230.5: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS httpd 6.0 |_ html-title: SyriaTel eLearning Portal > Home Service Info: OS: Windows
Interesting ports on 213.178.230.15: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS webserver 6.0 |_ html-title: Under Construction Service Info: OS: Windows
Interesting ports on 213.178.230.29: Not shown: 990 closed ports PORT STATE SERVICE VERSION 22/tcp filtered ssh 23/tcp filtered telnet 135/tcp filtered msrpc 139/tcp filtered netbios-ssn 443/tcp open tcpwrapped 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 2000/tcp filtered callbook 4444/tcp filtered krb524 5060/tcp filtered sip
Interesting ports on 213.178.230.33: Not shown: 996 filtered ports PORT STATE SERVICE VERSION 25/tcp closed smtp 53/tcp closed domain 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Site doesn't have a title (text/html). 443/tcp closed https Service Info: OS: Windows
Interesting ports on 213.178.230.34: Not shown: 996 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Cisco PIX sanitized smtpd |_ smtp-commands: 53/tcp closed domain 80/tcp closed http 443/tcp open ssl/https? |_ sslv2: server still supports SSLv2 | html-title: Barracuda Spam & Virus Firewall: Welcome |_ Requested resource was https://213.178.230.34/cgi-mod/index.cgi
Service Info: Device: firewall
Interesting ports on 213.178.230.35: Not shown: 996 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Cisco PIX sanitized smtpd |_ smtp-commands: 53/tcp closed domain 80/tcp open http Apache httpd 2.2.3 ((Red Hat)) |_ html-title: Test Page for the Apache HTTP Server on Red Hat Enterprise Linux 443/tcp open ssl/http Apache httpd 2.2.3 ((Red Hat)) |_ html-title: New Page 1 Service Info: Device: firewall
Interesting ports on 213.178.230.38: Not shown: 996 filtered ports PORT STATE SERVICE VERSION 25/tcp open smtp Cisco PIX sanitized smtpd |_ smtp-commands: 53/tcp open domain ISC BIND 9.2.4 80/tcp open http Apache httpd 2.0.52 ((CentOS)) |_ html-title: Apache HTTP Server Test Page powered by CentOS 443/tcp open ssl/http Apache httpd 2.0.52 ((CentOS)) |_ html-title: Apache HTTP Server Test Page powered by CentOS |_ sslv2: server still supports SSLv2 Service Info: Device: firewall
Interesting ports on 213.178.230.87: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 5.1 |_ html-title: Under Construction Service Info: OS: Windows
Interesting ports on 213.178.230.160: Not shown: 995 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.2.17 ((Win32) PHP/5.3.5) | html-title: SVUSurvey |_ Requested resource was http://survey.svuonline.org/limesurvey/ 81/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) |_ html-title: Bad Request 110/tcp closed pop3 443/tcp closed https 2222/tcp closed unknown Service Info: OS: Windows
Interesting ports on 213.178.230.163: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.2.16 ((Debian)) |_ html-title: \xD8\xA5\xD8\xB9\xD8\xA7\xD8\xAF\xD8\xA9 \xD8\xAA\xD9\x88\xD8\xAC\xD9\x8A\xD9\x87
Interesting ports on 213.178.230.165: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 21/tcp open ftp Microsoft ftpd 80/tcp open http Microsoft IIS webserver 6.0 |_ html-title: Under Construction Service Info: OS: Windows
Interesting ports on 213.178.230.166: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 5.0 |_ html-title: Under Construction Service Info: OS: Windows
Interesting ports on 213.178.230.168: Not shown: 999 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Microsoft IIS webserver 5.0 |_ html-title: Under Construction Service Info: OS: Windows
Interesting ports on 213.178.230.169: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open ssl/ssl OpenSSL (SSLv3) |_ sslv2: server still supports SSLv2 | robots.txt: has 1 disallowed entry |_ / 443/tcp open ssl/ssl OpenSSL (SSLv3) |_ sslv2: server still supports SSLv2
Interesting ports on 213.178.230.172: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.2.16 ((Debian)) | html-title: Intelligent Student Information System |_ Requested resource was http://213.178.230.172/isis/index.php 443/tcp open ssl/http Apache httpd 2.2.16 ((Debian)) | html-title: Intelligent Student Information System |_ Requested resource was http://213.178.230.172/isis/index.php
Interesting ports on 213.178.230.174: Not shown: 995 filtered ports PORT STATE SERVICE VERSION 80/tcp open http Apache httpd |_ html-title: 403 Forbidden 110/tcp open pop3 Courier pop3d |_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING LOGIN-DELAY(10) TOP 143/tcp open imap Courier Imapd (released 2005) |_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN 443/tcp open ssl/http Apache httpd |_ sslv2: server still supports SSLv2 |_ html-title: Did not follow redirect to https://213.178.230.174/login.php and no page was returned. 2222/tcp open ssh OpenSSH 4.7 (protocol 2.0) | ssh-hostkey: 1024 4e:26:6d:85:f4:ae:c2:be:34:66:a4:fa:7d:9b:9d:90 (DSA) |_ 2048 3b:81:77:7e:02:c8:ce:b3:05:5e:fe:2d:89:db:19:b9 (RSA)
Interesting ports on 213.178.230.178: Not shown: 998 filtered ports PORT STATE SERVICE VERSION 443/tcp open ssl/http Microsoft IIS webserver 7.5 |_ html-title: 403 Forbidden 587/tcp open smtp Exim smtpd | smtp-commands: EHLO mail.lead-ac.com Hello elmariachi.toonux.com [88.190.24.19], SIZE 52428800, PIPELINING, STARTTLS, HELP |_ HELP Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP Service Info: OS: Windows




49 







Monitoring systems aRE very interesting, … (je suppose)
corrigé, thanks
La « management », ça pourrait pas être un Director ?
Le Director c’est une appliance de management pour pousser la même conf sur plein de BlueCoats d’un coup :
http://www.bluecoat.com/products/proxysg/addons/director
Possible, en tout cas il a une ip bien à lui sur leur lan.
so hardcore oO
Et vous leur avez laissé des surprises ou c’est pour faire réagir ?
Nous avons bien une idée en tête
Roo les cachottiers =D
Bravo pour TOUT le travail…………..
Fidèlement.
The Bloomberg Businessweek link you provided on Area Spa is broken.
it works for me. fixed or ..?
I fixed it yep
omagad…
z’êtes sûrs que c’est pas des serveurs de test de Qosmos hein ?
des fois que …
oops my bad, le lien est pas bon en effet.
chuis super balèze ce soir en plus je me réponds à côté -_-’
Les cisco/cisco ont changé =(
Non par exemple celui la http://213.178.246.169/ passe encore très bien
La partie « Hey admins you seem to like young kids » est tout simplement à gerber et cela confirme mon envie de vociférer des noms scientifiques d’oiseaux.
Courage à la rédaction.
C’est une incitation à attaquer, pour commencer sa phrase par:
« Greetings, Hackers and Freedom fighters »
?
Je suis curieux de savoir si la DST tolere ce genre d’actes de guerre.
http://info.france2.fr/sciences-tech/hacker-est-un-acte-de-guerre-selon-les-usa-69011570.html
1° Tes trolls systématiques commencent à me gonfler Madouf.
2° Pour ta gouverne la DST n’existe plus, c’est la DCRI maintenant.
3° Tu es pénaliste international pour parler d’acte de guerre ?
DST, DCRI, c’est le concept qui est derrière qui compte, par le nom ou mon erudition…
Troll ou pas troll, tu sais…
Le truc c’est qu’apres tu veux crier au troll quand on te reprochera d’etre une officine de la CIA (voir autre sujet sur la syrie)
Les grandes agences telles que la CIA n’ont à mon avis pas besoins de ça.
Il faut réaliser que « le reseau » est un nouvel acteur mondial à prendre en compte. Il n’est à la solde de personne et est incontrôlable. A mon sens ceci en est l’une des manifestations.
Mais c’est juste mon avis hein…
on s’en fout que blutouff et reflets soient ou non des officines de la CIA.
C’est simple: je fais tout comme si j’etais quelque chose et quand on me le reproche, je crie au troll.
voila, ce que je critique.
http://info.france2.fr/sciences-tech/hacker-est-un-acte-de-guerre-selon-les-usa-69011570.html
lire ici
apres un jour, tu t’etonneras d’avoir des problemes avec donc la DCRI et tu feras un papier pour la defense de la liberté d’expression, la ou en fait, tu pousses à t’en prendre aux interets souverain de certains pays.
Par exemple la france…
Bon, la j’en suis certain, elle te soutient, mais dans l’absolu tu n’es pas censé faire des appels qui sonnent comme des appels à t’en prendre aux interets des etats.
Il est certain que tot ou tard, ca ne sera plus tolerable…
Ce n’est pas pour troller, je donne juste mon opinion, je ne cherche pas à provoquer des quantités de reactions hostiles ou favorable.
Souviens toi de ce que je te dis.
Si ca te reussi alors je me poserai d’autres questions.
Nan mais on est balaises nous, on est une officine de la CIA qui a infiltré radio libertaire
Et moi je suis un agent de la CIA qui a défendu et défend bec et ongles Wikileaks : http://bluetouff.com/geekstuff/net/cablegate-net/
c’est original non ?
Discuter de ça serait effectivement assez interminable.
Je regarde a quoi meme cet article, c’est tout.
c’est une bonne couverture !
http://fr.wikipedia.org/wiki/Idiot_utile
Pas sûr que tu soit si utile que ça Madouf
tatatata, laisse moi préparer le terrain libyen pour la CIA http://bluetouff.com/2012/03/01/gerard-longuet-en-vrp-de-la-mort-en-libye/
apres un jour, tu t’etonneras d’avoir des problemes avec donc la DCRI
MOUAHAHAHAHAHAHAHAHA
C’est la meilleur de l’année…
pourquoi, ils sont d’accord ?
Madouf a parfaitement raison et c’est ce que je m’échine à vous expliquer M Ebelpoin.Tout comme vous je suis hostile au « dpi »(en temps de paix)cela peut vous paraitre étrange mais c’est comme ça.Actuellement vous menez des attaques informatiques hostiles contre un pays souverain confronté à une rébellion armée dont les valeurs et les choix de société sont à mille lieux des vôtres,ce malheureux pays est profondément déstabilisé par des puissance étrangères.Au même titre que ceux qui financent les groupes armés,pareil à ceux qui arment ces mêmes groupes vous vous livrez en temps de guerre à des actes, même à distance , qui peuvent être considérés comme des actes de guerre.Vous vous placez donc clairement dans un camp et ceci de manière active,vous ajoutez le chaos et le désordre dans une situation tendue à l’extrême,vous envenimez une situation déjà dangereuse.En êtes vous parfaitement conscient ?
M Ebelpoin,le simple fait que vous puissiez et publiquement en plus organiser et orchestrer ces attaques prouve de facto que vous avez une autorisation tacite(dans le cas contraire…vous seriez déjà entendus) .Vous êtes donc parfaitement « sous contrôle » et je pense même qu’à l’avenir s’il vous arrivait des « ennuies » avec vos autorités vous pourriez allégrement faire valoir ces « faits d’armes ». Ce sont des choses qui ne s’oublient pas, surtout quand elles ont été commises sciemment.
Tiens un autre concept interessant:
« la guerre par proxy »
http://fr.wikipedia.org/wiki/Guerre_par_procuration
Madouf, pourrais tu synthétiser tes idées dans un commentaire plutôt que dans plusieurs (par exemple : 1 mars 2012 at 11 h 46 min), cela est difficile rend la lecture difficile et l’argumentaire n’en ai que moins sérieux … Tu passes, à mon sens, pour un gamin excité.
Quand aux actes de guerre de notre rédacteur : c’est effectivement un agent de la CIA (ou NSA ?!) avec une excellente couverture et en tant que tel il a tous les droits (bah oui les USA toussa toussa)
« Madouf, pourrais tu synthétiser tes idées dans un commentaire » >> non, je suis un gamin excité.
« Quand aux actes de guerre de notre rédacteur : c’est effectivement un agent de la CIA (ou NSA ?!) avec une excellente couverture et en tant que tel il a tous les droits (bah oui les USA toussa toussa) » >>
si tu le dis… je me preoccupe juste du fait que si c’etait le cas, il ne ferait peut etre pas autre chose que ce qu’il fait en ecrivant cet article… (que j’interprete comme un appel au piratage d’une infrastructure d’un etat etranger)
C’est juste que les gentils et les mechants, on nous les designe à coup de propagande (sans consideration des consequences geopolitiques, si on mettait quelqu’un d’autre à la place).
Tiens, je suis sur que Israel serait ravie d’avoir des islamistes en Syrie…
Je suis sur aussi que la turquie sera ravie d’avoir une zone de guerre (donc avec des armes en circulation), juste a coté du kurdistan.
Il ne faut pas jouer avec le feu et aller gueuler des slogans « anti armement » et « anti militariste » quand on seme la guerre.
En fait, tu sais ce que je suis ?
Je suis un justicier dans la ligné des combattant espagnol de 36 !
Un insurgé anarchiste qui se bat contre l’oppression, « no passaran, no passaran »…
C’est juste que je ne vois pas les fils que le marionnettiste à mis derrière mon dos…
Le conseil de structurer tes commentaires te permettrais de passer pour plus sérieux. Alors pourquoi refuser ?
et l’article, t’en pense quoi ?
Tiens, grace à cet article j’ai compris comment on fera pour nous enroler dans une eventuelle guerre:
Il suffira de dire que tous les activistes, pour la liberté, pour la démocratie, pour plus justice, sont en fait les responsables du fait que la situation degenere…
Il faut juste trouver un moyen credible pour que tout le monde mette le doigt dans l’engrenage.
Genre anonymous responsable de la 3eme guerre mondiale… mais nous serons tous anonymous…
Par exemple, pour transformer les journalistes en info-guerrier, c’est facile:
- le journaliste a besoin de la liberté d’expression.
- la liberté d’expression a besoin d’un systeme qui la permette.
- donc le journaliste est contre le totalitarisme.
- le jounaliste n’est donc, a priori, pas neutre dans un conflit censé faire tomber une dictature.
et donc le journaliste:
- va dans un pays pour servir de bouclier humain à des combattants nommés « civils ».
- donne des informations pour mettre à mal une infrastructure etrangere (mais des qu’il s’agit de nos forces à nous, on meuble le vide, cf guerre d’irak de 1991).
- m’explique, sans rire, qu’un bombardement de civils fait 18 morts en bombardant de manière intensive (l’artilleur doit etre mauvais).
Et finalement, m’explique qu’il presente les choses de manière objective… ben voyons…
(ne vous inquietez pas, vous aurez la vérité quand tout sera fini et le journaliste admettra avoir forcé un peu le trait, mais il n’avait pas le choix, vous comprenez).
Allez donc faire la guerre…
Apres tout, ceux qui ont interet à la faire, sont ceux qui ont des armes et dont le systeme s’ecroule…
Or, vous etes donc tout aussi content, quand le systeme se pete la gueule.
C’est juste que ceux qui nous commandent ne l’accepteront pas et vous ne faites que jouer leur jeu…
J’espere que vous garderez à l’esprit que tuer des gens, c’est mal.
ce n’est meme pas original, ce que je raconte:
http://en.wikipedia.org/wiki/Gavrilo_Princip
C’est tellement évident Madouf que je n’arrive toujours pas à comprendre comment des gens supposément intelligent puissent tomber dans une telle manipulation.Le jeune age? le manque de recul?
Dans les années 70 il y avait des groupes de combats installés dans toute l’Europe par les USA et l’OTAN ils avaient pour nom Gladio, ils ont été impliqués dans des attentats terroristes des meurtres politiques ,gare de Bologne aussi dans l’attentat à la fête de la bière à Munich.Ces réseaux atlantistes doivent toujours exister en parallèle aujourd’hui nous avons la nébuleuse anonymous bien moins dangereuse mais tout aussi efficace dans le cyber espace.
Le plus drôle de l’histoire si on peut dire c’est qu’ils ne se rendent même pas compte des intérêts qu’ils servent,ils sont habilement guidés , gérés.
Ceux qui se permettent d’attaquer des « cibles amis » sont sanctionnés,arrestations d’anonymous par ci par là qui ne fait que renforcer le sentiment « rebelle » de cette masse qui agit inconsciemment aux ordres.Prenez un peu de recul et regardez quels sont les derniers pays victimes , ils coïncident parfaitement aux ambitions néo coloniales des Occidentaux et de leurs alliés d’aujourd’hui les Monarchies du Golfe.
Vous avez oublié de préciser que Reflets.info est à la solde de la CIA et de Al Qaeda. Touff est barbu, ce qui est une preuve évidente, il me semble. Quant à moi, tout le monde sait que je suis un crypto-anarcho-gauchiste manipulé par les Etats-Unis et Israël.
et pédo-nazis il ne faut pas le cacher.
Vous êtes au mieux totalement inconscients des enjeux géostratégiques actuels et de leurs conséquences à venir au pire …..(je vous laisse compléter).
Ce que je peux remarquer c’est que vous n’avez aucun mais strictement aucun argument qui pourraient me contredire dans le choix de vos cibles,choix qui coïncide parfaitement aux actions belliqueuses atlantistes.
Vous êtes des petits soldats numériques »Otanesques » de l’Occident et de ses alliés actuels les pires régimes moyenâgeux du Golfe.
Vos seules tentatives de réfutations sont soit une dérision pathétique , soit qualifier votre contradicteur d’extrême droite ou proche.
D’ailleurs si on prend les lettres de FABRICE EPELBOIN on trouve facilement:
REEL PION CIA !!! Etonnant non!?
Et là vous me dites il reste FBEB !
FB = Federal Builduing !
EB = Etage B
3e bureau à droite, demander JoHn Doe !
Ah ah ah! Ca rigole moins là! Le masque tombe !
Bon ok, j’y vais !
Sinon continuez comme çà! Bien à vous !
Une petite vulgarisation serait possible pour les néophytes comme moi?
Juste en 2-3 phrases ce que vous avez trouvé parce que là, à part qu’ils ont laissé des login cisco/cisco, je comprends pas la trouvaille.
Je suis un nouveau lecteur de reflets et je suis tellement déçu que vous ne soyez que des agents du GRAND COMPLOT (ouais ouais, vous savez maintenant que je sais pour votre alliance avec la CIA …). Bon trêves de plaisanteries
Il est vrai que nous n’avons qu’un point de vue partiel de ce qui se passe dans de nombreux pays.
Il ne nous appartient pas de juger un régime sous prétexte que ses valeurs sont éloignées des nôtres.
Cependant, il existe une notion assez ancienne, qu’on appelle l’humanisme (le pays des bisounours toussa …).
Cette notion transcende à mon sens les frontières et ne devrait faire l’objet d’aucun enjeu partisan.
Il ne s’agit pas du « droit d’ingérence » si cher à Kouchner mais bien de l’idée que tous les peuples sont égaux et ont un minimum de droits.
Faisons le parallèle avec les bisounours justement (les « civils »). Nous n’avons pas à les armer pour contrer le professeur Sans Cœur au risque qu’ils deviennent eux mêmes de futures menaces
pour d’autres bisounours…
Mais quand les bisounours se font taper sur la tête et marcher sur les pieds, on a le droit de leur offrir des casques et des chaussures de sécurité.
Et peu importe qu’il existe des bisounours barbus et enturbannés qui prônent des idées contraires aux nôtres …
Quand quelqu’un meure de faim ou est blessé, on a le droit de lui donner de la nourriture ou des soins (quelques soient ses idées).
A mon sens, les actions des divers hackers sont légitimes.
Ce qui est discutable, c’est la volonté de certains pays d’agir directement sur les choix politiques d’un peuple.
)
Ce qui est intolérable c’est de ramener une lutte pour la survie à une simple guerre de religions (ou de civilisations, au choix de M. Guéant
Ce qui est ridicule c’est de nier des faits en les mettant sur le compte du GRAND COMPLOT.
N’oublions pas qu’en démocratie on peut choisir nos dirigeants et les inciter à accompagner les changements politiques des pays voisins plutôt que de chercher à en profiter.
Encore faudrait-il qu’on ait une certaine transparence de la part des responsables politiques … mais il existe toujours wikileaks et d’autres sources pour faire son choix
Voilà un commentaire pertinent je trouve !