# Nmap 5.21 scan initiated Thu Feb 24 01:27:41 2011 as: nmap -sS -sU -T4 -A -v -PE -PP -PS80,443 -PA3389 -PU40125 -PY -oN scan.out -g 53 --script all 76.104.212.177 Initiating OS detection (try #1) against c-76-104-212-177.hsd1.wa.comcast.net (76.104.212.177) Nmap scan report for c-76-104-212-177.hsd1.wa.comcast.net (76.104.212.177) Host is up (0.10s latency). Not shown: 1165 closed ports, 269 filtered ports PORT STATE SERVICE VERSION 4/tcp open unknown 6/tcp open unknown 20/tcp open ftp-data? 26/tcp open rsftp? 37/tcp open time? 43/tcp open whois? 49/tcp open tacacs? 53/tcp open domain ISC BIND 9.6.0-APPLE-P2 79/tcp open finger? 81/tcp open hosts2-ns? 82/tcp open xfer? 84/tcp open ctf? 85/tcp open mit-ml-dev? 88/tcp open kerberos-sec Mac OS X kerberos-sec 89/tcp open su-mit-tg? 90/tcp open dnsix? 99/tcp open metagram? 100/tcp open newacct? 106/tcp open pop3pw? | banner: +OK ApplePasswordServer 10.6.0.0 password server at 192.168.1.1 |_00 ready. 110/tcp open pop3? |_banner: +OK Dovecot ready. |_pop3-capabilities: OK(K) CAPA UIDL PIPELINING RESP-CODES TOP SASL(GSSAPI CRAM-MD5) 125/tcp open locus-map? 143/tcp open imap? |_imap-capabilities: LOGIN-REFERRALS AUTH=GSSAPI QUOTA UNSELECT IMAP4rev1 ID CHILDREN LIST-EXTENDED AUTH=CRAM-MD5 THREAD=REFERENCES LOGINDISABLED UIDPLUS I18NLEVEL=1 SORT NAMESPACE LITERAL+ IDLE SASL-IR MULTIAPPEND |_banner: * OK Dovecot ready. 146/tcp open iso-tp0? 254/tcp open unknown 255/tcp open unknown 259/tcp open esro-gen? 301/tcp open unknown 306/tcp open unknown 340/tcp open unknown 366/tcp open odmr? 407/tcp open timbuktu? 427/tcp open svrloc? 444/tcp open snpp? 464/tcp open kpasswd5? 465/tcp open smtps? |_smtp-open-relay: Unable to establish connection |_ssl-cert: ERROR 481/tcp open dvs? 497/tcp open retrospect? 512/tcp open exec? 513/tcp open login? 514/tcp open shell? 524/tcp open ncp? 543/tcp open klogin? 544/tcp open kshell? 545/tcp open ekshell? 548/tcp open afp? 555/tcp open dsf? 563/tcp open snews? 587/tcp open tcpwrapped |_smtp-open-relay: Unable to establish connection 593/tcp open http-rpc-epmap? 616/tcp open unknown 617/tcp open sco-dtmgr? 636/tcp open ldapssl? 646/tcp open ldp? 648/tcp open unknown 687/tcp open unknown 700/tcp open unknown 705/tcp open unknown 714/tcp open unknown 722/tcp open unknown 726/tcp open unknown 749/tcp open kerberos-adm? 765/tcp open webster? 783/tcp open spamassassin? 800/tcp open mdbs_daemon? 843/tcp open unknown 888/tcp open accessbuilder? 898/tcp open sun-manageconsole? 981/tcp open unknown 990/tcp open ftps? |_ssl-cert: ERROR 1000/tcp open cadlock? 1001/tcp open unknown 1009/tcp open unknown 1010/tcp open unknown 1022/tcp open unknown 1024/tcp open kdm? 1026/tcp open LSA-or-nterm? 1027/tcp open IIS? 1028/tcp open unknown 1030/tcp open iad1? 1031/tcp open iad2? 1032/tcp open iad3? 1034/tcp open zincite-a? 1035/tcp open multidropper? 1036/tcp open unknown 1041/tcp open unknown 1042/tcp open unknown 1043/tcp open boinc? 1044/tcp open unknown 1045/tcp open unknown 1048/tcp open unknown 1051/tcp open optima-vnet? 1052/tcp open ddt? 1053/tcp open unknown 1055/tcp open ansyslmd? 1064/tcp open unknown 1066/tcp open fpo-fns? 1067/tcp open instl_boots? 1070/tcp open unknown 1077/tcp open unknown 1078/tcp open unknown 1081/tcp open unknown 1082/tcp open unknown 1083/tcp open ansoft-lm-1? 1085/tcp open unknown 1086/tcp open unknown 1087/tcp open unknown 1090/tcp open unknown 1091/tcp open unknown 1092/tcp open unknown 1095/tcp open unknown 1096/tcp open unknown 1097/tcp open unknown 1098/tcp open unknown 1099/tcp open unknown 1100/tcp open unknown 1105/tcp open unknown 1107/tcp open unknown 1108/tcp open unknown 1110/tcp open nfsd-status? 1111/tcp open unknown 1112/tcp open msql? 1113/tcp open unknown 1114/tcp open unknown 1123/tcp open unknown 1124/tcp open unknown 1126/tcp open unknown 1131/tcp open unknown 1132/tcp open unknown 1141/tcp open unknown 1147/tcp open unknown 1148/tcp open unknown 1149/tcp open unknown 1151/tcp open unknown 1152/tcp open unknown 1163/tcp open unknown 1164/tcp open unknown 1165/tcp open unknown 1174/tcp open unknown 1183/tcp open unknown 1185/tcp open unknown 1187/tcp open unknown 1199/tcp open unknown 1201/tcp open unknown 1213/tcp open unknown 1217/tcp open unknown 1218/tcp open aeroflight-ads? 1233/tcp open unknown 1247/tcp open unknown 1272/tcp open unknown 1277/tcp open unknown 1287/tcp open unknown 1296/tcp open unknown 1309/tcp open unknown 1310/tcp open unknown 1311/tcp open rxmon? 1334/tcp open unknown 1417/tcp open timbuktu-srv1? 1433/tcp open ms-sql-s? 1434/tcp open ms-sql-m? 1443/tcp open ies-lm? 1461/tcp open ibm_wrless_lan? 1494/tcp open citrix-ica? 1503/tcp open imtc-mcs? 1524/tcp open ingreslock? 1556/tcp open unknown 1583/tcp open unknown 1594/tcp open unknown 1658/tcp open unknown 1687/tcp open unknown 1688/tcp open unknown 1718/tcp open unknown 1719/tcp open unknown 1721/tcp open unknown 1761/tcp open landesk-rc? 1783/tcp open unknown 1801/tcp open unknown 1812/tcp open unknown 1863/tcp open msnp? 1864/tcp open paradym-31? 1900/tcp open upnp? 1914/tcp open unknown 1935/tcp open rtmp? 1947/tcp open unknown 1972/tcp open unknown 1984/tcp open bigbrother? 1998/tcp open x25-svc-port? 1999/tcp open tcp-id-port? 2000/tcp open cisco-sccp? 2001/tcp open dc? 2003/tcp open finger? 2005/tcp open deslogin? 2006/tcp open invokator? 2007/tcp open dectalk? 2008/tcp open conf? 2009/tcp open news? 2013/tcp open raid-am? 2020/tcp open xinupageserver? 2021/tcp open servexec? 2022/tcp open down? 2040/tcp open lam? 2042/tcp open isis? 2043/tcp open isis-bcast? 2048/tcp open dls-monitor? 2065/tcp open dlsrpn? 2068/tcp open advocentkvm? 2099/tcp open unknown 2100/tcp open unknown 2126/tcp open unknown 2160/tcp open unknown 2161/tcp open apc-agent? 2170/tcp open unknown 2191/tcp open unknown 2200/tcp open unknown 2251/tcp open unknown 2260/tcp open unknown 2301/tcp open compaqdiag? 2323/tcp open unknown 2366/tcp open unknown 2381/tcp open unknown 2382/tcp open unknown 2383/tcp open ms-olap4? 2393/tcp open unknown 2394/tcp open unknown 2399/tcp open unknown 2500/tcp open rtsserv? 2522/tcp open unknown 2557/tcp open unknown 2602/tcp open ripd? 2604/tcp open ospfd? 2605/tcp open bgpd? 2702/tcp open sms-xfer? 2710/tcp open unknown 2717/tcp open unknown 2718/tcp open unknown 2725/tcp open unknown 2809/tcp open corbaloc? 2811/tcp open unknown 2869/tcp open unknown 2909/tcp open unknown 2968/tcp open unknown 2998/tcp open iss-realsec? 3000/tcp open ppp? 3001/tcp open nessus? 3003/tcp open unknown 3005/tcp open deslogin? 3006/tcp open deslogind? 3011/tcp open unknown 3017/tcp open unknown 3031/tcp open appleevents Apple Remote Events 3071/tcp open unknown 3077/tcp open unknown 3128/tcp open squid-http? 3211/tcp open unknown 3260/tcp open iscsi? 3269/tcp open globalcatLDAPssl? 3283/tcp open netassistant? 3306/tcp open mysql MySQL (unauthorized) | banner: T\x00\x00\x00\xFFj\x04Host '*.*.*.*' is not |_ allowed to connect to this MySQL server 3324/tcp open unknown 3325/tcp open unknown 3351/tcp open unknown 3370/tcp open unknown 3390/tcp open unknown 3404/tcp open unknown 3476/tcp open unknown 3527/tcp open unknown 3551/tcp open unknown 3580/tcp open unknown 3689/tcp open rendezvous? 3690/tcp open svn? 3703/tcp open unknown 3766/tcp open unknown 3800/tcp open unknown 3801/tcp open unknown 3809/tcp open unknown 3814/tcp open unknown 3826/tcp open unknown 3828/tcp open unknown 3851/tcp open unknown 3869/tcp open unknown 3878/tcp open unknown 3889/tcp open unknown 3914/tcp open unknown 3971/tcp open unknown 3995/tcp open unknown 3998/tcp open unknown 4000/tcp open remoteanything? 4001/tcp open unknown 4002/tcp open mlchat-proxy? 4003/tcp open unknown 4005/tcp open unknown 4006/tcp open unknown 4045/tcp open lockd? 4111/tcp open unknown 4129/tcp open unknown 4224/tcp open xtell? 4321/tcp open rwhois? 4446/tcp open unknown 4550/tcp open unknown 4567/tcp open unknown 4848/tcp open unknown 4899/tcp open radmin? 4900/tcp open unknown 5000/tcp open upnp? 5001/tcp open commplex-link? 5002/tcp open rfe? 5004/tcp open unknown 5030/tcp open unknown 5051/tcp open ida-agent? 5054/tcp open unknown 5061/tcp open sip-tls? 5087/tcp open unknown 5102/tcp open admeng? 5120/tcp open unknown 5190/tcp open aol? 5221/tcp open unknown 5222/tcp open jabber Jabber instant messaging server (Protocol 1.0) 5225/tcp open unknown 5269/tcp open jabber Jabber instant messaging server (Protocol 1.0) 5280/tcp open unknown 5298/tcp open unknown 5357/tcp open unknown 5414/tcp open unknown 5431/tcp open park-agent? 5544/tcp open unknown 5633/tcp open unknown 5666/tcp open nrpe? 5678/tcp open unknown 5718/tcp open unknown 5730/tcp open unknown 5802/tcp open vnc-http-2? 5811/tcp open unknown 5815/tcp open unknown 5825/tcp open unknown 5859/tcp open unknown 5877/tcp open unknown 5900/tcp open vnc Apple remote desktop vnc |_banner: RFB 003.889 5901/tcp open vnc-1? 5902/tcp open vnc-2? 5903/tcp open vnc-3? 5904/tcp open unknown 5907/tcp open unknown 5910/tcp open unknown 5911/tcp open unknown 5915/tcp open unknown 5922/tcp open unknown 5925/tcp open unknown 5960/tcp open unknown 5961/tcp open unknown 5988/tcp open unknown 6000/tcp open X11? 6001/tcp open X11:1? 6003/tcp open X11:3? 6005/tcp open X11:5? 6006/tcp open X11:6? 6007/tcp open X11:7? 6123/tcp open unknown 6156/tcp open unknown 6502/tcp open netop-rc? 6510/tcp open unknown 6547/tcp open powerchuteplus? 6565/tcp open unknown 6567/tcp open unknown 6646/tcp open unknown 6666/tcp open irc? |_irc-info: Unable to open connection 6668/tcp open irc? 6669/tcp open irc? 6689/tcp open unknown 6699/tcp open napster? 6788/tcp open unknown 6789/tcp open ibm-db2-admin? 6839/tcp open unknown 6901/tcp open unknown 7004/tcp open afs3-kaserver? 7007/tcp open afs3-bos? 7025/tcp open unknown 7103/tcp open unknown 7201/tcp open dlip? 7402/tcp open unknown 7512/tcp open unknown 7625/tcp open unknown 7676/tcp open unknown 7741/tcp open unknown 7778/tcp open unknown 7800/tcp open unknown 7911/tcp open unknown 7920/tcp open unknown 8001/tcp open unknown 8002/tcp open teradataordbms? 8007/tcp open ajp12? 8009/tcp open ajp13? 8021/tcp open ftp-proxy? 8022/tcp open unknown 8031/tcp open unknown 8042/tcp open unknown 8082/tcp open blackice-alerts? 8083/tcp open unknown 8084/tcp open unknown 8085/tcp open unknown 8090/tcp open http Linksys WRT54GS wireless-G router http config |_http-malware-host: Host appears to be clean |_http-iis-webdav-vuln: ERROR: This web server is not supported. |_html-title: 401 Unauthorized |_http-date: Wed, 23 Feb 2011 22:30:09 GMT; -7h59m42s from local time. | http-headers: | Server: httpd | Date: Wed, 23 Feb 2011 22:30:10 GMT | WWW-Authenticate: Basic realm="WRT54GS" | Content-Type: text/html | Connection: close | |_ (Request type: GET) | http-auth: HTTP Service requires authentication |_ Auth type: Basic, realm = WRT54GS |_http-enum: 8093/tcp open unknown 8180/tcp open unknown 8181/tcp open unknown 8192/tcp open sophos? 8200/tcp open unknown 8254/tcp open unknown 8292/tcp open unknown 8300/tcp open unknown 8333/tcp open unknown 8383/tcp open unknown 8400/tcp open unknown 8402/tcp open unknown 8649/tcp open unknown 8651/tcp open unknown 8800/tcp open unknown 8899/tcp open unknown 9002/tcp open unknown 9003/tcp open unknown 9009/tcp open unknown 9011/tcp open unknown 9050/tcp open tor-socks? 9080/tcp open unknown 9091/tcp open unknown 9099/tcp open unknown 9101/tcp open jetdirect? 9103/tcp open jetdirect? 9111/tcp open DragonIDSConsole? 9200/tcp open wap-wsp? 9207/tcp open unknown 9220/tcp open unknown 9418/tcp open git? 9485/tcp open unknown 9502/tcp open unknown 9535/tcp open man? 9575/tcp open unknown 9593/tcp open unknown 9594/tcp open msgsys? 9618/tcp open unknown 9876/tcp open sd? 9943/tcp open unknown 9944/tcp open unknown 9968/tcp open unknown 9998/tcp open unknown 10002/tcp open unknown 10003/tcp open unknown 10024/tcp open unknown 10215/tcp open unknown 10243/tcp open unknown 10566/tcp open unknown 10617/tcp open unknown 10621/tcp open unknown 10778/tcp open unknown 11110/tcp open unknown 12000/tcp open cce4x? 12174/tcp open unknown 12265/tcp open unknown 12345/tcp open netbus? 13456/tcp open unknown 13722/tcp open netbackup? 13782/tcp open netbackup? 14442/tcp open unknown 15660/tcp open unknown 15742/tcp open unknown 16012/tcp open unknown 16018/tcp open unknown ll/tcp open osxwebadmin? 16992/tcp open unknown 17877/tcp open unknown 17988/tcp open unknown 18988/tcp open unknown 19315/tcp open unknown 19350/tcp open unknown 19780/tcp open unknown 20000/tcp open unknown 20031/tcp open unknown 20222/tcp open unknown 20828/tcp open unknown 21571/tcp open unknown 24444/tcp open unknown 25734/tcp open unknown 25735/tcp open unknown 26214/tcp open unknown 27352/tcp open unknown 27355/tcp open unknown 27715/tcp open unknown 30718/tcp open unknown 31038/tcp open unknown 31337/tcp open Elite? 32768/tcp open unknown 32769/tcp open unknown 32772/tcp open sometimes-rpc7? 32775/tcp open sometimes-rpc13? 32776/tcp open sometimes-rpc15? 32777/tcp open sometimes-rpc17? 32778/tcp open sometimes-rpc19? 32779/tcp open sometimes-rpc21? 32780/tcp open sometimes-rpc23? 32781/tcp open unknown 32783/tcp open unknown 32784/tcp open unknown 32785/tcp open unknown 33354/tcp open unknown 34571/tcp open unknown 34572/tcp open unknown 34573/tcp open unknown 35500/tcp open unknown 38292/tcp open landesk-cba? 40911/tcp open unknown 44176/tcp open unknown 44442/tcp open coldfusion-auth? 44443/tcp open coldfusion-auth? 45100/tcp open unknown 48080/tcp open unknown 49153/tcp open unknown 49155/tcp open unknown 49156/tcp open unknown 49157/tcp open unknown 49158/tcp open unknown 49160/tcp open unknown 49161/tcp open unknown 49163/tcp open unknown 49165/tcp open unknown 49175/tcp open unknown 50000/tcp open iiimsf? 50002/tcp open iiimsf? 50003/tcp open unknown 50006/tcp open unknown 50636/tcp open unknown 51103/tcp open unknown 51493/tcp open unknown 52869/tcp open unknown 54045/tcp open unknown 54328/tcp open unknown 55055/tcp open unknown 55600/tcp open unknown 56737/tcp open unknown 57294/tcp open unknown 58080/tcp open unknown 60020/tcp open unknown 60443/tcp open unknown 61900/tcp open unknown 62078/tcp open iphone-sync? 63331/tcp open unknown 64680/tcp open unknown 65000/tcp open unknown 65389/tcp open unknown 22/udp open|filtered ssh 53/udp open domain ISC BIND 9.6.0-APPLE-P2 |_dns-random-txid: ERROR: Server refused recursion |_dns-random-srcport: ERROR: Server refused recursion 67/udp open|filtered dhcps 68/udp open|filtered dhcpc 88/udp open kerberos Mac OS X Kerberos (server time: 20110224062810Z) 123/udp open ntp NTP v4 | ntp-info: |_ receive time stamp: Thu Feb 24 01:30:14 2011 135/udp open|filtered msrpc 136/udp open|filtered profile 137/udp open|filtered netbios-ns 138/udp open|filtered netbios-dgm 139/udp open|filtered netbios-ssn 161/udp open snmp SNMPv1 server (public) |_snmp-brute: public 445/udp open|filtered microsoft-ds 520/udp open|filtered route 626/udp open|filtered serialnumberd 631/udp open|filtered ipp 1080/udp open|filtered socks 3283/udp open|filtered netassistant 3659/udp open unknown 5353/udp open|filtered zeroconf 49162/udp open|filtered unknown Device type: general purpose Running: Apple Mac OS X 10.3.X|10.4.X OS details: Apple Mac OS X 10.3.9 (Panther) - 10.4.7 (Tiger) (Darwin 7.9.0 - 8.7.8, PowerPC) Network Distance: 17 hops Service Info: OS: Mac OS X; Device: WAP Host script results: | asn-query: | BGP: 76.104.128.0/17 | Country: US | Origin AS: 33650 - COMCAST-33650 - Comcast Cable Communications, Inc. |_ Peer AS: 7922 TRACEROUTE (using port 1025/tcp) HOP RTT ADDRESS 8 17.19 ms pos-1-5-0-0-cr01.atlanta.ga.ibone.comcast.net (68.86.87.78) 9 38.30 ms pos-1-11-0-0-cr01.dallas.tx.ibone.comcast.net (68.86.85.221) 10 71.30 ms pos-0-13-0-0-cr01.losangeles.ca.ibone.comcast.net (68.86.85.145) 11 81.54 ms pos-0-15-0-0-cr01.sacramento.ca.ibone.comcast.net (68.86.85.85) 12 83.62 ms pos-0-12-0-0-cr01.portland.or.ibone.comcast.net (68.86.86.230) 13 87.72 ms 68.86.93.106 14 ... 15 85.18 ms 68.87.205.146 16 ... 17 93.23 ms c-76-104-212-177.hsd1.wa.comcast.net (76.104.212.177) Read data files from: /usr/share/nmap OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ . # Nmap done at Thu Feb 24 01:30:41 2011 -- 1 IP address (1 host up) scanned in 181.04 seconds