Void's Hall of Shame

IP addresses that SPAM!

Can you spot the trends?

-------------
Thu Dec 18 19:10:53 CST 2003
Interesting ports on 218.51.8.4:
(The 1648 ports scanned but not shown below are in state: closed)
PORT      STATE    SERVICE
21/tcp    filtered ftp
80/tcp    filtered http
135/tcp   filtered msrpc
139/tcp   open     netbios-ssn
445/tcp   filtered microsoft-ds
1029/tcp  open     ms-lsa
2004/tcp  open     mailbox
4444/tcp  filtered krb524
17300/tcp filtered kuang2

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
 
# nmblookup -A 218.51.8.4
Looking up status of 218.51.8.4
received 8 names
        SOFTCAKE        <00> -         B 
        WORKGROUP       <00> -  B 
        SOFTCAKE        <20> -         B 
        WORKGROUP       <1e> -  B 
        SOFTCAKE        <03> -         B 
        SOFTCAKEWIFE    <03> -         B 
        WORKGROUP       <1d> -         B 
        ..__MSBROWSE__. <01> -  B 
num_good_sends=0 num_good_receives=0
-------------
Thu Dec 18 19:08:57 CST 2003
Interesting ports on 206.116.229.59:
(The 1650 ports scanned but not shown below are in state: closed)
PORT      STATE SERVICE
135/tcp   open  msrpc
139/tcp   open  netbios-ssn
445/tcp   open  microsoft-ds
1025/tcp  open  NFS-or-IIS
3531/tcp  open  peerenabler
5000/tcp  open  UPnP
31337/tcp open  Elite

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
 
# nmblookup -A 206.116.229.59
Looking up status of 206.116.229.59
received 8 names
        KEYMAKER        <00> -         B 
        MSHOME          <00> -  B 
        KEYMAKER        <03> -         B 
        KEYMAKER        <20> -         B 
        MSHOME          <1e> -  B 
        MSHOME          <1d> -         B 
        ..__MSBROWSE__. <01> -  B 
        VICKY           <03> -         B 
num_good_sends=0 num_good_receives=0
-------------
Thu Dec 18 19:02:01 CST 2003
Interesting ports on 221.148.126.178:
(The 1648 ports scanned but not shown below are in state: closed)
PORT      STATE    SERVICE
135/tcp   filtered msrpc
139/tcp   filtered netbios-ssn
445/tcp   filtered microsoft-ds
707/tcp   filtered unknown
1025/tcp  open     NFS-or-IIS
4444/tcp  filtered krb524
5800/tcp  filtered vnc-http
5900/tcp  filtered vnc
17300/tcp filtered kuang2

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Thu Dec 18 19:00:32 CST 2003
Interesting ports on 2-43.tr.cgocable.ca (24.122.2.43):
(The 1649 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
33/tcp   open     dsp
80/tcp   open     http
135/tcp  filtered msrpc
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
593/tcp  filtered http-rpc-epmap
1026/tcp open     LSA-or-nterm
4444/tcp filtered krb524

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Sun Dec 14 08:12:07 CST 2003
Interesting ports on CPE-65-28-1-184.kc.rr.com (65.28.1.184):
(The 1648 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
136/tcp  filtered profile
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
593/tcp  filtered http-rpc-epmap
1025/tcp open     NFS-or-IIS
5000/tcp open     UPnP

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sat Dec 13 06:58:06 CST 2003
Interesting ports on r092222.ap.plala.or.jp (220.108.92.222):
(The 1653 ports scanned but not shown below are in state: closed)
PORT     STATE SERVICE
135/tcp  open  msrpc
139/tcp  open  netbios-ssn
1027/tcp open  IIS
4899/tcp open  radmin

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
 
# nmblookup -A 220.108.92.222
Looking up status of 220.108.92.222
received 5 names
        OEMCOMPUTER     <00> -         M 
        OEMCOMPUTER     <20> -         M 
        OEMWORKGROUP    <00> -  M 
        OEMCOMPUTER     <03> -         M 
        TAKASHI         <03> -         M 
num_good_sends=0 num_good_receives=0
-------------
Sat Dec 13 06:52:22 CST 2003
Interesting ports on 221.124.17.231:
(The 1650 ports scanned but not shown below are in state: closed)
PORT     STATE SERVICE
135/tcp  open  msrpc
139/tcp  open  netbios-ssn
445/tcp  open  microsoft-ds
1024/tcp open  kdm
1025/tcp open  NFS-or-IIS
5000/tcp open  UPnP
5101/tcp open  admdog

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
 
# nmblookup -A 221.124.17.231
Looking up status of 221.124.17.231
received 7 names
        SUKON-GTYG95CJS <00> -         B 
        WORKGROUP       <00> -  B 
        SUKON-GTYG95CJS <03> -         B 
        SUKON-GTYG95CJS <20> -         B 
        WORKGROUP       <1e> -  B 
        WORKGROUP       <1d> -         B 
        ..__MSBROWSE__. <01> -  B 
num_good_sends=0 num_good_receives=0
-------------
Thu Dec 11 17:31:13 CST 2003
Interesting ports on CPE-138-130-220-207.qld.bigpond.net.au (138.130.220.207):
(The 1651 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  open     msrpc
139/tcp  open     netbios-ssn
179/tcp  filtered bgp
445/tcp  open     microsoft-ds
1025/tcp open     NFS-or-IIS
3531/tcp open     peerenabler

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Thu Dec 11 17:28:01 CST 2003
Interesting ports on wnpgmb02dc1-180-199.static.mts.net (206.45.180.199):
(The 1653 ports scanned but not shown below are in state: closed)
PORT     STATE SERVICE
135/tcp  open  msrpc
139/tcp  open  netbios-ssn
3531/tcp open  peerenabler
5000/tcp open  UPnP

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
 
# nmblookup -A 206.45.180.199
Looking up status of 206.45.180.199
received 3 names
        DEFAULT         <00> -         B 
        WORKGROUP       <00> -  B 
        DEFAULT         <03> -         B 
num_good_sends=0 num_good_receives=0
-------------
Wed Dec 10 18:45:48 CST 2003
Interesting ports on 65-218-61-236.res.nb.cable.sigecom.net (65.218.61.236):
(The 1646 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
67/tcp   filtered dhcpserver
135/tcp  filtered msrpc
136/tcp  filtered profile
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
593/tcp  filtered http-rpc-epmap
1025/tcp open     NFS-or-IIS
2301/tcp open     compaqdiag
4444/tcp filtered krb524

Windows
-------------
Tue Dec  9 19:00:50 CST 2003
Interesting ports on acc-orlando-160-216.dmisinetworks.com (12.179.160.216):
(The 1650 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
593/tcp  filtered http-rpc-epmap
1025/tcp open     NFS-or-IIS
4444/tcp filtered krb524
5000/tcp open     UPnP

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Mon Dec  8 19:01:20 CST 2003
Interesting ports on host.107.55.23.62.rev.coltfrance.com (62.23.55.107):
(The 1040 ports scanned but not shown below are in state: filtered)
PORT      STATE  SERVICE
25/tcp    open   smtp
80/tcp    open   http
110/tcp   open   pop-3
8080/tcp  open   http-proxy
No exact OS matches for host (If you know what OS is running on it, see http://www.insecure.org/cgi-bin/nmap-submit.cgi).

# telnet 62.23.55.107 25
Trying 62.23.55.107...
Connected to host.107.55.23.62.rev.coltfrance.com (62.23.55.107).
Escape character is '^]'.
220 spiderserver.spiderbusiness.com Microsoft ESMTP MAIL Service, Version: 5.0.2195.6713 ready at  Tue, 9 Dec 2003 01:56:18 +0100
helo dumbass.spammer
250 spiderserver.spiderbusiness.com Hello [198.70.169.30]
MAIL FROM: annoyedbyspam@yourmammas.house
250 2.1.0 annoyedbyspam@yourmammas.house....Sender OK
RCPT TO: postmaster
250 2.1.5 postmaster@spiderbusiness.com
DATA
354 Start mail input; end with .
From: Annoyed By Spam
To: You the spammer
Subject: SPAM from your server
 
I have received SPAM from your server. Either your server is infected
with a virus, running a trojan, or you are indeed spamming willfully.
In any case, I do not appreciate it and I will track you down if I
continue to receive spam from you.
  
Thanks, and have a nice day!
  
  
.
250 2.6.0  Queued mail for delivery
 
quit
221 2.0.0 spiderserver.spiderbusiness.com Service closing transmission channel
Connection closed by foreign host.
-------------
Sun Dec  7 15:37:57 CST 2003
Interesting ports on 205.252.98.151:
(The 1652 ports scanned but not shown below are in state: closed)
PORT     STATE SERVICE
135/tcp  open  msrpc
1025/tcp open  NFS-or-IIS
1026/tcp open  LSA-or-nterm
3372/tcp open  msdtc
3389/tcp open  ms-term-serv

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Sun Dec  7 05:12:57 CST 2003
Interesting ports on node-c-8b22.a2000.nl (62.194.139.34):
(The 1648 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
1025/tcp open     NFS-or-IIS
1026/tcp open     LSA-or-nterm
3531/tcp open     peerenabler
5000/tcp open     UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sat Dec  6 19:45:58 CST 2003
Interesting ports on pc-24-151-22-121.newm2.ct.charter.com (24.151.22.121):
(The 1633 ports scanned but not shown below are in state: closed)
PORT      STATE    SERVICE
20/tcp    filtered ftp-data
21/tcp    filtered ftp
25/tcp    filtered smtp
53/tcp    filtered domain
79/tcp    filtered finger
80/tcp    filtered http
109/tcp   filtered pop-2
110/tcp   filtered pop-3
119/tcp   filtered nntp
135/tcp   filtered msrpc
136/tcp   filtered profile
137/tcp   filtered netbios-ns
138/tcp   filtered netbios-dgm
139/tcp   filtered netbios-ssn
445/tcp   filtered microsoft-ds
512/tcp   filtered exec
515/tcp   filtered printer
593/tcp   filtered http-rpc-epmap
1025/tcp  open     NFS-or-IIS
1031/tcp  open     iad2
1032/tcp  open     iad3
5000/tcp  open     UPnP
31337/tcp filtered Elite
54320/tcp filtered bo2k

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sat Dec  6 05:38:57 CST 2003
Interesting ports on 212.157.11.177:
(The 1650 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
25/tcp   filtered smtp
135/tcp  open     msrpc
139/tcp  open     netbios-ssn
445/tcp  open     microsoft-ds
1025/tcp open     NFS-or-IIS
5000/tcp open     UPnP
5999/tcp open     ncd-conf
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
 
# nmblookup -A 212.157.11.177
Looking up status of 212.157.11.177
received 7 names
        POOSTE12        <00> -         B 
        WORGROUP        <00> -  B 
        POOSTE12        <03> -         B 
        POOSTE12        <20> -         B 
        WORGROUP        <1e> -  B 
        WORGROUP        <1d> -         B 
        ..__MSBROWSE__. <01> -  B 
num_good_sends=0 num_good_receives=0
-------------
Sat Dec  6 05:29:02 CST 2003
Interesting ports on d142-173-136-161.abhsia.telus.net (142.173.136.161):
(The 1652 ports scanned but not shown below are in state: closed)
PORT     STATE SERVICE
135/tcp  open  msrpc
139/tcp  open  netbios-ssn
445/tcp  open  microsoft-ds
1025/tcp open  NFS-or-IIS
5000/tcp open  UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
 
# nmblookup -A 142.173.136.161
Looking up status of 142.173.136.161
received 6 names
        RON             <00> -         M 
        MSHOME          <00> -  M 
        RON             <20> -         M 
        MSHOME          <1e> -  M 
        MSHOME          <1d> -         M 
        ..__MSBROWSE__. <01> -  M 
num_good_sends=0 num_good_receives=0
-------------
Fri Dec  5 18:31:03 CST 2003
Interesting ports on cp291718-a.venra1.lb.home.nl (217.122.69.150):
(The 1643 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
25/tcp   filtered smtp
119/tcp  filtered nntp
135/tcp  filtered msrpc
136/tcp  filtered profile
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
1025/tcp open     NFS-or-IIS
1080/tcp filtered socks
3128/tcp filtered squid-http
3531/tcp open     peerenabler
5000/tcp open     UPnP
8080/tcp filtered http-proxy
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows NT 3.51 SP5, NT 4.0 or 95/98/98SE, Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Fri Dec  5 06:31:43 CST 2003
Interesting ports on dorms-pppoe-2-81-94.pittsburgh.resnet.pitt.edu (130.49.81.94):
(The 1646 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
136/tcp  filtered profile
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
1025/tcp open     NFS-or-IIS
1026/tcp open     LSA-or-nterm
3531/tcp open     peerenabler
4444/tcp filtered krb524
5000/tcp open     UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Thu Dec  4 18:30:50 CST 2003
Interesting ports on home-01027.b.astral.ro (193.231.120.139):
(The 1022 ports scanned but not shown below are in state: filtered)
PORT      STATE  SERVICE
1025/tcp  open   NFS-or-IIS
1720/tcp  open   H.323/Q.931
5000/tcp  open   UPnP
Device type: firewall|general purpose
Running: Smoothwall Linux 2.2.X, Microsoft Windows NT/2K/XP
OS details: Smoothwall Linux-based firewall 2.2.23, Microsoft Windows XP Professional RC1+ through final release
-------------
Wed Dec  3 20:24:20 CST 2003
Interesting ports on 61.143.163.41:
(The 1654 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
139/tcp  open     netbios-ssn
4444/tcp filtered krb524
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
 
# nmblookup -A 61.143.163.41
Looking up status of 61.143.163.41
received 7 names
        YOURNAME        <00> -         B 
        MSHOME          <00> -  B 
        YOURNAME        <03> -         B 
        YOURNAME        <20> -         B 
        MSHOME          <1e> -  B 
        MSHOME          <1d> -         B 
        ..__MSBROWSE__. <01> -  B 
num_good_sends=0 num_good_receives=0
-------------
Wed Dec  3 19:20:25 CST 2003
Interesting ports on 66.188.72.25:
(The 1647 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
136/tcp  filtered profile
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
593/tcp  filtered http-rpc-epmap
1025/tcp open     NFS-or-IIS
4444/tcp filtered krb524
5000/tcp open     UPnP
Device type: general purpose
Running: Microsoft Windows NT/2K/XP
OS details: Microsoft Windows XP Professional SP1 or Windows 2000 SP3
-------------
Wed Dec  3 19:13:29 CST 2003
Interesting ports on host37-66.discord.birch.net (65.16.37.66):
(The 1653 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
139/tcp  open     netbios-ssn
1080/tcp filtered socks
4444/tcp filtered krb524
Device type: specialized|general purpose
Running: Turtle Beach embedded-misc, Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Turtle Beach AudioTron 100 network MP3 player, Microsoft Windows NT 3.51 SP5, NT 4.0 or 95/98/98SE
 
# nmblookup -A 65.16.37.66
Looking up status of 65.16.37.66
received 3 names
        PAVILION        <00> -         B 
        HEWLETTPACKARD  <00> -  B 
        PAVILION        <03> -         B 
num_good_sends=0 num_good_receives=0
-------------
Sat Nov 29 18:57:48 CST 2003
Interesting ports on warp142163097012.newtel.com (142.163.97.12):
(The 1645 ports scanned but not shown below are in state: closed)
PORT      STATE    SERVICE
111/tcp   filtered rpcbind
135/tcp   filtered msrpc
139/tcp   filtered netbios-ssn
445/tcp   filtered microsoft-ds
1025/tcp  open     NFS-or-IIS
3531/tcp  open     peerenabler
4444/tcp  filtered krb524
5000/tcp  open     UPnP
12345/tcp filtered NetBus
12346/tcp filtered NetBus
27374/tcp filtered subseven
31337/tcp filtered Elite

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sat Nov 29 18:55:45 CST 2003
Interesting ports on 205.252.102.158:
(The 1652 ports scanned but not shown below are in state: closed)
PORT     STATE SERVICE
135/tcp  open  msrpc
1025/tcp open  NFS-or-IIS
1026/tcp open  LSA-or-nterm
3372/tcp open  msdtc
3389/tcp open  ms-term-serv

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Sat Nov 29 18:53:57 CST 2003
Interesting ports on SP3-24.207.240.155.charter-stl.com (24.207.240.155):
(The 1647 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
136/tcp  filtered profile
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
593/tcp  filtered http-rpc-epmap
1025/tcp open     NFS-or-IIS
4444/tcp filtered krb524
5000/tcp open     UPnP

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sat Nov 29 18:39:02 CST 2003
Interesting ports on pcp453050pcs.abrcrn01.ga.comcast.net (68.51.174.28):
(The 1647 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
80/tcp   open     http
135/tcp  filtered msrpc
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
1025/tcp open     NFS-or-IIS
1080/tcp filtered socks
1214/tcp open     fasttrack
5000/tcp open     UPnP

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sat Nov 29 18:37:14 CST 2003
Interesting ports on pcp453050pcs.abrcrn01.ga.comcast.net (68.51.174.28):
(The 1647 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
80/tcp   open     http
135/tcp  filtered msrpc
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
1025/tcp open     NFS-or-IIS
1080/tcp filtered socks
1214/tcp open     fasttrack
5000/tcp open     UPnP

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sat Nov 29 18:35:18 CST 2003
Interesting ports on 68.235.130.224:
(The 1643 ports scanned but not shown below are in state: closed)
PORT      STATE    SERVICE
80/tcp    filtered http
113/tcp   open     auth
135/tcp   filtered msrpc
136/tcp   filtered profile
137/tcp   filtered netbios-ns
138/tcp   filtered netbios-dgm
139/tcp   filtered netbios-ssn
445/tcp   filtered microsoft-ds
593/tcp   filtered http-rpc-epmap
1025/tcp  open     NFS-or-IIS
4444/tcp  filtered krb524
5000/tcp  open     UPnP
5101/tcp  open     admdog
27374/tcp filtered subseven

Device type: general purpose
Running: Microsoft Windows NT/2K/XP
OS details: Microsoft Windows XP Professional SP1 or Windows 2000 SP3
-------------
Sat Nov 29 18:32:19 CST 2003
Interesting ports on pcp04984923pcs.paduca01.ky.comcast.net (68.63.243.209):
(The 1647 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
53/tcp   open     domain
135/tcp  filtered msrpc
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
1025/tcp open     NFS-or-IIS
1026/tcp open     LSA-or-nterm
1080/tcp filtered socks
5000/tcp open     UPnP

Device type: general purpose
Running: Microsoft Windows NT/2K/XP
OS details: Microsoft Windows XP Professional SP1
-------------
Sat Nov 29 18:26:33 CST 2003
Interesting ports on 202.71.128.146:
(The 1625 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
21/tcp   open     ftp
22/tcp   filtered ssh
23/tcp   filtered telnet
25/tcp   open     smtp
53/tcp   open     domain
69/tcp   filtered tftp
79/tcp   filtered finger
80/tcp   open     http
110/tcp  open     pop-3
111/tcp  filtered rpcbind
135/tcp  filtered msrpc
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
161/tcp  filtered snmp
445/tcp  filtered microsoft-ds
513/tcp  filtered login
515/tcp  filtered printer
543/tcp  filtered klogin
544/tcp  filtered kshell
707/tcp  filtered unknown
1024/tcp open     kdm
1025/tcp filtered NFS-or-IIS
1026/tcp filtered LSA-or-nterm
1027/tcp open     IIS
1030/tcp open     iad1
1031/tcp open     iad2
1214/tcp filtered fasttrack
3333/tcp filtered dec-notes
3372/tcp filtered msdtc
3389/tcp open     ms-term-serv
4444/tcp filtered krb524

Device type: general purpose
Running: Microsoft Windows 2003/.NET
OS details: Microsoft Windows .NET Enterprise Server (build 3604-3790)

# telnet 202.71.128.146 25
Trying 202.71.128.146...
Connected to 202.71.128.146 (202.71.128.146).
Escape character is '^]'.
220 top--sites.net (LSMTP for Windows NT v1.1b) ESMTP server ready
-------------
Sat Nov 29 18:24:46 CST 2003
Interesting ports on d66-222-190-189.abhsia.telus.net (66.222.190.189):
(The 1650 ports scanned but not shown below are in state: closed)
PORT     STATE SERVICE
113/tcp  open  auth
135/tcp  open  msrpc
139/tcp  open  netbios-ssn
445/tcp  open  microsoft-ds
1025/tcp open  NFS-or-IIS
1026/tcp open  LSA-or-nterm
5000/tcp open  UPnP

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
 
# nmblookup -A 66.222.190.189
Looking up status of 66.222.190.189
received 6 names
        COMPUTER        <00> -         B 
        COMPUTER        <20> -         B 
        WORKGROUP       <00> -  B 
        WORKGROUP       <1e> -  B 
        WORKGROUP       <1d> -         B 
        ..__MSBROWSE__. <01> -  B 
num_good_sends=0 num_good_receives=0
-------------
Sat Nov 29 18:22:10 CST 2003
Interesting ports on u1056535.ul.warwick.net (216.6.148.208):
(The 1650 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  open     msrpc
139/tcp  open     netbios-ssn
161/tcp  filtered snmp
445/tcp  open     microsoft-ds
1025/tcp open     NFS-or-IIS
3531/tcp open     peerenabler
5000/tcp open     UPnP

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
 
# nmblookup -A 216.6.148.208
Looking up status of 216.6.148.208
received 8 names
        INFOMAN         <00> -         B 
        MSHOME          <00> -  B 
        INFOMAN         <03> -         B 
        INFOMAN         <20> -         B 
        MSHOME          <1e> -  B 
        MSHOME          <1d> -         B 
        ..__MSBROWSE__. <01> -  B 
        MVDIORIO        <03> -         B 
num_good_sends=0 num_good_receives=0
-------------
Wed Nov 26 06:36:22 CST 2003
Interesting ports on ip152.70.susc.suscom.net (64.78.70.152):
(The 1635 ports scanned but not shown below are in state: closed)
PORT      STATE    SERVICE
25/tcp    filtered smtp
80/tcp    filtered http
134/tcp   filtered ingres-net
135/tcp   filtered msrpc
136/tcp   filtered profile
137/tcp   filtered netbios-ns
138/tcp   filtered netbios-dgm
139/tcp   filtered netbios-ssn
445/tcp   filtered microsoft-ds
1031/tcp  open     iad2
1234/tcp  filtered hotline
1434/tcp  filtered ms-sql-m
1999/tcp  filtered tcp-id-port
4444/tcp  filtered krb524
8000/tcp  filtered http-alt
9876/tcp  filtered sd
12345/tcp filtered NetBus
12346/tcp filtered NetBus
27374/tcp filtered subseven
27665/tcp filtered Trinoo_Master
31337/tcp filtered Elite
54320/tcp filtered bo2k

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows NT 3.51 SP5, NT 4.0 or 95/98/98SE
-------------
Mon Nov 24 21:12:01 CST 2003
Interesting ports on pcp005077pcs.chemistry.mu.edu (134.48.45.141):
(The 1642 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
111/tcp  filtered rpcbind
135/tcp  filtered msrpc
136/tcp  filtered profile
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
161/tcp  filtered snmp
162/tcp  filtered snmptrap
445/tcp  filtered microsoft-ds
449/tcp  filtered as-servermap
515/tcp  filtered printer
593/tcp  filtered http-rpc-epmap
1025/tcp open     NFS-or-IIS
1433/tcp filtered ms-sql-s
1434/tcp filtered ms-sql-m

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Mon Nov 24 19:43:33 CST 2003
Interesting ports on adsl-67-66-128-214.dsl.stlsmo.swbell.net (67.66.128.214):
(The 1651 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
139/tcp  open     netbios-ssn
445/tcp  open     microsoft-ds
1025/tcp open     NFS-or-IIS
1026/tcp open     LSA-or-nterm
5000/tcp open     UPnP

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
 
# nmblookup -A 67.66.128.214
Looking up status of 67.66.128.214
received 4 names
        DJG7R121        <00> -         M 
        MSHOME          <00> -  M 
        DJG7R121        <20> -         M 
        MSHOME          <1e> -  M 
num_good_sends=0 num_good_receives=0
-------------
Mon Nov 24 19:34:12 CST 2003
Interesting ports on 12-218-143-37.client.mchsi.com (12.218.143.37):
(The 1649 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
593/tcp  filtered http-rpc-epmap
1080/tcp filtered socks
3531/tcp open     peerenabler

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Mon Nov 24 19:24:37 CST 2003
Interesting ports on 207.72.130.252:
(The 1644 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
80/tcp   open     http
135/tcp  filtered msrpc
136/tcp  filtered profile
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
593/tcp  filtered http-rpc-epmap
641/tcp  open     unknown
1025/tcp open     NFS-or-IIS
1214/tcp open     fasttrack
4444/tcp filtered krb524
5000/tcp open     UPnP

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
 
# nmblookup -A 207.72.130.252
Looking up status of 207.72.130.252
received 6 names
        VAIO684650      <00> -         M 
        WORKGROUP       <00> -  M 
        VAIO684650      <03> -         M 
        VAIO684650      <20> -         M 
        WORKGROUP       <1e> -  M 
        RAQUEL GARZA    <03> -         M 
num_good_sends=0 num_good_receives=0
-------------
Mon Nov 24 19:22:26 CST 2003
Interesting ports on c213-200-182-202.cm-upc.chello.se (213.200.182.202):
(The 1642 ports scanned but not shown below are in state: closed)
PORT      STATE    SERVICE
21/tcp    filtered ftp
25/tcp    filtered smtp
80/tcp    filtered http
113/tcp   open     auth
135/tcp   filtered msrpc
137/tcp   filtered netbios-ns
138/tcp   filtered netbios-dgm
139/tcp   filtered netbios-ssn
445/tcp   open     microsoft-ds
548/tcp   filtered afpovertcp
707/tcp   open     unknown
1025/tcp  open     NFS-or-IIS
5000/tcp  open     UPnP
12345/tcp filtered NetBus
27374/tcp filtered subseven

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows NT 3.51 SP5, NT 4.0 or 95/98/98SE, Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sun Nov 23 23:23:29 CST 2003
Interesting ports on 218.17.120.189:
(The 1654 ports scanned but not shown below are in state: closed)
PORT     STATE SERVICE
135/tcp  open  msrpc
139/tcp  open  netbios-ssn
1026/tcp open  LSA-or-nterm

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Sun Nov 23 15:16:16 CST 2003
Interesting ports on adsl-68-248-143-217.dsl.applwi.ameritech.net (68.248.143.217):
(The 1652 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
139/tcp  open     netbios-ssn
445/tcp  open     microsoft-ds
1025/tcp open     NFS-or-IIS
5000/tcp open     UPnP

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
 
# nmblookup -A 68.248.143.217
Looking up status of 68.248.143.217
received 4 names
        SCOTT-2VN8IP7JB <00> -         B 
        WORKGROUP       <00> -  B 
        SCOTT-2VN8IP7JB <20> -         B 
        WORKGROUP       <1e> -  B 
num_good_sends=0 num_good_receives=0
-------------
Sun Nov 23 09:11:13 CST 2003
Interesting ports on h64n1fls304o1032.telia.com (81.226.102.64):
(The 1651 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
139/tcp  open     netbios-ssn
1080/tcp filtered socks
3128/tcp filtered squid-http
4480/tcp filtered proxy-plus
6588/tcp filtered analogx
8080/tcp filtered http-proxy

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
 
# nmblookup -A 81.226.102.64
Looking up status of 81.226.102.64
received 4 names
        OEMCOMPUTER     <00> -         B 
        OEMWORKGROUP    <00> -  B 
        OEMCOMPUTER     <03> -         B 
        STANDARD        <03> -         B 
num_good_sends=0 num_good_receives=0
-------------
Sun Nov 23 09:04:55 CST 2003
Interesting ports on 160.Red-80-24-1.pooles.rima-tde.net (80.24.1.160):
(The 1655 ports scanned but not shown below are in state: closed)
PORT    STATE SERVICE
53/tcp  open  domain
139/tcp open  netbios-ssn

Device type: general purpose|PDA
Running: Microsoft Windows 95/98/ME|PocketPC/CE
OS details: Microsoft Windows 95/98/NT 4.0 or PocketPC
-------------
Sun Nov 23 08:58:52 CST 2003
Interesting ports on 218.238.109.193:
(The 1650 ports scanned but not shown below are in state: closed)
PORT      STATE    SERVICE
21/tcp    filtered ftp
80/tcp    filtered http
135/tcp   filtered msrpc
139/tcp   open     netbios-ssn
445/tcp   filtered microsoft-ds
4444/tcp  filtered krb524
17300/tcp filtered kuang2

Device type: general purpose
Running: Microsoft Windows 95/98/ME
OS details: Microsoft Windows 98 SP1
 
# nmblookup -A 218.238.109.193
Looking up status of 218.238.109.193
received 4 names
        OEMCOMPUTER     <00> -         B 
        OEMWORKGROUP    <00> -  B 
        OEMCOMPUTER     <03> -         B 
        ......          <03> -         B 
num_good_sends=0 num_good_receives=0
-------------
Sun Nov 23 08:52:26 CST 2003
Interesting ports on mail.bodensteinerimp.com (63.240.135.57):
(The 1652 ports scanned but not shown below are in state: filtered)
PORT     STATE  SERVICE
3/tcp    closed compressnet
25/tcp   open   smtp
80/tcp   open   http
443/tcp  open   https
1723/tcp open   pptp
Device type: general purpose
Running: IBM AIX 4.X
OS details: IBM AIX 4.3.2.0-4.3.3.0 on an IBM RS/*
 
Ahh, but:

# telnet 63.240.135.57 25
Trying 63.240.135.57...
Connected to mail.bodensteinerimp.com (63.240.135.57).
Escape character is '^]'.
220 bodenmail1.ad.bodensteinerimp.com ESMTP Server (Microsoft Exchange Internet Mail Service 5.5.2657.72) ready
HELO dumbass.spammer
250 OK
MAIL FROM: annoyedbyspam@yourmammas.house
250 OK - mail from 
RCPT TO: postmaster
250 OK - Recipient 
DATA
354 Send data.  End with CRLF.CRLF
From: Annoyed By Spam 
To: You the spammer 
Subject: SPAM from your server
 
I have received SPAM from your server. Either your server is infected
with a virus, running a trojan, or you are indeed spamming willfully.
In any case, I do not appreciate it and I will track you down if I
continue to receive spam from you.
 
Thanks, and have a nice day!
 
 
.
 
250 OK
quit
221 closing connection
Connection closed by foreign host.
-------------
Sun Nov 23 08:35:15 CST 2003
Interesting ports on dhcp-0-a0-73-b0-d7-86.cpe.cabletv.on.ca (209.213.230.11):
(The 1647 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
37/tcp   filtered time
67/tcp   filtered dhcpserver
69/tcp   filtered tftp
135/tcp  open     msrpc
139/tcp  open     netbios-ssn
445/tcp  open     microsoft-ds
707/tcp  open     unknown
1025/tcp open     NFS-or-IIS
1434/tcp filtered ms-sql-m
5000/tcp open     UPnP

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
 
# nmblookup -A 209.213.230.11
Looking up status of 209.213.230.11
received 8 names
        JOANNE-5UQ6I7JI <00> -         P 
        WORKGROUP       <00> -  P 
        JOANNE-5UQ6I7JI <03> -         P 
        JOANNE-5UQ6I7JI <20> -         P 
        JOANNE AND TOM  <03> -         P 
        WORKGROUP       <1e> -  P 
        WORKGROUP       <1d> -         P 
        ..__MSBROWSE__. <01> -  P 
num_good_sends=0 num_good_receives=0
-------------
Sun Nov 23 08:28:47 CST 2003
Interesting ports on cpe-68-118-242-29.ma.charter.com (68.118.242.29):
(The 1643 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
80/tcp   open     http
113/tcp  open     auth
135/tcp  filtered msrpc
136/tcp  filtered profile
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
707/tcp  filtered unknown
1025/tcp open     NFS-or-IIS
1214/tcp open     fasttrack
3531/tcp open     peerenabler
4444/tcp filtered krb524
5000/tcp open     UPnP

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sat Nov 22 22:01:20 CST 2003
Interesting ports on node-d-5596.a2000.nl (62.195.85.150):
(The 1649 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
1025/tcp open     NFS-or-IIS
5000/tcp open     UPnP
6699/tcp filtered napster

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sat Nov 22 21:58:53 CST 2003
Interesting ports on 12-214-37-73.client.mchsi.com (12.214.37.73):
(The 1648 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
593/tcp  filtered http-rpc-epmap
1025/tcp open     NFS-or-IIS
1080/tcp filtered socks
5000/tcp open     UPnP

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sat Nov 22 21:55:29 CST 2003
Interesting ports on 217.129.5.18:
(The 1643 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
80/tcp   open     http
113/tcp  open     auth
135/tcp  filtered msrpc
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
593/tcp  filtered http-rpc-epmap
1025/tcp open     NFS-or-IIS
1080/tcp filtered socks
1214/tcp open     fasttrack
3128/tcp filtered squid-http
3531/tcp open     peerenabler
4444/tcp filtered krb524
5000/tcp open     UPnP
8080/tcp filtered http-proxy

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Sat Nov 22 07:32:54 CST 2003
Interesting ports on catv3161.extern.kun.nl (131.174.123.161):
(The 1625 ports scanned but not shown below are in state: closed)
PORT      STATE    SERVICE
7/tcp     filtered echo
67/tcp    filtered dhcpserver
68/tcp    filtered dhcpclient
111/tcp   filtered rpcbind
135/tcp   filtered msrpc
137/tcp   filtered netbios-ns
138/tcp   filtered netbios-dgm
139/tcp   filtered netbios-ssn
161/tcp   filtered snmp
162/tcp   filtered snmptrap
177/tcp   filtered xdmcp
445/tcp   filtered microsoft-ds
515/tcp   filtered printer
1025/tcp  open     NFS-or-IIS
1214/tcp  open     fasttrack
1241/tcp  filtered nessus
2049/tcp  filtered nfs
5000/tcp  open     UPnP
6000/tcp  filtered X11
6001/tcp  filtered X11:1
6002/tcp  filtered X11:2
6003/tcp  filtered X11:3
6004/tcp  filtered X11:4
6005/tcp  filtered X11:5
6006/tcp  filtered X11:6
6007/tcp  filtered X11:7
6008/tcp  filtered X11:8
6009/tcp  filtered X11:9
6050/tcp  filtered arcserve
12345/tcp filtered NetBus
12346/tcp filtered NetBus
27374/tcp filtered subseven

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Fri Nov 21 17:18:21 CST 2003
Interesting ports on i91kdm1.cm.chello.no (80.111.95.245):
(The 1644 ports scanned but not shown below are in state: closed)
PORT      STATE    SERVICE
21/tcp    filtered ftp
25/tcp    filtered smtp
80/tcp    filtered http
135/tcp   filtered msrpc
137/tcp   filtered netbios-ns
138/tcp   filtered netbios-dgm
139/tcp   filtered netbios-ssn
445/tcp   filtered microsoft-ds
548/tcp   filtered afpovertcp
2301/tcp  open     compaqdiag
12345/tcp filtered NetBus
27374/tcp filtered subseven
49400/tcp open     compaqdiag

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Fri Nov 21 06:51:22 CST 2003
Interesting ports on h129n3c1o1019.bredband.skanova.com (217.209.46.129):
(The 1649 ports scanned but not shown below are in state: closed)
PORT     STATE SERVICE
80/tcp   open  http
135/tcp  open  msrpc
445/tcp  open  microsoft-ds
1025/tcp open  NFS-or-IIS
1214/tcp open  fasttrack
2009/tcp open  news
3531/tcp open  peerenabler
5000/tcp open  UPnP

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Wed Nov 19 17:27:15 CST 2003
Interesting ports on 168-226-152-141.speedy.com.ar (168.226.152.141):
(The 1656 ports scanned but not shown below are in state: closed)
PORT    STATE SERVICE
139/tcp open  netbios-ssn

Device type: specialized|general purpose
Running: Turtle Beach embedded-misc, Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Turtle Beach AudioTron 100 network MP3 player, Microsoft Windows NT 3.51 SP5, NT 4.0 or 95/98/98SE

# nmblookup -A 168.226.152.141
Looking up status of 168.226.152.141
received 3 names
        COMPUSERV       <00> -         B 
        WORKGROUP       <00> -  B 
        COMPUSERV       <03> -         B 
num_good_sends=0 num_good_receives=0
-------------
Wed Nov 19 17:24:36 CST 2003
Interesting ports on user-12hdiui.cable.mindspring.com (69.22.203.210):
(The 1648 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
136/tcp  filtered profile
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
593/tcp  filtered http-rpc-epmap
1025/tcp open     NFS-or-IIS
5000/tcp open     UPnP

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Wed Nov 19 17:10:35 CST 2003
Interesting ports on h29n1fls26o1055.bredband.comhem.se (217.211.218.29):
(The 1648 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
445/tcp  filtered microsoft-ds
1025/tcp open     NFS-or-IIS
1080/tcp filtered socks
3128/tcp filtered squid-http
4480/tcp filtered proxy-plus
5000/tcp open     UPnP
6588/tcp filtered analogx
8080/tcp filtered http-proxy

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Tue Nov 18 22:10:03 CST 2003
Interesting ports on 218.19.126.190:
(The 1653 ports scanned but not shown below are in state: closed)
PORT     STATE SERVICE
135/tcp  open  msrpc
139/tcp  open  netbios-ssn
445/tcp  open  microsoft-ds
1025/tcp open  NFS-or-IIS

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
 
# nmblookup -A 218.19.126.190
Looking up status of 218.19.126.190
received 6 names
        GG              <00> -         B 
        WORKGROUP       <00> -  B 
        GG              <20> -         B 
        WORKGROUP       <1e> -  B 
        GG              <03> -         B 
        ADMINISTRATOR   <03> -         B 
num_good_sends=0 num_good_receives=0
-------------
Tue Nov 18 20:48:19 CST 2003
nteresting ports on core-128-156-2.rentech.net (206.128.156.2):
(The 1643 ports scanned but not shown below are in state: filtered)
PORT      STATE  SERVICE
21/tcp    closed ftp
22/tcp    closed ssh
25/tcp    open   smtp
80/tcp    open   http
110/tcp   closed pop-3
113/tcp   closed auth
161/tcp   closed snmp
162/tcp   closed snmptrap
443/tcp   closed https
3389/tcp  open   ms-term-serv
5631/tcp  closed pcanywheredata
5800/tcp  closed vnc-http
5900/tcp  closed vnc
10000/tcp closed snet-sensor-mgmt

Device type: general purpose
Running: Microsoft Windows 2003/.NET
OS details: Microsoft Windows .NET Enterprise Server (build 3604-3790)

# telnet 206.128.156.2 25
Trying 206.128.156.2...
Connected to core-128-156-2.rentech.net (206.128.156.2).
Escape character is '^]'.
220 eadvertizing Microsoft ESMTP MAIL Service, Version: 6.0.3790.0 ready at  Tue, 18 Nov 2003 20:38:15 -0600
-------------
Tue Nov 18 20:37:42 CST 2003
Interesting ports on core-128-156-2.rentech.net (206.128.156.2):
(The 1643 ports scanned but not shown below are in state: filtered)
PORT      STATE  SERVICE
21/tcp    closed ftp
22/tcp    closed ssh
25/tcp    open   smtp
80/tcp    open   http
110/tcp   closed pop-3
113/tcp   closed auth
161/tcp   closed snmp
162/tcp   closed snmptrap
443/tcp   closed https
3389/tcp  open   ms-term-serv
5631/tcp  closed pcanywheredata
5800/tcp  closed vnc-http
5900/tcp  closed vnc
10000/tcp closed snet-sensor-mgmt

Device type: general purpose
Running: Microsoft Windows 2003/.NET
OS details: Microsoft Windows .NET Enterprise Server (build 3604-3790)
 
# telnet 206.128.156.2 25
Trying 206.128.156.2...
Connected to core-128-156-2.rentech.net (206.128.156.2).
-------------
Tue Nov 18 19:10:47 CST 2003
Interesting ports on 193.231.70.11:
(The 1634 ports scanned but not shown below are in state: closed)
PORT      STATE    SERVICE
21/tcp    open     ftp
25/tcp    open     smtp
80/tcp    open     http
110/tcp   open     pop-3
135/tcp   filtered msrpc
136/tcp   filtered profile
137/tcp   filtered netbios-ns
138/tcp   filtered netbios-dgm
139/tcp   filtered netbios-ssn
445/tcp   filtered microsoft-ds
554/tcp   open     rtsp
1025/tcp  open     NFS-or-IIS
1026/tcp  open     LSA-or-nterm
1030/tcp  open     iad1
1031/tcp  open     iad2
1032/tcp  open     iad3
1347/tcp  open     bbn-mmc
1723/tcp  open     pptp
1755/tcp  open     wms
3306/tcp  open     mysql
3389/tcp  open     ms-term-serv
12345/tcp filtered NetBus
31337/tcp filtered Elite

Device type: general purpose
Running: Microsoft Windows 2003/.NET
OS details: Microsoft Windows .NET Enterprise Server (build 3604-3790)
 
# telnet 193.231.70.11 25
Trying 193.231.70.11...
Connected to 193.231.70.11 (193.231.70.11).
Escape character is '^]'.
220 felixthecat Microsoft ESMTP MAIL Service, Version: 6.0.3790.0 ready at  Wed, 19 Nov 2003 03:11:01 +0200

# ftp 193.231.70.11
Connected to 193.231.70.11.
220 Felixthecat
500 Unknown command.
500 Unknown command.
KERBEROS_V4 rejected as an authentication type
Name (193.231.70.11:root): dumbbastard
331 Password required for dumbbastard.
Password:
530 Login or Password incorrect.
Login failed.
-------------
Tue Nov 18 19:00:25 CST 2003
Interesting ports on 221.12.11.107:
(The 1647 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
21/tcp   open     ftp
80/tcp   open     http
135/tcp  open     msrpc
443/tcp  open     https
445/tcp  filtered microsoft-ds
1025/tcp open     NFS-or-IIS
1026/tcp open     LSA-or-nterm
1027/tcp open     IIS
3372/tcp open     msdtc
3389/tcp open     ms-term-serv

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP

# ftp 221.12.11.107
Connected to 221.12.11.107.
220 qz-d6bp4wls1e8a Microsoft FTP Service (Version 5.0).
500 'AUTH GSSAPI': command not understood
500 'AUTH KERBEROS_V4': command not understood
KERBEROS_V4 rejected as an authentication type
Name (221.12.11.107:root): anonymous
331 Password required for anonymous.
Password:
530 User anonymous cannot log in.
Login failed.
-------------
Tue Nov 18 18:57:27 CST 2003
Interesting ports on adsl-68-90-73-229.dsl.stlsmo.swbell.net (68.90.73.229):
(The 1654 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
139/tcp  open     netbios-ssn
5101/tcp open     admdog

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Tue Nov 18 18:53:48 CST 2003
Interesting ports on cdm-68-226-229-233.stvl.cox-internet.com (68.226.229.233):(The 1641 ports scanned but not shown below are in state: closed)
PORT      STATE    SERVICE
25/tcp    filtered smtp
80/tcp    filtered http
111/tcp   filtered rpcbind
119/tcp   filtered nntp
135/tcp   filtered msrpc
136/tcp   filtered profile
137/tcp   filtered netbios-ns
138/tcp   filtered netbios-dgm
139/tcp   filtered netbios-ssn
445/tcp   filtered microsoft-ds
707/tcp   open     unknown
1025/tcp  open     NFS-or-IIS
1214/tcp  open     fasttrack
1433/tcp  filtered ms-sql-s
5000/tcp  open     UPnP
27374/tcp filtered subseven

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Mon Nov 17 20:00:23 CST 2003
Interesting ports on 205.252.101.13:
(The 1650 ports scanned but not shown below are in state: closed)
PORT     STATE SERVICE
21/tcp   open  ftp
135/tcp  open  msrpc
1025/tcp open  NFS-or-IIS
1026/tcp open  LSA-or-nterm
1027/tcp open  IIS
3372/tcp open  msdtc
3389/tcp open  ms-term-serv

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Mon Nov 17 19:50:27 CST 2003
Interesting ports on h129n1fls34o267.telia.com (81.224.62.129):
(The 1643 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  open     msrpc
139/tcp  open     netbios-ssn
389/tcp  open     ldap
445/tcp  open     microsoft-ds
1002/tcp open     unknown
1025/tcp open     NFS-or-IIS
1080/tcp filtered socks
1720/tcp open     H.323/Q.931
3128/tcp filtered squid-http
3531/tcp open     peerenabler
4480/tcp filtered proxy-plus
5000/tcp open     UPnP
6588/tcp filtered analogx
8080/tcp filtered http-proxy
 
Windows

# nmblookup -A 81.224.62.129
Looking up status of 81.224.62.129
received 6 names
        SANNE           <00> -         B 
        SANNE           <20> -         B 
        MSHOME          <00> -  B 
        MSHOME          <1e> -  B 
        MSHOME          <1d> -         B 
        ..__MSBROWSE__. <01> -  B 
num_good_sends=0 num_good_receives=0
-------------
Sun Nov 16 18:28:19 CST 2003
Interesting ports on 193.82.96.124:
(The 1646 ports scanned but not shown below are in state: closed)
PORT     STATE SERVICE
80/tcp   open  http
81/tcp   open  hosts2-ns
135/tcp  open  msrpc
139/tcp  open  netbios-ssn
443/tcp  open  https
445/tcp  open  microsoft-ds
1025/tcp open  NFS-or-IIS
1026/tcp open  LSA-or-nterm
1084/tcp open  ansoft-lm-2
3372/tcp open  msdtc
9999/tcp open  abyss

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sun Nov 16 18:25:03 CST 2003
Interesting ports on 218.146.206.58:
(The 1638 ports scanned but not shown below are in state: closed)
PORT      STATE    SERVICE
21/tcp    open     ftp
23/tcp    open     telnet
25/tcp    open     smtp
110/tcp   open     pop-3
119/tcp   open     nntp
135/tcp   filtered msrpc
139/tcp   filtered netbios-ssn
389/tcp   open     ldap
445/tcp   filtered microsoft-ds
808/tcp   open     unknown
1025/tcp  open     NFS-or-IIS
1026/tcp  open     LSA-or-nterm
1080/tcp  open     socks
1720/tcp  open     H.323/Q.931
3372/tcp  open     msdtc
4444/tcp  filtered krb524
5800/tcp  filtered vnc-http
5900/tcp  filtered vnc
17300/tcp filtered kuang2

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Sun Nov 16 06:30:43 CST 2003
Interesting ports on 208.161.38.6:
(The 1644 ports scanned but not shown below are in state: filtered)
PORT      STATE  SERVICE
21/tcp    open   ftp
22/tcp    closed ssh
25/tcp    open   smtp
80/tcp    open   http
110/tcp   closed pop-3
113/tcp   closed auth
161/tcp   closed snmp
162/tcp   closed snmptrap
443/tcp   closed https
5631/tcp  closed pcanywheredata
5800/tcp  closed vnc-http
5900/tcp  closed vnc
10000/tcp closed snet-sensor-mgmt

Device type: general purpose
Running: Microsoft Windows 2003/.NET
OS details: Microsoft Windows .NET Enterprise Server (build 3604-3790)

# telnet 208.161.38.6 25
Trying 208.161.38.6...
Connected to 208.161.38.6 (208.161.38.6).
Escape character is '^]'.
220 4eai4k9 Microsoft ESMTP MAIL Service, Version: 6.0.3790.0 ready at  Sun, 16 Nov 2003 06:33:25 -0600
-------------
Sun Nov 16 06:26:19 CST 2003
Interesting ports on 218.95.70.138:
(The 1654 ports scanned but not shown below are in state: closed)
PORT    STATE SERVICE
25/tcp  open  smtp
110/tcp open  pop-3
135/tcp open  msrpc

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows NT 3.51 SP5, NT 4.0 or 95/98/98SE

# telnet 218.95.70.138 25
Trying 218.95.70.138...
Connected to 218.95.70.138 (218.95.70.138).
Escape character is '^]'.
220 unspecified.host ESMTP - WinRoute Pro 4.1.27
-------------
Sat Nov 15 17:29:07 CST 2003
Interesting ports on 62.29.76.190:
(The 1646 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
111/tcp  filtered rpcbind
135/tcp  open     msrpc
445/tcp  open     microsoft-ds
512/tcp  filtered exec
513/tcp  filtered login
514/tcp  filtered shell
515/tcp  filtered printer
540/tcp  filtered uucp
1025/tcp open     NFS-or-IIS
2049/tcp filtered nfs
5000/tcp open     UPnP

Device type: general purpose
Running: Microsoft Windows NT/2K/XP
OS details: Microsoft Windows 2000 Professional
-------------
Sat Nov 15 17:19:02 CST 2003
Interesting ports on 219.153.5.18:
(The 1650 ports scanned but not shown below are in state: closed)
PORT     STATE SERVICE
21/tcp   open  ftp
135/tcp  open  msrpc
1025/tcp open  NFS-or-IIS
1031/tcp open  iad2
1033/tcp open  netinfo
3372/tcp open  msdtc
3389/tcp open  ms-term-serv

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Sat Nov 15 09:18:49 CST 2003
Interesting ports on 61.149.193.122:
(The 1654 ports scanned but not shown below are in state: closed)
PORT     STATE SERVICE
135/tcp  open  msrpc
139/tcp  open  netbios-ssn
1025/tcp open  NFS-or-IIS

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
 
# nmblookup -A 61.149.193.122
Looking up status of 61.149.193.122
received 6 names
        UNICOM-EDWARD   <00> -         M 
        WORKGROUP       <00> -  M 
        UNICOM-EDWARD   <20> -         M 
        WORKGROUP       <1e> -  M 
        UNICOM-EDWARD   <03> -         M 
        ADMINISTRATOR   <03> -         M 
num_good_sends=0 num_good_receives=0
-------------
Fri Nov 14 00:37:09 CST 2003
Interesting ports on BSN-77-91-1.dsl.siol.net (193.77.91.1):
(The 1648 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
161/tcp  filtered snmp
445/tcp  filtered microsoft-ds
593/tcp  filtered http-rpc-epmap
1025/tcp open     NFS-or-IIS
5000/tcp open     UPnP

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Thu Nov 13 18:42:40 CST 2003
Interesting ports on BV2-24.207.193.67.charter-stl.com (24.207.193.67):
(The 1647 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
136/tcp  filtered profile
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
593/tcp  filtered http-rpc-epmap
1025/tcp open     NFS-or-IIS
4444/tcp filtered krb524
5000/tcp open     UPnP

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Thu Nov 13 18:40:28 CST 2003
Interesting ports on 218.5.83.139:
(The 1639 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
21/tcp   open     ftp
25/tcp   open     smtp
80/tcp   open     http
110/tcp  open     pop-3
135/tcp  filtered msrpc
139/tcp  filtered netbios-ssn
143/tcp  open     imap
443/tcp  open     https
445/tcp  filtered microsoft-ds
554/tcp  open     rtsp
1025/tcp open     NFS-or-IIS
1027/tcp open     IIS
1029/tcp open     ms-lsa
1080/tcp open     socks
1434/tcp filtered ms-sql-m
3372/tcp open     msdtc
3389/tcp open     ms-term-serv
8080/tcp open     http-proxy

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Thu Nov 13 18:29:35 CST 2003
Interesting ports on h85n2fls308o1044.telia.com (81.226.15.85):
(The 1644 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
80/tcp   open     http
135/tcp  open     msrpc
139/tcp  open     netbios-ssn
445/tcp  open     microsoft-ds
1025/tcp open     NFS-or-IIS
1080/tcp filtered socks
1214/tcp open     fasttrack
3128/tcp filtered squid-http
3531/tcp open     peerenabler
4480/tcp filtered proxy-plus
5000/tcp open     UPnP
6588/tcp filtered analogx
8080/tcp filtered http-proxy

Device type: general purpose
Running: Microsoft Windows NT/2K/XP|95/98/ME
OS details: Microsoft Windows NT 5 Beta2 or Beta3, Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Wed Nov 12 22:08:02 CST 2003
Interesting ports on 203.228.40.159:
(The 1648 ports scanned but not shown below are in state: closed)
PORT      STATE    SERVICE
113/tcp   open     auth
135/tcp   filtered msrpc
139/tcp   filtered netbios-ssn
445/tcp   filtered microsoft-ds
3264/tcp  open     ccmail
4444/tcp  filtered krb524
5800/tcp  filtered vnc-http
5900/tcp  filtered vnc
17300/tcp filtered kuang2

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Tue Nov 11 20:54:39 CST 2003
Interesting ports on 220.170.206.46:
(The 1653 ports scanned but not shown below are in state: closed)
PORT    STATE    SERVICE
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap

Windows

# nmblookup -A 220.170.206.46
Looking up status of 220.170.206.46
received 3 names
        USE2            <00> -         B 
        MSHOME          <00> -  B 
        USE2            <03> -         B 
num_good_sends=0 num_good_receives=0
-------------
Tue Nov 11 19:26:16 CST 2003
Interesting ports on 212.89.170.174:
(The 1648 ports scanned but not shown below are in state: closed)
PORT     STATE SERVICE
25/tcp   open  smtp
81/tcp   open  hosts2-ns
110/tcp  open  pop-3
135/tcp  open  msrpc
139/tcp  open  netbios-ssn
445/tcp  open  microsoft-ds
913/tcp  open  unknown
962/tcp  open  unknown
4899/tcp open  radmin

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows NT 3.51 SP5, NT 4.0 or 95/98/98SE
 
# nmblookup -A 212.89.170.174
Looking up status of 212.89.170.174
received 4 names
        FTP             <00> -         B 
        FTP             <20> -         B 
        MICRONET        <00> -  B 
        MICRONET        <1e> -  B 
num_good_sends=0 num_good_receives=0
-------------
Tue Nov 11 18:03:45 CST 2003
Interesting ports on 218.37.42.186:
(The 1654 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
139/tcp  open     netbios-ssn
707/tcp  filtered unknown
4444/tcp filtered krb524

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows NT 3.51 SP5, NT 4.0 or 95/98/98SE

# nmblookup -A 218.37.42.186
Looking up status of 218.37.42.186
received 5 names
        PC56            <00> -         B 
        NETCLUB         <00> -  B 
        PC56            <03> -         B 
        PC56            <20> -         B 
        NETCLUB         <1e> -  B 
num_good_sends=0 num_good_receives=0
-------------
Mon Nov 10 18:47:43 CST 2003
Interesting ports on adsl-65-70-171-164.dsl.rcsntx.swbell.net (65.70.171.164):
(The 1652 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
139/tcp  open     netbios-ssn
1723/tcp open     pptp
2301/tcp open     compaqdiag
5490/tcp open     connect-proxy

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3

# nmblookup -A 65.70.171.164
Looking up status of 65.70.171.164
received 5 names
        W2KDALTONKA     <00> -         M 
        AMERICAS        <00> -  M 
        W2KDALTONKA     <20> -         M 
        AMERICAS        <1e> -  M 
        W2KDALTONKA     <01> -         M 
num_good_sends=0 num_good_receives=0
-------------
Sun Nov  9 21:46:27 CST 2003
Interesting ports on pcp03966768pcs.dalect01.va.comcast.net (68.48.23.129):
(The 1650 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
1080/tcp filtered socks
5000/tcp open     UPnP

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Sun Nov  9 08:09:36 CST 2003
Interesting ports on pcp594155pcs.dksnco01.tn.comcast.net (68.53.155.43):
(The 1651 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
1080/tcp filtered socks

Windows
-------------
Fri Nov  7 21:19:23 CST 2003
Interesting ports on 12-217-84-169.client.mchsi.com (12.217.84.169):
(The 1647 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
593/tcp  filtered http-rpc-epmap
1025/tcp open     NFS-or-IIS
1080/tcp filtered socks
3531/tcp open     peerenabler
5000/tcp open     UPnP

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Fri Nov  7 17:42:23 CST 2003
Interesting ports on AL1-24.207.162.51.charter-stl.com (24.207.162.51):
(The 1648 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
136/tcp  filtered profile
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
593/tcp  filtered http-rpc-epmap
1027/tcp open     IIS
4444/tcp filtered krb524

Windows
-------------
Fri Nov  7 17:40:04 CST 2003
Interesting ports on 0x50c79749.arcnxx17.adsl-dhcp.tele.dk (80.199.151.73):
(The 1651 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
25/tcp   filtered smtp
53/tcp   open     domain
119/tcp  filtered nntp
135/tcp  filtered msrpc
139/tcp  open     netbios-ssn
4444/tcp filtered krb524

Device type: general purpose|PDA
Running: Microsoft Windows 95/98/ME|PocketPC/CE
OS details: Microsoft Windows 95/98/NT 4.0 or PocketPC

# nmblookup -A 80.199.151.73
Looking up status of 80.199.151.73
received 4 names
        DEFAULT         <00> -         B 
        WORKGROUP       <00> -  B 
        DEFAULT         <03> -         B 
        ERIK M.LLER AND <03> -         B 
num_good_sends=0 num_good_receives=0
-------------
Fri Nov  7 01:23:20 CST 2003
nteresting ports on 61.145.190.233:
(The 1646 ports scanned but not shown below are in state: closed)
PORT     STATE SERVICE
21/tcp   open  ftp
25/tcp   open  smtp
110/tcp  open  pop-3
135/tcp  open  msrpc
139/tcp  open  netbios-ssn
427/tcp  open  svrloc
1080/tcp open  socks
1503/tcp open  imtc-mcs
1720/tcp open  H.323/Q.931
8080/tcp open  http-proxy
9090/tcp open  zeus-admin

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows NT 3.51 SP5, NT 4.0 or 95/98/98SE

# nmblookup -A 61.145.190.233
Looking up status of 61.145.190.233
received 7 names
        JINGYI004       <00> -         B 
        CRYSTAL         <00> -  B 
        JINGYI004       <03> -         B 
        JINGYI004       <20> -         B 
        CRYSTAL         <1e> -  B 
        CRYSTAL         <1d> -         B 
        ..__MSBROWSE__. <01> -  B 
num_good_sends=0 num_good_receives=0
-------------
Fri Nov  7 01:16:27 CST 2003
Interesting ports on d141-194-66.home.cgocable.net (24.141.194.66):
(The 1647 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
25/tcp   filtered smtp
135/tcp  filtered msrpc
136/tcp  filtered profile
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
1025/tcp open     NFS-or-IIS
5000/tcp open     UPnP
5101/tcp open     admdog

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Thu Nov  6 20:16:50 CST 2003
Interesting ports on d235-130-191.home1.cgocable.net (24.235.130.191):
(The 1633 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
25/tcp   filtered smtp
135/tcp  filtered msrpc
136/tcp  filtered profile
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
186/tcp  filtered kis
326/tcp  filtered unknown
445/tcp  filtered microsoft-ds
470/tcp  filtered scx-proxy
755/tcp  filtered unknown
785/tcp  filtered unknown
906/tcp  filtered unknown
935/tcp  filtered unknown
969/tcp  filtered unknown
976/tcp  filtered unknown
1025/tcp open     NFS-or-IIS
1389/tcp filtered iclpv-dm
1672/tcp filtered netview-aix-12
1900/tcp filtered UPnP
4500/tcp filtered sae-urn
5000/tcp open     UPnP
5717/tcp filtered prosharenotify
9111/tcp filtered DragonIDSConsole

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional
 or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Thu Nov  6 20:10:27 CST 2003
Interesting ports on 61.38.61.74:
(The 1648 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
80/tcp   open     http
135/tcp  filtered msrpc
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
707/tcp  filtered unknown
1025/tcp open     NFS-or-IIS
1214/tcp open     fasttrack
4444/tcp filtered krb524
5000/tcp open     UPnP

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Thu Nov  6 20:07:15 CST 2003
Interesting ports on 24.79.76.98:
(The 1650 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
139/tcp  open     netbios-ssn
445/tcp  open     microsoft-ds
1025/tcp open     NFS-or-IIS
5000/tcp open     UPnP
5100/tcp open     admd
5101/tcp open     admdog

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
 
# nmblookup -A  24.79.76.98
Looking up status of 24.79.76.98
received 8 names
        YOUR-W92P4BHLZG <00> -         M 
        WORKGROUP       <00> -  M 
        YOUR-W92P4BHLZG <03> -         M 
        YOUR-W92P4BHLZG <20> -         M 
        WORKGROUP       <1e> -  M 
        WORKGROUP       <1d> -         M 
        ..__MSBROWSE__. <01> -  M 
        OWNER           <03> -         M 
num_good_sends=0 num_good_receives=0
-------------
Wed Nov  5 18:03:08 CST 2003
Interesting ports on 218.14.184.108:
(The 1649 ports scanned but not shown below are in state: closed)
PORT     STATE SERVICE
23/tcp   open  telnet
25/tcp   open  smtp
110/tcp  open  pop-3
119/tcp  open  nntp
135/tcp  open  msrpc
139/tcp  open  netbios-ssn
808/tcp  open  unknown
1080/tcp open  socks

Windows
-------------
Wed Nov  5 17:57:35 CST 2003
Interesting ports on user15.net672.nj.sprint-hsd.net (65.41.93.15):
(The 1653 ports scanned but not shown below are in state: closed)
PORT     STATE SERVICE
135/tcp  open  msrpc
707/tcp  open  unknown
1025/tcp open  NFS-or-IIS
5000/tcp open  UPnP

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Wed Nov  5 17:55:03 CST 2003
Interesting ports on h71n1fls311o1099.telia.com (81.225.180.71):
(The 1650 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
139/tcp  open     netbios-ssn
1080/tcp filtered socks
3128/tcp filtered squid-http
4480/tcp filtered proxy-plus
5101/tcp open     admdog
6588/tcp filtered analogx
8080/tcp filtered http-proxy

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP

# nmblookup -A 81.225.180.71
Looking up status of 81.225.180.71
received 4 names
        TEST            <00> -         B 
        MSHOME          <00> -  B 
        TEST            <03> -         B 
        USER            <03> -         B 
num_good_sends=0 num_good_receives=0
-------------
Wed Nov  5 17:43:09 CST 2003
Interesting ports on 12.172.200.122:
(The 1654 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
135/tcp  filtered msrpc
139/tcp  open     netbios-ssn
5000/tcp open     UPnP

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Wed Nov  5 17:41:06 CST 2003
Interesting ports on ntucomm-media3.ee.ntu.edu.tw (140.112.154.162):
(The 1644 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
21/tcp   open     ftp
80/tcp   open     http
111/tcp  filtered rpcbind
135/tcp  filtered msrpc
139/tcp  open     netbios-ssn
445/tcp  filtered microsoft-ds
1025/tcp open     NFS-or-IIS
1026/tcp open     LSA-or-nterm
3389/tcp open     ms-term-serv
4444/tcp filtered krb524
6666/tcp filtered irc-serv
6667/tcp filtered irc
6668/tcp filtered irc

Device type: general purpose
Running: Microsoft Windows 2003/.NET
OS details: Microsoft Windows .NET Enterprise Server (build 3604-3790)
-------------
Tue Nov  4 20:18:58 CST 2003
Interesting ports on gso28-244-151.triad.rr.com (24.28.244.151):
(The 1646 ports scanned but not shown below are in state: closed)
PORT     STATE    SERVICE
53/tcp   open     domain
135/tcp  filtered msrpc
136/tcp  filtered profile
137/tcp  filtered netbios-ns
138/tcp  filtered netbios-dgm
139/tcp  filtered netbios-ssn
445/tcp  filtered microsoft-ds
593/tcp  filtered http-rpc-epmap
1025/tcp open     NFS-or-IIS
5000/tcp open     UPnP
5101/tcp open     admdog

Windows
-------------
Tue Nov  4 19:25:31 CST 2003
Interesting ports on 218.71.204.119:
(The 1638 ports scanned but not shown below are in state: closed)
PORT      STATE    SERVICE
25/tcp    open     smtp
110/tcp   open     pop-3
135/tcp   filtered msrpc
445/tcp   filtered microsoft-ds
666/tcp   filtered doom
1001/tcp  filtered unknown
1024/tcp  filtered kdm
1025/tcp  open     NFS-or-IIS
1234/tcp  filtered hotline
1434/tcp  filtered ms-sql-m
2000/tcp  filtered callbook
5000/tcp  open     UPnP
5400/tcp  filtered pcduo-old
6969/tcp  filtered acmsoda
12345/tcp filtered NetBus
12346/tcp filtered NetBus
27374/tcp filtered subseven
31337/tcp filtered Elite
54320/tcp filtered bo2k

Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Tue Nov  4 18:28:18 CST 2003
Interesting ports on CUST164.176.NW.TPLUS.AT (217.76.164.176):
(The 1528 ports scanned but not shown below are in state: filtered)
Port       State       Service
25/tcp     open        smtp
80/tcp     open        http
110/tcp    open        pop-3
119/tcp    open        nntp
143/tcp    open        imap2
443/tcp    open        https
563/tcp    open        snews
593/tcp    open        http-rpc-epmap
691/tcp    open        resvc
993/tcp    open        imaps
995/tcp    open        pop3s
1723/tcp   open        pptp
5631/tcp   open        pcanywheredata
5632/tcp   closed      pcanywherestat
 
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
 
# telnet 217.76.164.176 25
Trying 217.76.164.176...
Connected to CUST164.176.NW.TPLUS.AT (217.76.164.176).
Escape character is '^]'.
220 exsrv.office.local Microsoft ESMTP MAIL Service, Version: 5.0.2195.5329 ready
-------------
Tue Nov  4 17:54:33 CST 2003
Interesting ports on  (218.71.204.119):
(The 1538 ports scanned but not shown below are in state: closed)
Port       State       Service
135/tcp    filtered    loc-srv
139/tcp    open        netbios-ssn
445/tcp    filtered    microsoft-ds
1434/tcp   filtered    ms-sql-m
 
Remote operating system guess: Windows NT4 / Win95 / Win98
 
# nmblookup -A 218.71.204.119
Looking up status of 218.71.204.119
received 3 names
        S5K8R7          <00> -         B 
        WORKGROUP       <00> -  B 
        S5K8R7          <03> -         B 
num_good_sends=0 num_good_receives=0
-------------
Tue Nov  4 12:44:16 CST 2003
Interesting ports on h26n7c1o273.bredband.skanova.com (217.209.114.26):
(The 1537 ports scanned but not shown below are in state: closed)
Port       State       Service
135/tcp    open        loc-srv
1025/tcp   open        listen
1026/tcp   open        nterm
2004/tcp   open        mailbox
5000/tcp   open        fics
 
Remote OS guesses: MS Windows2000 Professional RC1/W2K Advance Server Beta3, Windows Millenium Edition v4.90.3000
-------------
Tue Nov  4 12:42:58 CST 2003
Interesting ports on  (4.5.53.31):
(The 1541 ports scanned but not shown below are in state: closed)
Port       State       Service
139/tcp    open        netbios-ssn
 
Remote OS guesses: MS Windows2000 Professional RC1/W2K Advance Server Beta3, Windows Millenium Edition v4.90.3000

# nmblookup -A 4.5.53.31
Looking up status of 4.5.53.31
received 3 names
        LAP             <00> -         B 
        VILLANET        <00> -  B 
        LAP             <03> -         B 
num_good_sends=0 num_good_receives=0
-------------
Tue Nov  4 12:39:56 CST 2003
Interesting ports on roc-66-66-115-123.rochester.rr.com (66.66.115.123):
(The 1532 ports scanned but not shown below are in state: closed)
Port       State       Service
135/tcp    filtered    loc-srv
136/tcp    filtered    profile
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
593/tcp    filtered    http-rpc-epmap
1025/tcp   open        listen
5000/tcp   open        fics
9090/tcp   open        zeus-admin
 
Remote OS guesses: Windows Me or Windows 2000 RC1 through final release, MS Windows2000 Professional RC1/W2K Advance Server Beta3, Windows Millenium Edition v4.90.3000
-------------
Tue Nov  4 12:34:51 CST 2003
Interesting ports on rdu25-12-084.nc.rr.com (24.25.12.84):
(The 1532 ports scanned but not shown below are in state: closed)
Port       State       Service
135/tcp    filtered    loc-srv
136/tcp    filtered    profile
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
593/tcp    filtered    http-rpc-epmap
1025/tcp   open        listen
1026/tcp   open        nterm
5000/tcp   open        fics
 
Remote operating system guess: Windows 2000 Professional, Build 2183 (RC3)
-------------
Mon Nov  3 21:36:46 CST 2003
Interesting ports on 213.237.68.25.adsl.vaer.worldonline.dk (213.237.68.25):
(The 1531 ports scanned but not shown below are in state: closed)
Port       State       Service
21/tcp     filtered    ftp
25/tcp     filtered    smtp
80/tcp     filtered    http
110/tcp    filtered    pop-3
139/tcp    open        netbios-ssn
1025/tcp   filtered    listen
1026/tcp   filtered    nterm
1030/tcp   filtered    iad1
1031/tcp   filtered    iad2
1032/tcp   filtered    iad3
5000/tcp   filtered    fics
 
Remote OS guesses: Windows Me or Windows 2000 RC1 through final release, Windows Millenium Edition v4.90.3000
 
# nmblookup -A 213.237.68.25
Looking up status of 213.237.68.25
received 8 names
        JNP HOME        <00> -         B 
        DIGIMENTAL      <00> -  B 
        JNP HOME        <03> -         B 
        JNP HOME        <20> -         B 
        DIGIMENTAL      <1e> -  B 
        JOHN N PR.STEGA <03> -         B 
        DIGIMENTAL      <1d> -         B 
        ..__MSBROWSE__. <01> -  B 
num_good_sends=0 num_good_receives=0
-------------
Mon Nov  3 18:55:58 CST 2003
Interesting ports on CPE-203-45-77-114.nsw.bigpond.net.au (203.45.77.114):
(The 1538 ports scanned but not shown below are in state: closed)
Port       State       Service
135/tcp    open        loc-srv
139/tcp    open        netbios-ssn
179/tcp    filtered    bgp
445/tcp    open        microsoft-ds
 
Remote operating system guess: Windows Millenium Edition v4.90.3000
-------------
Mon Nov  3 18:55:11 CST 2003
Interesting ports on 12-218-171-248.client.mchsi.com (12.218.171.248):
(The 1533 ports scanned but not shown below are in state: closed)
Port       State       Service
135/tcp    filtered    loc-srv
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
593/tcp    filtered    http-rpc-epmap
1025/tcp   open        listen
1080/tcp   filtered    socks
5000/tcp   open        fics
 
Windows
-------------
Sun Nov  2 22:04:48 CST 2003
Interesting ports on  (218.77.228.131):
(The 1528 ports scanned but not shown below are in state: closed)
Port       State       Service
23/tcp     open        telnet
25/tcp     open        smtp
80/tcp     open        http
119/tcp    open        nntp
135/tcp    filtered    loc-srv
139/tcp    filtered    netbios-ssn
443/tcp    open        https
445/tcp    filtered    microsoft-ds
593/tcp    filtered    http-rpc-epmap
808/tcp    open        unknown
1025/tcp   open        listen
1026/tcp   open        nterm
1080/tcp   open        socks
1434/tcp   filtered    ms-sql-m
 
Remote operating system guess: Windows Millenium Edition v4.90.3000
-------------
Sun Nov  2 21:05:28 CST 2003
Interesting ports on cpe-66-191-50-246.spa.sc.charter.com (66.191.50.246):
(The 1532 ports scanned but not shown below are in state: closed)
Port       State       Service
18/tcp     filtered    msp
135/tcp    filtered    loc-srv
136/tcp    filtered    profile
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
593/tcp    filtered    http-rpc-epmap
1025/tcp   open        listen
5000/tcp   open        fics

Windows
-------------
Sun Nov  2 21:05:05 CST 2003
Interesting ports on CPE-65-28-50-5.kc.rr.com (65.28.50.5):
(The 1532 ports scanned but not shown below are in state: closed)
Port       State       Service
135/tcp    filtered    loc-srv
136/tcp    filtered    profile
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
593/tcp    filtered    http-rpc-epmap
1025/tcp   open        listen
1723/tcp   open        pptp
5000/tcp   open        fics
 
Remote operating system guess: Windows Millenium Edition v4.90.3000
-------------
Sun Nov  2 09:38:22 CST 2003
Interesting ports on adsl-68-76-44-66.dsl.wotnoh.ameritech.net (68.76.44.66):
(The 1536 ports scanned but not shown below are in state: closed)
Port       State       Service
135/tcp    filtered    loc-srv
139/tcp    open        netbios-ssn
445/tcp    open        microsoft-ds
1025/tcp   open        listen
1026/tcp   open        nterm
5000/tcp   open        fics
 
Windows

# nmblookup -A 68.76.44.66
Looking up status of 68.76.44.66
received 4 names
        MIKE            <00> -         B 
        WORKGROUP       <00> -  B 
        MIKE            <20> -         B 
        WORKGROUP       <1e> -  B 
num_good_sends=0 num_good_receives=0
-------------
Sun Nov  2 09:02:08 CST 2003
Interesting ports on ip-pa-jtown-68-187-51-213.charterpa.com (68.187.51.213):
(The 1531 ports scanned but not shown below are in state: closed)
Port       State       Service
113/tcp    open        auth
135/tcp    filtered    loc-srv
136/tcp    filtered    profile
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
593/tcp    filtered    http-rpc-epmap
1025/tcp   open        listen
1031/tcp   open        iad2
5000/tcp   open        fics
 
Remote operating system guess: Windows 2000 Professional, Build 2183 (RC3)
-------------
Sun Nov  2 09:00:25 CST 2003
Interesting ports on ptd-24-198-40-112.maine.rr.com (24.198.40.112):
(The 1535 ports scanned but not shown below are in state: closed)
Port       State       Service
135/tcp    filtered    loc-srv
136/tcp    filtered    profile
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
593/tcp    filtered    http-rpc-epmap
 
Windows
-------------
Sun Nov  2 08:37:49 CST 2003
Insufficient responses for TCP sequencing (3), OS detection may be less accurateInteresting ports on dhcp065-025-016-139.neo.rr.com (65.25.16.139):
(The 1532 ports scanned but not shown below are in state: closed)
Port       State       Service
80/tcp     open        http
135/tcp    filtered    loc-srv
136/tcp    filtered    profile
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
593/tcp    filtered    http-rpc-epmap
1025/tcp   open        listen
5000/tcp   open        fics
 
Remote OS guesses: Windows NT 5 Beta2 or Beta3, Windows Me or Windows 2000 RC1 through final release, MS Windows2000 Professional RC1/W2K Advance Server Beta3,
Windows Millenium Edition v4.90.3000
-------------
Sat Nov  1 15:51:37 CST 2003
Interesting ports on a213-22-51-99.netcabo.pt (213.22.51.99):
(The 1539 ports scanned but not shown below are in state: closed)
Port       State       Service
53/tcp     open        domain
135/tcp    open        loc-srv
139/tcp    open        netbios-ssn
 
Windows

# nmblookup -A 213.22.51.99
Looking up status of 213.22.51.99
received 4 names
        A4P0H7          <00> -         B 
        WORKGROUP       <00> -  B 
        A4P0H7          <03> -         B 
        PEDRO SANTOS    <03> -         B 
num_good_sends=0 num_good_receives=0
-------------
Sat Nov  1 11:03:07 CST 2003
Interesting ports on  (61.55.43.188):
(The 1532 ports scanned but not shown below are in state: closed)
Port       State       Service
21/tcp     open        ftp
23/tcp     open        telnet
25/tcp     open        smtp
110/tcp    open        pop-3
119/tcp    open        nntp
707/tcp    open        unknown
808/tcp    open        unknown
1025/tcp   open        listen
1026/tcp   open        nterm
1080/tcp   open        socks
 
Remote OS guesses: Windows Me or Windows 2000 RC1 through final release, MS Windows2000 Professional RC1/W2K Advance Server Beta3, Windows Millenium Edition v4.90.3000
-------------
Sat Nov  1 08:06:21 CST 2003
Interesting ports on pcp01731301pcs.frncht01.de.comcast.net (68.83.108.212):
(The 1530 ports scanned but not shown below are in state: closed)
Port       State       Service
135/tcp    filtered    loc-srv
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
641/tcp    open        unknown
1025/tcp   open        listen
1026/tcp   open        nterm
1080/tcp   filtered    socks
5000/tcp   open        fics
5192/tcp   open        aol-2
6009/tcp   open        X11:9
 
Remote OS guesses: MS Windows2000 Professional RC1/W2K Advance Server Beta3, Windows Millenium Edition v4.90.3000
-------------
Sat Nov  1 00:15:38 CST 2003
Interesting ports on  (64.40.130.170):
(The 1535 ports scanned but not shown below are in state: closed)
Port       State       Service
36/tcp     open        unknown
135/tcp    open        loc-srv
139/tcp    open        netbios-ssn
427/tcp    open        svrloc
445/tcp    open        microsoft-ds
4444/tcp   open        krb524
6667/tcp   open        irc
 
Windows

# nmblookup -A 64.40.130.170
Looking up status of 64.40.130.170
received 5 names
        AURELIO         <00> -         M 
        AURELIO         <20> -         M 
        WORKGROUP       <00> -  M 
        WORKGROUP       <1e> -  M 
        AURELIO         <01> -         M 
num_good_sends=0 num_good_receives=0
-------------
Thu Oct 30 18:59:16 CST 2003
Interesting ports on d47-69-25-83.try.wideopenwest.com (69.47.83.25):
(The 1530 ports scanned but not shown below are in state: closed)
Port       State       Service
37/tcp     filtered    time
53/tcp     filtered    domain
80/tcp     open        http
135/tcp    filtered    loc-srv
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
593/tcp    filtered    http-rpc-epmap
1025/tcp   open        listen
4444/tcp   filtered    krb524
5000/tcp   open        fics
 
Windows

# lynx -head -dump http://69.47.83.25
HTTP/1.0 501 Not Implemented
X-Kazaa-Username: tlawler551
X-Kazaa-Network: KaZaA
X-Kazaa-IP: 69.47.83.25:1816
X-Kazaa-SupernodeIP: 67.165.56.179:1467
 
# telnet 69.47.83.25 1816
Trying 69.47.83.25...
Connected to d47-69-25-83.try.wideopenwest.com (69.47.83.25).
Escape character is '^]'.
GET
HTTP/1.0 501 Not Implemented
X-Kazaa-Username: tlawler551
X-Kazaa-Network: KaZaA
X-Kazaa-IP: 69.47.83.25:1816
X-Kazaa-SupernodeIP: 67.165.56.179:1467
 
Connection closed by foreign host.
-------------
Thu Oct 30 19:06:58 CST 2003
Interesting ports on h209n2fls31o873.telia.com (213.66.228.209):
(The 1533 ports scanned but not shown below are in state: closed)
Port       State       Service
135/tcp    filtered    loc-srv
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
1025/tcp   open        listen
1080/tcp   filtered    socks
3128/tcp   filtered    squid-http
8080/tcp   filtered    http-proxy
 
Windows
-------------
Thu Oct 30 19:08:57 CST 2003
Interesting ports on cs68201182-4.austin.rr.com (68.201.182.4):
(The 1531 ports scanned but not shown below are in state: closed)
Port       State       Service
80/tcp     open        http
135/tcp    filtered    loc-srv
136/tcp    filtered    profile
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
593/tcp    filtered    http-rpc-epmap
1025/tcp   open        listen
3001/tcp   open        nessusd
5000/tcp   open        fics
 
Remote OS guesses: MS Windows2000 Professional RC1/W2K Advance Server Beta3, Windows Millenium Edition v4.90.3000
-------------
Thu Oct 30 19:11:17 CST 2003
Interesting ports on ky-24-159-159-200.midtn.chartertn.net (24.159.159.200):
(The 1531 ports scanned but not shown below are in state: closed)
Port       State       Service
113/tcp    open        auth
135/tcp    filtered    loc-srv
136/tcp    filtered    profile
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
593/tcp    filtered    http-rpc-epmap
1025/tcp   open        listen
5000/tcp   open        fics
6699/tcp   open        napster
 
Windows
-------------
Thu Oct 30 19:14:46 CST 2003
Interesting ports on 24-193-8-17.nyc.rr.com (24.193.8.17):
(The 1533 ports scanned but not shown below are in state: closed)
Port       State       Service
135/tcp    filtered    loc-srv
136/tcp    filtered    profile
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
593/tcp    filtered    http-rpc-epmap
1025/tcp   open        listen
5000/tcp   open        fics
 
Windows
-------------
Thu Oct 30 19:17:12 CST 2003
Interesting ports on cuscon576.tstt.net.tt (196.3.147.195):
(The 1535 ports scanned but not shown below are in state: closed)
Port       State       Service
135/tcp    filtered    loc-srv
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
641/tcp    open        unknown
653/tcp    open        unknown
1026/tcp   open        nterm
4444/tcp   filtered    krb524
 
Remote operating system guess: Windows 2000 Professional, Build 2128
-------------
Thu Oct 30 19:18:43 CST 2003
Interesting ports on 12-217-197-16.client.mchsi.com (12.217.197.16):
(The 1533 ports scanned but not shown below are in state: closed)
Port       State       Service
135/tcp    filtered    loc-srv
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
593/tcp    filtered    http-rpc-epmap
1025/tcp   open        listen
1080/tcp   filtered    socks
5000/tcp   open        fics
 
Windows
-------------
Wed Oct 29 21:47:03 CST 2003
Interesting ports on d205-206-248-97.abhsia.telus.net (205.206.248.97):
(The 1539 ports scanned but not shown below are in state: closed)
Port       State       Service
135/tcp    open        loc-srv
139/tcp    open        netbios-ssn
5000/tcp   open        fics
 
Remote OS guesses: MS Windows2000 Professional RC1/W2K Advance Server Beta3, Windows Millenium Edition v4.90.3000
-------------
Wed Oct 29 19:13:20 CST 2003
Interesting ports on c24.158.29.5.dul.mn.charter.com (24.158.29.5):
(The 1524 ports scanned but not shown below are in state: closed)
Port       State       Service
21/tcp     filtered    ftp
25/tcp     filtered    smtp
80/tcp     filtered    http
110/tcp    filtered    pop-3
119/tcp    filtered    nntp
135/tcp    filtered    loc-srv
136/tcp    filtered    profile
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
143/tcp    filtered    imap2
445/tcp    filtered    microsoft-ds
593/tcp    filtered    http-rpc-epmap
1025/tcp   open        listen
1080/tcp   filtered    socks
3389/tcp   open        msrdp
5000/tcp   open        fics
8080/tcp   filtered    http-proxy
 
Remote operating system guess: Windows 2000 Professional, Build 2183 (RC3)
-------------
Wed Oct 29 18:33:33 CST 2003
Interesting ports on pcp430555pcs.pinhil01.ga.comcast.net (68.47.78.74):
(The 1535 ports scanned but not shown below are in state: closed)
Port       State       Service
135/tcp    filtered    loc-srv
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
1026/tcp   open        nterm
1080/tcp   filtered    socks
 
Windows
-------------
Tue Oct 28 19:38:53 CST 2003
Interesting ports on ptd-24-31-144-238.maine.rr.com (24.31.144.238):
(The 1533 ports scanned but not shown below are in state: closed)
Port       State       Service
135/tcp    filtered    loc-srv
136/tcp    filtered    profile
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
593/tcp    filtered    http-rpc-epmap
1025/tcp   open        listen
5000/tcp   open        fics
 
Remote OS guesses: MS Windows2000 Professional RC1/W2K Advance Server Beta3, Windows Millenium Edition v4.90.3000
-------------
Tue Oct 28 18:35:21 CST 2003
Interesting ports on bzq-82-80-129-84.red.bezeqint.net (82.80.129.84):
(The 1529 ports scanned but not shown below are in state: closed)
Port       State       Service
7/tcp      open        echo
9/tcp      open        discard
13/tcp     open        daytime
17/tcp     open        qotd
19/tcp     open        chargen
80/tcp     open        http
135/tcp    open        loc-srv
443/tcp    open        https
445/tcp    open        microsoft-ds
1025/tcp   open        listen
1026/tcp   open        nterm
2105/tcp   open        eklogin
5000/tcp   open        fics
 
Remote operating system guess: Windows Millenium Edition v4.90.3000
-------------
Tue Oct 28 16:48:57 CST 2003
Interesting ports on  (219.130.20.197):
(The 1541 ports scanned but not shown below are in state: closed)
Port       State       Service
139/tcp    open        netbios-ssn
 
Remote operating system guess: Windows Millenium Edition v4.90.3000
-------------
Tue Oct 28 16:47:14 CST 2003
Interesting ports on  (61.233.245.97):
(The 1529 ports scanned but not shown below are in state: closed)
Port       State       Service
25/tcp     open        smtp
69/tcp     filtered    tftp
110/tcp    open        pop-3
119/tcp    open        nntp
135/tcp    filtered    loc-srv
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
593/tcp    filtered    http-rpc-epmap
808/tcp    open        unknown
1025/tcp   open        listen
1080/tcp   open        socks
1352/tcp   open        lotusnotes
4444/tcp   filtered    krb524
 
Remote OS guesses: Windows Me or Windows 2000 RC1 through final release, MS Windows2000 Professional RC1/W2K Advance Server Beta3, Windows Millenium Edition v4.90.3000
-------------
Tue Oct 28 16:46:05 CST 2003
Interesting ports on d-216-195-185-56.metrocast.net (216.195.185.56):
(The 1532 ports scanned but not shown below are in state: closed)
Port       State       Service
80/tcp     open        http
135/tcp    filtered    loc-srv
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
539/tcp    filtered    apertus-ldp
1025/tcp   open        listen
4444/tcp   filtered    krb524
5000/tcp   open        fics
 
Remote OS guesses: Windows Me or Windows 2000 RC1 through final release, Windows Millenium Edition v4.90.3000
-------------
Tue Oct 28 16:42:52 CST 2003
Interesting ports on d205-206-137-236.abhsia.telus.net (205.206.137.236):
(The 1537 ports scanned but not shown below are in state: closed)
Port       State       Service
135/tcp    open        loc-srv
139/tcp    open        netbios-ssn
445/tcp    open        microsoft-ds
1025/tcp   open        listen
5000/tcp   open        fics
 
Windows
-------------
Tue Oct 28 16:41:23 CST 2003
Interesting ports on kpt-c-24-158-123-233.chartertn.net (24.158.123.233):
(The 1533 ports scanned but not shown below are in state: closed)
Port       State       Service
135/tcp    filtered    loc-srv
136/tcp    filtered    profile
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
593/tcp    filtered    http-rpc-epmap
1025/tcp   open        listen
5000/tcp   open        fics
 
Windows
-------------
Mon Oct 27 19:18:41 CST 2003
Interesting ports on  (61.130.204.58):
(The 1538 ports scanned but not shown below are in state: closed)
Port       State       Service
135/tcp    filtered    loc-srv
139/tcp    open        netbios-ssn
445/tcp    filtered    microsoft-ds
1434/tcp   filtered    ms-sql-m
 
Remote operating system guess: Windows NT4 / Win95 / Win98
-------------
Mon Oct 27 18:46:02 CST 2003
Interesting ports on sc-24-30-179-31.socal.rr.com (24.30.179.31):
(The 1532 ports scanned but not shown below are in state: closed)
Port       State       Service
21/tcp     open        ftp
135/tcp    filtered    loc-srv
136/tcp    filtered    profile
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
593/tcp    filtered    http-rpc-epmap
1025/tcp   open        listen
5000/tcp   open        fics

Windows 
-------------
Sun Oct 26 19:13:18 CST 2003
Interesting ports on public1-birk2-4-cust84.manc.broadband.ntl.com (80.7.91.84):(The 1535 ports scanned but not shown below are in state: closed)
Port       State       Service
53/tcp     open        domain
135/tcp    filtered    loc-srv
139/tcp    open        netbios-ssn
445/tcp    open        microsoft-ds
1025/tcp   open        listen
1026/tcp   open        nterm
5000/tcp   open        fics

Windows 
-------------
Sun Oct 26 19:12:25 CST 2003
Interesting ports on CPE-65-30-151-148.wi.rr.com (65.30.151.148):
(The 1532 ports scanned but not shown below are in state: closed)
Port       State       Service
135/tcp    filtered    loc-srv
136/tcp    filtered    profile
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
593/tcp    filtered    http-rpc-epmap
641/tcp    open        unknown
1025/tcp   open        listen
5000/tcp   open        fics

Windows
-------------
Sun Oct 26 07:41:47 CST 2003
Interesting ports on roc-66-66-32-163.rochester.rr.com (66.66.32.163):
(The 1532 ports scanned but not shown below are in state: closed)
Port       State       Service
113/tcp    open        auth
135/tcp    filtered    loc-srv
136/tcp    filtered    profile
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
593/tcp    filtered    http-rpc-epmap
1025/tcp   open        listen
5000/tcp   open        fics
 
Remote OS guesses: Windows Me or Windows 2000 RC1 through final release, Windows Millenium Edition v4.90.3000
-------------
Sun Oct 26 07:30:44 CST 2003
Interesting ports on  (218.15.106.30):
(The 1532 ports scanned but not shown below are in state: closed)
Port       State       Service
23/tcp     open        telnet
25/tcp     open        smtp
110/tcp    open        pop-3
119/tcp    open        nntp
135/tcp    filtered    loc-srv
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
808/tcp    open        unknown
1025/tcp   open        listen
1080/tcp   open        socks

CCProxy 5.30 (Windows)
-------------
Sun Oct 26 07:17:54 CST 2003
(Open Relay) Sent warning message to postmaster@cccn
Interesting ports on  (61.54.149.17):
(The 1524 ports scanned but not shown below are in state: closed)
Port       State       Service
25/tcp     open        smtp
80/tcp     open        http
119/tcp    open        nntp
135/tcp    filtered    loc-srv
136/tcp    filtered    profile
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
230/tcp    open        unknown
389/tcp    open        ldap
445/tcp    filtered    microsoft-ds
593/tcp    filtered    http-rpc-epmap
707/tcp    filtered    unknown
1002/tcp   open        unknown
1025/tcp   open        listen
1030/tcp   open        iad1
3005/tcp   open        deslogin
4444/tcp   filtered    krb524
 
Remote operating system guess: MS Windows2000 Professional RC1/W2K Advance Server Beta3
-------------
Sat Oct 25 19:00:37 CDT 2003
Interesting ports on pcp02633086pcs.savana01.ga.comcast.net (68.85.0.28):
(The 1534 ports scanned but not shown below are in state: closed)
Port       State       Service
135/tcp    filtered    loc-srv
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
1025/tcp   open        listen
1080/tcp   filtered    socks
5000/tcp   open        fics
 
Remote operating system guess: Windows 2000 Professional, Build 2183 (RC3)
-------------
Sat Oct 25 18:58:53 CDT 2003
Interesting ports on cpe-69-75-82-85.bak.rr.com (69.75.82.85):
(The 1533 ports scanned but not shown below are in state: closed)
Port       State       Service
135/tcp    filtered    loc-srv
136/tcp    filtered    profile
137/tcp    filtered    netbios-ns
138/tcp    filtered    netbios-dgm
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
593/tcp    filtered    http-rpc-epmap
1025/tcp   open        listen
5000/tcp   open        fics
 
Remote OS guesses: Windows Me or Windows 2000 RC1 through final release, Windows Millenium Edition v4.90.3000
-------------
Sat Oct 25 18:56:58 CDT 2003
Interesting ports on  (61.191.185.7):
(The 1527 ports scanned but not shown below are in state: closed)
Port       State       Service
21/tcp     open        ftp
23/tcp     open        telnet
80/tcp     open        http
119/tcp    open        nntp
135/tcp    filtered    loc-srv
139/tcp    filtered    netbios-ssn
445/tcp    filtered    microsoft-ds
1025/tcp   open        listen
1080/tcp   open        socks
1352/tcp   open        lotusnotes
2000/tcp   open        callbook
5900/tcp   open        vnc
6000/tcp   open        X11
6001/tcp   open        X11:1
8080/tcp   open        http-proxy
 
Remote operating system guess: MS Windows2000 Professional RC1/W2K Advance Server Beta3
-------------