Void's Hall of Shame
IP addresses that SPAM!
Can you spot the trends?
-------------
Thu Dec 18 19:10:53 CST 2003
Interesting ports on 218.51.8.4:
(The 1648 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
21/tcp filtered ftp
80/tcp filtered http
135/tcp filtered msrpc
139/tcp open netbios-ssn
445/tcp filtered microsoft-ds
1029/tcp open ms-lsa
2004/tcp open mailbox
4444/tcp filtered krb524
17300/tcp filtered kuang2
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
# nmblookup -A 218.51.8.4
Looking up status of 218.51.8.4
received 8 names
SOFTCAKE <00> - B
WORKGROUP <00> - B
SOFTCAKE <20> - B
WORKGROUP <1e> - B
SOFTCAKE <03> - B
SOFTCAKEWIFE <03> - B
WORKGROUP <1d> - B
..__MSBROWSE__. <01> - B
num_good_sends=0 num_good_receives=0
-------------
Thu Dec 18 19:08:57 CST 2003
Interesting ports on 206.116.229.59:
(The 1650 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp open msrpc
139/tcp open netbios-ssn
445/tcp open microsoft-ds
1025/tcp open NFS-or-IIS
3531/tcp open peerenabler
5000/tcp open UPnP
31337/tcp open Elite
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
# nmblookup -A 206.116.229.59
Looking up status of 206.116.229.59
received 8 names
KEYMAKER <00> - B
MSHOME <00> - B
KEYMAKER <03> - B
KEYMAKER <20> - B
MSHOME <1e> - B
MSHOME <1d> - B
..__MSBROWSE__. <01> - B
VICKY <03> - B
num_good_sends=0 num_good_receives=0
-------------
Thu Dec 18 19:02:01 CST 2003
Interesting ports on 221.148.126.178:
(The 1648 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
707/tcp filtered unknown
1025/tcp open NFS-or-IIS
4444/tcp filtered krb524
5800/tcp filtered vnc-http
5900/tcp filtered vnc
17300/tcp filtered kuang2
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Thu Dec 18 19:00:32 CST 2003
Interesting ports on 2-43.tr.cgocable.ca (24.122.2.43):
(The 1649 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
33/tcp open dsp
80/tcp open http
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1026/tcp open LSA-or-nterm
4444/tcp filtered krb524
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Sun Dec 14 08:12:07 CST 2003
Interesting ports on CPE-65-28-1-184.kc.rr.com (65.28.1.184):
(The 1648 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1025/tcp open NFS-or-IIS
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sat Dec 13 06:58:06 CST 2003
Interesting ports on r092222.ap.plala.or.jp (220.108.92.222):
(The 1653 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp open msrpc
139/tcp open netbios-ssn
1027/tcp open IIS
4899/tcp open radmin
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
# nmblookup -A 220.108.92.222
Looking up status of 220.108.92.222
received 5 names
OEMCOMPUTER <00> - M
OEMCOMPUTER <20> - M
OEMWORKGROUP <00> - M
OEMCOMPUTER <03> - M
TAKASHI <03> - M
num_good_sends=0 num_good_receives=0
-------------
Sat Dec 13 06:52:22 CST 2003
Interesting ports on 221.124.17.231:
(The 1650 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp open msrpc
139/tcp open netbios-ssn
445/tcp open microsoft-ds
1024/tcp open kdm
1025/tcp open NFS-or-IIS
5000/tcp open UPnP
5101/tcp open admdog
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
# nmblookup -A 221.124.17.231
Looking up status of 221.124.17.231
received 7 names
SUKON-GTYG95CJS <00> - B
WORKGROUP <00> - B
SUKON-GTYG95CJS <03> - B
SUKON-GTYG95CJS <20> - B
WORKGROUP <1e> - B
WORKGROUP <1d> - B
..__MSBROWSE__. <01> - B
num_good_sends=0 num_good_receives=0
-------------
Thu Dec 11 17:31:13 CST 2003
Interesting ports on CPE-138-130-220-207.qld.bigpond.net.au (138.130.220.207):
(The 1651 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp open msrpc
139/tcp open netbios-ssn
179/tcp filtered bgp
445/tcp open microsoft-ds
1025/tcp open NFS-or-IIS
3531/tcp open peerenabler
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Thu Dec 11 17:28:01 CST 2003
Interesting ports on wnpgmb02dc1-180-199.static.mts.net (206.45.180.199):
(The 1653 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp open msrpc
139/tcp open netbios-ssn
3531/tcp open peerenabler
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
# nmblookup -A 206.45.180.199
Looking up status of 206.45.180.199
received 3 names
DEFAULT <00> - B
WORKGROUP <00> - B
DEFAULT <03> - B
num_good_sends=0 num_good_receives=0
-------------
Wed Dec 10 18:45:48 CST 2003
Interesting ports on 65-218-61-236.res.nb.cable.sigecom.net (65.218.61.236):
(The 1646 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
67/tcp filtered dhcpserver
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1025/tcp open NFS-or-IIS
2301/tcp open compaqdiag
4444/tcp filtered krb524
Windows
-------------
Tue Dec 9 19:00:50 CST 2003
Interesting ports on acc-orlando-160-216.dmisinetworks.com (12.179.160.216):
(The 1650 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1025/tcp open NFS-or-IIS
4444/tcp filtered krb524
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Mon Dec 8 19:01:20 CST 2003
Interesting ports on host.107.55.23.62.rev.coltfrance.com (62.23.55.107):
(The 1040 ports scanned but not shown below are in state: filtered)
PORT STATE SERVICE
25/tcp open smtp
80/tcp open http
110/tcp open pop-3
8080/tcp open http-proxy
No exact OS matches for host (If you know what OS is running on it, see http://www.insecure.org/cgi-bin/nmap-submit.cgi).
# telnet 62.23.55.107 25
Trying 62.23.55.107...
Connected to host.107.55.23.62.rev.coltfrance.com (62.23.55.107).
Escape character is '^]'.
220 spiderserver.spiderbusiness.com Microsoft ESMTP MAIL Service, Version: 5.0.2195.6713 ready at Tue, 9 Dec 2003 01:56:18 +0100
helo dumbass.spammer
250 spiderserver.spiderbusiness.com Hello [198.70.169.30]
MAIL FROM: annoyedbyspam@yourmammas.house
250 2.1.0 annoyedbyspam@yourmammas.house....Sender OK
RCPT TO: postmaster
250 2.1.5 postmaster@spiderbusiness.com
DATA
354 Start mail input; end with .
From: Annoyed By Spam
To: You the spammer
Subject: SPAM from your server
I have received SPAM from your server. Either your server is infected
with a virus, running a trojan, or you are indeed spamming willfully.
In any case, I do not appreciate it and I will track you down if I
continue to receive spam from you.
Thanks, and have a nice day!
.
250 2.6.0 Queued mail for delivery
quit
221 2.0.0 spiderserver.spiderbusiness.com Service closing transmission channel
Connection closed by foreign host.
-------------
Sun Dec 7 15:37:57 CST 2003
Interesting ports on 205.252.98.151:
(The 1652 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp open msrpc
1025/tcp open NFS-or-IIS
1026/tcp open LSA-or-nterm
3372/tcp open msdtc
3389/tcp open ms-term-serv
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Sun Dec 7 05:12:57 CST 2003
Interesting ports on node-c-8b22.a2000.nl (62.194.139.34):
(The 1648 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
1025/tcp open NFS-or-IIS
1026/tcp open LSA-or-nterm
3531/tcp open peerenabler
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sat Dec 6 19:45:58 CST 2003
Interesting ports on pc-24-151-22-121.newm2.ct.charter.com (24.151.22.121):
(The 1633 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
20/tcp filtered ftp-data
21/tcp filtered ftp
25/tcp filtered smtp
53/tcp filtered domain
79/tcp filtered finger
80/tcp filtered http
109/tcp filtered pop-2
110/tcp filtered pop-3
119/tcp filtered nntp
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
512/tcp filtered exec
515/tcp filtered printer
593/tcp filtered http-rpc-epmap
1025/tcp open NFS-or-IIS
1031/tcp open iad2
1032/tcp open iad3
5000/tcp open UPnP
31337/tcp filtered Elite
54320/tcp filtered bo2k
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sat Dec 6 05:38:57 CST 2003
Interesting ports on 212.157.11.177:
(The 1650 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
25/tcp filtered smtp
135/tcp open msrpc
139/tcp open netbios-ssn
445/tcp open microsoft-ds
1025/tcp open NFS-or-IIS
5000/tcp open UPnP
5999/tcp open ncd-conf
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
# nmblookup -A 212.157.11.177
Looking up status of 212.157.11.177
received 7 names
POOSTE12 <00> - B
WORGROUP <00> - B
POOSTE12 <03> - B
POOSTE12 <20> - B
WORGROUP <1e> - B
WORGROUP <1d> - B
..__MSBROWSE__. <01> - B
num_good_sends=0 num_good_receives=0
-------------
Sat Dec 6 05:29:02 CST 2003
Interesting ports on d142-173-136-161.abhsia.telus.net (142.173.136.161):
(The 1652 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp open msrpc
139/tcp open netbios-ssn
445/tcp open microsoft-ds
1025/tcp open NFS-or-IIS
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
# nmblookup -A 142.173.136.161
Looking up status of 142.173.136.161
received 6 names
RON <00> - M
MSHOME <00> - M
RON <20> - M
MSHOME <1e> - M
MSHOME <1d> - M
..__MSBROWSE__. <01> - M
num_good_sends=0 num_good_receives=0
-------------
Fri Dec 5 18:31:03 CST 2003
Interesting ports on cp291718-a.venra1.lb.home.nl (217.122.69.150):
(The 1643 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
25/tcp filtered smtp
119/tcp filtered nntp
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
1025/tcp open NFS-or-IIS
1080/tcp filtered socks
3128/tcp filtered squid-http
3531/tcp open peerenabler
5000/tcp open UPnP
8080/tcp filtered http-proxy
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows NT 3.51 SP5, NT 4.0 or 95/98/98SE, Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Fri Dec 5 06:31:43 CST 2003
Interesting ports on dorms-pppoe-2-81-94.pittsburgh.resnet.pitt.edu (130.49.81.94):
(The 1646 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
1025/tcp open NFS-or-IIS
1026/tcp open LSA-or-nterm
3531/tcp open peerenabler
4444/tcp filtered krb524
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Thu Dec 4 18:30:50 CST 2003
Interesting ports on home-01027.b.astral.ro (193.231.120.139):
(The 1022 ports scanned but not shown below are in state: filtered)
PORT STATE SERVICE
1025/tcp open NFS-or-IIS
1720/tcp open H.323/Q.931
5000/tcp open UPnP
Device type: firewall|general purpose
Running: Smoothwall Linux 2.2.X, Microsoft Windows NT/2K/XP
OS details: Smoothwall Linux-based firewall 2.2.23, Microsoft Windows XP Professional RC1+ through final release
-------------
Wed Dec 3 20:24:20 CST 2003
Interesting ports on 61.143.163.41:
(The 1654 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
139/tcp open netbios-ssn
4444/tcp filtered krb524
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
# nmblookup -A 61.143.163.41
Looking up status of 61.143.163.41
received 7 names
YOURNAME <00> - B
MSHOME <00> - B
YOURNAME <03> - B
YOURNAME <20> - B
MSHOME <1e> - B
MSHOME <1d> - B
..__MSBROWSE__. <01> - B
num_good_sends=0 num_good_receives=0
-------------
Wed Dec 3 19:20:25 CST 2003
Interesting ports on 66.188.72.25:
(The 1647 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1025/tcp open NFS-or-IIS
4444/tcp filtered krb524
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows NT/2K/XP
OS details: Microsoft Windows XP Professional SP1 or Windows 2000 SP3
-------------
Wed Dec 3 19:13:29 CST 2003
Interesting ports on host37-66.discord.birch.net (65.16.37.66):
(The 1653 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
139/tcp open netbios-ssn
1080/tcp filtered socks
4444/tcp filtered krb524
Device type: specialized|general purpose
Running: Turtle Beach embedded-misc, Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Turtle Beach AudioTron 100 network MP3 player, Microsoft Windows NT 3.51 SP5, NT 4.0 or 95/98/98SE
# nmblookup -A 65.16.37.66
Looking up status of 65.16.37.66
received 3 names
PAVILION <00> - B
HEWLETTPACKARD <00> - B
PAVILION <03> - B
num_good_sends=0 num_good_receives=0
-------------
Sat Nov 29 18:57:48 CST 2003
Interesting ports on warp142163097012.newtel.com (142.163.97.12):
(The 1645 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
111/tcp filtered rpcbind
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
1025/tcp open NFS-or-IIS
3531/tcp open peerenabler
4444/tcp filtered krb524
5000/tcp open UPnP
12345/tcp filtered NetBus
12346/tcp filtered NetBus
27374/tcp filtered subseven
31337/tcp filtered Elite
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sat Nov 29 18:55:45 CST 2003
Interesting ports on 205.252.102.158:
(The 1652 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp open msrpc
1025/tcp open NFS-or-IIS
1026/tcp open LSA-or-nterm
3372/tcp open msdtc
3389/tcp open ms-term-serv
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Sat Nov 29 18:53:57 CST 2003
Interesting ports on SP3-24.207.240.155.charter-stl.com (24.207.240.155):
(The 1647 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1025/tcp open NFS-or-IIS
4444/tcp filtered krb524
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sat Nov 29 18:39:02 CST 2003
Interesting ports on pcp453050pcs.abrcrn01.ga.comcast.net (68.51.174.28):
(The 1647 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
80/tcp open http
135/tcp filtered msrpc
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
1025/tcp open NFS-or-IIS
1080/tcp filtered socks
1214/tcp open fasttrack
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sat Nov 29 18:37:14 CST 2003
Interesting ports on pcp453050pcs.abrcrn01.ga.comcast.net (68.51.174.28):
(The 1647 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
80/tcp open http
135/tcp filtered msrpc
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
1025/tcp open NFS-or-IIS
1080/tcp filtered socks
1214/tcp open fasttrack
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sat Nov 29 18:35:18 CST 2003
Interesting ports on 68.235.130.224:
(The 1643 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
80/tcp filtered http
113/tcp open auth
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1025/tcp open NFS-or-IIS
4444/tcp filtered krb524
5000/tcp open UPnP
5101/tcp open admdog
27374/tcp filtered subseven
Device type: general purpose
Running: Microsoft Windows NT/2K/XP
OS details: Microsoft Windows XP Professional SP1 or Windows 2000 SP3
-------------
Sat Nov 29 18:32:19 CST 2003
Interesting ports on pcp04984923pcs.paduca01.ky.comcast.net (68.63.243.209):
(The 1647 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
53/tcp open domain
135/tcp filtered msrpc
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
1025/tcp open NFS-or-IIS
1026/tcp open LSA-or-nterm
1080/tcp filtered socks
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows NT/2K/XP
OS details: Microsoft Windows XP Professional SP1
-------------
Sat Nov 29 18:26:33 CST 2003
Interesting ports on 202.71.128.146:
(The 1625 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
21/tcp open ftp
22/tcp filtered ssh
23/tcp filtered telnet
25/tcp open smtp
53/tcp open domain
69/tcp filtered tftp
79/tcp filtered finger
80/tcp open http
110/tcp open pop-3
111/tcp filtered rpcbind
135/tcp filtered msrpc
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
161/tcp filtered snmp
445/tcp filtered microsoft-ds
513/tcp filtered login
515/tcp filtered printer
543/tcp filtered klogin
544/tcp filtered kshell
707/tcp filtered unknown
1024/tcp open kdm
1025/tcp filtered NFS-or-IIS
1026/tcp filtered LSA-or-nterm
1027/tcp open IIS
1030/tcp open iad1
1031/tcp open iad2
1214/tcp filtered fasttrack
3333/tcp filtered dec-notes
3372/tcp filtered msdtc
3389/tcp open ms-term-serv
4444/tcp filtered krb524
Device type: general purpose
Running: Microsoft Windows 2003/.NET
OS details: Microsoft Windows .NET Enterprise Server (build 3604-3790)
# telnet 202.71.128.146 25
Trying 202.71.128.146...
Connected to 202.71.128.146 (202.71.128.146).
Escape character is '^]'.
220 top--sites.net (LSMTP for Windows NT v1.1b) ESMTP server ready
-------------
Sat Nov 29 18:24:46 CST 2003
Interesting ports on d66-222-190-189.abhsia.telus.net (66.222.190.189):
(The 1650 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
113/tcp open auth
135/tcp open msrpc
139/tcp open netbios-ssn
445/tcp open microsoft-ds
1025/tcp open NFS-or-IIS
1026/tcp open LSA-or-nterm
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
# nmblookup -A 66.222.190.189
Looking up status of 66.222.190.189
received 6 names
COMPUTER <00> - B
COMPUTER <20> - B
WORKGROUP <00> - B
WORKGROUP <1e> - B
WORKGROUP <1d> - B
..__MSBROWSE__. <01> - B
num_good_sends=0 num_good_receives=0
-------------
Sat Nov 29 18:22:10 CST 2003
Interesting ports on u1056535.ul.warwick.net (216.6.148.208):
(The 1650 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp open msrpc
139/tcp open netbios-ssn
161/tcp filtered snmp
445/tcp open microsoft-ds
1025/tcp open NFS-or-IIS
3531/tcp open peerenabler
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
# nmblookup -A 216.6.148.208
Looking up status of 216.6.148.208
received 8 names
INFOMAN <00> - B
MSHOME <00> - B
INFOMAN <03> - B
INFOMAN <20> - B
MSHOME <1e> - B
MSHOME <1d> - B
..__MSBROWSE__. <01> - B
MVDIORIO <03> - B
num_good_sends=0 num_good_receives=0
-------------
Wed Nov 26 06:36:22 CST 2003
Interesting ports on ip152.70.susc.suscom.net (64.78.70.152):
(The 1635 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
25/tcp filtered smtp
80/tcp filtered http
134/tcp filtered ingres-net
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
1031/tcp open iad2
1234/tcp filtered hotline
1434/tcp filtered ms-sql-m
1999/tcp filtered tcp-id-port
4444/tcp filtered krb524
8000/tcp filtered http-alt
9876/tcp filtered sd
12345/tcp filtered NetBus
12346/tcp filtered NetBus
27374/tcp filtered subseven
27665/tcp filtered Trinoo_Master
31337/tcp filtered Elite
54320/tcp filtered bo2k
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows NT 3.51 SP5, NT 4.0 or 95/98/98SE
-------------
Mon Nov 24 21:12:01 CST 2003
Interesting ports on pcp005077pcs.chemistry.mu.edu (134.48.45.141):
(The 1642 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
111/tcp filtered rpcbind
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
161/tcp filtered snmp
162/tcp filtered snmptrap
445/tcp filtered microsoft-ds
449/tcp filtered as-servermap
515/tcp filtered printer
593/tcp filtered http-rpc-epmap
1025/tcp open NFS-or-IIS
1433/tcp filtered ms-sql-s
1434/tcp filtered ms-sql-m
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Mon Nov 24 19:43:33 CST 2003
Interesting ports on adsl-67-66-128-214.dsl.stlsmo.swbell.net (67.66.128.214):
(The 1651 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
139/tcp open netbios-ssn
445/tcp open microsoft-ds
1025/tcp open NFS-or-IIS
1026/tcp open LSA-or-nterm
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
# nmblookup -A 67.66.128.214
Looking up status of 67.66.128.214
received 4 names
DJG7R121 <00> - M
MSHOME <00> - M
DJG7R121 <20> - M
MSHOME <1e> - M
num_good_sends=0 num_good_receives=0
-------------
Mon Nov 24 19:34:12 CST 2003
Interesting ports on 12-218-143-37.client.mchsi.com (12.218.143.37):
(The 1649 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1080/tcp filtered socks
3531/tcp open peerenabler
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Mon Nov 24 19:24:37 CST 2003
Interesting ports on 207.72.130.252:
(The 1644 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
80/tcp open http
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
641/tcp open unknown
1025/tcp open NFS-or-IIS
1214/tcp open fasttrack
4444/tcp filtered krb524
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
# nmblookup -A 207.72.130.252
Looking up status of 207.72.130.252
received 6 names
VAIO684650 <00> - M
WORKGROUP <00> - M
VAIO684650 <03> - M
VAIO684650 <20> - M
WORKGROUP <1e> - M
RAQUEL GARZA <03> - M
num_good_sends=0 num_good_receives=0
-------------
Mon Nov 24 19:22:26 CST 2003
Interesting ports on c213-200-182-202.cm-upc.chello.se (213.200.182.202):
(The 1642 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
21/tcp filtered ftp
25/tcp filtered smtp
80/tcp filtered http
113/tcp open auth
135/tcp filtered msrpc
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp open microsoft-ds
548/tcp filtered afpovertcp
707/tcp open unknown
1025/tcp open NFS-or-IIS
5000/tcp open UPnP
12345/tcp filtered NetBus
27374/tcp filtered subseven
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows NT 3.51 SP5, NT 4.0 or 95/98/98SE, Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sun Nov 23 23:23:29 CST 2003
Interesting ports on 218.17.120.189:
(The 1654 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp open msrpc
139/tcp open netbios-ssn
1026/tcp open LSA-or-nterm
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Sun Nov 23 15:16:16 CST 2003
Interesting ports on adsl-68-248-143-217.dsl.applwi.ameritech.net (68.248.143.217):
(The 1652 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
139/tcp open netbios-ssn
445/tcp open microsoft-ds
1025/tcp open NFS-or-IIS
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
# nmblookup -A 68.248.143.217
Looking up status of 68.248.143.217
received 4 names
SCOTT-2VN8IP7JB <00> - B
WORKGROUP <00> - B
SCOTT-2VN8IP7JB <20> - B
WORKGROUP <1e> - B
num_good_sends=0 num_good_receives=0
-------------
Sun Nov 23 09:11:13 CST 2003
Interesting ports on h64n1fls304o1032.telia.com (81.226.102.64):
(The 1651 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
139/tcp open netbios-ssn
1080/tcp filtered socks
3128/tcp filtered squid-http
4480/tcp filtered proxy-plus
6588/tcp filtered analogx
8080/tcp filtered http-proxy
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
# nmblookup -A 81.226.102.64
Looking up status of 81.226.102.64
received 4 names
OEMCOMPUTER <00> - B
OEMWORKGROUP <00> - B
OEMCOMPUTER <03> - B
STANDARD <03> - B
num_good_sends=0 num_good_receives=0
-------------
Sun Nov 23 09:04:55 CST 2003
Interesting ports on 160.Red-80-24-1.pooles.rima-tde.net (80.24.1.160):
(The 1655 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
53/tcp open domain
139/tcp open netbios-ssn
Device type: general purpose|PDA
Running: Microsoft Windows 95/98/ME|PocketPC/CE
OS details: Microsoft Windows 95/98/NT 4.0 or PocketPC
-------------
Sun Nov 23 08:58:52 CST 2003
Interesting ports on 218.238.109.193:
(The 1650 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
21/tcp filtered ftp
80/tcp filtered http
135/tcp filtered msrpc
139/tcp open netbios-ssn
445/tcp filtered microsoft-ds
4444/tcp filtered krb524
17300/tcp filtered kuang2
Device type: general purpose
Running: Microsoft Windows 95/98/ME
OS details: Microsoft Windows 98 SP1
# nmblookup -A 218.238.109.193
Looking up status of 218.238.109.193
received 4 names
OEMCOMPUTER <00> - B
OEMWORKGROUP <00> - B
OEMCOMPUTER <03> - B
...... <03> - B
num_good_sends=0 num_good_receives=0
-------------
Sun Nov 23 08:52:26 CST 2003
Interesting ports on mail.bodensteinerimp.com (63.240.135.57):
(The 1652 ports scanned but not shown below are in state: filtered)
PORT STATE SERVICE
3/tcp closed compressnet
25/tcp open smtp
80/tcp open http
443/tcp open https
1723/tcp open pptp
Device type: general purpose
Running: IBM AIX 4.X
OS details: IBM AIX 4.3.2.0-4.3.3.0 on an IBM RS/*
Ahh, but:
# telnet 63.240.135.57 25
Trying 63.240.135.57...
Connected to mail.bodensteinerimp.com (63.240.135.57).
Escape character is '^]'.
220 bodenmail1.ad.bodensteinerimp.com ESMTP Server (Microsoft Exchange Internet Mail Service 5.5.2657.72) ready
HELO dumbass.spammer
250 OK
MAIL FROM: annoyedbyspam@yourmammas.house
250 OK - mail from
RCPT TO: postmaster
250 OK - Recipient
DATA
354 Send data. End with CRLF.CRLF
From: Annoyed By Spam
To: You the spammer
Subject: SPAM from your server
I have received SPAM from your server. Either your server is infected
with a virus, running a trojan, or you are indeed spamming willfully.
In any case, I do not appreciate it and I will track you down if I
continue to receive spam from you.
Thanks, and have a nice day!
.
250 OK
quit
221 closing connection
Connection closed by foreign host.
-------------
Sun Nov 23 08:35:15 CST 2003
Interesting ports on dhcp-0-a0-73-b0-d7-86.cpe.cabletv.on.ca (209.213.230.11):
(The 1647 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
37/tcp filtered time
67/tcp filtered dhcpserver
69/tcp filtered tftp
135/tcp open msrpc
139/tcp open netbios-ssn
445/tcp open microsoft-ds
707/tcp open unknown
1025/tcp open NFS-or-IIS
1434/tcp filtered ms-sql-m
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
# nmblookup -A 209.213.230.11
Looking up status of 209.213.230.11
received 8 names
JOANNE-5UQ6I7JI <00> - P
WORKGROUP <00> - P
JOANNE-5UQ6I7JI <03> - P
JOANNE-5UQ6I7JI <20> - P
JOANNE AND TOM <03> - P
WORKGROUP <1e> - P
WORKGROUP <1d> - P
..__MSBROWSE__. <01> - P
num_good_sends=0 num_good_receives=0
-------------
Sun Nov 23 08:28:47 CST 2003
Interesting ports on cpe-68-118-242-29.ma.charter.com (68.118.242.29):
(The 1643 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
80/tcp open http
113/tcp open auth
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
707/tcp filtered unknown
1025/tcp open NFS-or-IIS
1214/tcp open fasttrack
3531/tcp open peerenabler
4444/tcp filtered krb524
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sat Nov 22 22:01:20 CST 2003
Interesting ports on node-d-5596.a2000.nl (62.195.85.150):
(The 1649 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
1025/tcp open NFS-or-IIS
5000/tcp open UPnP
6699/tcp filtered napster
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sat Nov 22 21:58:53 CST 2003
Interesting ports on 12-214-37-73.client.mchsi.com (12.214.37.73):
(The 1648 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1025/tcp open NFS-or-IIS
1080/tcp filtered socks
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sat Nov 22 21:55:29 CST 2003
Interesting ports on 217.129.5.18:
(The 1643 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
80/tcp open http
113/tcp open auth
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1025/tcp open NFS-or-IIS
1080/tcp filtered socks
1214/tcp open fasttrack
3128/tcp filtered squid-http
3531/tcp open peerenabler
4444/tcp filtered krb524
5000/tcp open UPnP
8080/tcp filtered http-proxy
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Sat Nov 22 07:32:54 CST 2003
Interesting ports on catv3161.extern.kun.nl (131.174.123.161):
(The 1625 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
7/tcp filtered echo
67/tcp filtered dhcpserver
68/tcp filtered dhcpclient
111/tcp filtered rpcbind
135/tcp filtered msrpc
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
161/tcp filtered snmp
162/tcp filtered snmptrap
177/tcp filtered xdmcp
445/tcp filtered microsoft-ds
515/tcp filtered printer
1025/tcp open NFS-or-IIS
1214/tcp open fasttrack
1241/tcp filtered nessus
2049/tcp filtered nfs
5000/tcp open UPnP
6000/tcp filtered X11
6001/tcp filtered X11:1
6002/tcp filtered X11:2
6003/tcp filtered X11:3
6004/tcp filtered X11:4
6005/tcp filtered X11:5
6006/tcp filtered X11:6
6007/tcp filtered X11:7
6008/tcp filtered X11:8
6009/tcp filtered X11:9
6050/tcp filtered arcserve
12345/tcp filtered NetBus
12346/tcp filtered NetBus
27374/tcp filtered subseven
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Fri Nov 21 17:18:21 CST 2003
Interesting ports on i91kdm1.cm.chello.no (80.111.95.245):
(The 1644 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
21/tcp filtered ftp
25/tcp filtered smtp
80/tcp filtered http
135/tcp filtered msrpc
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
548/tcp filtered afpovertcp
2301/tcp open compaqdiag
12345/tcp filtered NetBus
27374/tcp filtered subseven
49400/tcp open compaqdiag
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Fri Nov 21 06:51:22 CST 2003
Interesting ports on h129n3c1o1019.bredband.skanova.com (217.209.46.129):
(The 1649 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
80/tcp open http
135/tcp open msrpc
445/tcp open microsoft-ds
1025/tcp open NFS-or-IIS
1214/tcp open fasttrack
2009/tcp open news
3531/tcp open peerenabler
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Wed Nov 19 17:27:15 CST 2003
Interesting ports on 168-226-152-141.speedy.com.ar (168.226.152.141):
(The 1656 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
139/tcp open netbios-ssn
Device type: specialized|general purpose
Running: Turtle Beach embedded-misc, Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Turtle Beach AudioTron 100 network MP3 player, Microsoft Windows NT 3.51 SP5, NT 4.0 or 95/98/98SE
# nmblookup -A 168.226.152.141
Looking up status of 168.226.152.141
received 3 names
COMPUSERV <00> - B
WORKGROUP <00> - B
COMPUSERV <03> - B
num_good_sends=0 num_good_receives=0
-------------
Wed Nov 19 17:24:36 CST 2003
Interesting ports on user-12hdiui.cable.mindspring.com (69.22.203.210):
(The 1648 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1025/tcp open NFS-or-IIS
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Wed Nov 19 17:10:35 CST 2003
Interesting ports on h29n1fls26o1055.bredband.comhem.se (217.211.218.29):
(The 1648 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
445/tcp filtered microsoft-ds
1025/tcp open NFS-or-IIS
1080/tcp filtered socks
3128/tcp filtered squid-http
4480/tcp filtered proxy-plus
5000/tcp open UPnP
6588/tcp filtered analogx
8080/tcp filtered http-proxy
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Tue Nov 18 22:10:03 CST 2003
Interesting ports on 218.19.126.190:
(The 1653 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp open msrpc
139/tcp open netbios-ssn
445/tcp open microsoft-ds
1025/tcp open NFS-or-IIS
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
# nmblookup -A 218.19.126.190
Looking up status of 218.19.126.190
received 6 names
GG <00> - B
WORKGROUP <00> - B
GG <20> - B
WORKGROUP <1e> - B
GG <03> - B
ADMINISTRATOR <03> - B
num_good_sends=0 num_good_receives=0
-------------
Tue Nov 18 20:48:19 CST 2003
nteresting ports on core-128-156-2.rentech.net (206.128.156.2):
(The 1643 ports scanned but not shown below are in state: filtered)
PORT STATE SERVICE
21/tcp closed ftp
22/tcp closed ssh
25/tcp open smtp
80/tcp open http
110/tcp closed pop-3
113/tcp closed auth
161/tcp closed snmp
162/tcp closed snmptrap
443/tcp closed https
3389/tcp open ms-term-serv
5631/tcp closed pcanywheredata
5800/tcp closed vnc-http
5900/tcp closed vnc
10000/tcp closed snet-sensor-mgmt
Device type: general purpose
Running: Microsoft Windows 2003/.NET
OS details: Microsoft Windows .NET Enterprise Server (build 3604-3790)
# telnet 206.128.156.2 25
Trying 206.128.156.2...
Connected to core-128-156-2.rentech.net (206.128.156.2).
Escape character is '^]'.
220 eadvertizing Microsoft ESMTP MAIL Service, Version: 6.0.3790.0 ready at Tue, 18 Nov 2003 20:38:15 -0600
-------------
Tue Nov 18 20:37:42 CST 2003
Interesting ports on core-128-156-2.rentech.net (206.128.156.2):
(The 1643 ports scanned but not shown below are in state: filtered)
PORT STATE SERVICE
21/tcp closed ftp
22/tcp closed ssh
25/tcp open smtp
80/tcp open http
110/tcp closed pop-3
113/tcp closed auth
161/tcp closed snmp
162/tcp closed snmptrap
443/tcp closed https
3389/tcp open ms-term-serv
5631/tcp closed pcanywheredata
5800/tcp closed vnc-http
5900/tcp closed vnc
10000/tcp closed snet-sensor-mgmt
Device type: general purpose
Running: Microsoft Windows 2003/.NET
OS details: Microsoft Windows .NET Enterprise Server (build 3604-3790)
# telnet 206.128.156.2 25
Trying 206.128.156.2...
Connected to core-128-156-2.rentech.net (206.128.156.2).
-------------
Tue Nov 18 19:10:47 CST 2003
Interesting ports on 193.231.70.11:
(The 1634 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
21/tcp open ftp
25/tcp open smtp
80/tcp open http
110/tcp open pop-3
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
554/tcp open rtsp
1025/tcp open NFS-or-IIS
1026/tcp open LSA-or-nterm
1030/tcp open iad1
1031/tcp open iad2
1032/tcp open iad3
1347/tcp open bbn-mmc
1723/tcp open pptp
1755/tcp open wms
3306/tcp open mysql
3389/tcp open ms-term-serv
12345/tcp filtered NetBus
31337/tcp filtered Elite
Device type: general purpose
Running: Microsoft Windows 2003/.NET
OS details: Microsoft Windows .NET Enterprise Server (build 3604-3790)
# telnet 193.231.70.11 25
Trying 193.231.70.11...
Connected to 193.231.70.11 (193.231.70.11).
Escape character is '^]'.
220 felixthecat Microsoft ESMTP MAIL Service, Version: 6.0.3790.0 ready at Wed, 19 Nov 2003 03:11:01 +0200
# ftp 193.231.70.11
Connected to 193.231.70.11.
220 Felixthecat
500 Unknown command.
500 Unknown command.
KERBEROS_V4 rejected as an authentication type
Name (193.231.70.11:root): dumbbastard
331 Password required for dumbbastard.
Password:
530 Login or Password incorrect.
Login failed.
-------------
Tue Nov 18 19:00:25 CST 2003
Interesting ports on 221.12.11.107:
(The 1647 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
21/tcp open ftp
80/tcp open http
135/tcp open msrpc
443/tcp open https
445/tcp filtered microsoft-ds
1025/tcp open NFS-or-IIS
1026/tcp open LSA-or-nterm
1027/tcp open IIS
3372/tcp open msdtc
3389/tcp open ms-term-serv
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
# ftp 221.12.11.107
Connected to 221.12.11.107.
220 qz-d6bp4wls1e8a Microsoft FTP Service (Version 5.0).
500 'AUTH GSSAPI': command not understood
500 'AUTH KERBEROS_V4': command not understood
KERBEROS_V4 rejected as an authentication type
Name (221.12.11.107:root): anonymous
331 Password required for anonymous.
Password:
530 User anonymous cannot log in.
Login failed.
-------------
Tue Nov 18 18:57:27 CST 2003
Interesting ports on adsl-68-90-73-229.dsl.stlsmo.swbell.net (68.90.73.229):
(The 1654 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
139/tcp open netbios-ssn
5101/tcp open admdog
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Tue Nov 18 18:53:48 CST 2003
Interesting ports on cdm-68-226-229-233.stvl.cox-internet.com (68.226.229.233):(The 1641 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
25/tcp filtered smtp
80/tcp filtered http
111/tcp filtered rpcbind
119/tcp filtered nntp
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
707/tcp open unknown
1025/tcp open NFS-or-IIS
1214/tcp open fasttrack
1433/tcp filtered ms-sql-s
5000/tcp open UPnP
27374/tcp filtered subseven
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Mon Nov 17 20:00:23 CST 2003
Interesting ports on 205.252.101.13:
(The 1650 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
21/tcp open ftp
135/tcp open msrpc
1025/tcp open NFS-or-IIS
1026/tcp open LSA-or-nterm
1027/tcp open IIS
3372/tcp open msdtc
3389/tcp open ms-term-serv
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Mon Nov 17 19:50:27 CST 2003
Interesting ports on h129n1fls34o267.telia.com (81.224.62.129):
(The 1643 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp open msrpc
139/tcp open netbios-ssn
389/tcp open ldap
445/tcp open microsoft-ds
1002/tcp open unknown
1025/tcp open NFS-or-IIS
1080/tcp filtered socks
1720/tcp open H.323/Q.931
3128/tcp filtered squid-http
3531/tcp open peerenabler
4480/tcp filtered proxy-plus
5000/tcp open UPnP
6588/tcp filtered analogx
8080/tcp filtered http-proxy
Windows
# nmblookup -A 81.224.62.129
Looking up status of 81.224.62.129
received 6 names
SANNE <00> - B
SANNE <20> - B
MSHOME <00> - B
MSHOME <1e> - B
MSHOME <1d> - B
..__MSBROWSE__. <01> - B
num_good_sends=0 num_good_receives=0
-------------
Sun Nov 16 18:28:19 CST 2003
Interesting ports on 193.82.96.124:
(The 1646 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
80/tcp open http
81/tcp open hosts2-ns
135/tcp open msrpc
139/tcp open netbios-ssn
443/tcp open https
445/tcp open microsoft-ds
1025/tcp open NFS-or-IIS
1026/tcp open LSA-or-nterm
1084/tcp open ansoft-lm-2
3372/tcp open msdtc
9999/tcp open abyss
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Sun Nov 16 18:25:03 CST 2003
Interesting ports on 218.146.206.58:
(The 1638 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
21/tcp open ftp
23/tcp open telnet
25/tcp open smtp
110/tcp open pop-3
119/tcp open nntp
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
389/tcp open ldap
445/tcp filtered microsoft-ds
808/tcp open unknown
1025/tcp open NFS-or-IIS
1026/tcp open LSA-or-nterm
1080/tcp open socks
1720/tcp open H.323/Q.931
3372/tcp open msdtc
4444/tcp filtered krb524
5800/tcp filtered vnc-http
5900/tcp filtered vnc
17300/tcp filtered kuang2
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Sun Nov 16 06:30:43 CST 2003
Interesting ports on 208.161.38.6:
(The 1644 ports scanned but not shown below are in state: filtered)
PORT STATE SERVICE
21/tcp open ftp
22/tcp closed ssh
25/tcp open smtp
80/tcp open http
110/tcp closed pop-3
113/tcp closed auth
161/tcp closed snmp
162/tcp closed snmptrap
443/tcp closed https
5631/tcp closed pcanywheredata
5800/tcp closed vnc-http
5900/tcp closed vnc
10000/tcp closed snet-sensor-mgmt
Device type: general purpose
Running: Microsoft Windows 2003/.NET
OS details: Microsoft Windows .NET Enterprise Server (build 3604-3790)
# telnet 208.161.38.6 25
Trying 208.161.38.6...
Connected to 208.161.38.6 (208.161.38.6).
Escape character is '^]'.
220 4eai4k9 Microsoft ESMTP MAIL Service, Version: 6.0.3790.0 ready at Sun, 16 Nov 2003 06:33:25 -0600
-------------
Sun Nov 16 06:26:19 CST 2003
Interesting ports on 218.95.70.138:
(The 1654 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
25/tcp open smtp
110/tcp open pop-3
135/tcp open msrpc
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows NT 3.51 SP5, NT 4.0 or 95/98/98SE
# telnet 218.95.70.138 25
Trying 218.95.70.138...
Connected to 218.95.70.138 (218.95.70.138).
Escape character is '^]'.
220 unspecified.host ESMTP - WinRoute Pro 4.1.27
-------------
Sat Nov 15 17:29:07 CST 2003
Interesting ports on 62.29.76.190:
(The 1646 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
111/tcp filtered rpcbind
135/tcp open msrpc
445/tcp open microsoft-ds
512/tcp filtered exec
513/tcp filtered login
514/tcp filtered shell
515/tcp filtered printer
540/tcp filtered uucp
1025/tcp open NFS-or-IIS
2049/tcp filtered nfs
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows NT/2K/XP
OS details: Microsoft Windows 2000 Professional
-------------
Sat Nov 15 17:19:02 CST 2003
Interesting ports on 219.153.5.18:
(The 1650 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
21/tcp open ftp
135/tcp open msrpc
1025/tcp open NFS-or-IIS
1031/tcp open iad2
1033/tcp open netinfo
3372/tcp open msdtc
3389/tcp open ms-term-serv
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Sat Nov 15 09:18:49 CST 2003
Interesting ports on 61.149.193.122:
(The 1654 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp open msrpc
139/tcp open netbios-ssn
1025/tcp open NFS-or-IIS
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
# nmblookup -A 61.149.193.122
Looking up status of 61.149.193.122
received 6 names
UNICOM-EDWARD <00> - M
WORKGROUP <00> - M
UNICOM-EDWARD <20> - M
WORKGROUP <1e> - M
UNICOM-EDWARD <03> - M
ADMINISTRATOR <03> - M
num_good_sends=0 num_good_receives=0
-------------
Fri Nov 14 00:37:09 CST 2003
Interesting ports on BSN-77-91-1.dsl.siol.net (193.77.91.1):
(The 1648 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
161/tcp filtered snmp
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1025/tcp open NFS-or-IIS
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Thu Nov 13 18:42:40 CST 2003
Interesting ports on BV2-24.207.193.67.charter-stl.com (24.207.193.67):
(The 1647 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1025/tcp open NFS-or-IIS
4444/tcp filtered krb524
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Thu Nov 13 18:40:28 CST 2003
Interesting ports on 218.5.83.139:
(The 1639 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
21/tcp open ftp
25/tcp open smtp
80/tcp open http
110/tcp open pop-3
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
143/tcp open imap
443/tcp open https
445/tcp filtered microsoft-ds
554/tcp open rtsp
1025/tcp open NFS-or-IIS
1027/tcp open IIS
1029/tcp open ms-lsa
1080/tcp open socks
1434/tcp filtered ms-sql-m
3372/tcp open msdtc
3389/tcp open ms-term-serv
8080/tcp open http-proxy
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Thu Nov 13 18:29:35 CST 2003
Interesting ports on h85n2fls308o1044.telia.com (81.226.15.85):
(The 1644 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
80/tcp open http
135/tcp open msrpc
139/tcp open netbios-ssn
445/tcp open microsoft-ds
1025/tcp open NFS-or-IIS
1080/tcp filtered socks
1214/tcp open fasttrack
3128/tcp filtered squid-http
3531/tcp open peerenabler
4480/tcp filtered proxy-plus
5000/tcp open UPnP
6588/tcp filtered analogx
8080/tcp filtered http-proxy
Device type: general purpose
Running: Microsoft Windows NT/2K/XP|95/98/ME
OS details: Microsoft Windows NT 5 Beta2 or Beta3, Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Wed Nov 12 22:08:02 CST 2003
Interesting ports on 203.228.40.159:
(The 1648 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
113/tcp open auth
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
3264/tcp open ccmail
4444/tcp filtered krb524
5800/tcp filtered vnc-http
5900/tcp filtered vnc
17300/tcp filtered kuang2
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Tue Nov 11 20:54:39 CST 2003
Interesting ports on 220.170.206.46:
(The 1653 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
Windows
# nmblookup -A 220.170.206.46
Looking up status of 220.170.206.46
received 3 names
USE2 <00> - B
MSHOME <00> - B
USE2 <03> - B
num_good_sends=0 num_good_receives=0
-------------
Tue Nov 11 19:26:16 CST 2003
Interesting ports on 212.89.170.174:
(The 1648 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
25/tcp open smtp
81/tcp open hosts2-ns
110/tcp open pop-3
135/tcp open msrpc
139/tcp open netbios-ssn
445/tcp open microsoft-ds
913/tcp open unknown
962/tcp open unknown
4899/tcp open radmin
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows NT 3.51 SP5, NT 4.0 or 95/98/98SE
# nmblookup -A 212.89.170.174
Looking up status of 212.89.170.174
received 4 names
FTP <00> - B
FTP <20> - B
MICRONET <00> - B
MICRONET <1e> - B
num_good_sends=0 num_good_receives=0
-------------
Tue Nov 11 18:03:45 CST 2003
Interesting ports on 218.37.42.186:
(The 1654 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
139/tcp open netbios-ssn
707/tcp filtered unknown
4444/tcp filtered krb524
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows NT 3.51 SP5, NT 4.0 or 95/98/98SE
# nmblookup -A 218.37.42.186
Looking up status of 218.37.42.186
received 5 names
PC56 <00> - B
NETCLUB <00> - B
PC56 <03> - B
PC56 <20> - B
NETCLUB <1e> - B
num_good_sends=0 num_good_receives=0
-------------
Mon Nov 10 18:47:43 CST 2003
Interesting ports on adsl-65-70-171-164.dsl.rcsntx.swbell.net (65.70.171.164):
(The 1652 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
139/tcp open netbios-ssn
1723/tcp open pptp
2301/tcp open compaqdiag
5490/tcp open connect-proxy
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
# nmblookup -A 65.70.171.164
Looking up status of 65.70.171.164
received 5 names
W2KDALTONKA <00> - M
AMERICAS <00> - M
W2KDALTONKA <20> - M
AMERICAS <1e> - M
W2KDALTONKA <01> - M
num_good_sends=0 num_good_receives=0
-------------
Sun Nov 9 21:46:27 CST 2003
Interesting ports on pcp03966768pcs.dalect01.va.comcast.net (68.48.23.129):
(The 1650 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
1080/tcp filtered socks
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Sun Nov 9 08:09:36 CST 2003
Interesting ports on pcp594155pcs.dksnco01.tn.comcast.net (68.53.155.43):
(The 1651 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
1080/tcp filtered socks
Windows
-------------
Fri Nov 7 21:19:23 CST 2003
Interesting ports on 12-217-84-169.client.mchsi.com (12.217.84.169):
(The 1647 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1025/tcp open NFS-or-IIS
1080/tcp filtered socks
3531/tcp open peerenabler
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Fri Nov 7 17:42:23 CST 2003
Interesting ports on AL1-24.207.162.51.charter-stl.com (24.207.162.51):
(The 1648 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1027/tcp open IIS
4444/tcp filtered krb524
Windows
-------------
Fri Nov 7 17:40:04 CST 2003
Interesting ports on 0x50c79749.arcnxx17.adsl-dhcp.tele.dk (80.199.151.73):
(The 1651 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
25/tcp filtered smtp
53/tcp open domain
119/tcp filtered nntp
135/tcp filtered msrpc
139/tcp open netbios-ssn
4444/tcp filtered krb524
Device type: general purpose|PDA
Running: Microsoft Windows 95/98/ME|PocketPC/CE
OS details: Microsoft Windows 95/98/NT 4.0 or PocketPC
# nmblookup -A 80.199.151.73
Looking up status of 80.199.151.73
received 4 names
DEFAULT <00> - B
WORKGROUP <00> - B
DEFAULT <03> - B
ERIK M.LLER AND <03> - B
num_good_sends=0 num_good_receives=0
-------------
Fri Nov 7 01:23:20 CST 2003
nteresting ports on 61.145.190.233:
(The 1646 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
21/tcp open ftp
25/tcp open smtp
110/tcp open pop-3
135/tcp open msrpc
139/tcp open netbios-ssn
427/tcp open svrloc
1080/tcp open socks
1503/tcp open imtc-mcs
1720/tcp open H.323/Q.931
8080/tcp open http-proxy
9090/tcp open zeus-admin
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows NT 3.51 SP5, NT 4.0 or 95/98/98SE
# nmblookup -A 61.145.190.233
Looking up status of 61.145.190.233
received 7 names
JINGYI004 <00> - B
CRYSTAL <00> - B
JINGYI004 <03> - B
JINGYI004 <20> - B
CRYSTAL <1e> - B
CRYSTAL <1d> - B
..__MSBROWSE__. <01> - B
num_good_sends=0 num_good_receives=0
-------------
Fri Nov 7 01:16:27 CST 2003
Interesting ports on d141-194-66.home.cgocable.net (24.141.194.66):
(The 1647 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
25/tcp filtered smtp
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
1025/tcp open NFS-or-IIS
5000/tcp open UPnP
5101/tcp open admdog
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
-------------
Thu Nov 6 20:16:50 CST 2003
Interesting ports on d235-130-191.home1.cgocable.net (24.235.130.191):
(The 1633 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
25/tcp filtered smtp
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
186/tcp filtered kis
326/tcp filtered unknown
445/tcp filtered microsoft-ds
470/tcp filtered scx-proxy
755/tcp filtered unknown
785/tcp filtered unknown
906/tcp filtered unknown
935/tcp filtered unknown
969/tcp filtered unknown
976/tcp filtered unknown
1025/tcp open NFS-or-IIS
1389/tcp filtered iclpv-dm
1672/tcp filtered netview-aix-12
1900/tcp filtered UPnP
4500/tcp filtered sae-urn
5000/tcp open UPnP
5717/tcp filtered prosharenotify
9111/tcp filtered DragonIDSConsole
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional
or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Thu Nov 6 20:10:27 CST 2003
Interesting ports on 61.38.61.74:
(The 1648 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
80/tcp open http
135/tcp filtered msrpc
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
707/tcp filtered unknown
1025/tcp open NFS-or-IIS
1214/tcp open fasttrack
4444/tcp filtered krb524
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows XP SP1
-------------
Thu Nov 6 20:07:15 CST 2003
Interesting ports on 24.79.76.98:
(The 1650 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
139/tcp open netbios-ssn
445/tcp open microsoft-ds
1025/tcp open NFS-or-IIS
5000/tcp open UPnP
5100/tcp open admd
5101/tcp open admdog
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
# nmblookup -A 24.79.76.98
Looking up status of 24.79.76.98
received 8 names
YOUR-W92P4BHLZG <00> - M
WORKGROUP <00> - M
YOUR-W92P4BHLZG <03> - M
YOUR-W92P4BHLZG <20> - M
WORKGROUP <1e> - M
WORKGROUP <1d> - M
..__MSBROWSE__. <01> - M
OWNER <03> - M
num_good_sends=0 num_good_receives=0
-------------
Wed Nov 5 18:03:08 CST 2003
Interesting ports on 218.14.184.108:
(The 1649 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
23/tcp open telnet
25/tcp open smtp
110/tcp open pop-3
119/tcp open nntp
135/tcp open msrpc
139/tcp open netbios-ssn
808/tcp open unknown
1080/tcp open socks
Windows
-------------
Wed Nov 5 17:57:35 CST 2003
Interesting ports on user15.net672.nj.sprint-hsd.net (65.41.93.15):
(The 1653 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp open msrpc
707/tcp open unknown
1025/tcp open NFS-or-IIS
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Wed Nov 5 17:55:03 CST 2003
Interesting ports on h71n1fls311o1099.telia.com (81.225.180.71):
(The 1650 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
139/tcp open netbios-ssn
1080/tcp filtered socks
3128/tcp filtered squid-http
4480/tcp filtered proxy-plus
5101/tcp open admdog
6588/tcp filtered analogx
8080/tcp filtered http-proxy
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
# nmblookup -A 81.225.180.71
Looking up status of 81.225.180.71
received 4 names
TEST <00> - B
MSHOME <00> - B
TEST <03> - B
USER <03> - B
num_good_sends=0 num_good_receives=0
-------------
Wed Nov 5 17:43:09 CST 2003
Interesting ports on 12.172.200.122:
(The 1654 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
135/tcp filtered msrpc
139/tcp open netbios-ssn
5000/tcp open UPnP
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Wed Nov 5 17:41:06 CST 2003
Interesting ports on ntucomm-media3.ee.ntu.edu.tw (140.112.154.162):
(The 1644 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
21/tcp open ftp
80/tcp open http
111/tcp filtered rpcbind
135/tcp filtered msrpc
139/tcp open netbios-ssn
445/tcp filtered microsoft-ds
1025/tcp open NFS-or-IIS
1026/tcp open LSA-or-nterm
3389/tcp open ms-term-serv
4444/tcp filtered krb524
6666/tcp filtered irc-serv
6667/tcp filtered irc
6668/tcp filtered irc
Device type: general purpose
Running: Microsoft Windows 2003/.NET
OS details: Microsoft Windows .NET Enterprise Server (build 3604-3790)
-------------
Tue Nov 4 20:18:58 CST 2003
Interesting ports on gso28-244-151.triad.rr.com (24.28.244.151):
(The 1646 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
53/tcp open domain
135/tcp filtered msrpc
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1025/tcp open NFS-or-IIS
5000/tcp open UPnP
5101/tcp open admdog
Windows
-------------
Tue Nov 4 19:25:31 CST 2003
Interesting ports on 218.71.204.119:
(The 1638 ports scanned but not shown below are in state: closed)
PORT STATE SERVICE
25/tcp open smtp
110/tcp open pop-3
135/tcp filtered msrpc
445/tcp filtered microsoft-ds
666/tcp filtered doom
1001/tcp filtered unknown
1024/tcp filtered kdm
1025/tcp open NFS-or-IIS
1234/tcp filtered hotline
1434/tcp filtered ms-sql-m
2000/tcp filtered callbook
5000/tcp open UPnP
5400/tcp filtered pcduo-old
6969/tcp filtered acmsoda
12345/tcp filtered NetBus
12346/tcp filtered NetBus
27374/tcp filtered subseven
31337/tcp filtered Elite
54320/tcp filtered bo2k
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP
-------------
Tue Nov 4 18:28:18 CST 2003
Interesting ports on CUST164.176.NW.TPLUS.AT (217.76.164.176):
(The 1528 ports scanned but not shown below are in state: filtered)
Port State Service
25/tcp open smtp
80/tcp open http
110/tcp open pop-3
119/tcp open nntp
143/tcp open imap2
443/tcp open https
563/tcp open snews
593/tcp open http-rpc-epmap
691/tcp open resvc
993/tcp open imaps
995/tcp open pop3s
1723/tcp open pptp
5631/tcp open pcanywheredata
5632/tcp closed pcanywherestat
Device type: general purpose
Running: Microsoft Windows 95/98/ME|NT/2K/XP
OS details: Microsoft Windows Millennium Edition (Me), Windows 2000 Professional or Advanced Server, or Windows XP, Microsoft Windows 2000 Professional RC1 or Windows 2000 Advanced Server Beta3
# telnet 217.76.164.176 25
Trying 217.76.164.176...
Connected to CUST164.176.NW.TPLUS.AT (217.76.164.176).
Escape character is '^]'.
220 exsrv.office.local Microsoft ESMTP MAIL Service, Version: 5.0.2195.5329 ready
-------------
Tue Nov 4 17:54:33 CST 2003
Interesting ports on (218.71.204.119):
(The 1538 ports scanned but not shown below are in state: closed)
Port State Service
135/tcp filtered loc-srv
139/tcp open netbios-ssn
445/tcp filtered microsoft-ds
1434/tcp filtered ms-sql-m
Remote operating system guess: Windows NT4 / Win95 / Win98
# nmblookup -A 218.71.204.119
Looking up status of 218.71.204.119
received 3 names
S5K8R7 <00> - B
WORKGROUP <00> - B
S5K8R7 <03> - B
num_good_sends=0 num_good_receives=0
-------------
Tue Nov 4 12:44:16 CST 2003
Interesting ports on h26n7c1o273.bredband.skanova.com (217.209.114.26):
(The 1537 ports scanned but not shown below are in state: closed)
Port State Service
135/tcp open loc-srv
1025/tcp open listen
1026/tcp open nterm
2004/tcp open mailbox
5000/tcp open fics
Remote OS guesses: MS Windows2000 Professional RC1/W2K Advance Server Beta3, Windows Millenium Edition v4.90.3000
-------------
Tue Nov 4 12:42:58 CST 2003
Interesting ports on (4.5.53.31):
(The 1541 ports scanned but not shown below are in state: closed)
Port State Service
139/tcp open netbios-ssn
Remote OS guesses: MS Windows2000 Professional RC1/W2K Advance Server Beta3, Windows Millenium Edition v4.90.3000
# nmblookup -A 4.5.53.31
Looking up status of 4.5.53.31
received 3 names
LAP <00> - B
VILLANET <00> - B
LAP <03> - B
num_good_sends=0 num_good_receives=0
-------------
Tue Nov 4 12:39:56 CST 2003
Interesting ports on roc-66-66-115-123.rochester.rr.com (66.66.115.123):
(The 1532 ports scanned but not shown below are in state: closed)
Port State Service
135/tcp filtered loc-srv
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1025/tcp open listen
5000/tcp open fics
9090/tcp open zeus-admin
Remote OS guesses: Windows Me or Windows 2000 RC1 through final release, MS Windows2000 Professional RC1/W2K Advance Server Beta3, Windows Millenium Edition v4.90.3000
-------------
Tue Nov 4 12:34:51 CST 2003
Interesting ports on rdu25-12-084.nc.rr.com (24.25.12.84):
(The 1532 ports scanned but not shown below are in state: closed)
Port State Service
135/tcp filtered loc-srv
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1025/tcp open listen
1026/tcp open nterm
5000/tcp open fics
Remote operating system guess: Windows 2000 Professional, Build 2183 (RC3)
-------------
Mon Nov 3 21:36:46 CST 2003
Interesting ports on 213.237.68.25.adsl.vaer.worldonline.dk (213.237.68.25):
(The 1531 ports scanned but not shown below are in state: closed)
Port State Service
21/tcp filtered ftp
25/tcp filtered smtp
80/tcp filtered http
110/tcp filtered pop-3
139/tcp open netbios-ssn
1025/tcp filtered listen
1026/tcp filtered nterm
1030/tcp filtered iad1
1031/tcp filtered iad2
1032/tcp filtered iad3
5000/tcp filtered fics
Remote OS guesses: Windows Me or Windows 2000 RC1 through final release, Windows Millenium Edition v4.90.3000
# nmblookup -A 213.237.68.25
Looking up status of 213.237.68.25
received 8 names
JNP HOME <00> - B
DIGIMENTAL <00> - B
JNP HOME <03> - B
JNP HOME <20> - B
DIGIMENTAL <1e> - B
JOHN N PR.STEGA <03> - B
DIGIMENTAL <1d> - B
..__MSBROWSE__. <01> - B
num_good_sends=0 num_good_receives=0
-------------
Mon Nov 3 18:55:58 CST 2003
Interesting ports on CPE-203-45-77-114.nsw.bigpond.net.au (203.45.77.114):
(The 1538 ports scanned but not shown below are in state: closed)
Port State Service
135/tcp open loc-srv
139/tcp open netbios-ssn
179/tcp filtered bgp
445/tcp open microsoft-ds
Remote operating system guess: Windows Millenium Edition v4.90.3000
-------------
Mon Nov 3 18:55:11 CST 2003
Interesting ports on 12-218-171-248.client.mchsi.com (12.218.171.248):
(The 1533 ports scanned but not shown below are in state: closed)
Port State Service
135/tcp filtered loc-srv
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1025/tcp open listen
1080/tcp filtered socks
5000/tcp open fics
Windows
-------------
Sun Nov 2 22:04:48 CST 2003
Interesting ports on (218.77.228.131):
(The 1528 ports scanned but not shown below are in state: closed)
Port State Service
23/tcp open telnet
25/tcp open smtp
80/tcp open http
119/tcp open nntp
135/tcp filtered loc-srv
139/tcp filtered netbios-ssn
443/tcp open https
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
808/tcp open unknown
1025/tcp open listen
1026/tcp open nterm
1080/tcp open socks
1434/tcp filtered ms-sql-m
Remote operating system guess: Windows Millenium Edition v4.90.3000
-------------
Sun Nov 2 21:05:28 CST 2003
Interesting ports on cpe-66-191-50-246.spa.sc.charter.com (66.191.50.246):
(The 1532 ports scanned but not shown below are in state: closed)
Port State Service
18/tcp filtered msp
135/tcp filtered loc-srv
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1025/tcp open listen
5000/tcp open fics
Windows
-------------
Sun Nov 2 21:05:05 CST 2003
Interesting ports on CPE-65-28-50-5.kc.rr.com (65.28.50.5):
(The 1532 ports scanned but not shown below are in state: closed)
Port State Service
135/tcp filtered loc-srv
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1025/tcp open listen
1723/tcp open pptp
5000/tcp open fics
Remote operating system guess: Windows Millenium Edition v4.90.3000
-------------
Sun Nov 2 09:38:22 CST 2003
Interesting ports on adsl-68-76-44-66.dsl.wotnoh.ameritech.net (68.76.44.66):
(The 1536 ports scanned but not shown below are in state: closed)
Port State Service
135/tcp filtered loc-srv
139/tcp open netbios-ssn
445/tcp open microsoft-ds
1025/tcp open listen
1026/tcp open nterm
5000/tcp open fics
Windows
# nmblookup -A 68.76.44.66
Looking up status of 68.76.44.66
received 4 names
MIKE <00> - B
WORKGROUP <00> - B
MIKE <20> - B
WORKGROUP <1e> - B
num_good_sends=0 num_good_receives=0
-------------
Sun Nov 2 09:02:08 CST 2003
Interesting ports on ip-pa-jtown-68-187-51-213.charterpa.com (68.187.51.213):
(The 1531 ports scanned but not shown below are in state: closed)
Port State Service
113/tcp open auth
135/tcp filtered loc-srv
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1025/tcp open listen
1031/tcp open iad2
5000/tcp open fics
Remote operating system guess: Windows 2000 Professional, Build 2183 (RC3)
-------------
Sun Nov 2 09:00:25 CST 2003
Interesting ports on ptd-24-198-40-112.maine.rr.com (24.198.40.112):
(The 1535 ports scanned but not shown below are in state: closed)
Port State Service
135/tcp filtered loc-srv
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
Windows
-------------
Sun Nov 2 08:37:49 CST 2003
Insufficient responses for TCP sequencing (3), OS detection may be less accurateInteresting ports on dhcp065-025-016-139.neo.rr.com (65.25.16.139):
(The 1532 ports scanned but not shown below are in state: closed)
Port State Service
80/tcp open http
135/tcp filtered loc-srv
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
1025/tcp open listen
5000/tcp open fics
Remote OS guesses: Windows NT 5 Beta2 or Beta3, Windows Me or Windows 2000 RC1 through final release, MS Windows2000 Professional RC1/W2K Advance Server Beta3,
Windows Millenium Edition v4.90.3000
-------------
Sat Nov 1 15:51:37 CST 2003
Interesting ports on a213-22-51-99.netcabo.pt (213.22.51.99):
(The 1539 ports scanned but not shown below are in state: closed)
Port State Service
53/tcp open domain
135/tcp open loc-srv
139/tcp open netbios-ssn
Windows
# nmblookup -A 213.22.51.99
Looking up status of 213.22.51.99
received 4 names
A4P0H7 <00> - B