Scan complet NMAP

``` ┌──(root㉿kali)-[~] └─# nmap -Pn -sS -A 172.16.43.0/24 --oG nmap_result_17216430 Starting Nmap 7.93 ( https://nmap.org ) at 2023-09-13 02:55 EDT Nmap scan report for 172.16.43.0 Host is up. All 1000 scanned ports on 172.16.43.0 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.1 Host is up. All 1000 scanned ports on 172.16.43.1 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.2 Host is up. All 1000 scanned ports on 172.16.43.2 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.3 Host is up. All 1000 scanned ports on 172.16.43.3 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.4 Host is up. All 1000 scanned ports on 172.16.43.4 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.5 Host is up. All 1000 scanned ports on 172.16.43.5 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.6 Host is up. All 1000 scanned ports on 172.16.43.6 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.7 Host is up. All 1000 scanned ports on 172.16.43.7 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.8 Host is up. All 1000 scanned ports on 172.16.43.8 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.9 Host is up. All 1000 scanned ports on 172.16.43.9 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.10 Host is up. All 1000 scanned ports on 172.16.43.10 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS 1 ... 30 Nmap scan report for 172.16.43.11 Host is up (0.025s latency). Not shown: 999 closed tcp ports (reset) PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.4.38 ((Debian)) |_http-server-header: Apache/2.4.38 (Debian) |_http-title: GLPI - Authentification No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=7.93%E=4%D=9/13%OT=80%CT=1%CU=37527%PV=Y%DS=2%DC=T%G=Y%TM=6501602 OS:0%P=x86_64-pc-linux-gnu)SEQ(SP=106%GCD=1%ISR=10E%TI=Z%TS=A)SEQ(SP=106%GC OS:D=1%ISR=10E%TI=Z%II=I%TS=A)OPS(O1=M551ST11NW7%O2=M551ST11NW7%O3=M551NNT1 OS:1NW7%O4=M551ST11NW7%O5=M551ST11NW7%O6=M551ST11)WIN(W1=FE88%W2=FE88%W3=FE OS:88%W4=FE88%W5=FE88%W6=FE88)ECN(R=Y%DF=Y%T=40%W=FAF0%O=M551NNSNW7%CC=Y%Q= OS:)T1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=N)T5(R=Y%DF=Y OS:%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=N)T7(R=N)U1(R=Y%DF=N%T=40%IPL=16 OS:4%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S) Network Distance: 2 hops TRACEROUTE (using port 3306/tcp) HOP RTT ADDRESS 1 26.26 ms 10.6.66.1 2 21.68 ms 172.16.43.11 Nmap scan report for 172.16.43.12 Host is up (0.026s latency). Not shown: 999 closed tcp ports (reset) PORT STATE SERVICE VERSION 3306/tcp open mysql? | mysql-info: | Protocol: 10 | Version: 11.1.2-MariaDB-1:11.1.2+maria~ubu2204 | Thread ID: 2654 | Capabilities flags: 63486 | Some Capabilities: SupportsLoadDataLocal, Speaks41ProtocolOld, ODBCClient, ConnectWithDatabase, IgnoreSigpipes, SupportsCompression, FoundRows, SupportsTransactions, IgnoreSpaceBeforeParenthesis, Support41Auth, DontAllowDatabaseTableColumn, InteractiveClient, LongColumnFlag, Speaks41ProtocolNew, SupportsAuthPlugins, SupportsMultipleStatments, SupportsMultipleResults | Status: Autocommit | Salt: ydh]{pC;?gkd5z(VX6C/ |_ Auth Plugin Name: mysql_native_password | fingerprint-strings: | GenericLines: | 11.1.2-MariaDB-1:11.1.2+maria~ubu2204 | 2FIzLLv0 | (xI@E{Z3//?1 | mysql_native_password | #HY000Proxy header is not accepted from 10.6.66.8 | LDAPBindReq: | 11.1.2-MariaDB-1:11.1.2+maria~ubu2204 | pKc3sk>5 | .$igJxB{gp~I | mysql_native_password | NULL: | 11.1.2-MariaDB-1:11.1.2+maria~ubu2204 | 2FIzLLv0 | (xI@E{Z3//?1 | mysql_native_password | afp: | 11.1.2-MariaDB-1:11.1.2+maria~ubu2204 | P@.d-T>w | _Th/Nz?ffL,6 |_ mysql_native_password 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service : SF-Port3306-TCP:V=7.93%I=7%D=9/13%Time=65015D5B%P=x86_64-pc-linux-gnu%r(NU SF:LL,6D,"i\0\0\0\n11\.1\.2-MariaDB-1:11\.1\.2\+maria~ubu2204\0\x07\n\0\x0 SF:02FIzLLv0\0\xfe\xf7-\x02\0\xff\x81\x15\0\0\0\0\0\0\x1d\0\0\0\(xI@E{Z3// SF:\?1\0mysql_native_password\0")%r(GenericLines,A5,"i\0\0\0\n11\.1\.2-Mar SF:iaDB-1:11\.1\.2\+maria~ubu2204\0\x07\n\0\x002FIzLLv0\0\xfe\xf7-\x02\0\x SF:ff\x81\x15\0\0\0\0\0\0\x1d\0\0\0\(xI@E{Z3//\?1\0mysql_native_password\x SF:004\0\0\x01\xffj\x04#HY000Proxy\x20header\x20is\x20not\x20accepted\x20f SF:rom\x2010\.6\.66\.8")%r(LDAPBindReq,6D,"i\0\0\0\n11\.1\.2-MariaDB-1:11\ SF:.1\.2\+maria~ubu2204\0\x19\n\0\0pKc3sk>5\0\xfe\xf7-\x02\0\xff\x81\x15\0 SF:\0\0\0\0\0\x1d\0\0\0\.\$igJxB{gp~I\0mysql_native_password\0")%r(afp,6D, SF:"i\0\0\0\n11\.1\.2-MariaDB-1:11\.1\.2\+maria~ubu2204\0#\n\0\0P@\.d-T>w\ SF:0\xfe\xf7-\x02\0\xff\x81\x15\0\0\0\0\0\0\x1d\0\0\0_Th/Nz\?ffL,6\0mysql_ SF:native_password\0"); No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=7.93%E=4%D=9/13%OT=3306%CT=1%CU=37936%PV=Y%DS=2%DC=T%G=Y%TM=65016 OS:020%P=x86_64-pc-linux-gnu)SEQ(SP=107%GCD=1%ISR=105%TI=Z%TS=A)SEQ(SP=106% OS:GCD=1%ISR=105%TI=Z%II=I%TS=A)OPS(O1=M551ST11NW7%O2=M551ST11NW7%O3=M551NN OS:T11NW7%O4=M551ST11NW7%O5=M551ST11NW7%O6=M551ST11)WIN(W1=FE88%W2=FE88%W3= OS:FE88%W4=FE88%W5=FE88%W6=FE88)ECN(R=Y%DF=Y%T=40%W=FAF0%O=M551NNSNW7%CC=Y% OS:Q=)T1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=N)T5(R=Y%DF OS:=Y%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=N)T7(R=N)U1(R=Y%DF=N%T=40%IPL= OS:164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S) Network Distance: 2 hops TRACEROUTE (using port 587/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 21.82 ms 172.16.43.12 Nmap scan report for 172.16.43.13 Host is up (0.024s latency). Not shown: 988 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 53/tcp open domain Simple DNS Plus 88/tcp open kerberos-sec Microsoft Windows Kerberos (server time: 2023-09-13 06:57:33Z) 135/tcp open msrpc Microsoft Windows RPC 139/tcp open netbios-ssn Microsoft Windows netbios-ssn 389/tcp open ldap Microsoft Windows Active Directory LDAP (Domain: e-corp-houston2.lan0., Site: Default-First-Site-Name) 445/tcp open microsoft-ds? 464/tcp open kpasswd5? 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 636/tcp open tcpwrapped 3268/tcp open ldap Microsoft Windows Active Directory LDAP (Domain: e-corp-houston2.lan0., Site: Default-First-Site-Name) 3269/tcp open tcpwrapped 3389/tcp open ms-wbt-server Microsoft Terminal Services | rdp-ntlm-info: | Target_Name: E-CORP-HOUSTON2 | NetBIOS_Domain_Name: E-CORP-HOUSTON2 | NetBIOS_Computer_Name: EH2-AD01 | DNS_Domain_Name: e-corp-houston2.lan | DNS_Computer_Name: EH2-AD01.e-corp-houston2.lan | DNS_Tree_Name: e-corp-houston2.lan | Product_Version: 10.0.17763 |_ System_Time: 2023-09-13T07:08:18+00:00 |_ssl-date: 2023-09-13T07:09:04+00:00; +3s from scanner time. | ssl-cert: Subject: commonName=EH2-AD01.e-corp-houston2.lan | Not valid before: 2023-09-03T07:19:04 |_Not valid after: 2024-03-04T07:19:04 Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port OS fingerprint not ideal because: Missing a closed TCP port so results incomplete No OS matches for host Network Distance: 2 hops Service Info: Host: EH2-AD01; OS: Windows; CPE: cpe:/o:microsoft:windows Host script results: | smb2-security-mode: | 311: |_ Message signing enabled and required |_clock-skew: mean: 3s, deviation: 0s, median: 3s | smb2-time: | date: 2023-09-13T07:07:47 |_ start_date: N/A TRACEROUTE (using port 135/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 23.14 ms 172.16.43.13 Nmap scan report for 172.16.43.14 Host is up (0.026s latency). Not shown: 999 closed tcp ports (reset) PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.4.10 ((Debian)) |_http-server-header: Apache/2.4.10 (Debian) |_http-title: Annuaire T\xC3\xA9l\xC3\xA9phonique E-Corp No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=7.93%E=4%D=9/13%OT=80%CT=1%CU=30671%PV=Y%DS=2%DC=T%G=Y%TM=6501602 OS:0%P=x86_64-pc-linux-gnu)SEQ(SP=100%GCD=1%ISR=10D%TI=Z%TS=A)SEQ(SP=100%GC OS:D=1%ISR=10D%TI=Z%II=I%TS=A)OPS(O1=M551ST11NW7%O2=M551ST11NW7%O3=M551NNT1 OS:1NW7%O4=M551ST11NW7%O5=M551ST11NW7%O6=M551ST11)WIN(W1=FE88%W2=FE88%W3=FE OS:88%W4=FE88%W5=FE88%W6=FE88)ECN(R=Y%DF=Y%T=40%W=FAF0%O=M551NNSNW7%CC=Y%Q= OS:)T1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=N)T5(R=Y%DF=Y OS:%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=N)T7(R=N)U1(R=Y%DF=N%T=40%IPL=16 OS:4%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S) Network Distance: 2 hops TRACEROUTE (using port 3306/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 21.85 ms 172.16.43.14 Nmap scan report for 172.16.43.15 Host is up. All 1000 scanned ports on 172.16.43.15 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.16 Host is up (0.026s latency). Not shown: 997 closed tcp ports (reset) PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 6.6.1p1 Ubuntu 2ubuntu2.8 (Ubuntu Linux; protocol 2.0) | ssh-hostkey: | 1024 509c5f34486f64bcb73cb376b3856d9d (DSA) | 2048 a7057c8603a68b3db7d157fa74776043 (RSA) | 256 acd68e877b0f18824ffbeae61cfbb421 (ECDSA) |_ 256 2016cdc4bbc89db8d739025abc452d7a (ED25519) 80/tcp open http nginx | http-robots.txt: 52 disallowed entries (15 shown) | / /autocomplete/users /search /api /admin /profile | /dashboard /projects/new /groups/new /groups/*/edit /users /s/ |_/snippets/new /snippets/*/edit /snippets/*/raw |_http-trane-info: Problem with XML parsing of /evox/about | http-title: Sign in \xC2\xB7 GitLab |_Requested resource was http://172.16.43.16/users/sign_in 8181/tcp open intermapper? | fingerprint-strings: | GenericLines, SSLSessionReq: | HTTP/1.1 400 Bad Request | GetRequest: | HTTP/1.0 302 Found | Cache-Control: no-cache | Content-Type: text/html; charset=utf-8 | Date: Wed, 13 Sep 2023 06:57:35 GMT | Location: http://127.0.0.1:8080/users/sign_in | Set-Cookie: _gitlab_session=892ef35f7d5ad99372b495a6f26ffe41; path=/; HttpOnly | X-Content-Type-Options: nosniff | X-Frame-Options: SAMEORIGIN | X-Request-Id: 2cfc5644-2642-4d85-ac86-e4d22af7eb29 | X-Runtime: 0.069858 | X-Xss-Protection: 1; mode=block | Content-Length: 101 | <html><body>You are being <a href="http://127.0.0.1:8080/users/sign_in">redirected</a>.</body></html> | HTTPOptions: | HTTP/1.0 404 Not Found | Cache-Control: no-cache, no-store, max-age=0, must-revalidate | Content-Length: 2440 | Content-Type: text/html; charset=utf-8 | Date: Wed, 13 Sep 2023 06:57:36 GMT | Expires: Fri, 01 Jan 1990 00:00:00 GMT | Pragma: no-cache | X-Request-Id: 8ee6d1bb-a2db-4a76-9d99-079be4d5c226 | X-Runtime: 0.027605 | <!DOCTYPE html> | <html> | <head> | <meta content="width=device-width, initial-scale=1, maximum-scale=1" name="viewport"> | <title>The page you're looking for could not be found (404)</title> | <style> | body { | color: #666; | text-align: center; | font-family: "Helvetica Neue", Helvetica, Arial, sans-serif; | margin: auto; | font-size: 14px; | font-size: 56px; | line-height: 100px; | font-weight: normal; | color: #456; | font-size: 24px; | color: #666; |_ line-height: 1.5em; 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service : SF-Port8181-TCP:V=7.93%I=7%D=9/13%Time=65015D5B%P=x86_64-pc-linux-gnu%r(Ge SF:tRequest,21D,"HTTP/1\.0\x20302\x20Found\r\nCache-Control:\x20no-cache\r SF:\nContent-Type:\x20text/html;\x20charset=utf-8\r\nDate:\x20Wed,\x2013\x SF:20Sep\x202023\x2006:57:35\x20GMT\r\nLocation:\x20http://127\.0\.0\.1:80 SF:80/users/sign_in\r\nSet-Cookie:\x20_gitlab_session=892ef35f7d5ad99372b4 SF:95a6f26ffe41;\x20path=/;\x20HttpOnly\r\nX-Content-Type-Options:\x20nosn SF:iff\r\nX-Frame-Options:\x20SAMEORIGIN\r\nX-Request-Id:\x202cfc5644-2642 SF:-4d85-ac86-e4d22af7eb29\r\nX-Runtime:\x200\.069858\r\nX-Xss-Protection: SF:\x201;\x20mode=block\r\nContent-Length:\x20101\r\n\r\n<html><body>You\x SF:20are\x20being\x20<a\x20href=\"http://127\.0\.0\.1:8080/users/sign_in\" SF:>redirected</a>\.</body></html>")%r(SSLSessionReq,1C,"HTTP/1\.1\x20400\ SF:x20Bad\x20Request\r\n\r\n")%r(GenericLines,1C,"HTTP/1\.1\x20400\x20Bad\ SF:x20Request\r\n\r\n")%r(HTTPOptions,AC7,"HTTP/1\.0\x20404\x20Not\x20Foun SF:d\r\nCache-Control:\x20no-cache,\x20no-store,\x20max-age=0,\x20must-rev SF:alidate\r\nContent-Length:\x202440\r\nContent-Type:\x20text/html;\x20ch SF:arset=utf-8\r\nDate:\x20Wed,\x2013\x20Sep\x202023\x2006:57:36\x20GMT\r\ SF:nExpires:\x20Fri,\x2001\x20Jan\x201990\x2000:00:00\x20GMT\r\nPragma:\x2 SF:0no-cache\r\nX-Request-Id:\x208ee6d1bb-a2db-4a76-9d99-079be4d5c226\r\nX SF:-Runtime:\x200\.027605\r\n\r\n<!DOCTYPE\x20html>\n<html>\n<head>\n\x20\ SF:x20<meta\x20content=\"width=device-width,\x20initial-scale=1,\x20maximu SF:m-scale=1\"\x20name=\"viewport\">\n\x20\x20<title>The\x20page\x20you're SF:\x20looking\x20for\x20could\x20not\x20be\x20found\x20$404$</title>\n\ SF:x20\x20<style>\n\x20\x20\x20\x20body\x20{\n\x20\x20\x20\x20\x20\x20colo SF:r:\x20#666;\n\x20\x20\x20\x20\x20\x20text-align:\x20center;\n\x20\x20\x SF:20\x20\x20\x20font-family:\x20\"Helvetica\x20Neue\",\x20Helvetica,\x20A SF:rial,\x20sans-serif;\n\x20\x20\x20\x20\x20\x20margin:\x20auto;\n\x20\x2 SF:0\x20\x20\x20\x20font-size:\x2014px;\n\x20\x20\x20\x20}\n\n\x20\x20\x20 SF:\x20h1\x20{\n\x20\x20\x20\x20\x20\x20font-size:\x2056px;\n\x20\x20\x20\ SF:x20\x20\x20line-height:\x20100px;\n\x20\x20\x20\x20\x20\x20font-weight: SF:\x20normal;\n\x20\x20\x20\x20\x20\x20color:\x20#456;\n\x20\x20\x20\x20} SF:\n\n\x20\x20\x20\x20h2\x20{\n\x20\x20\x20\x20\x20\x20font-size:\x2024px SF:;\n\x20\x20\x20\x20\x20\x20color:\x20#666;\n\x20\x20\x20\x20\x20\x20lin SF:e-height:\x201\.5em;\n\x20\x20\x20\x20}\n\n\x20\x20\x20\x20h3\x20{\n\x2 SF:0\x20\x20\x20\x20\x20"); No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=7.93%E=4%D=9/13%OT=22%CT=1%CU=32329%PV=Y%DS=2%DC=T%G=Y%TM=6501602 OS:0%P=x86_64-pc-linux-gnu)SEQ(SP=FF%GCD=1%ISR=109%TI=Z%TS=A)SEQ(SP=FF%GCD= OS:1%ISR=109%TI=Z%II=I%TS=A)OPS(O1=M551ST11NW7%O2=M551ST11NW7%O3=M551NNT11N OS:W7%O4=M551ST11NW7%O5=M551ST11NW7%O6=M551ST11)WIN(W1=FE88%W2=FE88%W3=FE88 OS:%W4=FE88%W5=FE88%W6=FE88)ECN(R=Y%DF=Y%T=40%W=FAF0%O=M551NNSNW7%CC=Y%Q=)T OS:1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=N)T5(R=Y%DF=Y%T OS:=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=N)T7(R=N)U1(R=Y%DF=N%T=40%IPL=164% OS:UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S) Network Distance: 2 hops Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel TRACEROUTE (using port 3306/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 21.76 ms 172.16.43.16 Nmap scan report for 172.16.43.17 Host is up (0.026s latency). Not shown: 999 closed tcp ports (reset) PORT STATE SERVICE VERSION 5432/tcp open postgresql PostgreSQL DB 11.6 - 11.7 (Docker alpine image) No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=7.93%E=4%D=9/13%OT=5432%CT=1%CU=33655%PV=Y%DS=2%DC=T%G=Y%TM=65016 OS:020%P=x86_64-pc-linux-gnu)SEQ(SP=106%GCD=1%ISR=10B%TI=Z%TS=A)SEQ(SP=106% OS:GCD=1%ISR=10B%TI=Z%II=I%TS=A)OPS(O1=M551ST11NW7%O2=M551ST11NW7%O3=M551NN OS:T11NW7%O4=M551ST11NW7%O5=M551ST11NW7%O6=M551ST11)WIN(W1=FE88%W2=FE88%W3= OS:FE88%W4=FE88%W5=FE88%W6=FE88)ECN(R=Y%DF=Y%T=40%W=FAF0%O=M551NNSNW7%CC=Y% OS:Q=)T1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=N)T5(R=Y%DF OS:=Y%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=N)T7(R=N)U1(R=Y%DF=N%T=40%IPL= OS:164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S) Network Distance: 2 hops TRACEROUTE (using port 3306/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 21.79 ms 172.16.43.17 Nmap scan report for 172.16.43.18 Host is up (0.024s latency). All 1000 scanned ports on 172.16.43.18 are in ignored states. Not shown: 1000 closed tcp ports (reset) Too many fingerprints match this host to give specific OS details Network Distance: 2 hops TRACEROUTE (using port 3306/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 21.83 ms 172.16.43.18 Nmap scan report for 172.16.43.19 Host is up (0.028s latency). Not shown: 998 closed tcp ports (reset) PORT STATE SERVICE VERSION 22/tcp open ssh OpenSSH 8.9p1 Ubuntu 3ubuntu0.3 (Ubuntu Linux; protocol 2.0) | ssh-hostkey: | 256 cd1743a5a10df637ad30dd7857fb9a49 (ECDSA) |_ 256 1cfb6f268ccfcc97d0a04e0fedfb36c5 (ED25519) 80/tcp open http Apache httpd 2.4.52 |_http-server-header: Apache/2.4.52 (Ubuntu) |_http-title: 403 Forbidden No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=7.93%E=4%D=9/13%OT=22%CT=1%CU=44619%PV=Y%DS=2%DC=T%G=Y%TM=6501602 OS:0%P=x86_64-pc-linux-gnu)SEQ(SP=FF%GCD=2%ISR=10E%TI=Z%TS=A)SEQ(SP=100%GCD OS:=1%ISR=10D%TI=Z%II=I%TS=A)OPS(O1=M551ST11NW7%O2=M551ST11NW7%O3=M551NNT11 OS:NW7%O4=M551ST11NW7%O5=M551ST11NW7%O6=M551ST11)WIN(W1=FE88%W2=FE88%W3=FE8 OS:8%W4=FE88%W5=FE88%W6=FE88)ECN(R=Y%DF=Y%T=40%W=FAF0%O=M551NNSNW7%CC=Y%Q=) OS:T1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=N)T5(R=Y%DF=Y% OS:T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=N)T7(R=N)U1(R=Y%DF=N%T=40%IPL=164 OS:%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S) Network Distance: 2 hops Service Info: Host: 172.16.43.19; OS: Linux; CPE: cpe:/o:linux:linux_kernel TRACEROUTE (using port 3306/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 21.87 ms 172.16.43.19 Nmap scan report for 172.16.43.20 Host is up. All 1000 scanned ports on 172.16.43.20 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.21 Host is up (0.028s latency). Not shown: 999 closed tcp ports (reset) PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.4.52 ((Debian)) |_http-server-header: Apache/2.4.52 (Debian) |_http-title: Site doesn't have a title (text/html). No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=7.93%E=4%D=9/13%OT=80%CT=1%CU=35509%PV=Y%DS=2%DC=T%G=Y%TM=6501602 OS:0%P=x86_64-pc-linux-gnu)SEQ(SP=102%GCD=1%ISR=107%TI=Z%TS=A)SEQ(SP=102%GC OS:D=1%ISR=107%TI=Z%II=I%TS=A)OPS(O1=M551ST11NW7%O2=M551ST11NW7%O3=M551NNT1 OS:1NW7%O4=M551ST11NW7%O5=M551ST11NW7%O6=M551ST11)WIN(W1=FE88%W2=FE88%W3=FE OS:88%W4=FE88%W5=FE88%W6=FE88)ECN(R=Y%DF=Y%T=40%W=FAF0%O=M551NNSNW7%CC=Y%Q= OS:)T1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=N)T5(R=Y%DF=Y OS:%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=N)T7(R=N)U1(R=Y%DF=N%T=40%IPL=16 OS:4%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S) Network Distance: 2 hops TRACEROUTE (using port 3306/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 22.19 ms 172.16.43.21 Nmap scan report for 172.16.43.22 Host is up. All 1000 scanned ports on 172.16.43.22 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.23 Host is up. All 1000 scanned ports on 172.16.43.23 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.24 Host is up. All 1000 scanned ports on 172.16.43.24 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.25 Host is up (0.028s latency). Not shown: 997 closed tcp ports (reset) PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.4.52 ((Ubuntu)) |_http-server-header: Apache/2.4.52 (Ubuntu) |_http-title: D\xC3\xA9p\xC3\xB4t NDF 139/tcp open netbios-ssn Samba smbd 4.6.2 445/tcp open netbios-ssn Samba smbd 4.6.2 No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=7.93%E=4%D=9/13%OT=80%CT=1%CU=43799%PV=Y%DS=2%DC=T%G=Y%TM=6501602 OS:0%P=x86_64-pc-linux-gnu)SEQ(SP=104%GCD=1%ISR=10B%TI=Z%TS=A)SEQ(SP=104%GC OS:D=1%ISR=10B%TI=Z%II=I%TS=A)OPS(O1=M551ST11NW7%O2=M551ST11NW7%O3=M551NNT1 OS:1NW7%O4=M551ST11NW7%O5=M551ST11NW7%O6=M551ST11)WIN(W1=FE88%W2=FE88%W3=FE OS:88%W4=FE88%W5=FE88%W6=FE88)ECN(R=Y%DF=Y%T=40%W=FAF0%O=M551NNSNW7%CC=Y%Q= OS:)T1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=N)T5(R=Y%DF=Y OS:%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=N)T7(R=N)U1(R=Y%DF=N%T=40%IPL=16 OS:4%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S) Network Distance: 2 hops Host script results: |_clock-skew: 4s | smb2-time: | date: 2023-09-13T07:08:05 |_ start_date: N/A | smb2-security-mode: | 311: |_ Message signing enabled but not required TRACEROUTE (using port 3306/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 21.92 ms 172.16.43.25 Nmap scan report for 172.16.43.26 Host is up (0.028s latency). Not shown: 998 closed tcp ports (reset) PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.4.38 ((Ubuntu)) 443/tcp open tcpwrapped No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=7.93%E=4%D=9/13%OT=80%CT=1%CU=32281%PV=Y%DS=2%DC=T%G=Y%TM=6501602 OS:0%P=x86_64-pc-linux-gnu)SEQ(SP=102%GCD=1%ISR=10A%TI=Z%TS=A)SEQ(SP=102%GC OS:D=1%ISR=10A%TI=Z%II=I%TS=A)OPS(O1=M551ST11NW7%O2=M551ST11NW7%O3=M551NNT1 OS:1NW7%O4=M551ST11NW7%O5=M551ST11NW7%O6=M551ST11)WIN(W1=FE88%W2=FE88%W3=FE OS:88%W4=FE88%W5=FE88%W6=FE88)ECN(R=Y%DF=Y%T=40%W=FAF0%O=M551NNSNW7%CC=Y%Q= OS:)T1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=N)T5(R=Y%DF=Y OS:%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=N)T7(R=N)U1(R=Y%DF=N%T=40%IPL=16 OS:4%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S) Network Distance: 2 hops TRACEROUTE (using port 3306/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 21.98 ms 172.16.43.26 Nmap scan report for 172.16.43.27 Host is up (0.029s latency). Not shown: 999 closed tcp ports (reset) PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.4.38 ((Debian)) |_http-server-header: Apache/2.4.38 (Debian) |_http-title: 404 Not Found No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=7.93%E=4%D=9/13%OT=80%CT=1%CU=38479%PV=Y%DS=2%DC=T%G=Y%TM=6501602 OS:0%P=x86_64-pc-linux-gnu)SEQ(SP=100%GCD=1%ISR=10D%TI=Z%TS=A)SEQ(SP=100%GC OS:D=1%ISR=10C%TI=Z%II=I%TS=A)OPS(O1=M551ST11NW7%O2=M551ST11NW7%O3=M551NNT1 OS:1NW7%O4=M551ST11NW7%O5=M551ST11NW7%O6=M551ST11)WIN(W1=FE88%W2=FE88%W3=FE OS:88%W4=FE88%W5=FE88%W6=FE88)ECN(R=Y%DF=Y%T=40%W=FAF0%O=M551NNSNW7%CC=Y%Q= OS:)T1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=N)T5(R=Y%DF=Y OS:%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=N)T7(R=N)U1(R=Y%DF=N%T=40%IPL=16 OS:4%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S) Network Distance: 2 hops TRACEROUTE (using port 3306/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 22.03 ms 172.16.43.27 Nmap scan report for 172.16.43.28 Host is up (0.029s latency). Not shown: 998 closed tcp ports (reset) PORT STATE SERVICE VERSION 80/tcp open http Apache httpd 2.4.38 ((Ubuntu)) |_http-server-header: Apache/2.4.38 (Ubuntu) |_http-title: 404 Not Found 443/tcp open tcpwrapped No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=7.93%E=4%D=9/13%OT=80%CT=1%CU=39103%PV=Y%DS=2%DC=T%G=Y%TM=6501602 OS:0%P=x86_64-pc-linux-gnu)SEQ(SP=102%GCD=1%ISR=10C%TI=Z%TS=A)SEQ(SP=102%GC OS:D=1%ISR=10C%TI=Z%II=I%TS=A)OPS(O1=M551ST11NW7%O2=M551ST11NW7%O3=M551NNT1 OS:1NW7%O4=M551ST11NW7%O5=M551ST11NW7%O6=M551ST11)WIN(W1=FE88%W2=FE88%W3=FE OS:88%W4=FE88%W5=FE88%W6=FE88)ECN(R=Y%DF=Y%T=40%W=FAF0%O=M551NNSNW7%CC=Y%Q= OS:)T1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=N)T5(R=Y%DF=Y OS:%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=N)T7(R=N)U1(R=Y%DF=N%T=40%IPL=16 OS:4%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S) Network Distance: 2 hops TRACEROUTE (using port 3306/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 24.29 ms 172.16.43.28 Nmap scan report for 172.16.43.29 Host is up. All 1000 scanned ports on 172.16.43.29 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.30 Host is up (0.029s latency). Not shown: 998 closed tcp ports (reset) PORT STATE SERVICE VERSION 25/tcp open smtp? |_smtp-commands: e-corp-houston2.lan | fingerprint-strings: | DNSStatusRequestTCP, DNSVersionBindReqTCP, NULL, RPCCheck, SMBProgNeg, X11Probe: | 220 e-corp-houston2.lan Postfix | FourOhFourRequest, GenericLines, GetRequest, HTTPOptions, RTSPRequest: | 220 e-corp-houston2.lan Postfix | 5.5.1 Error: unknown command | 5.5.1 Error: unknown command | Hello: | 220 e-corp-houston2.lan Postfix | Syntax: EHLO hostname | Help: | 220 e-corp-houston2.lan Postfix | 214-Commands supported: | 214- HELO MAIL RCPT DATA | 214- RSET NOOP QUIT EXPN | 214- HELP VRFY EHLO AUTH | 214- ETRN STARTTLS | more info use "HELP <topic>". | Kerberos, SSLSessionReq, TLSSessionReq, TerminalServerCookie: | 220 e-corp-houston2.lan Postfix |_ 5.5.1 Error: unknown command 465/tcp open tcpwrapped |_smtp-commands: Couldn't establish connection on port 465 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service : SF-Port25-TCP:V=7.93%I=7%D=9/13%Time=65015D61%P=x86_64-pc-linux-gnu%r(NULL SF:,21,"220\x20e-corp-houston2\.lan\x20Postfix\r\n")%r(Hello,3C,"220\x20e- SF:corp-houston2\.lan\x20Postfix\r\n501\x20Syntax:\x20EHLO\x20hostname\r\n SF:")%r(Help,CF,"220\x20e-corp-houston2\.lan\x20Postfix\r\n214-Commands\x2 SF:0supported:\r\n214-\x20\x20\x20\x20HELO\x20MAIL\x20RCPT\x20DATA\r\n214- SF:\x20\x20\x20\x20RSET\x20NOOP\x20QUIT\x20EXPN\r\n214-\x20\x20\x20\x20HEL SF:P\x20VRFY\x20EHLO\x20AUTH\r\n214-\x20\x20\x20\x20ETRN\x20STARTTLS\r\n21 SF:4\x20For\x20more\x20info\x20use\x20\"HELP\x20<topic>\"\.\r\n")%r(Generi SF:cLines,65,"220\x20e-corp-houston2\.lan\x20Postfix\r\n500\x205\.5\.1\x20 SF:Error:\x20unknown\x20command\r\n500\x205\.5\.1\x20Error:\x20unknown\x20 SF:command\r\n")%r(GetRequest,65,"220\x20e-corp-houston2\.lan\x20Postfix\r SF:\n500\x205\.5\.1\x20Error:\x20unknown\x20command\r\n500\x205\.5\.1\x20E SF:rror:\x20unknown\x20command\r\n")%r(HTTPOptions,65,"220\x20e-corp-houst SF:on2\.lan\x20Postfix\r\n500\x205\.5\.1\x20Error:\x20unknown\x20command\r SF:\n500\x205\.5\.1\x20Error:\x20unknown\x20command\r\n")%r(RTSPRequest,65 SF:,"220\x20e-corp-houston2\.lan\x20Postfix\r\n500\x205\.5\.1\x20Error:\x2 SF:0unknown\x20command\r\n500\x205\.5\.1\x20Error:\x20unknown\x20command\r SF:\n")%r(RPCCheck,21,"220\x20e-corp-houston2\.lan\x20Postfix\r\n")%r(DNSV SF:ersionBindReqTCP,21,"220\x20e-corp-houston2\.lan\x20Postfix\r\n")%r(DNS SF:StatusRequestTCP,21,"220\x20e-corp-houston2\.lan\x20Postfix\r\n")%r(SSL SF:SessionReq,43,"220\x20e-corp-houston2\.lan\x20Postfix\r\n500\x205\.5\.1 SF:\x20Error:\x20unknown\x20command\r\n")%r(TerminalServerCookie,43,"220\x SF:20e-corp-houston2\.lan\x20Postfix\r\n500\x205\.5\.1\x20Error:\x20unknow SF:n\x20command\r\n")%r(TLSSessionReq,43,"220\x20e-corp-houston2\.lan\x20P SF:ostfix\r\n500\x205\.5\.1\x20Error:\x20unknown\x20command\r\n")%r(Kerber SF:os,43,"220\x20e-corp-houston2\.lan\x20Postfix\r\n500\x205\.5\.1\x20Erro SF:r:\x20unknown\x20command\r\n")%r(SMBProgNeg,21,"220\x20e-corp-houston2\ SF:.lan\x20Postfix\r\n")%r(X11Probe,21,"220\x20e-corp-houston2\.lan\x20Pos SF:tfix\r\n")%r(FourOhFourRequest,65,"220\x20e-corp-houston2\.lan\x20Postf SF:ix\r\n500\x205\.5\.1\x20Error:\x20unknown\x20command\r\n500\x205\.5\.1\ SF:x20Error:\x20unknown\x20command\r\n"); No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=7.93%E=4%D=9/13%OT=25%CT=1%CU=43107%PV=Y%DS=2%DC=T%G=Y%TM=6501602 OS:0%P=x86_64-pc-linux-gnu)SEQ(SP=10A%GCD=1%ISR=107%TI=Z%TS=A)SEQ(SP=109%GC OS:D=1%ISR=107%TI=Z%II=I%TS=A)OPS(O1=M551ST11NW7%O2=M551ST11NW7%O3=M551NNT1 OS:1NW7%O4=M551ST11NW7%O5=M551ST11NW7%O6=M551ST11)WIN(W1=FE88%W2=FE88%W3=FE OS:88%W4=FE88%W5=FE88%W6=FE88)ECN(R=Y%DF=Y%T=40%W=FAF0%O=M551NNSNW7%CC=Y%Q= OS:)T1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=N)T5(R=Y%DF=Y OS:%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=N)T7(R=N)U1(R=Y%DF=N%T=40%IPL=16 OS:4%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S) Network Distance: 2 hops TRACEROUTE (using port 3306/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 23.72 ms 172.16.43.30 Nmap scan report for 172.16.43.31 Host is up (0.031s latency). Not shown: 998 closed tcp ports (reset) PORT STATE SERVICE VERSION 21/tcp open ftp ProFTPD 1.3.8 |_ftp-bounce: bounce working! | ftp-anon: Anonymous FTP login allowed (FTP code 230) |_Can't get directory listing: PASV failed: 500 Unknown command. | ftp-syst: | STAT: | FTP server status: | Connected to 172.16.43.31 | Logged in as anonymous | TYPE: ASCII | Session timeout in seconds is 120 | Control connection is plain text | Data connections will be plain text | Maximum file size is 2000000 bytes | ProFTPD 1.3.8 Server |_End of status 80/tcp open http Apache httpd 2.4.26 ((Debian)) |_http-server-header: Apache/2.4.26 (Debian) |_http-title: 404 Not Found No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=7.93%E=4%D=9/13%OT=21%CT=1%CU=36661%PV=Y%DS=2%DC=T%G=Y%TM=6501602 OS:0%P=x86_64-pc-linux-gnu)SEQ(SP=100%GCD=1%ISR=108%TI=Z%TS=A)SEQ(SP=FF%GCD OS:=1%ISR=108%TI=Z%II=I%TS=A)OPS(O1=M551ST11NW7%O2=M551ST11NW7%O3=M551NNT11 OS:NW7%O4=M551ST11NW7%O5=M551ST11NW7%O6=M551ST11)WIN(W1=FE88%W2=FE88%W3=FE8 OS:8%W4=FE88%W5=FE88%W6=FE88)ECN(R=Y%DF=Y%T=40%W=FAF0%O=M551NNSNW7%CC=Y%Q=) OS:T1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=N)T5(R=Y%DF=Y% OS:T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=N)T7(R=N)U1(R=Y%DF=N%T=40%IPL=164 OS:%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S) Network Distance: 2 hops Service Info: OS: Unix TRACEROUTE (using port 3306/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 24.55 ms 172.16.43.31 Nmap scan report for 172.16.43.32 Host is up. All 1000 scanned ports on 172.16.43.32 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.33 Host is up. All 1000 scanned ports on 172.16.43.33 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.34 Host is up. All 1000 scanned ports on 172.16.43.34 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.35 Host is up (0.028s latency). All 1000 scanned ports on 172.16.43.35 are in ignored states. Not shown: 1000 closed tcp ports (reset) Too many fingerprints match this host to give specific OS details Network Distance: 2 hops TRACEROUTE (using port 3306/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 27.41 ms 172.16.43.35 Nmap scan report for 172.16.43.36 Host is up. All 1000 scanned ports on 172.16.43.36 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.37 Host is up. All 1000 scanned ports on 172.16.43.37 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.38 Host is up. All 1000 scanned ports on 172.16.43.38 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.39 Host is up. All 1000 scanned ports on 172.16.43.39 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.40 Host is up. All 1000 scanned ports on 172.16.43.40 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.41 Host is up. All 1000 scanned ports on 172.16.43.41 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.42 Host is up. All 1000 scanned ports on 172.16.43.42 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.43 Host is up. All 1000 scanned ports on 172.16.43.43 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.44 Host is up. All 1000 scanned ports on 172.16.43.44 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.45 Host is up. All 1000 scanned ports on 172.16.43.45 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.46 Host is up. All 1000 scanned ports on 172.16.43.46 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.47 Host is up. All 1000 scanned ports on 172.16.43.47 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.48 Host is up. All 1000 scanned ports on 172.16.43.48 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.49 Host is up. All 1000 scanned ports on 172.16.43.49 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.50 Host is up. All 1000 scanned ports on 172.16.43.50 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.51 Host is up. All 1000 scanned ports on 172.16.43.51 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.52 Host is up. All 1000 scanned ports on 172.16.43.52 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.53 Host is up. All 1000 scanned ports on 172.16.43.53 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.54 Host is up. All 1000 scanned ports on 172.16.43.54 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.55 Host is up. All 1000 scanned ports on 172.16.43.55 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.56 Host is up. All 1000 scanned ports on 172.16.43.56 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.57 Host is up. All 1000 scanned ports on 172.16.43.57 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.58 Host is up. All 1000 scanned ports on 172.16.43.58 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.59 Host is up. All 1000 scanned ports on 172.16.43.59 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.60 Host is up. All 1000 scanned ports on 172.16.43.60 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.61 Host is up. All 1000 scanned ports on 172.16.43.61 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.62 Host is up. All 1000 scanned ports on 172.16.43.62 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Nmap scan report for 172.16.43.63 Host is up. All 1000 scanned ports on 172.16.43.63 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.11 2 ... 30 Stats: 0:17:31 elapsed; 64 hosts completed (128 up), 64 undergoing Traceroute Traceroute Timing: About 35.38% done; ETC: 03:17 (0:04:08 remaining) Stats: 0:17:32 elapsed; 64 hosts completed (128 up), 64 undergoing Traceroute Traceroute Timing: About 36.39% done; ETC: 03:17 (0:03:59 remaining) Stats: 0:17:33 elapsed; 64 hosts completed (128 up), 64 undergoing Traceroute Traceroute Timing: About 36.39% done; ETC: 03:17 (0:04:01 remaining) Stats: 0:23:05 elapsed; 64 hosts completed (128 up), 64 undergoing Traceroute Traceroute Timing: About 91.53% done; ETC: 03:19 (0:00:43 remaining) Stats: 0:23:06 elapsed; 64 hosts completed (128 up), 64 undergoing Traceroute Traceroute Timing: About 91.53% done; ETC: 03:19 (0:00:44 remaining) Stats: 0:23:06 elapsed; 64 hosts completed (128 up), 64 undergoing Traceroute Traceroute Timing: About 91.53% done; ETC: 03:19 (0:00:44 remaining) Stats: 0:23:07 elapsed; 64 hosts completed (128 up), 64 undergoing Traceroute Traceroute Timing: About 91.53% done; ETC: 03:19 (0:00:44 remaining) Nmap scan report for 172.16.43.64 Host is up. All 1000 scanned ports on 172.16.43.64 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.65 Host is up. All 1000 scanned ports on 172.16.43.65 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.66 Host is up. All 1000 scanned ports on 172.16.43.66 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.67 Host is up. All 1000 scanned ports on 172.16.43.67 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.68 Host is up. All 1000 scanned ports on 172.16.43.68 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.69 Host is up. All 1000 scanned ports on 172.16.43.69 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.70 Host is up. All 1000 scanned ports on 172.16.43.70 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.71 Host is up. All 1000 scanned ports on 172.16.43.71 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.72 Host is up. All 1000 scanned ports on 172.16.43.72 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.73 Host is up. All 1000 scanned ports on 172.16.43.73 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.74 Host is up. All 1000 scanned ports on 172.16.43.74 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.75 Host is up. All 1000 scanned ports on 172.16.43.75 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.76 Host is up. All 1000 scanned ports on 172.16.43.76 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.77 Host is up. All 1000 scanned ports on 172.16.43.77 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.78 Host is up. All 1000 scanned ports on 172.16.43.78 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.79 Host is up. All 1000 scanned ports on 172.16.43.79 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.80 Host is up. All 1000 scanned ports on 172.16.43.80 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.81 Host is up. All 1000 scanned ports on 172.16.43.81 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.82 Host is up. All 1000 scanned ports on 172.16.43.82 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.83 Host is up. All 1000 scanned ports on 172.16.43.83 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.84 Host is up. All 1000 scanned ports on 172.16.43.84 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.85 Host is up. All 1000 scanned ports on 172.16.43.85 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.86 Host is up. All 1000 scanned ports on 172.16.43.86 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.87 Host is up. All 1000 scanned ports on 172.16.43.87 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.88 Host is up. All 1000 scanned ports on 172.16.43.88 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.89 Host is up. All 1000 scanned ports on 172.16.43.89 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.90 Host is up. All 1000 scanned ports on 172.16.43.90 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.91 Host is up. All 1000 scanned ports on 172.16.43.91 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.92 Host is up. All 1000 scanned ports on 172.16.43.92 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.93 Host is up. All 1000 scanned ports on 172.16.43.93 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.94 Host is up. All 1000 scanned ports on 172.16.43.94 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.95 Host is up. All 1000 scanned ports on 172.16.43.95 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.96 Host is up. All 1000 scanned ports on 172.16.43.96 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.97 Host is up. All 1000 scanned ports on 172.16.43.97 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.98 Host is up. All 1000 scanned ports on 172.16.43.98 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.99 Host is up. All 1000 scanned ports on 172.16.43.99 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.100 Host is up. All 1000 scanned ports on 172.16.43.100 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.101 Host is up (0.025s latency). Not shown: 999 closed tcp ports (reset) PORT STATE SERVICE VERSION 22/tcp open ssh (protocol 2.0) | fingerprint-strings: | NULL: | SSH-2.0-Cisco-1.25 | 6diffie-hellman-group1-sha1,diffie-hellman-group14-sha1 | ssh-rsa | caes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cbc,3des-cbc | caes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cbc,3des-cbc | .hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-md5 | .hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-md5 | none,zlib |_ none,zlib 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service : SF-Port22-TCP:V=7.93%I=7%D=9/13%Time=6501606E%P=x86_64-pc-linux-gnu%r(NULL SF:,1CC,"SSH-2\.0-Cisco-1\.25\r\n\0\0\x01\xb4\x04\x14\x1d\x9f_O\xcdhK\xa2\ SF:xb0\x11Ii\xd2O\xb4\xeb\0\0\x006diffie-hellman-group1-sha1,diffie-hellma SF:n-group14-sha1\0\0\0\x07ssh-rsa\0\0\0caes256-ctr,aes256-cbc,aes192-ctr, SF:aes192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cbc,3des-cbc\0\0\ SF:0caes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,cas SF:t128-cbc,blowfish-cbc,3des-cbc\0\0\0\.hmac-sha2-512,hmac-sha2-256,hmac- SF:sha1,hmac-md5\0\0\0\.hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-md5\0\0 SF:\0\tnone,zlib\0\0\0\tnone,zlib\0\0\0\0\0\0\0\0\0\0\0\0\0\xfc\xa9\xf5x"); No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=7.93%E=4%D=9/13%OT=22%CT=1%CU=44358%PV=Y%DS=2%DC=T%G=Y%TM=6501629 OS:C%P=x86_64-pc-linux-gnu)SEQ(SP=FF%GCD=1%ISR=10E%TI=Z%TS=A)SEQ(SP=FF%GCD= OS:1%ISR=10E%TI=Z%II=I%TS=A)OPS(O1=M551ST11NW7%O2=M551ST11NW7%O3=M551NNT11N OS:W7%O4=M551ST11NW7%O5=M551ST11NW7%O6=M551ST11)WIN(W1=FE88%W2=FE88%W3=FE88 OS:%W4=FE88%W5=FE88%W6=FE88)ECN(R=Y%DF=Y%T=40%W=FAF0%O=M551NNSNW7%CC=Y%Q=)T OS:1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=N)T5(R=Y%DF=Y%T OS:=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=N)T7(R=N)U1(R=Y%DF=N%T=40%IPL=164% OS:UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S) Network Distance: 2 hops TRACEROUTE (using port 3306/tcp) HOP RTT ADDRESS 1 27.91 ms 10.6.66.1 2 24.40 ms 172.16.43.101 Nmap scan report for 172.16.43.102 Host is up (0.025s latency). Not shown: 999 closed tcp ports (reset) PORT STATE SERVICE VERSION 22/tcp open ssh (protocol 2.0) | fingerprint-strings: | NULL: | SSH-2.0-Cisco-1.25 | 6diffie-hellman-group1-sha1,diffie-hellman-group14-sha1 | ssh-rsa | caes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cbc,3des-cbc | caes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cbc,3des-cbc | .hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-md5 | .hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-md5 | none,zlib |_ none,zlib 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service : SF-Port22-TCP:V=7.93%I=7%D=9/13%Time=6501606E%P=x86_64-pc-linux-gnu%r(NULL SF:,1CC,"SSH-2\.0-Cisco-1\.25\r\n\0\0\x01\xb4\x04\x14\xc3\x88\xf9\x12\x8c\ SF:\\[\xc2\xadl\xe5\x020\xe0u\xfa\0\0\x006diffie-hellman-group1-sha1,diffi SF:e-hellman-group14-sha1\0\0\0\x07ssh-rsa\0\0\0caes256-ctr,aes256-cbc,aes SF:192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cbc,3des- SF:cbc\0\0\0caes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes128 SF:-cbc,cast128-cbc,blowfish-cbc,3des-cbc\0\0\0\.hmac-sha2-512,hmac-sha2-2 SF:56,hmac-sha1,hmac-md5\0\0\0\.hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac SF:-md5\0\0\0\tnone,zlib\0\0\0\tnone,zlib\0\0\0\0\0\0\0\0\0\0\0\0\0\xee\xf SF:5\]\xca"); No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=7.93%E=4%D=9/13%OT=22%CT=1%CU=34213%PV=Y%DS=2%DC=T%G=Y%TM=6501629 OS:C%P=x86_64-pc-linux-gnu)SEQ(SP=103%GCD=1%ISR=108%TI=Z%II=I%TS=A)OPS(O1=M OS:551ST11NW7%O2=M551ST11NW7%O3=M551NNT11NW7%O4=M551ST11NW7%O5=M551ST11NW7% OS:O6=M551ST11)WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)ECN(R=Y% OS:DF=Y%T=40%W=FAF0%O=M551NNSNW7%CC=Y%Q=)T1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD= OS:0%Q=)T2(R=N)T3(R=N)T4(R=N)T5(R=Y%DF=Y%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=) OS:T6(R=N)T7(R=N)U1(R=Y%DF=N%T=40%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G% OS:RUD=G)IE(R=Y%DFI=N%T=40%CD=S) Network Distance: 2 hops TRACEROUTE (using port 3306/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 24.51 ms 172.16.43.102 Nmap scan report for 172.16.43.103 Host is up (0.026s latency). Not shown: 999 closed tcp ports (reset) PORT STATE SERVICE VERSION 22/tcp open ssh (protocol 2.0) | fingerprint-strings: | NULL: | SSH-2.0-Cisco-1.25 | 6diffie-hellman-group1-sha1,diffie-hellman-group14-sha1 | ssh-rsa | caes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cbc,3des-cbc | caes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cbc,3des-cbc | .hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-md5 | .hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-md5 | none,zlib |_ none,zlib 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service : SF-Port22-TCP:V=7.93%I=7%D=9/13%Time=6501606E%P=x86_64-pc-linux-gnu%r(NULL SF:,1CC,"SSH-2\.0-Cisco-1\.25\r\n\0\0\x01\xb4\x04\x14\xf9\x16\x9a\xb0\x1a\ SF:x12\xe5\xc4\xaa\xce\xae\xc19\xfc\xa1Q\0\0\x006diffie-hellman-group1-sha SF:1,diffie-hellman-group14-sha1\0\0\0\x07ssh-rsa\0\0\0caes256-ctr,aes256- SF:cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cb SF:c,3des-cbc\0\0\0caes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr SF:,aes128-cbc,cast128-cbc,blowfish-cbc,3des-cbc\0\0\0\.hmac-sha2-512,hmac SF:-sha2-256,hmac-sha1,hmac-md5\0\0\0\.hmac-sha2-512,hmac-sha2-256,hmac-sh SF:a1,hmac-md5\0\0\0\tnone,zlib\0\0\0\tnone,zlib\0\0\0\0\0\0\0\0\0\0\0\0\0 SF:\x1f\xa2\xb9\xca"); No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=7.93%E=4%D=9/13%OT=22%CT=1%CU=42271%PV=Y%DS=2%DC=T%G=Y%TM=6501629 OS:C%P=x86_64-pc-linux-gnu)SEQ(SP=104%GCD=1%ISR=109%TI=Z%TS=A)SEQ(SP=104%GC OS:D=2%ISR=109%TI=Z%II=I%TS=A)OPS(O1=M551ST11NW7%O2=M551ST11NW7%O3=M551NNT1 OS:1NW7%O4=M551ST11NW7%O5=M551ST11NW7%O6=M551ST11)WIN(W1=FE88%W2=FE88%W3=FE OS:88%W4=FE88%W5=FE88%W6=FE88)ECN(R=Y%DF=Y%T=40%W=FAF0%O=M551NNSNW7%CC=Y%Q= OS:)T1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=N)T5(R=Y%DF=Y OS:%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=N)T7(R=N)U1(R=Y%DF=N%T=40%IPL=16 OS:4%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S) Network Distance: 2 hops TRACEROUTE (using port 3306/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 24.58 ms 172.16.43.103 Nmap scan report for 172.16.43.104 Host is up (0.026s latency). Not shown: 999 closed tcp ports (reset) PORT STATE SERVICE VERSION 22/tcp open ssh (protocol 2.0) | fingerprint-strings: | NULL: | SSH-2.0-Cisco-1.25 | 6diffie-hellman-group1-sha1,diffie-hellman-group14-sha1 | ssh-rsa | caes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cbc,3des-cbc | caes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cbc,3des-cbc | .hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-md5 | .hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-md5 | none,zlib |_ none,zlib 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service : SF-Port22-TCP:V=7.93%I=7%D=9/13%Time=6501606E%P=x86_64-pc-linux-gnu%r(NULL SF:,1CC,"SSH-2\.0-Cisco-1\.25\r\n\0\0\x01\xb4\x04\x14\x1dT\x9d\xf0\x85V\x0 SF:e\x98\xf5\x17\xa2\xe0\x9e\xb1\xe0\x95\0\0\x006diffie-hellman-group1-sha SF:1,diffie-hellman-group14-sha1\0\0\0\x07ssh-rsa\0\0\0caes256-ctr,aes256- SF:cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cb SF:c,3des-cbc\0\0\0caes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr SF:,aes128-cbc,cast128-cbc,blowfish-cbc,3des-cbc\0\0\0\.hmac-sha2-512,hmac SF:-sha2-256,hmac-sha1,hmac-md5\0\0\0\.hmac-sha2-512,hmac-sha2-256,hmac-sh SF:a1,hmac-md5\0\0\0\tnone,zlib\0\0\0\tnone,zlib\0\0\0\0\0\0\0\0\0\0\0\0\0 SF:\x9eC\x9ao"); No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=7.93%E=4%D=9/13%OT=22%CT=1%CU=34247%PV=Y%DS=2%DC=T%G=Y%TM=6501629 OS:C%P=x86_64-pc-linux-gnu)SEQ(SP=107%GCD=1%ISR=10D%TI=Z%TS=A)SEQ(SP=107%GC OS:D=2%ISR=10D%TI=Z%II=I%TS=A)OPS(O1=M551ST11NW7%O2=M551ST11NW7%O3=M551NNT1 OS:1NW7%O4=M551ST11NW7%O5=M551ST11NW7%O6=M551ST11)WIN(W1=FE88%W2=FE88%W3=FE OS:88%W4=FE88%W5=FE88%W6=FE88)ECN(R=Y%DF=Y%T=40%W=FAF0%O=M551NNSNW7%CC=Y%Q= OS:)T1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=N)T5(R=Y%DF=Y OS:%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=N)T7(R=N)U1(R=Y%DF=N%T=40%IPL=16 OS:4%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S) Network Distance: 2 hops TRACEROUTE (using port 3306/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 22.17 ms 172.16.43.104 Nmap scan report for 172.16.43.105 Host is up (0.026s latency). Not shown: 999 closed tcp ports (reset) PORT STATE SERVICE VERSION 22/tcp open ssh (protocol 2.0) | fingerprint-strings: | NULL: | SSH-2.0-Cisco-1.25 | 6diffie-hellman-group1-sha1,diffie-hellman-group14-sha1 | ssh-rsa | caes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cbc,3des-cbc | caes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cbc,3des-cbc | .hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-md5 | .hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-md5 | none,zlib |_ none,zlib 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service : SF-Port22-TCP:V=7.93%I=7%D=9/13%Time=6501606E%P=x86_64-pc-linux-gnu%r(NULL SF:,1CC,"SSH-2\.0-Cisco-1\.25\r\n\0\0\x01\xb4\x04\x14\x08/Y\x0br\xe3\x14\x SF:dcIk\xd3\xbdv\xae\xc0\xa4\0\0\x006diffie-hellman-group1-sha1,diffie-hel SF:lman-group14-sha1\0\0\0\x07ssh-rsa\0\0\0caes256-ctr,aes256-cbc,aes192-c SF:tr,aes192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cbc,3des-cbc\0 SF:\0\0caes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc, SF:cast128-cbc,blowfish-cbc,3des-cbc\0\0\0\.hmac-sha2-512,hmac-sha2-256,hm SF:ac-sha1,hmac-md5\0\0\0\.hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-md5\ SF:0\0\0\tnone,zlib\0\0\0\tnone,zlib\0\0\0\0\0\0\0\0\0\0\0\0\0\xc3Y\xa6\xa SF:a"); No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=7.93%E=4%D=9/13%OT=22%CT=1%CU=43887%PV=Y%DS=2%DC=T%G=Y%TM=6501629 OS:C%P=x86_64-pc-linux-gnu)SEQ(SP=F6%GCD=1%ISR=111%TI=Z%TS=A)SEQ(SP=F6%GCD= OS:1%ISR=110%TI=Z%II=I%TS=A)OPS(O1=M551ST11NW7%O2=M551ST11NW7%O3=M551NNT11N OS:W7%O4=M551ST11NW7%O5=M551ST11NW7%O6=M551ST11)WIN(W1=FE88%W2=FE88%W3=FE88 OS:%W4=FE88%W5=FE88%W6=FE88)ECN(R=Y%DF=Y%T=40%W=FAF0%O=M551NNSNW7%CC=Y%Q=)T OS:1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=N)T5(R=Y%DF=Y%T OS:=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=N)T7(R=N)U1(R=Y%DF=N%T=40%IPL=164% OS:UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S) Network Distance: 2 hops TRACEROUTE (using port 3306/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 22.17 ms 172.16.43.105 Nmap scan report for 172.16.43.106 Host is up (0.027s latency). Not shown: 999 closed tcp ports (reset) PORT STATE SERVICE VERSION 22/tcp open ssh (protocol 2.0) | fingerprint-strings: | NULL: | SSH-2.0-Cisco-1.25 | pelv | 6diffie-hellman-group1-sha1,diffie-hellman-group14-sha1 | ssh-rsa | caes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cbc,3des-cbc | caes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cbc,3des-cbc | .hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-md5 | .hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-md5 | none,zlib |_ none,zlib 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service : SF-Port22-TCP:V=7.93%I=7%D=9/13%Time=6501606E%P=x86_64-pc-linux-gnu%r(NULL SF:,1CC,"SSH-2\.0-Cisco-1\.25\r\n\0\0\x01\xb4\x04\x14\xbc\xc2\xc8\xacpelv\ SF:xf1o\xa3\xcc\x94U\x97\xda\0\0\x006diffie-hellman-group1-sha1,diffie-hel SF:lman-group14-sha1\0\0\0\x07ssh-rsa\0\0\0caes256-ctr,aes256-cbc,aes192-c SF:tr,aes192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cbc,3des-cbc\0 SF:\0\0caes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc, SF:cast128-cbc,blowfish-cbc,3des-cbc\0\0\0\.hmac-sha2-512,hmac-sha2-256,hm SF:ac-sha1,hmac-md5\0\0\0\.hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-md5\ SF:0\0\0\tnone,zlib\0\0\0\tnone,zlib\0\0\0\0\0\0\0\0\0\0\0\0\0T\n\xdd\x84" SF:); No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=7.93%E=4%D=9/13%OT=22%CT=1%CU=40258%PV=Y%DS=2%DC=T%G=Y%TM=6501629 OS:C%P=x86_64-pc-linux-gnu)SEQ(SP=102%GCD=1%ISR=10A%TI=Z%II=I%TS=A)SEQ(SP=1 OS:03%GCD=1%ISR=10A%TI=Z%TS=A)OPS(O1=M551ST11NW7%O2=M551ST11NW7%O3=M551NNT1 OS:1NW7%O4=M551ST11NW7%O5=M551ST11NW7%O6=M551ST11)WIN(W1=FE88%W2=FE88%W3=FE OS:88%W4=FE88%W5=FE88%W6=FE88)ECN(R=Y%DF=Y%T=40%W=FAF0%O=M551NNSNW7%CC=Y%Q= OS:)T1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=N)T5(R=Y%DF=Y OS:%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=N)T7(R=N)U1(R=Y%DF=N%T=40%IPL=16 OS:4%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S) Network Distance: 2 hops TRACEROUTE (using port 3306/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 22.20 ms 172.16.43.106 Nmap scan report for 172.16.43.107 Host is up (0.027s latency). Not shown: 999 closed tcp ports (reset) PORT STATE SERVICE VERSION 22/tcp open ssh (protocol 2.0) | fingerprint-strings: | NULL: | SSH-2.0-Cisco-1.25 | 6diffie-hellman-group1-sha1,diffie-hellman-group14-sha1 | ssh-rsa | caes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cbc,3des-cbc | caes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cbc,3des-cbc | .hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-md5 | .hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-md5 | none,zlib |_ none,zlib 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service : SF-Port22-TCP:V=7.93%I=7%D=9/13%Time=6501606E%P=x86_64-pc-linux-gnu%r(NULL SF:,1CC,"SSH-2\.0-Cisco-1\.25\r\n\0\0\x01\xb4\x04\x14\x08t\xcd\x85\^\xab\x SF:1c\n\x01j\xb3\n\xbf\xc5\xf1\xf2\0\0\x006diffie-hellman-group1-sha1,diff SF:ie-hellman-group14-sha1\0\0\0\x07ssh-rsa\0\0\0caes256-ctr,aes256-cbc,ae SF:s192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cbc,3des SF:-cbc\0\0\0caes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes12 SF:8-cbc,cast128-cbc,blowfish-cbc,3des-cbc\0\0\0\.hmac-sha2-512,hmac-sha2- SF:256,hmac-sha1,hmac-md5\0\0\0\.hmac-sha2-512,hmac-sha2-256,hmac-sha1,hma SF:c-md5\0\0\0\tnone,zlib\0\0\0\tnone,zlib\0\0\0\0\0\0\0\0\0\0\0\0\0\x0e6\ SF:x05\\"); No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=7.93%E=4%D=9/13%OT=22%CT=1%CU=43603%PV=Y%DS=2%DC=T%G=Y%TM=6501629 OS:C%P=x86_64-pc-linux-gnu)SEQ(SP=102%GCD=1%ISR=108%TI=Z%II=I%TS=A)SEQ(SP=1 OS:02%GCD=1%ISR=108%TI=Z%TS=A)OPS(O1=M551ST11NW7%O2=M551ST11NW7%O3=M551NNT1 OS:1NW7%O4=M551ST11NW7%O5=M551ST11NW7%O6=M551ST11)WIN(W1=FE88%W2=FE88%W3=FE OS:88%W4=FE88%W5=FE88%W6=FE88)ECN(R=Y%DF=Y%T=40%W=FAF0%O=M551NNSNW7%CC=Y%Q= OS:)T1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=N)T5(R=Y%DF=Y OS:%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=N)T7(R=N)U1(R=Y%DF=N%T=40%IPL=16 OS:4%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S) Network Distance: 2 hops TRACEROUTE (using port 3306/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 21.85 ms 172.16.43.107 Nmap scan report for 172.16.43.108 Host is up (0.028s latency). Not shown: 999 closed tcp ports (reset) PORT STATE SERVICE VERSION 22/tcp open ssh (protocol 2.0) | fingerprint-strings: | NULL: | SSH-2.0-Cisco-1.25 | 6diffie-hellman-group1-sha1,diffie-hellman-group14-sha1 | ssh-rsa | caes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cbc,3des-cbc | caes256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cbc,3des-cbc | .hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-md5 | .hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-md5 | none,zlib |_ none,zlib 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service : SF-Port22-TCP:V=7.93%I=7%D=9/13%Time=6501606E%P=x86_64-pc-linux-gnu%r(NULL SF:,1CC,"SSH-2\.0-Cisco-1\.25\r\n\0\0\x01\xb4\x04\x14v\xcf\xa65\x20c\n\+\x SF:19I\[v\x06i\xe5\x0b\0\0\x006diffie-hellman-group1-sha1,diffie-hellman-g SF:roup14-sha1\0\0\0\x07ssh-rsa\0\0\0caes256-ctr,aes256-cbc,aes192-ctr,aes SF:192-cbc,aes128-ctr,aes128-cbc,cast128-cbc,blowfish-cbc,3des-cbc\0\0\0ca SF:es256-ctr,aes256-cbc,aes192-ctr,aes192-cbc,aes128-ctr,aes128-cbc,cast12 SF:8-cbc,blowfish-cbc,3des-cbc\0\0\0\.hmac-sha2-512,hmac-sha2-256,hmac-sha SF:1,hmac-md5\0\0\0\.hmac-sha2-512,hmac-sha2-256,hmac-sha1,hmac-md5\0\0\0\ SF:tnone,zlib\0\0\0\tnone,zlib\0\0\0\0\0\0\0\0\0\0\0\0\0\xde\$\x1ex"); No exact OS matches for host (If you know what OS is running on it, see https://nmap.org/submit/ ). TCP/IP fingerprint: OS:SCAN(V=7.93%E=4%D=9/13%OT=22%CT=1%CU=38365%PV=Y%DS=2%DC=T%G=Y%TM=6501629 OS:C%P=x86_64-pc-linux-gnu)SEQ(SP=105%GCD=1%ISR=10C%TI=Z%TS=A)SEQ(SP=105%GC OS:D=1%ISR=10C%TI=Z%II=I%TS=A)OPS(O1=M551ST11NW7%O2=M551ST11NW7%O3=M551NNT1 OS:1NW7%O4=M551ST11NW7%O5=M551ST11NW7%O6=M551ST11)WIN(W1=FE88%W2=FE88%W3=FE OS:88%W4=FE88%W5=FE88%W6=FE88)ECN(R=Y%DF=Y%T=40%W=FAF0%O=M551NNSNW7%CC=Y%Q= OS:)T1(R=Y%DF=Y%T=40%S=O%A=S+%F=AS%RD=0%Q=)T2(R=N)T3(R=N)T4(R=N)T5(R=Y%DF=Y OS:%T=40%W=0%S=Z%A=S+%F=AR%O=%RD=0%Q=)T6(R=N)T7(R=N)U1(R=Y%DF=N%T=40%IPL=16 OS:4%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)IE(R=Y%DFI=N%T=40%CD=S) Network Distance: 2 hops TRACEROUTE (using port 3306/tcp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 21.90 ms 172.16.43.108 Nmap scan report for 172.16.43.109 Host is up. All 1000 scanned ports on 172.16.43.109 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.110 Host is up. All 1000 scanned ports on 172.16.43.110 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.111 Host is up. All 1000 scanned ports on 172.16.43.111 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.112 Host is up. All 1000 scanned ports on 172.16.43.112 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.113 Host is up. All 1000 scanned ports on 172.16.43.113 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.114 Host is up. All 1000 scanned ports on 172.16.43.114 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.115 Host is up. All 1000 scanned ports on 172.16.43.115 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.116 Host is up. All 1000 scanned ports on 172.16.43.116 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.117 Host is up. All 1000 scanned ports on 172.16.43.117 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.118 Host is up. All 1000 scanned ports on 172.16.43.118 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.119 Host is up. All 1000 scanned ports on 172.16.43.119 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.120 Host is up. All 1000 scanned ports on 172.16.43.120 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.121 Host is up. All 1000 scanned ports on 172.16.43.121 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.122 Host is up. All 1000 scanned ports on 172.16.43.122 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.123 Host is up. All 1000 scanned ports on 172.16.43.123 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.124 Host is up. All 1000 scanned ports on 172.16.43.124 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.125 Host is up. All 1000 scanned ports on 172.16.43.125 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.126 Host is up. All 1000 scanned ports on 172.16.43.126 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 Nmap scan report for 172.16.43.127 Host is up. All 1000 scanned ports on 172.16.43.127 are in ignored states. Not shown: 1000 filtered tcp ports (no-response) Too many fingerprints match this host to give specific OS details TRACEROUTE (using proto 1/icmp) HOP RTT ADDRESS - Hop 1 is the same as for 172.16.43.101 2 ... 30 ```