NMAP Complete TCP Service and Version Detection many services unrecognized despite returning data
"Chu, Lacey (NSB - CN/Qingdao)" <[email protected]> Thu, 13 Sep 2018 07:50:14 +0000
| Newsgroups | gmane.comp.security.nmap.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi, I did Nmap tcp detection on my RedHatLinux7.5 servers, but I saw there are many services unrecognized. What can I do with those services? Thanks for your support! Regards, Lacey _______________________________________________ Sent through the dev mailing list https://nmap.org/mailman/listinfo/dev Archived at http://seclists.org/nmap-dev/
Tcp.VMOAM.R5601D174.20180913.gold2M001OAM01.txt
(text/plain, 11.8 KB)
[root@ding nmap]# nmap -sS -sV -p- -vvv --reason --webxml -oA Tcp.VMOAM.R5601D174.20180913.gold2M001OAM01 10.223.1.117
Starting Nmap 7.70 ( https://nmap.org ) at 2018-09-13 14:09 CST
NSE: Loaded 43 scripts for scanning.
Initiating Ping Scan at 14:09
Scanning 10.223.1.117 [4 ports]
Completed Ping Scan at 14:09, 0.02s elapsed (1 total hosts)
mass_dns: warning: Unable to determine any DNS servers. Reverse DNS is disabled. Try using --system-dns or specify valid servers with --dns-servers
DNS resolution of 1 IPs took 0.00s. Mode: Async [#: 0, OK: 0, NX: 0, DR: 0, SF: 0, TR: 0, CN: 0]
Initiating SYN Stealth Scan at 14:09
Scanning 10.223.1.117 [65535 ports]
Discovered open port 22/tcp on 10.223.1.117
Discovered open port 443/tcp on 10.223.1.117
Discovered open port 8543/tcp on 10.223.1.117
Discovered open port 15019/tcp on 10.223.1.117
Discovered open port 15005/tcp on 10.223.1.117
Discovered open port 15100/tcp on 10.223.1.117
SYN Stealth Scan Timing: About 20.63% done; ETC: 14:12 (0:01:59 remaining)
Discovered open port 15008/tcp on 10.223.1.117
Discovered open port 15004/tcp on 10.223.1.117
Discovered open port 15022/tcp on 10.223.1.117
Discovered open port 15018/tcp on 10.223.1.117
Discovered open port 15021/tcp on 10.223.1.117
Discovered open port 15013/tcp on 10.223.1.117
Discovered open port 15001/tcp on 10.223.1.117
Discovered open port 15012/tcp on 10.223.1.117
Discovered open port 15020/tcp on 10.223.1.117
SYN Stealth Scan Timing: About 48.43% done; ETC: 14:12 (0:01:05 remaining)
Discovered open port 15015/tcp on 10.223.1.117
Discovered open port 15023/tcp on 10.223.1.117
Discovered open port 15006/tcp on 10.223.1.117
Discovered open port 15007/tcp on 10.223.1.117
Discovered open port 8843/tcp on 10.223.1.117
Discovered open port 15017/tcp on 10.223.1.117
Discovered open port 1099/tcp on 10.223.1.117
Discovered open port 15016/tcp on 10.223.1.117
Discovered open port 15009/tcp on 10.223.1.117
Discovered open port 5101/tcp on 10.223.1.117
Discovered open port 15002/tcp on 10.223.1.117
Discovered open port 15003/tcp on 10.223.1.117
Discovered open port 15010/tcp on 10.223.1.117
Discovered open port 15000/tcp on 10.223.1.117
Discovered open port 32000/tcp on 10.223.1.117
Discovered open port 15014/tcp on 10.223.1.117
Discovered open port 15011/tcp on 10.223.1.117
Discovered open port 5001/tcp on 10.223.1.117
Completed SYN Stealth Scan at 14:11, 105.13s elapsed (65535 total ports)
Initiating Service scan at 14:11
Scanning 33 services on 10.223.1.117
Service scan Timing: About 18.18% done; ETC: 14:14 (0:02:29 remaining)
Completed Service scan at 14:14, 174.69s elapsed (33 services on 1 host)
NSE: Script scanning 10.223.1.117.
NSE: Starting runlevel 1 (of 2) scan.
Initiating NSE at 14:14
Completed NSE at 14:14, 7.09s elapsed
NSE: Starting runlevel 2 (of 2) scan.
Initiating NSE at 14:14
Completed NSE at 14:14, 2.01s elapsed
Nmap scan report for 10.223.1.117
Host is up, received echo-reply ttl 61 (0.00042s latency).
Scanned at 2018-09-13 14:09:56 CST for 289s
Not shown: 65413 filtered ports, 89 closed ports
Reason: 65413 no-responses and 89 resets
PORT STATE SERVICE REASON VERSION
22/tcp open ssh syn-ack ttl 61 OpenSSH 7.4 (protocol 2.0)
443/tcp open ssl/http syn-ack ttl 61 Apache httpd
1099/tcp open rmiregistry syn-ack ttl 61 Java RMI
5001/tcp open giop syn-ack ttl 61 omg.org CORBA naming service
5101/tcp open giop syn-ack ttl 61 omg.org CORBA naming service
8543/tcp open ssl/unknown syn-ack ttl 61
8843/tcp open ssl/unknown syn-ack ttl 61
15000/tcp open hydap? syn-ack ttl 61
15001/tcp open unknown syn-ack ttl 61
15002/tcp open onep-tls? syn-ack ttl 61
15003/tcp open unknown syn-ack ttl 61
15004/tcp open unknown syn-ack ttl 61
15005/tcp open unknown syn-ack ttl 61
15006/tcp open unknown syn-ack ttl 61
15007/tcp open unknown syn-ack ttl 61
15008/tcp open unknown syn-ack ttl 61
15009/tcp open unknown syn-ack ttl 61
15010/tcp open unknown syn-ack ttl 61
15011/tcp open unknown syn-ack ttl 61
15012/tcp open unknown syn-ack ttl 61
15013/tcp open unknown syn-ack ttl 61
15014/tcp open unknown syn-ack ttl 61
15015/tcp open unknown syn-ack ttl 61
15016/tcp open unknown syn-ack ttl 61
15017/tcp open unknown syn-ack ttl 61
15018/tcp open unknown syn-ack ttl 61
15019/tcp open unknown syn-ack ttl 61
15020/tcp open unknown syn-ack ttl 61
15021/tcp open unknown syn-ack ttl 61
15022/tcp open unknown syn-ack ttl 61
15023/tcp open unknown syn-ack ttl 61
15100/tcp open unknown syn-ack ttl 61
32000/tcp open unknown syn-ack ttl 61
9 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port8543-TCP:V=7.70%T=SSL%I=7%D=9/13%Time=5B99FFB3%P=x86_64-redhat-linu
SF:x-gnu%r(GetRequest,1D2,"HTTP/1\.1\x20404\x20\r\nx-frame-options:\x20SAM
SF:EORIGIN\r\nStrict-Transport-Security:\x20max-age=500;\x20includeSubDoma
SF:ins;\x20preload\r\nContent-Security-Policy:\x20default-src\x20'self'\x2
SF:0'unsafe-inline'\x20'unsafe-eval';\x20connect-src\x20wss:\x20'self';\x2
SF:0img-src\x20data:\x20'self';\x20frame-ancestors\x20'self'\r\nContent-Ty
SF:pe:\x20application/json;charset=UTF-8\r\nDate:\x20Wed,\x2012\x20Sep\x20
SF:2018\x2022:19:39\x20GMT\r\nConnection:\x20close\r\n\r\n{\"timestamp\":1
SF:536790779521,\"status\":404,\"error\":\"Not\x20Found\",\"message\":\"No
SF:\x20message\x20available\",\"path\":\"/\"}")%r(HTTPOptions,1D2,"HTTP/1\
SF:.1\x20404\x20\r\nx-frame-options:\x20SAMEORIGIN\r\nStrict-Transport-Sec
SF:urity:\x20max-age=500;\x20includeSubDomains;\x20preload\r\nContent-Secu
SF:rity-Policy:\x20default-src\x20'self'\x20'unsafe-inline'\x20'unsafe-eva
SF:l';\x20connect-src\x20wss:\x20'self';\x20img-src\x20data:\x20'self';\x2
SF:0frame-ancestors\x20'self'\r\nContent-Type:\x20application/json;charset
SF:=UTF-8\r\nDate:\x20Wed,\x2012\x20Sep\x202018\x2022:19:39\x20GMT\r\nConn
SF:ection:\x20close\r\n\r\n{\"timestamp\":1536790779569,\"status\":404,\"e
SF:rror\":\"Not\x20Found\",\"message\":\"No\x20message\x20available\",\"pa
SF:th\":\"/\"}")%r(RTSPRequest,49,"HTTP/1\.1\x20400\x20\r\nDate:\x20Wed,\x
SF:2012\x20Sep\x202018\x2022:19:39\x20GMT\r\nConnection:\x20close\r\n\r\n"
SF:)%r(RPCCheck,49,"HTTP/1\.1\x20400\x20\r\nDate:\x20Wed,\x2012\x20Sep\x20
SF:2018\x2022:19:39\x20GMT\r\nConnection:\x20close\r\n\r\n")%r(DNSVersionB
SF:indReqTCP,49,"HTTP/1\.1\x20400\x20\r\nDate:\x20Wed,\x2012\x20Sep\x20201
SF:8\x2022:19:39\x20GMT\r\nConnection:\x20close\r\n\r\n")%r(DNSStatusReque
SF:stTCP,49,"HTTP/1\.1\x20400\x20\r\nDate:\x20Wed,\x2012\x20Sep\x202018\x2
SF:022:19:39\x20GMT\r\nConnection:\x20close\r\n\r\n")%r(Help,49,"HTTP/1\.1
SF:\x20400\x20\r\nDate:\x20Wed,\x2012\x20Sep\x202018\x2022:19:39\x20GMT\r\
SF:nConnection:\x20close\r\n\r\n")%r(SSLSessionReq,49,"HTTP/1\.1\x20400\x2
SF:0\r\nDate:\x20Wed,\x2012\x20Sep\x202018\x2022:19:39\x20GMT\r\nConnectio
SF:n:\x20close\r\n\r\n")%r(TLSSessionReq,49,"HTTP/1\.1\x20400\x20\r\nDate:
SF:\x20Wed,\x2012\x20Sep\x202018\x2022:19:39\x20GMT\r\nConnection:\x20clos
SF:e\r\n\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port8843-TCP:V=7.70%T=SSL%I=7%D=9/13%Time=5B99FFB3%P=x86_64-redhat-linu
SF:x-gnu%r(GetRequest,1F6,"HTTP/1\.1\x20404\x20\r\nx-frame-options:\x20SAM
SF:EORIGIN\r\nStrict-Transport-Security:\x20max-age=500;\x20includeSubDoma
SF:ins;\x20preload\r\nContent-Security-Policy:\x20default-src\x20'self'\x2
SF:0'unsafe-inline'\x20'unsafe-eval';\x20connect-src\x20wss:\x20'self';\x2
SF:0img-src\x20data:\x20'self';\x20frame-ancestors\x20'self'\r\nX-Applicat
SF:ion-Context:\x20application\r\nContent-Type:\x20application/json;charse
SF:t=UTF-8\r\nDate:\x20Wed,\x2012\x20Sep\x202018\x2022:19:39\x20GMT\r\nCon
SF:nection:\x20close\r\n\r\n{\"timestamp\":1536790779532,\"status\":404,\"
SF:error\":\"Not\x20Found\",\"message\":\"No\x20message\x20available\",\"p
SF:ath\":\"/\"}")%r(HTTPOptions,1F6,"HTTP/1\.1\x20404\x20\r\nx-frame-optio
SF:ns:\x20SAMEORIGIN\r\nStrict-Transport-Security:\x20max-age=500;\x20incl
SF:udeSubDomains;\x20preload\r\nContent-Security-Policy:\x20default-src\x2
SF:0'self'\x20'unsafe-inline'\x20'unsafe-eval';\x20connect-src\x20wss:\x20
SF:'self';\x20img-src\x20data:\x20'self';\x20frame-ancestors\x20'self'\r\n
SF:X-Application-Context:\x20application\r\nContent-Type:\x20application/j
SF:son;charset=UTF-8\r\nDate:\x20Wed,\x2012\x20Sep\x202018\x2022:19:39\x20
SF:GMT\r\nConnection:\x20close\r\n\r\n{\"timestamp\":1536790779629,\"statu
SF:s\":404,\"error\":\"Not\x20Found\",\"message\":\"No\x20message\x20avail
SF:able\",\"path\":\"/\"}")%r(RTSPRequest,49,"HTTP/1\.1\x20400\x20\r\nDate
SF::\x20Wed,\x2012\x20Sep\x202018\x2022:19:39\x20GMT\r\nConnection:\x20clo
SF:se\r\n\r\n")%r(RPCCheck,49,"HTTP/1\.1\x20400\x20\r\nDate:\x20Wed,\x2012
SF:\x20Sep\x202018\x2022:19:39\x20GMT\r\nConnection:\x20close\r\n\r\n")%r(
SF:DNSVersionBindReqTCP,49,"HTTP/1\.1\x20400\x20\r\nDate:\x20Wed,\x2012\x2
SF:0Sep\x202018\x2022:19:39\x20GMT\r\nConnection:\x20close\r\n\r\n")%r(DNS
SF:StatusRequestTCP,6A,"HTTP/1\.1\x20400\x20\r\nTransfer-Encoding:\x20chun
SF:ked\r\nDate:\x20Wed,\x2012\x20Sep\x202018\x2022:19:39\x20GMT\r\nConnect
SF:ion:\x20close\r\n\r\n0\r\n\r\n")%r(Help,6A,"HTTP/1\.1\x20400\x20\r\nTra
SF:nsfer-Encoding:\x20chunked\r\nDate:\x20Wed,\x2012\x20Sep\x202018\x2022:
SF:19:39\x20GMT\r\nConnection:\x20close\r\n\r\n0\r\n\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port15000-TCP:V=7.70%I=7%D=9/13%Time=5B99FFC3%P=x86_64-redhat-linux-gnu
SF:%r(giop,4C,"GIOP\x01\0\0\x01\0\0\0@\0\0\0\0\0\0\0\x01\0\0\0\x02\0\0\0'I
SF:DL:omg\.org/CORBA/OBJECT_NOT_EXIST:1\.0\0\0\0\0\0\0\0\0\0\x01");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port15001-TCP:V=7.70%I=7%D=9/13%Time=5B99FFC3%P=x86_64-redhat-linux-gnu
SF:%r(giop,4C,"GIOP\x01\0\0\x01\0\0\0@\0\0\0\0\0\0\0\x01\0\0\0\x02\0\0\0'I
SF:DL:omg\.org/CORBA/OBJECT_NOT_EXIST:1\.0\0\0\0\0\0\0\0\0\0\x01");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port15002-TCP:V=7.70%I=7%D=9/13%Time=5B99FFC3%P=x86_64-redhat-linux-gnu
SF:%r(giop,4C,"GIOP\x01\0\0\x01\0\0\0@\0\0\0\0\0\0\0\x01\0\0\0\x02\0\0\0'I
SF:DL:omg\.org/CORBA/OBJECT_NOT_EXIST:1\.0\0\0\0\0\0\0\0\0\0\x01");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port15003-TCP:V=7.70%I=7%D=9/13%Time=5B99FFC3%P=x86_64-redhat-linux-gnu
SF:%r(giop,4C,"GIOP\x01\0\0\x01\0\0\0@\0\0\0\0\0\0\0\x01\0\0\0\x02\0\0\0'I
SF:DL:omg\.org/CORBA/OBJECT_NOT_EXIST:1\.0\0\0\0\0\0\0\0\0\0\x01");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port15004-TCP:V=7.70%I=7%D=9/13%Time=5B99FFC3%P=x86_64-redhat-linux-gnu
SF:%r(giop,4C,"GIOP\x01\0\0\x01\0\0\0@\0\0\0\0\0\0\0\x01\0\0\0\x02\0\0\0'I
SF:DL:omg\.org/CORBA/OBJECT_NOT_EXIST:1\.0\0\0\0\0\0\0\0\0\0\x01");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port15005-TCP:V=7.70%I=7%D=9/13%Time=5B99FFC3%P=x86_64-redhat-linux-gnu
SF:%r(giop,4C,"GIOP\x01\0\0\x01\0\0\0@\0\0\0\0\0\0\0\x01\0\0\0\x02\0\0\0'I
SF:DL:omg\.org/CORBA/OBJECT_NOT_EXIST:1\.0\0\0\0\0\0\0\0\0\0\x01");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port15006-TCP:V=7.70%I=7%D=9/13%Time=5B99FFC3%P=x86_64-redhat-linux-gnu
SF:%r(giop,4C,"GIOP\x01\0\0\x01\0\0\0@\0\0\0\0\0\0\0\x01\0\0\0\x02\0\0\0'I
SF:DL:omg\.org/CORBA/OBJECT_NOT_EXIST:1\.0\0\0\0\0\0\0\0\0\0\x01");
Read data files from: /usr/bin/../share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 289.20 seconds
Raw packets sent: 130995 (5.764MB) | Rcvd: 166 (6.760KB)
[root@ding nmap]#
Tcp.VMCM.R5601D174.20180913.gold2M002CM01.txt
(text/plain, 7.2 KB)
[root@ding nmap]# nmap -sS -sV -p- -vvv --reason --webxml -oA Tcp.VMCM.R5601D174.20180913.gold2M002CM01 10.223.1.118
Starting Nmap 7.70 ( https://nmap.org ) at 2018-09-13 14:16 CST
NSE: Loaded 43 scripts for scanning.
Initiating Ping Scan at 14:16
Scanning 10.223.1.118 [4 ports]
Completed Ping Scan at 14:16, 0.01s elapsed (1 total hosts)
mass_dns: warning: Unable to determine any DNS servers. Reverse DNS is disabled. Try using --system-dns or specify valid servers with --dns-servers
DNS resolution of 1 IPs took 0.00s. Mode: Async [#: 0, OK: 0, NX: 0, DR: 0, SF: 0, TR: 0, CN: 0]
Initiating SYN Stealth Scan at 14:16
Scanning 10.223.1.118 [65535 ports]
Discovered open port 443/tcp on 10.223.1.118
Discovered open port 8080/tcp on 10.223.1.118
Discovered open port 22/tcp on 10.223.1.118
Discovered open port 15000/tcp on 10.223.1.118
Discovered open port 14001/tcp on 10.223.1.118
SYN Stealth Scan Timing: About 31.06% done; ETC: 14:18 (0:01:09 remaining)
Discovered open port 1099/tcp on 10.223.1.118
Discovered open port 14006/tcp on 10.223.1.118
Discovered open port 14005/tcp on 10.223.1.118
Discovered open port 15001/tcp on 10.223.1.118
Discovered open port 8443/tcp on 10.223.1.118
Discovered open port 14003/tcp on 10.223.1.118
Discovered open port 14004/tcp on 10.223.1.118
Discovered open port 14000/tcp on 10.223.1.118
Completed SYN Stealth Scan at 14:17, 65.59s elapsed (65535 total ports)
Initiating Service scan at 14:17
Scanning 13 services on 10.223.1.118
Completed Service scan at 14:18, 38.58s elapsed (13 services on 1 host)
NSE: Script scanning 10.223.1.118.
NSE: Starting runlevel 1 (of 2) scan.
Initiating NSE at 14:18
Completed NSE at 14:18, 0.12s elapsed
NSE: Starting runlevel 2 (of 2) scan.
Initiating NSE at 14:18
Completed NSE at 14:18, 1.00s elapsed
Nmap scan report for 10.223.1.118
Host is up, received echo-reply ttl 61 (0.00021s latency).
Scanned at 2018-09-13 14:16:45 CST for 105s
Not shown: 64406 filtered ports, 1116 closed ports
Reason: 64406 no-responses and 1116 resets
PORT STATE SERVICE REASON VERSION
22/tcp open ssh syn-ack ttl 61 OpenSSH 7.4 (protocol 2.0)
443/tcp open ssl/http syn-ack ttl 61 Apache httpd
1099/tcp open rmiregistry syn-ack ttl 61 Java RMI
8080/tcp open http syn-ack ttl 61 Apache Tomcat/Coyote JSP engine 1.1
8443/tcp open ssl/https-alt syn-ack ttl 61 -
14000/tcp open rmiregistry syn-ack ttl 61 Java RMI
14001/tcp open giop syn-ack ttl 61 CORBA naming service
14003/tcp open rmiregistry syn-ack ttl 61 Java RMI
14004/tcp open rmiregistry syn-ack ttl 61 Java RMI
14005/tcp open rmiregistry syn-ack ttl 61 Java RMI
14006/tcp open rmiregistry syn-ack ttl 61 Java RMI
15000/tcp open hydap? syn-ack ttl 61
15001/tcp open unknown syn-ack ttl 61
3 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port8443-TCP:V=7.70%T=SSL%I=7%D=9/13%Time=5B9A011A%P=x86_64-redhat-linu
SF:x-gnu%r(GetRequest,555,"HTTP/1\.1\x20404\x20Not\x20Found\r\nCache-Contr
SF:ol:\x20private\r\nExpires:\x20Thu,\x2001\x20Jan\x201970\x2008:00:00\x20
SF:CST\r\nx-frame-options:\x20SAMEORIGIN\r\nStrict-Transport-Security:\x20
SF:max-age=500;\x20includeSubDomains;\x20preload\r\nContent-Security-Polic
SF:y:\x20default-src\x20'self'\x20'unsafe-inline'\x20'unsafe-eval';\x20con
SF:nect-src\x20wss:\x20'self';\x20img-src\x20data:\x20'self';\x20frame-anc
SF:estors\x20'self'\r\nContent-Type:\x20text/html\r\nContent-Length:\x2091
SF:9\r\nDate:\x20Wed,\x2012\x20Sep\x202018\x2022:25:40\x20GMT\r\nConnectio
SF:n:\x20close\r\nServer:\x20-\r\n\r\n<html>\n<head>\n<meta\x20http-equiv=
SF:\"Content-Type\"\x20content=\"text/html;\x20charset=utf-8\">\n<title>40
SF:4\x20-\x20Page\x20Not\x20Found</title>\n<link\x20rel=\"stylesheet\"\x20
SF:type=\"text/css\"\x20href=\"errorPage/errorpage\.css\">\n</head>\n<body
SF:>\n\t<div\x20id=\"main\">\n\t\t<header\x20id=\"header\">\n\t\t\t<h1>\n\
SF:t\t\t\t<span\x20class=\"icon\">!</span>404<span\x20class=\"sub\">page\x
SF:20not\n\t\t\t\t\tfound</span>\n\t\t\t</h1>\n\t\t</header>\n\t\t<div\x20
SF:id=\"content\">\n\t\t\t<h2>The\x20page\x20you\x20were\x20looking\x20for
SF:\x20could\x20not\x20be\x20found\.</h2>\n\t\t\t<p>WARNING:\x20Anyo")%r(H
SF:TTPOptions,1CA,"HTTP/1\.1\x20200\x20OK\r\nCache-Control:\x20private\r\n
SF:Expires:\x20Thu,\x2001\x20Jan\x201970\x2008:00:00\x20CST\r\nx-frame-opt
SF:ions:\x20SAMEORIGIN\r\nStrict-Transport-Security:\x20max-age=500;\x20in
SF:cludeSubDomains;\x20preload\r\nContent-Security-Policy:\x20default-src\
SF:x20'self'\x20'unsafe-inline'\x20'unsafe-eval';\x20connect-src\x20wss:\x
SF:20'self';\x20img-src\x20data:\x20'self';\x20frame-ancestors\x20'self'\r
SF:\nAllow:\x20GET,\x20HEAD,\x20POST,\x20PUT,\x20DELETE,\x20OPTIONS\r\nCon
SF:tent-Length:\x200\r\nDate:\x20Wed,\x2012\x20Sep\x202018\x2022:25:40\x20
SF:GMT\r\nConnection:\x20close\r\nServer:\x20-\r\n\r\n")%r(FourOhFourReque
SF:st,555,"HTTP/1\.1\x20404\x20Not\x20Found\r\nCache-Control:\x20private\r
SF:\nExpires:\x20Thu,\x2001\x20Jan\x201970\x2008:00:00\x20CST\r\nx-frame-o
SF:ptions:\x20SAMEORIGIN\r\nStrict-Transport-Security:\x20max-age=500;\x20
SF:includeSubDomains;\x20preload\r\nContent-Security-Policy:\x20default-sr
SF:c\x20'self'\x20'unsafe-inline'\x20'unsafe-eval';\x20connect-src\x20wss:
SF:\x20'self';\x20img-src\x20data:\x20'self';\x20frame-ancestors\x20'self'
SF:\r\nContent-Type:\x20text/html\r\nContent-Length:\x20919\r\nDate:\x20We
SF:d,\x2012\x20Sep\x202018\x2022:25:40\x20GMT\r\nConnection:\x20close\r\nS
SF:erver:\x20-\r\n\r\n<html>\n<head>\n<meta\x20http-equiv=\"Content-Type\"
SF:\x20content=\"text/html;\x20charset=utf-8\">\n<title>404\x20-\x20Page\x
SF:20Not\x20Found</title>\n<link\x20rel=\"stylesheet\"\x20type=\"text/css\
SF:"\x20href=\"errorPage/errorpage\.css\">\n</head>\n<body>\n\t<div\x20id=
SF:\"main\">\n\t\t<header\x20id=\"header\">\n\t\t\t<h1>\n\t\t\t\t<span\x20
SF:class=\"icon\">!</span>404<span\x20class=\"sub\">page\x20not\n\t\t\t\t\
SF:tfound</span>\n\t\t\t</h1>\n\t\t</header>\n\t\t<div\x20id=\"content\">\
SF:n\t\t\t<h2>The\x20page\x20you\x20were\x20looking\x20for\x20could\x20not
SF:\x20be\x20found\.</h2>\n\t\t\t<p>WARNING:\x20Anyo");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port15000-TCP:V=7.70%I=7%D=9/13%Time=5B9A0135%P=x86_64-redhat-linux-gnu
SF:%r(giop,4C,"GIOP\x01\0\0\x01\0\0\0@\0\0\0\0\0\0\0\x01\0\0\0\x02\0\0\0'I
SF:DL:omg\.org/CORBA/OBJECT_NOT_EXIST:1\.0\0\0\0\0\0\0\0\0\0\x01");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port15001-TCP:V=7.70%I=7%D=9/13%Time=5B9A0135%P=x86_64-redhat-linux-gnu
SF:%r(giop,4C,"GIOP\x01\0\0\x01\0\0\0@\0\0\0\0\0\0\0\x01\0\0\0\x02\0\0\0'I
SF:DL:omg\.org/CORBA/OBJECT_NOT_EXIST:1\.0\0\0\0\0\0\0\0\0\0\x01");
Service Info: Host: loopback
Read data files from: /usr/bin/../share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 105.59 seconds
Raw packets sent: 129945 (5.718MB) | Rcvd: 1130 (45.240KB)
[root@ding nmap]#
Tcp.VMDB.R5601D174.20180913.gold2M003DB01.txt
(text/plain, 3 KB)
[root@ding nmap]# nmap -sS -sV -p- -vvv --reason --webxml -oA Tcp.VMDB.R5601D174.20180913.gold2M003DB01 10.223.1.119
Starting Nmap 7.70 ( https://nmap.org ) at 2018-09-13 14:20 CST
NSE: Loaded 43 scripts for scanning.
Initiating Ping Scan at 14:20
Scanning 10.223.1.119 [4 ports]
Completed Ping Scan at 14:20, 0.01s elapsed (1 total hosts)
mass_dns: warning: Unable to determine any DNS servers. Reverse DNS is disabled. Try using --system-dns or specify valid servers with --dns-servers
DNS resolution of 1 IPs took 0.00s. Mode: Async [#: 0, OK: 0, NX: 0, DR: 0, SF: 0, TR: 0, CN: 0]
Initiating SYN Stealth Scan at 14:20
Scanning 10.223.1.119 [65535 ports]
Discovered open port 22/tcp on 10.223.1.119
SYN Stealth Scan Timing: About 19.60% done; ETC: 14:23 (0:02:07 remaining)
Discovered open port 15001/tcp on 10.223.1.119
SYN Stealth Scan Timing: About 46.92% done; ETC: 14:22 (0:01:09 remaining)
Discovered open port 1521/tcp on 10.223.1.119
Discovered open port 15000/tcp on 10.223.1.119
Completed SYN Stealth Scan at 14:22, 106.73s elapsed (65535 total ports)
Initiating Service scan at 14:22
Scanning 4 services on 10.223.1.119
Completed Service scan at 14:22, 38.58s elapsed (4 services on 1 host)
NSE: Script scanning 10.223.1.119.
NSE: Starting runlevel 1 (of 2) scan.
Initiating NSE at 14:22
Completed NSE at 14:22, 0.01s elapsed
NSE: Starting runlevel 2 (of 2) scan.
Initiating NSE at 14:22
Completed NSE at 14:22, 1.00s elapsed
Nmap scan report for 10.223.1.119
Host is up, received echo-reply ttl 61 (0.00023s latency).
Scanned at 2018-09-13 14:20:28 CST for 146s
Not shown: 65413 filtered ports, 118 closed ports
Reason: 65413 no-responses and 118 resets
PORT STATE SERVICE REASON VERSION
22/tcp open ssh syn-ack ttl 61 OpenSSH 7.4 (protocol 2.0)
1521/tcp open oracle-tns syn-ack ttl 61 Oracle TNS listener 12.1.0.2.0 (unauthorized)
15000/tcp open hydap? syn-ack ttl 61
15001/tcp open unknown syn-ack ttl 61
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port15000-TCP:V=7.70%I=7%D=9/13%Time=5B9A023D%P=x86_64-redhat-linux-gnu
SF:%r(giop,4C,"GIOP\x01\0\0\x01\0\0\0@\0\0\0\0\0\0\0\x01\0\0\0\x02\0\0\0'I
SF:DL:omg\.org/CORBA/OBJECT_NOT_EXIST:1\.0\0\0\0\0\0\0\0\0\0\x01");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port15001-TCP:V=7.70%I=7%D=9/13%Time=5B9A023D%P=x86_64-redhat-linux-gnu
SF:%r(giop,4C,"GIOP\x01\0\0\x01\0\0\0@\0\0\0\0\0\0\0\x01\0\0\0\x02\0\0\0'I
SF:DL:omg\.org/CORBA/OBJECT_NOT_EXIST:1\.0\0\0\0\0\0\0\0\0\0\x01");
Read data files from: /usr/bin/../share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 146.60 seconds
Raw packets sent: 130991 (5.764MB) | Rcvd: 162 (6.484KB)
[root@ding nmap]#