TASK – 2

KALI
nmap -sV 103.57.125.20

Starting Nmap 7.93 ( https://nmap.org ) at 2023-03-15 05:17 EDT

Stats: 0:00:23 elapsed; 0 hosts completed (1 up), 1 undergoing Service Scan

Service scan Timing: About 70.00% done; ETC: 05:18 (0:00:05 remaining)

Nmap scan report for ns4.gturboserver.com (103.57.125.20)

Host is up (0.010s latency).

Not shown: 569 filtered tcp ports (no-response), 421 filtered tcp ports (host-unreach)

PORT STATE SERVICE VERSION

21/tcp open ftp Pure-FTPd

25/tcp open tcpwrapped

53/tcp open domain ISC BIND 9.11.4-P2 (RedHat Enterprise Linux 7)

80/tcp open http Apache httpd

143/tcp open imap Dovecot imapd

443/tcp open ssl/http Apache httpd

587/tcp open smtp Exim smtpd 4.96

993/tcp open imaps?

995/tcp open pop3s?

4343/tcp open tcpwrapped

Service Info: OS: Linux; CPE: cpe:/o:redhat:enterprise_linux:7

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .

Nmap done: 1 IP address (1 host up) scanned in 48.25 seconds

nmap -sS 103.57.125.20

Starting Nmap 7.93 ( https://nmap.org ) at 2023-03-15 05:22 EDT

Nmap scan report for ns4.gturboserver.com (103.57.125.20)

Host is up (0.028s latency).

Not shown: 991 filtered tcp ports (no-response)

PORT STATE SERVICE

21/tcp open ftp

53/tcp open domain

80/tcp open http

110/tcp open pop3

143/tcp open imap

443/tcp open https

587/tcp open submission

993/tcp open imaps

995/tcp open pop3s

Nmap done: 1 IP address (1 host up) scanned in 12.97 seconds

nmap -sSV 103.57.125.20

Starting Nmap 7.93 ( https://nmap.org ) at 2023-03-15 05:26 EDT

Nmap scan report for ns4.gturboserver.com (103.57.125.20)

Host is up (0.035s latency).

Not shown: 990 filtered tcp ports (no-response)

PORT STATE SERVICE VERSION

21/tcp open tcpwrapped

22/tcp closed ssh

53/tcp open tcpwrapped

80/tcp open tcpwrapped

110/tcp open tcpwrapped

143/tcp open tcpwrapped

443/tcp open tcpwrapped

587/tcp open tcpwrapped

993/tcp open tcpwrapped

995/tcp open tcpwrapped

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .

Nmap done: 1 IP address (1 host up) scanned in 31.85 seconds

nmap -sSV 103.57.125.20

Starting Nmap 7.93 ( https://nmap.org ) at 2023-03-15 05:26 EDT

Nmap scan report for ns4.gturboserver.com (103.57.125.20)

Host is up (0.035s latency).

Not shown: 990 filtered tcp ports (no-response)

PORT STATE SERVICE VERSION

21/tcp open tcpwrapped

22/tcp closed ssh

53/tcp open tcpwrapped

80/tcp open tcpwrapped

110/tcp open tcpwrapped

143/tcp open tcpwrapped

443/tcp open tcpwrapped

587/tcp open tcpwrapped

993/tcp open tcpwrapped

995/tcp open tcpwrapped

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .

Nmap done: 1 IP address (1 host up) scanned in 31.85 seconds

nmap -p- 103.57.125.20 -O

Starting Nmap 7.93 ( https://nmap.org ) at 2023-03-15 05:33 EDT

Stats: 0:00:57 elapsed; 0 hosts completed (1 up), 1 undergoing SYN Stealth Scan

SYN Stealth Scan Timing: About 30.56% done; ETC: 05:36 (0:01:49 remaining)

Stats: 0:01:03 elapsed; 0 hosts completed (1 up), 1 undergoing SYN Stealth Scan

SYN Stealth Scan Timing: About 35.35% done; ETC: 05:36 (0:01:39 remaining)

Nmap scan report for ns4.gturboserver.com (103.57.125.20)

Host is up (0.039s latency).

Not shown: 65526 filtered tcp ports (no-response)

PORT STATE SERVICE

21/tcp open ftp

53/tcp open domain

80/tcp open http

110/tcp open pop3

143/tcp open imap

443/tcp open https

587/tcp open submission

993/tcp open imaps

995/tcp open pop3s

Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port

Device type: specialized|VoIP phone|webcam|media device

Running (JUST GUESSING): 2N embedded (98%), Grandstream embedded (98%), Garmin embedded
(95%), Advanced Illumination embedded (89%), Enlogic embedded (89%), lwIP (89%), Smart Electronic
embedded (89%)

OS CPE: cpe:/h:2n:helios cpe:/h:grandstream:gxp1105 cpe:/h:garmin:virb_elite

cpe:/h:advanced_illumination:dcs-100e cpe:/a:lwip_project:lwip

Aggressive OS guesses: 2N Helios IP VoIP doorbell (98%), Grandstream GXP1105 VoIP phone (98%),
Garmin Virb Elite action camera (95%), Advanced Illumination DCS-100E lighting controller (89%),
Enlogic PDU (FreeRTOS/lwIP) (89%), Smart Mirage CX06 satellite receiver (89%)

No exact OS matches for host (test conditions non-ideal).

OS detection performed. Please report any incorrect results at https://nmap.org/submit/ .

Nmap done: 1 IP address (1 host up) scanned in 138.26 seconds

nmap -sSV -A 103.57.125.20

Starting Nmap 7.93 ( https://nmap.org ) at 2023-03-15 05:40 EDT

Stats: 0:00:01 elapsed; 0 hosts completed (0 up), 1 undergoing Ping Scan

Parallel DNS resolution of 1 host. Timing: About 0.00% done

Nmap scan report for ns4.gturboserver.com (103.57.125.20)

Host is up (0.0051s latency).

Not shown: 991 filtered tcp ports (no-response)

PORT STATE SERVICE VERSION

21/tcp open tcpwrapped

|_ssl-date: TLS randomness does not represent time

| ssl-cert: Subject: commonName=ns4.gturboserver.com

| Subject Alternative Name: DNS:ns4.gturboserver.com, DNS:mail.ns4.gturboserver.com,

DNS:www.ns4.gturboserver.com

| Not valid before: 2023-02-12T00:00:00

|_Not valid after: 2023-05-13T23:59:59

53/tcp open tcpwrapped

| dns-nsid:

|_ bind.version: 9.11.4-P2-RedHat-9.11.4-26.P2.el7_9.9

80/tcp open tcpwrapped

|_http-server-header: Apache

110/tcp open tcpwrapped

| ssl-cert: Subject: commonName=ns4.gturboserver.com

| Subject Alternative Name: DNS:ns4.gturboserver.com, DNS:mail.ns4.gturboserver.com,

DNS:www.ns4.gturboserver.com

| Not valid before: 2023-02-12T00:00:00

|_Not valid after: 2023-05-13T23:59:59

143/tcp open tcpwrapped

| ssl-cert: Subject: commonName=ns4.gturboserver.com

| Subject Alternative Name: DNS:ns4.gturboserver.com, DNS:mail.ns4.gturboserver.com,

DNS:www.ns4.gturboserver.com

| Not valid before: 2023-02-12T00:00:00

|_Not valid after: 2023-05-13T23:59:59

|_imap-capabilities: Pre-login capabilities AUTH=PLAIN OK ENABLE post-login SASL-IR ID STARTTLS listed

more have AUTH=LOGINA0001 LOGIN-REFERRALS IMAP4rev1 IDLE NAMESPACE LITERAL+

443/tcp open tcpwrapped

|_ssl-date: TLS randomness does not represent time

| http-title: Site doesn't have a title (text/html).

|_Requested resource was https:///

| ssl-cert: Subject: commonName=abbahmanpower.com

| Subject Alternative Name: DNS:abbahmanpower.com, DNS:cpanel.abbahmanpower.com,

DNS:cpcalendars.abbahmanpower.com, DNS:cpcontacts.abbahmanpower.com,
DNS:mail.abbahmanpower.com, DNS:webdisk.abbahmanpower.com,
DNS:webmail.abbahmanpower.com, DNS:www.abbahmanpower.com

| Not valid before: 2023-02-22T00:00:00

|_Not valid after: 2023-05-23T23:59:59

|_http-server-header: Apache

587/tcp open tcpwrapped

| ssl-cert: Subject: commonName=ns4.gturboserver.com

| Subject Alternative Name: DNS:ns4.gturboserver.com, DNS:mail.ns4.gturboserver.com,

DNS:www.ns4.gturboserver.com

| Not valid before: 2023-02-12T00:00:00

|_Not valid after: 2023-05-13T23:59:59

|_ssl-date: TLS randomness does not represent time

| smtp-commands: ns4.gturboserver.com Hello ns4.gturboserver.com [157.45.209.178], SIZE 52428800,

8BITMIME, PIPELINING, PIPECONNECT, STARTTLS, HELP

|_ Commands supported: AUTH STARTTLS HELO EHLO MAIL RCPT DATA BDAT NOOP QUIT RSET HELP

993/tcp open tcpwrapped

| ssl-cert: Subject: commonName=ns4.gturboserver.com

| Subject Alternative Name: DNS:ns4.gturboserver.com, DNS:mail.ns4.gturboserver.com,

DNS:www.ns4.gturboserver.com

| Not valid before: 2023-02-12T00:00:00

|_Not valid after: 2023-05-13T23:59:59

|_imap-capabilities: Pre-login capabilities AUTH=PLAIN OK ENABLE post-login SASL-IR ID listed more

have AUTH=LOGINA0001 LOGIN-REFERRALS IMAP4rev1 IDLE NAMESPACE LITERAL+

995/tcp open tcpwrapped

| ssl-cert: Subject: commonName=ns4.gturboserver.com

| Subject Alternative Name: DNS:ns4.gturboserver.com, DNS:mail.ns4.gturboserver.com,
DNS:www.ns4.gturboserver.com

| Not valid before: 2023-02-12T00:00:00

|_Not valid after: 2023-05-13T23:59:59

Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port

Device type: storage-misc

Running (JUST GUESSING): British Gas embedded (92%)

Aggressive OS guesses: British Gas GS-Z3 data logger (92%)

No exact OS matches for host (test conditions non-ideal).

Network Distance: 1 hop

TRACEROUTE (using port 80/tcp)

HOP RTT ADDRESS

1 1.65 ms ns4.gturboserver.com (103.57.125.20)

OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .

Nmap done: 1 IP address (1 host up) scanned in 49.50 seconds

nmap -sSV -p U:53,T:21,22,23,80

103.57.125.20
Starting Nmap 7.93 ( https://nmap.org ) at 2023-03-15 05:44 EDT

WARNING: Your ports include "U:" but you haven't specified UDP scan with -sU.

Stats: 0:00:02 elapsed; 0 hosts completed (0 up), 1 undergoing Ping Scan

Parallel DNS resolution of 1 host. Timing: About 0.00% done

Nmap scan report for ns4.gturboserver.com (103.57.125.20)

Host is up (0.028s latency).

PORT STATE SERVICE VERSION

21/tcp open ftp Pure-FTPd

22/tcp filtered ssh

23/tcp filtered telnet

80/tcp open http Apache httpd

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .

Nmap done: 1 IP address (1 host up) scanned in 15.19 seconds