BackTrack 5 tools

1. fping 可以指定一个ip范围

root@root:~# fping -g 10.9.128.0 10.9.128.25510.9.128.1 is alive10.9.128.6 is alive10.9.128.7 is alive10.9.128.9 is alive10.9.128.10 is alive10.9.128.11 is alive

2. httprint

root@root:/pentest/enumeration/www/httprint/linux# ./httprint -h 202.108.253.37 -s signatures.txt httprint v0.301 (beta) - web server fingerprinting tool(c) 2003-2005 net-square solutions pvt. ltd. - see readme.txthttp://net-square.com/httprint/[e-mail] Printing on http://202.108.253.37:80/Finger Printing Completed on http://202.108.253.37:80/--------------------------------------------------Host: 202.108.253.37Derived Signature:nginx811C9DC5E2CE6926811C9DC5811C9DC5811C9DC594DF1BD04276E4BB811C9DC50D7645B5811C9DC5811C9DC5CD37187C11DDC7D78398721E811C9DC5811C9DC5E2CE6926811C9DC5811C9DC5811C9DC5E2CE6927811C9DC5E2CE6926811C9DC5811C9DC5E1CE67B1811C9DC5811C9DC5811C9DC56ED3C2956ED3C295E2CE6923E2CE69236ED3C295811C9DC5E2CE6927E2CE6923Banner Reported: nginxBanner Deduced: Microsoft-IIS/6.0Score: 90Confidence: 54.22------------------------Scores: Microsoft-IIS/6.0: 90 54.22Apache/1.3.27: 75 27.68Apache/1.3.26: 75 27.68Apache/1.3.[4-24]: 75 27.68Apache/1.3.[1-3]: 75 27.68Apache/2.0.x: 72 23.67thttpd: 69 20.06Agranat-EmWeb: 68 18.93Apache/1.2.6: 65 15.80Lotus-Domino/6.x: 64 14.83Netscape-Enterprise/4.1: 62 13.01TUX/2.0 (Linux): 62 13.01Microsoft-IIS/4.0: 57  9.08Microsoft-IIS/5.0: 57  9.08Microsoft-IIS/5.0 ASP.NET: 57  9.08Microsoft-IIS/5.1: 57  9.08Netscape-Enterprise/6.0: 57  9.08Netscape-Enterprise/3.6 SP2: 54  7.12cisco-IOS: 54  7.12Lexmark Optra Printer: 52  5.96Netscape-Enterprise/3.5.1G: 49  4.44Com21 Cable Modem: 49  4.44SMC Wireless Router 7004VWBR: 49  4.44MikroTik RouterOS: 49  4.44IDS-Server/3.2.2: 49  4.44Belkin Wireless router: 49  4.44WebSitePro/2.3.18: 49  4.44VisualRoute 2005 Server Edition: 49  4.44Linksys WRTP54G: 49  4.44JC-HTTPD/1.14.18: 49  4.44BaseHTTP/0.3 Python/2p3.3 edna/0.4: 47  3.56RomPager/4.07 UPnP/1.0: 47  3.56Zeus/4.1: 46  3.16HP-ChaiServer/3.0: 44  2.44Oracle Servlet Engine: 44  2.44Zeus/4_2: 43  2.11Zope/2.6.0 ZServer/1.1b1: 41  1.52Jetty (unverified): 40  1.26Netscape-Enterprise/3.5.1: 39  1.02Domino-Go-Webserver/4.6.2.8: 39  1.02AOLserver/3.5.6: 39  1.02TightVNC: 39  1.02dwhttpd (Sun Answerbook): 39  1.02Intel NetportExpressPro/1.0: 39  1.02Boa/0.94.11: 39  1.02RealVNC/4.0: 39  1.02GWS/2.1 Google Web Server: 39  1.02Stronghold/2.4.2-Apache/1.3.x: 21  0.64AOLserver/3.4.2-3.5.1: 21  0.64Jana Server/1.45: 21  0.64Xerver_v3: 21  0.64Lotus-Domino/5.x: 24  0.64Microsoft-IIS/5.0 Virtual Host: 24  0.64Adaptec ASM 1.1: 24  0.64WebLogic XMLX Module 8.1: 24  0.64SunONE WebServer 6.0: 20  0.63Netscape-Enterprise/4.1: 20  0.63MiniServ/0.01 Webmin: 20  0.63CompaqHTTPServer/4.2: 20  0.63fnord: 20  0.63Oracle XML DB/Oracle9i: 25  0.62Allied Telesyn Ethernet switch: 25  0.62JRun Web Server: 25  0.62Linksys AP2: 37  0.59Linksys with Talisman firmware: 37  0.59Orion/2.0x: 27  0.55Jetty/4.2.2: 15  0.49Netgear MR814v2 - IP_SHARER WEB 1.0: 15  0.49Tanberg 880 video conf: 15  0.49WebLogic Server 8.x: 14  0.45EHTTP/1.1: 14  0.45WebLogic Server 8.1: 14  0.45Tomcat Web Server/3.2.3: 14  0.45Hewlett Packard xjet: 29  0.43HP Jet-Direct Print Server: 29  0.43Resin/3.0.8: 29  0.43AssureLogic/2.0: 13  0.41Netscape-Enterprise/3.6: 30  0.36AkamaiGHost: 30  0.36Cisco-HTTP: 10  0.28CompaqHTTPServer-SSL/4.2: 10  0.283Com/v1.0: 10  0.28Snap Appliances, Inc./3.x: 10  0.28Microsoft ISA Server (internal): 10  0.28Microsoft ISA Server (external): 10  0.28NetPort Software 1.1: 10  0.28WebSENSE/1.0: 10  0.28Cisco Pix 6.2: 10  0.28MailEnable-HTTP/5.0: 10  0.28MiniServ/0.01: 10  0.28Tcl-Webserver/3.4.2: 10  0.28Stronghold/4.0-Apache/1.3.x: 31  0.27EMWHTTPD/1.0: 35  0.24Ipswitch-IMail/8.12: 35  0.24Surgemail webmail (DManager): 35  0.24Apache-Tomcat/4.1.29: 32  0.16Microsoft-IIS/URLScan: 34  0.09NetWare-Enterprise-Web-Server/5.1: 34  0.09CompaqHTTPServer/1.0: 34  0.09Linksys Print Server: 5  0.08Zeus/4.0: 33  0.04squid/2.5.STABLE5: 33  0.04RemotelyAnywhere: 0  0.00Linksys AP1: 0  0.00Linksys Router: 0  0.00ServletExec: 0  0.00NetBuilderHTTPDv0.1: 0  0.00Linksys BEFSR41/BEFSR11/BEFSRU31: 0  0.00Ubicom/1.1: 0  0.00Ubicom/1.1 802.11b: 0  0.00--------------------------------------------------

3. dmitry

root@root:~# dmitry -i 202.108.253.37Deepmagic Information Gathering Tool"There be some deep magic going on"ERROR: Unable to locate Host Name for 202.108.253.37Continuing with limited modulesHostIP:202.108.253.37HostName:Gathered Inet-whois information for 202.108.253.37---------------------------------inetnum:        202.108.0.0 - 202.108.255.255netname:        UNICOM-BJdescr:          China Unicom Beijing province networkdescr:          China Unicomcountry:        CNadmin-c:        CH1302-APtech-c:         SY21-APmnt-by:         APNIC-HMmnt-lower:      MAINT-CNCGROUP-BJmnt-routes:     MAINT-CNCGROUP-RRchanged:        [e-mail] 20031017status:         ALLOCATED PORTABLEchanged:        [e-mail] 20060124changed:        [e-mail] 20090507changed:        [e-mail] 20090508source:         APNICperson:         ChinaUnicom Hostmasternic-hdl:        CH1302-APe-mail:         [e-mail]:        No.21,Jin-Rong Streetaddress:        Beijing,100033address:        P.R.Chinaphone:          [phone]fax-no:         [phone]country:        CNchanged:        [e-mail] 20090408mnt-by:         MAINT-CNCGROUPsource:         APNICperson:         sun yingaddress:        fu xing men nei da jie 97, Xicheng Districtaddress:        Beijing 100800country:        CNphone:          [phone]fax-no:         [phone]e-mail:         [e-mail]-hdl:        SY21-APmnt-by:         MAINT-CNCGROUP-BJchanged:        [e-mail] 19980824changed:        [e-mail] 20060717changed:        [e-mail]  20090630source:         APNICAll scans completed, exiting

root@root:~# dmitry -w soufun.comDeepmagic Information Gathering Tool"There be some deep magic going on"HostIP:202.108.253.57HostName:soufun.comGathered Inic-whois information for soufun.com---------------------------------   Domain Name: SOUFUN.COM   Registrar: NETWORK SOLUTIONS, LLC.   Whois Server: whois.networksolutions.com   Referral URL: http://www.networksolutions.com/en_US/   Name Server: NS.SOUFUN.COM   Name Server: NS2.SOUFUN.COM   Name Server: NS3.SOUFUN.COM   Status: clientTransferProhibited   Updated Date: 29-nov-2012   Creation Date: 15-apr-1999   Expiration Date: 15-apr-2016>>> Last update of whois database: Sat, 23 Feb 2013 03:25:42 UTC <<<

4. arp spoof

需要设置ip_forward为1

对所有host响应gateway的mac是eth0的MAC

root@root:~# arpspoof -i eth0  10.9.128.10:1c:25:1e:d6:b7 ff:ff:ff:ff:ff:ff 0806 42: arp reply 10.9.128.1 is-at 0:1c:25:1e:d6:b70:1c:25:1e:d6:b7 ff:ff:ff:ff:ff:ff 0806 42: arp reply 10.9.128.1 is-at 0:1c:25:1e:d6:b7

5. dnsenum

root@root:/pentest/enumeration/dns/dnsenum# ./dnsenum.pl --enum nuomi.comdnsenum.pl VERSION:1.2Warning: can't load Net::Whois::IP module, whois queries disabled.-----   nuomi.com   ----------------------Host's addresses:----------------- nuomi.com.900INA123.125.38.239 nuomi.com.900INA123.125.38.240 nuomi.com.900INA123.125.38.241 nuomi.com.900INA123.125.38.2 nuomi.com.900INA123.125.38.3-------------Name servers:-------------  ns1.renren.com.211684INA123.125.40.215  ns2.renren.com.211684INA220.181.180.7  ns3.renren.com.211684INA60.28.219.15-----------MX record:-----------  mail.nuomi.com.900INA123.125.36.126---------------------Trying Zonetransfers:--------------------- Trying zonetransfer for nuomi.com on ns2.renren.com ...  Trying zonetransfer for nuomi.com on ns3.renren.com ...  Trying zonetransfer for nuomi.com on ns1.renren.com ... --------------------------------------------Scraping nuomi.com subdomains from Google:-------------------------------------------- ----   Google search page: 1   ----  ----   Google search page: 2   ----  ----   Google search page: 3   ----  ----   Google search page: 4   ----  ----   Google search page: 5   ----  ----   Google search page: 6   ----  ----   Google search page: 7   ----  ----   Google search page: 8   ----  ----   Google search page: 9   ----  ----   Google search page: 10   ----  ----   Google search page: 11   ----  ----   Google search page: 12   ----  ----   Google search page: 13   ----  ----   Google search page: 14   ---- Use of uninitialized value in subroutine entry at ./dnsenum.pl line 894. Google results: 0  perhaps Google is blocking our queries. Check manually.brute force file not specified, bay.

6. netenum -- find all the live hosts.

root@root:/pentest/enumeration/irpas# ifconfig eth0      Link encap:Ethernet  HWaddr 00:1c:25:1e:d6:b7            inet6 addr: fe80::21c:25ff:fe1e:d6b7/64 Scope:Link          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1          RX packets:384901 errors:0 dropped:0 overruns:0 frame:0          TX packets:341984 errors:0 dropped:0 overruns:0 carrier:0          collisions:0 txqueuelen:1000           RX bytes:553787460 (553.7 MB)  TX bytes:29804045 (29.8 MB)          Interrupt:20 Memory:fe000000-fe020000 lo        Link encap:Local Loopback            inet addr:127.0.0.1  Mask:255.0.0.0          inet6 addr: ::1/128 Scope:Host          UP LOOPBACK RUNNING  MTU:16436  Metric:1          RX packets:742 errors:0 dropped:0 overruns:0 frame:0          TX packets:742 errors:0 dropped:0 overruns:0 carrier:0          collisions:0 txqueuelen:0           RX bytes:274352 (274.3 KB)  TX bytes:274352 (274.3 KB)mon0      Link encap:UNSPEC  HWaddr 00-1F-3B-23-54-59-30-30-00-00-00-00-00-00-00-00            UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1          RX packets:3023258 errors:0 dropped:2281854 overruns:0 frame:0          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0          collisions:0 txqueuelen:1000           RX bytes:864092462 (864.0 MB)  TX bytes:0 (0.0 B)ppp0      Link encap:Point-to-Point Protocol            inet addr:10.9.131.2  P-t-P:10.9.128.1  Mask:255.255.255.255          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1492  Metric:1          RX packets:3520 errors:0 dropped:0 overruns:0 frame:0          TX packets:3883 errors:0 dropped:0 overruns:0 carrier:0          collisions:0 txqueuelen:3           RX bytes:3712512 (3.7 MB)  TX bytes:388275 (388.2 KB)wlan0     Link encap:Ethernet  HWaddr 00:1f:3b:23:54:59            UP BROADCAST MULTICAST  MTU:1500  Metric:1          RX packets:0 errors:0 dropped:0 overruns:0 frame:0          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0          collisions:0 txqueuelen:1000           RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)root@root:/pentest/enumeration/irpas# ./netenum 10.9.128.1/24 5 1118 targets found10.9.128.110.9.128.210.9.128.310.9.128.510.9.128.1410.9.128.1510.9.128.1610.9.128.2210.9.128.2310.9.128.2410.9.128.2510.9.128.2610.9.128.2710.9.128.2810.9.128.3310.9.128.3410.9.128.4210.9.128.4310.9.128.4410.9.128.4510.9.128.4710.9.128.4610.9.128.5010.9.128.5410.9.128.5510.9.128.5610.9.128.5910.9.128.6410.9.128.6910.9.128.7410.9.128.7610.9.128.7710.9.128.7810.9.128.7910.9.128.8610.9.128.8710.9.128.8810.9.128.8910.9.128.9510.9.128.9610.9.128.9710.9.128.9910.9.128.10010.9.128.10110.9.128.10210.9.128.10310.9.128.10510.9.128.10710.9.128.10810.9.128.10910.9.128.11110.9.128.11210.9.128.11710.9.128.11810.9.128.12510.9.128.12610.9.128.12710.9.128.13010.9.128.13510.9.128.13610.9.128.13810.9.128.13910.9.128.14010.9.128.14110.9.128.14210.9.128.14310.9.128.14410.9.128.14610.9.128.14710.9.128.14910.9.128.15010.9.128.15210.9.128.15410.9.128.15610.9.128.15710.9.128.15910.9.128.16210.9.128.16310.9.128.16610.9.128.16710.9.128.16810.9.128.16910.9.128.17010.9.128.17610.9.128.17810.9.128.17910.9.128.18110.9.128.18210.9.128.18510.9.128.18610.9.128.18710.9.128.19010.9.128.19610.9.128.19710.9.128.19910.9.128.20310.9.128.20810.9.128.21010.9.128.21110.9.128.21210.9.128.21410.9.128.21510.9.128.21610.9.128.21910.9.128.22010.9.128.22110.9.128.22610.9.128.22710.9.128.22810.9.128.23110.9.128.23410.9.128.23510.9.128.24010.9.128.24110.9.128.24510.9.128.24610.9.128.24710.9.128.253

7. protos

root@root:/pentest/enumeration/irpas# ./protos -i ppp0 -d 123.125.38.239 -v123.125.38.239 is aliveTARGET123.125.38.239Running in verbose modeAfterscan delay is 3running in fast scan - pause every 1 probescontinuing scan afterwards for 3 secssupported protocols will be reportedyou supplied the target(s) 123.125.38.239Scanning 123.125.38.239Port unreachable - therefore protocol UDP is runningPort unreachable - therefore protocol UDP is runningPort unreachable - therefore protocol UDP is runningPort unreachable - therefore protocol UDP is runningPort unreachable - therefore protocol UDP is running>>>>>>>>> RESULTS >>>>>>>>>>123.125.38.239 may be running (did not negate):ICMP IGMP ST TCP IGP NVP-II ARGUS XNET UDP DCN-MEAS PRM TRUNK-1 LEAF-1 RDP ISO-TP4 MFE-NSP SEP IDPR DDP TP++ IPv6 IPv6-Route IDRP GRE BNA AH SWIPE MOBILE SKIP IPv6-NoNxt 61 63 KRYPTOLAN IPPC SAT-MON IPCV CPHB PVP SUN-ND WB-EXPAK VMTP VINES NSFNET-IGP TCF OSPFIGP LARP AX.25 MICP ETHERIP 99PrivEncr IFMP PIM SCPS A/N SNP IPX-in-IP VRRP IATP SRP SMP PTP FIRE CRUDP IPLT PIPE FC 135 137 139 141 144 146 148 150 152 154 156 158 160 162 164 166 168 170 172 174 176 178 180 182 184 186 188 190 192 194 196 198 200 202 204 206 208 210 212 214 216 218 220 222 224 226 228 230 232 234 236 238 240 242 244 246 248 250 252 254 

root@root:/pentest/enumeration/irpas# ./protos -i ppp0 -d 10.9.128.1 -v10.9.128.1 is aliveTARGET10.9.128.1Running in verbose modeAfterscan delay is 3running in fast scan - pause every 1 probescontinuing scan afterwards for 3 secssupported protocols will be reportedyou supplied the target(s) 10.9.128.1Scanning 10.9.128.1Port unreachable - therefore protocol UDP is runningPort unreachable - therefore protocol UDP is runningPort unreachable - therefore protocol UDP is runningPort unreachable - therefore protocol UDP is runningPort unreachable - therefore protocol UDP is running>>>>>>>>> RESULTS >>>>>>>>>>10.9.128.1 may be running (did not negate):ICMP IGMP IPenc TCP UDP GRE 

8. nmap

root@root:~# nmap -v -A nuomi.comStarting Nmap 5.51 ( http://nmap.org ) at 2013-02-22 10:42 ESTNSE: Loaded 57 scripts for scanning.Initiating Ping Scan at 10:42Scanning nuomi.com (123.125.38.239) [4 ports]Completed Ping Scan at 10:42, 0.13s elapsed (1 total hosts)Initiating Parallel DNS resolution of 1 host. at 10:42Completed Parallel DNS resolution of 1 host. at 10:42, 0.00s elapsedInitiating SYN Stealth Scan at 10:42Scanning nuomi.com (123.125.38.239) [1000 ports]Discovered open port 80/tcp on 123.125.38.239Completed SYN Stealth Scan at 10:43, 4.32s elapsed (1000 total ports)Initiating Service scan at 10:43Scanning 1 service on nuomi.com (123.125.38.239)Completed Service scan at 10:43, 6.04s elapsed (1 service on 1 host)Initiating OS detection (try #1) against nuomi.com (123.125.38.239)Retrying OS detection (try #2) against nuomi.com (123.125.38.239)NSE: Script scanning 123.125.38.239.Initiating NSE at 10:43Completed NSE at 10:43, 0.10s elapsedNmap scan report for nuomi.com (123.125.38.239)Host is up (0.017s latency).Other addresses for nuomi.com (not scanned): 123.125.38.240 123.125.38.241 123.125.38.2 123.125.38.3Not shown: 999 filtered portsPORT   STATE SERVICE VERSION80/tcp open  http    nginx 1.2.0|_http-methods: No Allow or Public header in OPTIONS response (status code 301)Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed portAggressive OS guesses: Linux 2.6.9 (92%), Linux 2.6.9 - 2.6.27 (91%), ZoneAlarm Z100G WAP (91%), Linux 2.6.11 (89%), Linux 2.6.9 (CentOS 4.4) (89%), Riverbed Steelhead 200 proxy server (89%), Linux 2.6.18 (88%), Linux 2.6.28 (88%), Linux 2.6.30 (88%), Linux 2.6.5 (88%)No exact OS matches for host (test conditions non-ideal).Uptime guess: 8.039 days (since Thu Feb 14 09:46:30 2013)TCP Sequence Prediction: Difficulty=190 (Good luck!)IP ID Sequence Generation: All zerosTRACEROUTEHOP RTT      ADDRESS1   16.89 ms 123.125.38.239Read data files from: /usr/local/share/nmapOS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .Nmap done: 1 IP address (1 host up) scanned in 15.81 seconds           Raw packets sent: 2080 (95.204KB) | Rcvd: 23 (1.672KB)

root@root:~# nmap -sP 10.9.128.1/24Starting Nmap 5.51 ( http://nmap.org ) at 2013-02-22 10:49 ESTNmap scan report for 10.9.128.1Host is up (0.0023s latency).Nmap scan report for 10.9.128.5Host is up (0.0032s latency).Nmap scan report for 10.9.128.11Host is up (0.0025s latency).Nmap scan report for 10.9.128.13Host is up (0.0019s latency).Nmap scan report for 10.9.128.14Host is up (0.0016s latency).Nmap scan report for 10.9.128.15Host is up (0.0021s latency).Nmap scan report for 10.9.128.16Host is up (0.0014s latency).Nmap scan report for 10.9.128.23Host is up (0.0028s latency).Nmap scan report for 10.9.128.24Host is up (0.0013s latency).Nmap scan report for 10.9.128.25Host is up (0.0031s latency).Nmap scan report for 10.9.128.26Host is up (0.00093s latency).Nmap scan report for 10.9.128.27Host is up (0.0028s latency).Nmap scan report for 10.9.128.28Host is up (0.0030s latency).Nmap scan report for 10.9.128.33Host is up (0.014s latency).Nmap scan report for 10.9.128.34Host is up (0.00096s latency).Nmap scan report for 10.9.128.42Host is up (0.011s latency).Nmap scan report for 10.9.128.43Host is up (0.0020s latency).Nmap scan report for 10.9.128.44Host is up (0.0029s latency).Nmap scan report for 10.9.128.45Host is up (0.0020s latency).Nmap scan report for 10.9.128.46Host is up (0.014s latency).Nmap scan report for 10.9.128.47Host is up (0.0050s latency).Nmap scan report for 10.9.128.50Host is up (0.0017s latency).Nmap scan report for 10.9.128.53Host is up (0.012s latency).Nmap scan report for 10.9.128.55Host is up (0.0022s latency).Nmap scan report for 10.9.128.56Host is up (0.0013s latency).Nmap scan report for 10.9.128.59Host is up (0.0012s latency).Nmap scan report for 10.9.128.62Host is up (0.00094s latency).Nmap scan report for 10.9.128.69Host is up (0.0046s latency).Nmap scan report for 10.9.128.73Host is up (0.0018s latency).Nmap scan report for 10.9.128.74Host is up (0.0029s latency).Nmap scan report for 10.9.128.76Host is up (0.0024s latency).Nmap scan report for 10.9.128.77Host is up (0.0013s latency).Nmap scan report for 10.9.128.79Host is up (0.0015s latency).Nmap scan report for 10.9.128.86Host is up (0.0015s latency).Nmap scan report for 10.9.128.87Host is up (0.0024s latency).Nmap scan report for 10.9.128.89Host is up (0.0013s latency).Nmap scan report for 10.9.128.95Host is up (0.0023s latency).Nmap scan report for 10.9.128.96Host is up (0.0031s latency).Nmap scan report for 10.9.128.97Host is up (0.0013s latency).Nmap scan report for 10.9.128.100Host is up (0.00092s latency).Nmap scan report for 10.9.128.101Host is up (0.0031s latency).Nmap scan report for 10.9.128.102Host is up (0.0025s latency).Nmap scan report for 10.9.128.103Host is up (0.0020s latency).Nmap scan report for 10.9.128.105Host is up (0.0019s latency).Nmap scan report for 10.9.128.108Host is up (0.0020s latency).Nmap scan report for 10.9.128.111Host is up (0.0012s latency).Nmap scan report for 10.9.128.112Host is up (0.0010s latency).Nmap scan report for 10.9.128.117Host is up (0.0021s latency).Nmap scan report for 10.9.128.118Host is up (0.0019s latency).Nmap scan report for 10.9.128.119Host is up (0.0024s latency).Nmap scan report for 10.9.128.125Host is up (0.0031s latency).Nmap scan report for 10.9.128.127Host is up (0.0013s latency).Nmap scan report for 10.9.128.130Host is up (0.0022s latency).Nmap scan report for 10.9.128.135Host is up (0.0073s latency).Nmap scan report for 10.9.128.136Host is up (0.0019s latency).Nmap scan report for 10.9.128.138Host is up (0.0024s latency).Nmap scan report for 10.9.128.139Host is up (0.0073s latency).Nmap scan report for 10.9.128.140Host is up (0.0019s latency).Nmap scan report for 10.9.128.141Host is up (0.0021s latency).Nmap scan report for 10.9.128.142Host is up (0.0021s latency).Nmap scan report for 10.9.128.143Host is up (0.0029s latency).Nmap scan report for 10.9.128.144Host is up (0.0015s latency).Nmap scan report for 10.9.128.146Host is up (0.0018s latency).Nmap scan report for 10.9.128.147Host is up (0.0017s latency).Nmap scan report for 10.9.128.149Host is up (0.0034s latency).Nmap scan report for 10.9.128.150Host is up (0.0014s latency).Nmap scan report for 10.9.128.152Host is up (0.0014s latency).Nmap scan report for 10.9.128.154Host is up (0.0013s latency).Nmap scan report for 10.9.128.156Host is up (0.0011s latency).Nmap scan report for 10.9.128.157Host is up (0.0021s latency).Nmap scan report for 10.9.128.159Host is up (0.00080s latency).Nmap scan report for 10.9.128.162Host is up (0.00093s latency).Nmap scan report for 10.9.128.166Host is up (0.0014s latency).Nmap scan report for 10.9.128.167Host is up (0.00079s latency).Nmap scan report for 10.9.128.168Host is up (0.0015s latency).Nmap scan report for 10.9.128.169Host is up (0.0042s latency).Nmap scan report for 10.9.128.170Host is up (0.0015s latency).Nmap scan report for 10.9.128.176Host is up (0.0020s latency).Nmap scan report for 10.9.128.179Host is up (0.0023s latency).Nmap scan report for 10.9.128.181Host is up (0.0073s latency).Nmap scan report for 10.9.128.182Host is up (0.00093s latency).Nmap scan report for 10.9.128.185Host is up (0.0026s latency).Nmap scan report for 10.9.128.186Host is up (0.0032s latency).Nmap scan report for 10.9.128.187Host is up (0.0020s latency).Nmap scan report for 10.9.128.190Host is up (0.0055s latency).Nmap scan report for 10.9.128.196Host is up (0.0068s latency).Nmap scan report for 10.9.128.199Host is up (0.0022s latency).Nmap scan report for 10.9.128.203Host is up (0.0045s latency).Nmap scan report for 10.9.128.207Host is up (0.0017s latency).Nmap scan report for 10.9.128.208Host is up (0.0014s latency).Nmap scan report for 10.9.128.210Host is up (0.0018s latency).Nmap scan report for 10.9.128.211Host is up (0.0015s latency).Nmap scan report for 10.9.128.212Host is up (0.015s latency).Nmap scan report for 10.9.128.214Host is up (0.0020s latency).Nmap scan report for 10.9.128.215Host is up (0.0014s latency).Nmap scan report for 10.9.128.216Host is up (0.0054s latency).Nmap scan report for 10.9.128.219Host is up (0.0015s latency).Nmap scan report for 10.9.128.220Host is up (0.0017s latency).Nmap scan report for 10.9.128.221Host is up (0.0020s latency).Nmap scan report for 10.9.128.222Host is up (0.00093s latency).Nmap scan report for 10.9.128.226Host is up (0.00084s latency).Nmap scan report for 10.9.128.231Host is up (0.00082s latency).Nmap scan report for 10.9.128.234Host is up (0.0012s latency).Nmap scan report for 10.9.128.235Host is up (0.0016s latency).Nmap scan report for 10.9.128.241Host is up (0.0018s latency).Nmap scan report for 10.9.128.245Host is up (0.0020s latency).Nmap scan report for 10.9.128.246Host is up (0.013s latency).Nmap scan report for 10.9.128.247Host is up (0.0034s latency).Nmap scan report for 10.9.128.252Host is up (0.0010s latency).Nmap scan report for 10.9.128.253Host is up (0.0012s latency).Nmap done: 256 IP addresses (110 hosts up) scanned in 3.36 seconds

root@root:~# nmap -sS 119.167.213.153 (qingdaonews.com)Starting Nmap 5.51 ( http://nmap.org ) at 2013-02-22 10:53 ESTNmap scan report for 119.167.213.153Host is up (0.0077s latency).Not shown: 999 filtered portsPORT   STATE SERVICE80/tcp open  httpNmap done: 1 IP address (1 host up) scanned in 4.58 seconds

root@root:~# nmap -O 123.125.38.3Starting Nmap 5.51 ( http://nmap.org ) at 2013-02-22 10:54 ESTNmap scan report for 123.125.38.3Host is up (0.015s latency).Not shown: 974 filtered portsPORT      STATE SERVICE20/tcp    open  ftp-data30/tcp    open  unknown80/tcp    open  http146/tcp   open  iso-tp0222/tcp   open  rsh-spx555/tcp   open  dsf668/tcp   open  mecomm981/tcp   open  unknown1021/tcp  open  exp11061/tcp  open  kiosk1064/tcp  open  jstel1149/tcp  open  bvtsonar1583/tcp  open  simbaexpress1947/tcp  open  sentinelsrm2042/tcp  open  isis2191/tcp  open  tvbus2323/tcp  open  3d-nfsd2718/tcp  open  pn-requester22967/tcp  open  symantec-av3268/tcp  open  globalcatLDAP3369/tcp  open  satvid-datalnk3828/tcp  open  neteh14442/tcp open  unknown16000/tcp open  fmsas28201/tcp open  unknown54328/tcp open  unknownWarning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed portAggressive OS guesses: CipherLab 5100 time and attendance terminal (86%), Cisco Unified Communications Manager VoIP gateway (86%), Cisco IP Phone 7941 (86%), D-Link DCS-3220 or DCS-5300G webcam (86%), Efficient Networks SpeedStream 5100 ADSL router (86%), Hioki MEMORY HiCORDER 8855 digital oscilloscope (86%), DD-WRT v23 (Linux 2.4.36) (86%), Tomato 1.27 (Linux 2.4.20) (86%), Vyatta router (Linux 2.6.26) (86%), Linux 2.6.18 (86%)No exact OS matches for host (test conditions non-ideal).OS detection performed. Please report any incorrect results at http://nmap.org/submit/ .Nmap done: 1 IP address (1 host up) scanned in 27.39 seconds