[root@ding nmap]# nmap -sS -sV -p- -vvv --reason --webxml -oA Tcp.VMCM.R5601D174.20180913.gold2M002CM01 10.223.1.118 Starting Nmap 7.70 ( https://nmap.org ) at 2018-09-13 14:16 CST NSE: Loaded 43 scripts for scanning. Initiating Ping Scan at 14:16 Scanning 10.223.1.118 [4 ports] Completed Ping Scan at 14:16, 0.01s elapsed (1 total hosts) mass_dns: warning: Unable to determine any DNS servers. Reverse DNS is disabled. Try using --system-dns or specify valid servers with --dns-servers DNS resolution of 1 IPs took 0.00s. Mode: Async [#: 0, OK: 0, NX: 0, DR: 0, SF: 0, TR: 0, CN: 0] Initiating SYN Stealth Scan at 14:16 Scanning 10.223.1.118 [65535 ports] Discovered open port 443/tcp on 10.223.1.118 Discovered open port 8080/tcp on 10.223.1.118 Discovered open port 22/tcp on 10.223.1.118 Discovered open port 15000/tcp on 10.223.1.118 Discovered open port 14001/tcp on 10.223.1.118 SYN Stealth Scan Timing: About 31.06% done; ETC: 14:18 (0:01:09 remaining) Discovered open port 1099/tcp on 10.223.1.118 Discovered open port 14006/tcp on 10.223.1.118 Discovered open port 14005/tcp on 10.223.1.118 Discovered open port 15001/tcp on 10.223.1.118 Discovered open port 8443/tcp on 10.223.1.118 Discovered open port 14003/tcp on 10.223.1.118 Discovered open port 14004/tcp on 10.223.1.118 Discovered open port 14000/tcp on 10.223.1.118 Completed SYN Stealth Scan at 14:17, 65.59s elapsed (65535 total ports) Initiating Service scan at 14:17 Scanning 13 services on 10.223.1.118 Completed Service scan at 14:18, 38.58s elapsed (13 services on 1 host) NSE: Script scanning 10.223.1.118. NSE: Starting runlevel 1 (of 2) scan. Initiating NSE at 14:18 Completed NSE at 14:18, 0.12s elapsed NSE: Starting runlevel 2 (of 2) scan. Initiating NSE at 14:18 Completed NSE at 14:18, 1.00s elapsed Nmap scan report for 10.223.1.118 Host is up, received echo-reply ttl 61 (0.00021s latency). Scanned at 2018-09-13 14:16:45 CST for 105s Not shown: 64406 filtered ports, 1116 closed ports Reason: 64406 no-responses and 1116 resets PORT STATE SERVICE REASON VERSION 22/tcp open ssh syn-ack ttl 61 OpenSSH 7.4 (protocol 2.0) 443/tcp open ssl/http syn-ack ttl 61 Apache httpd 1099/tcp open rmiregistry syn-ack ttl 61 Java RMI 8080/tcp open http syn-ack ttl 61 Apache Tomcat/Coyote JSP engine 1.1 8443/tcp open ssl/https-alt syn-ack ttl 61 - 14000/tcp open rmiregistry syn-ack ttl 61 Java RMI 14001/tcp open giop syn-ack ttl 61 CORBA naming service 14003/tcp open rmiregistry syn-ack ttl 61 Java RMI 14004/tcp open rmiregistry syn-ack ttl 61 Java RMI 14005/tcp open rmiregistry syn-ack ttl 61 Java RMI 14006/tcp open rmiregistry syn-ack ttl 61 Java RMI 15000/tcp open hydap? syn-ack ttl 61 15001/tcp open unknown syn-ack ttl 61 3 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service : ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port8443-TCP:V=7.70%T=SSL%I=7%D=9/13%Time=5B9A011A%P=x86_64-redhat-linu SF:x-gnu%r(GetRequest,555,"HTTP/1\.1\x20404\x20Not\x20Found\r\nCache-Contr SF:ol:\x20private\r\nExpires:\x20Thu,\x2001\x20Jan\x201970\x2008:00:00\x20 SF:CST\r\nx-frame-options:\x20SAMEORIGIN\r\nStrict-Transport-Security:\x20 SF:max-age=500;\x20includeSubDomains;\x20preload\r\nContent-Security-Polic SF:y:\x20default-src\x20'self'\x20'unsafe-inline'\x20'unsafe-eval';\x20con SF:nect-src\x20wss:\x20'self';\x20img-src\x20data:\x20'self';\x20frame-anc SF:estors\x20'self'\r\nContent-Type:\x20text/html\r\nContent-Length:\x2091 SF:9\r\nDate:\x20Wed,\x2012\x20Sep\x202018\x2022:25:40\x20GMT\r\nConnectio SF:n:\x20close\r\nServer:\x20-\r\n\r\n\n\n\n40 SF:4\x20-\x20Page\x20Not\x20Found\n\n\n\n\t\n\t\t\n\t\t\t

\n\ SF:t\t\t\t!404page\x SF:20not\n\t\t\t\t\tfound\n\t\t\t

\n\t\t\n\t\t\n\t\t\t

The\x20page\x20you\x20were\x20looking\x20for SF:\x20could\x20not\x20be\x20found\.

\n\t\t\t

WARNING:\x20Anyo")%r(H SF:TTPOptions,1CA,"HTTP/1\.1\x20200\x20OK\r\nCache-Control:\x20private\r\n SF:Expires:\x20Thu,\x2001\x20Jan\x201970\x2008:00:00\x20CST\r\nx-frame-opt SF:ions:\x20SAMEORIGIN\r\nStrict-Transport-Security:\x20max-age=500;\x20in SF:cludeSubDomains;\x20preload\r\nContent-Security-Policy:\x20default-src\ SF:x20'self'\x20'unsafe-inline'\x20'unsafe-eval';\x20connect-src\x20wss:\x SF:20'self';\x20img-src\x20data:\x20'self';\x20frame-ancestors\x20'self'\r SF:\nAllow:\x20GET,\x20HEAD,\x20POST,\x20PUT,\x20DELETE,\x20OPTIONS\r\nCon SF:tent-Length:\x200\r\nDate:\x20Wed,\x2012\x20Sep\x202018\x2022:25:40\x20 SF:GMT\r\nConnection:\x20close\r\nServer:\x20-\r\n\r\n")%r(FourOhFourReque SF:st,555,"HTTP/1\.1\x20404\x20Not\x20Found\r\nCache-Control:\x20private\r SF:\nExpires:\x20Thu,\x2001\x20Jan\x201970\x2008:00:00\x20CST\r\nx-frame-o SF:ptions:\x20SAMEORIGIN\r\nStrict-Transport-Security:\x20max-age=500;\x20 SF:includeSubDomains;\x20preload\r\nContent-Security-Policy:\x20default-sr SF:c\x20'self'\x20'unsafe-inline'\x20'unsafe-eval';\x20connect-src\x20wss: SF:\x20'self';\x20img-src\x20data:\x20'self';\x20frame-ancestors\x20'self' SF:\r\nContent-Type:\x20text/html\r\nContent-Length:\x20919\r\nDate:\x20We SF:d,\x2012\x20Sep\x202018\x2022:25:40\x20GMT\r\nConnection:\x20close\r\nS SF:erver:\x20-\r\n\r\n\n\n\n404\x20-\x20Page\x SF:20Not\x20Found\n\n\n\n\t\n\t\t\n\t\t\t

\n\t\t\t\t!404page\x20not\n\t\t\t\t\ SF:tfound\n\t\t\t

\n\t\t\n\t\t\ SF:n\t\t\t

The\x20page\x20you\x20were\x20looking\x20for\x20could\x20not SF:\x20be\x20found\.

\n\t\t\t

WARNING:\x20Anyo"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port15000-TCP:V=7.70%I=7%D=9/13%Time=5B9A0135%P=x86_64-redhat-linux-gnu SF:%r(giop,4C,"GIOP\x01\0\0\x01\0\0\0@\0\0\0\0\0\0\0\x01\0\0\0\x02\0\0\0'I SF:DL:omg\.org/CORBA/OBJECT_NOT_EXIST:1\.0\0\0\0\0\0\0\0\0\0\x01"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port15001-TCP:V=7.70%I=7%D=9/13%Time=5B9A0135%P=x86_64-redhat-linux-gnu SF:%r(giop,4C,"GIOP\x01\0\0\x01\0\0\0@\0\0\0\0\0\0\0\x01\0\0\0\x02\0\0\0'I SF:DL:omg\.org/CORBA/OBJECT_NOT_EXIST:1\.0\0\0\0\0\0\0\0\0\0\x01"); Service Info: Host: loopback Read data files from: /usr/bin/../share/nmap Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 105.59 seconds Raw packets sent: 129945 (5.718MB) | Rcvd: 1130 (45.240KB) [root@ding nmap]#