sudo nmap -v -O -A -sS 192.168.1.254
Starting Nmap 5.21 (
http://nmap.org ) at 2012-11-04 17:12 WET
NSE: Loaded 36 scripts for scanning.
Initiating ARP Ping Scan at 17:12
Scanning 192.168.1.254 [1 port]
Completed ARP Ping Scan at 17:12, 0.01s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 17:12
Completed Parallel DNS resolution of 1 host. at 17:12, 0.01s elapsed
Initiating SYN Stealth Scan at 17:12
Scanning dsldevice.lan (192.168.1.254) [1000 ports]
Discovered open port 443/tcp on 192.168.1.254
Discovered open port 21/tcp on 192.168.1.254
Discovered open port 1723/tcp on 192.168.1.254
Completed SYN Stealth Scan at 17:12, 8.23s elapsed (1000 total ports)
Initiating Service scan at 17:12
Scanning 3 services on dsldevice.lan (192.168.1.254)
Completed Service scan at 17:13, 81.59s elapsed (3 services on 1 host)
Initiating OS detection (try #1) against dsldevice.lan (192.168.1.254)
Retrying OS detection (try #2) against dsldevice.lan (192.168.1.254)
NSE: Script scanning 192.168.1.254.
NSE: Starting runlevel 1 (of 1) scan.
Initiating NSE at 17:13
Completed NSE at 17:13, 8.26s elapsed
NSE: Script Scanning completed.
Nmap scan report for dsldevice.lan (192.168.1.254)
Host is up (0.0027s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
21/tcp open ftp Alcatel Speedtouch aDSL router ftpd
443/tcp open ssl/sip (SIP end point; Status: 400 Bad Request)
1723/tcp open pptp THOMSON (Firmware: 1)
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at
http://www.insecure.org/cgi-bin/servicefp-submit.cgi :
SF-Port443-TCP:V=5.21%T=SSL%I=7%D=11/4%Time=5096A1FD%P=x86_64-unknown-linux-gnu%r(GetRequest,3913,"HTTP/1\.0\x20200\x20OK\r\nDate:\x20Sun,\x2004\x20N
SF:ov\x202012\x2017:12:29\x20GMT\r\nServer:\x20\r\nCache-control:\x20no-ca
SF:che=\"set-cookie\"\r\nContent-type:\x20text/html\r\nContent-length:\x20
SF:14375\r\nConnection:\x20close\r\nSet-Cookie:\x20xAuth_SESSION_ID=pnvwr0
SF:cN6v1Kv6F/I16QrgA=;\x20path=/;\x20\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x
SF:20\"-//W3C//DTD\x20HTML\x204\.01\x20Transitional//EN\"\x20\"
http://www\SF:.w3\.org/TR/html4/loose\.dtd\">\n<html>\n<head>\n\x20\x20<title>Thomson
SF:\x20Gateway\x20-\x20In\xc3\xadcio</title>\n\x20\x20<meta\x20http-equiv=
SF:\"Content-Type\"\x20content=\"text/html;\x20charset=utf-8\">\n\x20\x20<
SF:script\x20type=\"text/javascript\">var\x20g_navitem\x20=\x20-1;</script
SF:>\n\x20\x20<script\x20type=\"text/javascript\">\x20var\x20g_focus\x20=\
SF:x20-1;</script>\n\x20\x20<script\x20type='text/javascript'\x20src='/uti
SF:l\.js'></script>\n\x20\x20<link\x20rel=\"stylesheet\"\x20type=\"text/cs
SF:s\"\x20href=\"/styles\.css\">\n</head>\n<body\x20onLoad=\"setFocus\(\);
SF:\"\x20height=\"100%\"\x20style=\"margin:0px;\">\n\x20\x20<noscript>\n\x
SF:20\x20\x20\x20<h1>THOMSON\x20-\x20Thomson</h1>\n\x20\x20\x20\x20<h4>Par
SF:a\x20consultar\x20a\x20interface\x20Web\x20do\x20Technicolor\x20Gateway
SF:,\x20o\x20seu\x20browser\x20d")%r(HTTPOptions,107,"HTTP/1\.0\x20200\x20
SF:OK\r\nDate:\x20Sun,\x2004\x20Nov\x202012\x2017:12:34\x20GMT\r\nServer:\
SF:x20\r\nContent-type:\x20text/html\r\nContent-length:\x200\r\nConnection
SF::\x20close\r\nSet-Cookie:\x20xAuth_SESSION_ID=rLvQTlQLdYFAAo7CsdQGhwA=;
SF:\x20path=/;\x20\r\nCache-control:\x20no-cache=\"set-cookie\"\r\nAllow:\
SF:x20OPTIONS,TRACE,GET,POST\r\n\r\n")%r(RTSPRequest,135,"RTSP/1\.0\x20400
SF:\x20Bad\x20Request\r\nServer:\x20\r\nDate:\x20Sun,\x2004\x20Nov\x202012
SF:\x2017:12:34\x20GMT\r\nConnection:\x20keep-alive\r\nKeep-Alive:\x20time
SF:out=60,\x20max=2000\r\nContent-Type:\x20text/html\r\nContent-length:\x2
SF:0130\r\n\r\n<HTML><HEAD><TITLE>Document\x20Error:\x20Bad\x20Request</TI
SF:TLE></HEAD>\r\n<BODY><H2>Access\x20Error:\x20400\x20--\x20Bad\x20Reques
SF:t</H2>\r\n</BODY></HTML>\r\n\r\n");
MAC Address: 58:98:35:56:B0:58 (Unknown)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: firewall|broadband router|printer|general purpose|WAP
Running (JUST GUESSING) : Nokia IPSO 4.X (92%), Thomson embedded (90%), HP embedded (88%), Ricoh embedded (88%), IBM AIX 5.X (87%), AirSpan embedded (85%)
Aggressive OS guesses: Nokia firewall (IPSO 4.1Build19) (92%), Thomson ST 536i ADSL modem (90%), Nokia IP650 firewall (IPSO 4.0 and CheckPoint Firewall-1/VPN-1 software) (90%), HP LaserJet 4300 JetDirect FW R.25.57 (88%), Ricoh Aficio AP400N printer (88%), IBM AIX 5.3 (87%), AirSpan ProST WiMAX access point (85%)
No exact OS matches for host (test conditions non-ideal).
Uptime guess: 0.325 days (since Sun Nov 4 09:25:27 2012)
Network Distance: 1 hop
TCP Sequence Prediction: Difficulty=257 (Good luck!)
IP ID Sequence Generation: Incremental
Service Info: Host: SpeedTouch; Device: broadband router
HOP RTT ADDRESS
1 2.73 ms dsldevice.lan (192.168.1.254)
Read data files from: /usr/share/nmap
OS and Service detection performed. Please report any incorrect results at
http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 102.53 seconds
Raw packets sent: 2084 (96.026KB) | Rcvd: 25 (1566B)