#ShowUsTheHorse - Pruitt #SHOWUSTHEHORSE - Info Starting Nmap 6.00 ( http://nmap.org ) at 2015-07-30 10:07 EEST NSE: Loaded 17 scripts for scanning. Initiating SYN Stealth Scan at 10:07 Scanning scottpruitt.com (23.229.204.135) [22 ports] Discovered open port 443/tcp on 23.229.204.135 Discovered open port 25/tcp on 23.229.204.135 Discovered open port 80/tcp on 23.229.204.135 Discovered open port 993/tcp on 23.229.204.135 Discovered open port 143/tcp on 23.229.204.135 Discovered open port 22/tcp on 23.229.204.135 Discovered open port 110/tcp on 23.229.204.135 Discovered open port 21/tcp on 23.229.204.135 Discovered open port 995/tcp on 23.229.204.135 Discovered open port 465/tcp on 23.229.204.135 Discovered open port 3306/tcp on 23.229.204.135 Completed SYN Stealth Scan at 10:07, 1.59s elapsed (22 total ports) Initiating Service scan at 10:07 Scanning 11 services on scottpruitt.com (23.229.204.135) Completed Service scan at 10:07, 21.73s elapsed (11 services on 1 host) NSE: Script scanning 23.229.204.135. Nmap scan report for scottpruitt.com (23.229.204.135) Host is up (0.16s latency). PORT STATE SERVICE VERSION 21/tcp open ftp Pure-FTPd 22/tcp open ssh OpenSSH 5.3 (protocol 2.0) 23/tcp filtered telnet 25/tcp open smtp Exim smtpd 4.85 80/tcp open http Apache httpd 2.4.12 110/tcp open pop3 Dovecot pop3d 143/tcp open imap Dovecot imapd 179/tcp filtered bgp 443/tcp open ssl/http Apache httpd 2.4.12 465/tcp open ssl/smtp Exim smtpd 4.85 993/tcp open ssl/imap Dovecot imapd 995/tcp open ssl/pop3 Dovecot pop3d 1433/tcp filtered ms-sql-s 1720/tcp filtered H.323/Q.931 1723/tcp filtered pptp 3306/tcp open mysql MySQL 5.5.41-cll-lve 3389/tcp filtered ms-wbt-server 5060/tcp filtered sip 5900/tcp filtered vnc 8000/tcp filtered http-alt 8080/tcp filtered http-proxy 8443/tcp filtered https-alt Service Info: Host: p3plcpnl0667.prod.phx3.secureserver.net Service detection performed. Please report any incorrect results at http://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 24.08 seconds Raw packets sent: 33 (1.452KB) | Rcvd: 11 (484B) 199.107.32.12 about.ok.gov 204.62.25.85 af.ok.gov 199.107.32.12 ag.ok.gov 199.107.32.12 alerts.ok.gov apps.ok.gov alias ok-prd-web.oklahoma-gl.com ok-prd-web.oklahoma-gl.com address 206.16.212.27 199.107.32.12 auction.ok.gov 199.107.32.12 banking.ok.gov careers.ok.gov alias www.jobaps.com www.jobaps.com address 66.116.110.120 (http://www.jobaps.com address 66.116.110.120) 199.107.32.12 cert.ok.gov 199.107.32.12 cms.ok.gov 204.87.81.14 crm.ok.gov data.ok.gov alias oklahoma.socrata.com oklahoma.socrata.com address 216.227.229.151 199.107.32.12 education.ok.gov 204.61.3.146 ftp.ok.gov 199.107.32.12 go.ok.gov 204.62.18.151 helpdesk.ok.gov jobs.ok.gov alias www.jobaps.com www.jobaps.com address 66.116.110.120 (http://www.jobaps.com address 66.116.110.120) 199.190.129.150 mailgwi1.ok.gov 199.190.129.151 mailgwi2.ok.gov 199.190.129.152 mailgwo1.ok.gov 199.190.129.153 mailgwo2.ok.gov 199.190.129.155 smtpmail.ok.gov 199.190.129.150 mail.ok.gov 199.107.32.12 media.ok.gov 204.62.25.62 ntp.ok.gov 204.62.25.111 pgp.ok.gov 192.163.193.254 projects.ok.gov 199.190.129.133 graham.osf.ok.gov 199.190.129.130 mailgwm1.ok.gov 199.190.129.134 smg1.osf.ok.gov 199.190.129.135 smg2.osf.ok.gov 199.190.129.136 mailgwi3.ok.gov 199.190.129.137 mailgwo3.ok.gov 199.190.129.138 eml-rly01.ok.gov 199.190.129.139 mailman.ok.gov 199.190.129.138 relay.ok.gov 204.61.11.250 secure.ok.gov 199.107.32.12 services.ok.gov 199.190.129.131 smtp.ok.gov 199.190.129.136 spam.ok.gov 172.16.251.2 time.ok.gov 172.16.250.2 time.ok.gov 204.62.23.75 tulsa.ok.gov 199.107.32.12 vendors.ok.gov 204.62.25.23 voicemail.ok.gov 204.62.24.100 vpn.ok.gov 204.61.12.244 webdev.ok.gov 204.62.25.83 webmail.ok.gov 204.62.25.37 lampro.osf.ok.gov 204.62.25.32 wiki.ok.gov 199.107.32.12 www.ok.gov 172.16.250.0-255 : 1 hostnames found. 172.16.251.0-255 : 1 hostnames found. 192.163.193.0-255 : 1 hostnames found. 199.107.32.0-255 : 13 hostnames found. 199.190.129.0-255 : 17 hostnames found. 204.61.11.0-255 : 1 hostnames found. 204.61.12.0-255 : 1 hostnames found. 204.61.3.0-255 : 1 hostnames found. 204.62.18.0-255 : 1 hostnames found. 204.62.23.0-255 : 1 hostnames found. 204.62.24.0-255 : 1 hostnames found. 204.62.25.0-255 : 7 hostnames found. 204.87.81.0-255 : 1 hostnames found.