Scan Time: Wed Dec 31 18:19:06 2025 Target: 196.191.102.91 ---------------------------------------- Starting Nmap 7.95 ( https://nmap.org ) at 2025-12-31 18:17 CET Nmap scan report for 196.191.102.91 Host is up (0.14s latency). Not shown: 997 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 21/tcp open ftp GNU Inetutils FTPd 1.4.1 | ftp-syst: | SYST: Version: Linux 3.18.24 | STAT: | RTK_GW FTP server status: | ftpd (GNU inetutils) 1.4.1 | Connected to (::ffff:23.88.40.46) | Waiting for user name | TYPE: ASCII, FORM: Nonprint; STRUcture: File; transfer MODE: Stream | No data connection |_End of status 23/tcp open telnet | fingerprint-strings: | GetRequest: | HTTP/1.0 | HTTP/1.0 | /bin/sh: GET: not found | Help: | HELP | HELP | /bin/sh: HELP: not found | NCP: | DmdT^@^@^@ | ^@^@^@^A^@^@^@^@ | SIPOptions: | OPTIONS sip:nm SIP/2.0 | Via: SIP/2.0/TCP nm;branch=foo | From: ;tag=root | | Call-ID: 50000 | CSeq: 42 OPTIONS | Max-Forwards: 70 | Content-Length: 0 | Contact: | Accept: application/sdp | OPTIONS sip:nm SIP/2.0 | /bin/sh: OPTIONS: not found | Via: SIP/2.0/TCP nm;branch=foo | /bin/sh: Via:: not found | From: ;tag=root | /bin/sh: syntax error: unexpected ";" | | /bin/sh: syntax error: unexpected newline | Call-ID: 50000 | /bin/sh: Call-ID:: not found | CSeq: 42 OPTIONS | /bin/sh: CSeq:: not found | Max-Forwards: 70 | /bin/sh: Max-Forwards:: not found | Content-Length: 0 | /bin/sh: Content-Length:: not found | Contact: | /bin/sh: syntax error: unexpected newline | Accept: application/sdp | /bin/sh: Accept:: not found | tn3270: | ^@IBM-3279-4-E |_ ?IBM-3279-4-E? 80/tcp open http Boa HTTPd 0.93.15 | http-title: Site doesn't have a title (text/html). |_Requested resource was /admin/login.asp |_http-server-header: Boa/0.93.15 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service : SF-Port23-TCP:V=7.95%I=7%D=12/31%Time=69555ACE%P=x86_64-pc-linux-gnu%r(NUL SF:L,10,"\xff\xfd\x01\xff\xfd\x1f\xff\xfb\x01\xff\xfb\x03#\x20\r\n")%r(Gen SF:ericLines,1A,"\xff\xfd\x01\xff\xfd\x1f\xff\xfb\x01\xff\xfb\x03\r\n\r\n# SF:\x20\r\n#\x20\r\n#\x20")%r(tn3270,2D,"\xff\xfd\x01\xff\xfd\x1f\xff\xfb\ SF:x01\xff\xfb\x03\^@IBM-3279-4-E\xfb\^Y#\x20\?IBM-3279-4-E\?")%r(GetReque SF:st,4F,"\xff\xfd\x01\xff\xfd\x1f\xff\xfb\x01\xff\xfb\x03GET\x20/\x20HTTP SF:/1\.0\r\n\r\n#\x20GET\x20/\x20HTTP/1\.0\r\n/bin/sh:\x20GET:\x20not\x20f SF:ound\r\n#\x20\r\n#\x20")%r(RPCCheck,C,"\xff\xfd\x01\xff\xfd\x1f\xff\xfb SF:\x01\xff\xfb\x03")%r(Help,38,"\xff\xfd\x01\xff\xfd\x1f\xff\xfb\x01\xff\ SF:xfb\x03HELP\r\n#\x20HELP\r\n/bin/sh:\x20HELP:\x20not\x20found\r\n#\x20\ SF:r\n")%r(SIPOptions,336,"\xff\xfd\x01\xff\xfd\x1f\xff\xfb\x01\xff\xfb\x0 SF:3OPTIONS\x20sip:nm\x20SIP/2\.0\r\nVia:\x20SIP/2\.0/TCP\x20nm;branch=foo SF:\r\nFrom:\x20;tag=root\r\nTo:\x20\r\nCall-ID:\x SF:2050000\r\nCSeq:\x2042\x20OPTIONS\r\nMax-Forwards:\x2070\r\nContent-Len SF:gth:\x200\r\nContact:\x20\r\nAccept:\x20application/sdp\r\n\ SF:r\n#\x20OPTIONS\x20sip:nm\x20SIP/2\.0\r\n/bin/sh:\x20OPTIONS:\x20not\x2 SF:0found\r\n#\x20Via:\x20SIP/2\.0/TCP\x20nm;branch=foo\r\n/bin/sh:\x20Via SF:::\x20not\x20found\r\n#\x20From:\x20;tag=root\r\n/bin/sh:\x2 SF:0syntax\x20error:\x20unexpected\x20\";\"\r\n#\x20To:\x20\r SF:\n/bin/sh:\x20syntax\x20error:\x20unexpected\x20newline\r\n#\x20Call-ID SF::\x2050000\r\n/bin/sh:\x20Call-ID::\x20not\x20found\r\n#\x20CSeq:\x2042 SF:\x20OPTIONS\r\n/bin/sh:\x20CSeq::\x20not\x20found\r\n#\x20Max-Forwards: SF:\x2070\r\n/bin/sh:\x20Max-Forwards::\x20not\x20found\r\n#\x20Content-Le SF:ngth:\x200\r\n/bin/sh:\x20Content-Length::\x20not\x20found\r\n#\x20Cont SF:act:\x20\r\n/bin/sh:\x20syntax\x20error:\x20unexpected\x20ne SF:wline\r\n#\x20Accept:\x20application/sdp\r\n/bin/sh:\x20Accept::\x20not SF:\x20found\r\n#\x20\r\n#\x20\r\n")%r(NCP,44,"\xff\xfd\x01\xff\xfd\x1f\xf SF:f\xfb\x01\xff\xfb\x03DmdT\^@\^@\^@\x08\x20\x08\x08\x20\x08\x08\x20\x08\ SF:x08\x20\x08\x08\x20\x08\x08\x20\x08\x08\x20\x08\x08\x20\x08\x08\x20\x08 SF:\x08\x20\x08\^@\^@\^@\^A\^@\^@\^@\^@"); Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Aggressive OS guesses: Linux 3.10 - 4.11 (93%), Linux 3.2 - 4.14 (93%), Asus RT-AC66U WAP (92%), Linux 3.2 (88%), Micropython 1.8 (87%), OpenWrt Chaos Calmer 15.05 (Linux 3.18) or Designated Driver (Linux 4.1 or 4.4) (87%), OpenWrt 19.07 (Linux 4.14) (87%), Android 5.1 (87%), Linux 2.6.32 (87%), Linux 2.6.32 - 3.13 (87%) No exact OS matches for host (test conditions non-ideal). Network Distance: 19 hops Service Info: Host: RTK_GW TRACEROUTE (using port 80/tcp) HOP RTT ADDRESS 1 0.03 ms 172.18.0.1 2 2.04 ms 172.31.1.1 3 0.22 ms 26472.your-cloud.host (162.55.119.126) 4 ... 5 6 0.32 ms core-spine-rdev2.cloud2.fsn1.hetzner.com (213.239.239.89) 7 0.46 ms core23.fsn1.hetzner.com (213.239.227.202) 8 5.04 ms core0.fra.hetzner.com (213.239.224.66) 9 7.18 ms ipv4.de-cix.fra.de.as58453.chinamobile.com (80.81.195.121) 10 6.45 ms 223.118.18.46 11 24.46 ms 223.120.11.13 12 142.95 ms 223.118.21.93 13 125.30 ms 223.118.19.141 14 125.98 ms 223.118.19.146 15 ... 18 19 142.45 ms 196.191.102.91 OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 75.42 seconds