Scan Time: Tue Dec 30 23:49:46 2025 Target: 217.160.224.240 ---------------------------------------- Starting Nmap 7.95 ( https://nmap.org ) at 2025-12-30 23:49 UTC Nmap scan report for 217.160.224.240 Host is up (0.015s latency). Not shown: 983 closed tcp ports (reset) PORT STATE SERVICE VERSION 25/tcp filtered smtp 80/tcp open http Microsoft IIS httpd 10.0 | http-methods: |_ Potentially risky methods: TRACE |_http-title: IIS Windows Server |_http-server-header: Microsoft-IIS/10.0 88/tcp open kerberos-sec Microsoft Windows Kerberos (server time: 2025-12-30 23:49:22Z) 135/tcp open msrpc Microsoft Windows RPC 139/tcp open netbios-ssn Microsoft Windows netbios-ssn 389/tcp open ldap Microsoft Windows Active Directory LDAP (Domain: afghan.local, Site: Default-First-Site-Name) 445/tcp open microsoft-ds Windows Server 2016 Datacenter 14393 microsoft-ds (workgroup: AFGHAN) 464/tcp open kpasswd5? 465/tcp filtered smtps 593/tcp open ncacn_http Microsoft Windows RPC over HTTP 1.0 636/tcp open tcpwrapped 1433/tcp open ms-sql-s Microsoft SQL Server 2016 13.00.5026.00; SP2 |_ms-sql-ntlm-info: ERROR: Script execution failed (use -d to debug) |_ssl-date: 2025-12-30T23:49:39+00:00; -7s from scanner time. |_ms-sql-info: ERROR: Script execution failed (use -d to debug) | ssl-cert: Subject: commonName=SSL_Self_Signed_Fallback | Not valid before: 2025-06-06T10:56:41 |_Not valid after: 2055-06-06T10:56:41 1500/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) |_http-title: Service Unavailable |_http-server-header: Microsoft-HTTPAPI/2.0 3268/tcp open ldap Microsoft Windows Active Directory LDAP (Domain: afghan.local, Site: Default-First-Site-Name) 3269/tcp open tcpwrapped 3389/tcp open ms-wbt-server Microsoft Terminal Services |_ssl-date: 2025-12-30T23:49:39+00:00; -7s from scanner time. | rdp-ntlm-info: | Target_Name: AFGHAN | NetBIOS_Domain_Name: AFGHAN | NetBIOS_Computer_Name: AFGHAN2025 | DNS_Domain_Name: afghan.local | DNS_Computer_Name: Afghan2025.afghan.local | DNS_Tree_Name: afghan.local | Product_Version: 10.0.14393 |_ System_Time: 2025-12-30T23:49:30+00:00 | ssl-cert: Subject: commonName=Afghan2025.afghan.local | Not valid before: 2025-08-07T22:57:13 |_Not valid after: 2026-02-06T22:57:13 5985/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP) |_http-server-header: Microsoft-HTTPAPI/2.0 |_http-title: Not Found Aggressive OS guesses: Microsoft Windows Server 2016 (98%), Microsoft Windows 10 1511 (94%), Microsoft Windows Server 2012 R2 (94%), Microsoft Windows 10 (93%), Microsoft Windows 7 SP1 or Windows Server 2008 R2 or Windows 8.1 (93%), Microsoft Windows 10 1607 (92%), Microsoft Windows Server 2022 (92%), Microsoft Windows Vista Home Premium SP1, Windows 7, or Windows Server 2008 (91%), Microsoft Windows Server 2012 Data Center (91%), Microsoft Windows Server 2016 or Server 2019 (90%) No exact OS matches for host (test conditions non-ideal). Network Distance: 18 hops Service Info: Host: AFGHAN2025; OS: Windows; CPE: cpe:/o:microsoft:windows Host script results: | smb2-security-mode: | 3:1:1: |_ Message signing enabled and required | smb-security-mode: | account_used: | authentication_level: user | challenge_response: supported |_ message_signing: required | smb2-time: | date: 2025-12-30T23:49:34 |_ start_date: 2025-06-06T10:56:32 | smb-os-discovery: | OS: Windows Server 2016 Datacenter 14393 (Windows Server 2016 Datacenter 6.3) | Computer name: Afghan2025 | NetBIOS computer name: AFGHAN2025\x00 | Domain name: afghan.local | Forest name: afghan.local | FQDN: Afghan2025.afghan.local |_ System time: 2025-12-31T00:49:30+01:00 |_clock-skew: mean: -10m07s, deviation: 24m29s, median: -7s TRACEROUTE (using port 1025/tcp) HOP RTT ADDRESS 1 0.02 ms 172.18.0.1 2 2.17 ms 172.31.1.1 3 3.92 ms 26472.your-cloud.host (162.55.119.126) 4 ... 5 6 3.99 ms core-spine-rdev2.cloud2.fsn1.hetzner.com (213.239.239.89) 7 4.02 ms core22.fsn1.hetzner.com (213.239.227.198) 8 8.49 ms core0.fra.hetzner.com (213.239.224.10) 9 ... 10 15.33 ms lo-0.bb-b.fr7.fra.de.net.ionos.com (212.227.117.10) 11 15.10 ms lo-0-0.bb-b.ltz.ber.de.net.ionos.com (212.227.117.24) 12 15.06 ms lo-0-0.rc-a.rs.ber.de.net.ionos.com (212.227.117.204) 13 15.11 ms 212.227.120.165 14 15.39 ms 212.227.120.165 15 ... 17 18 15.53 ms 217.160.224.240 OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 25.68 seconds