Scan Time: Wed Dec 31 08:21:11 2025 Target: 37.238.164.4 ---------------------------------------- Starting Nmap 7.95 ( https://nmap.org ) at 2025-12-31 08:20 UTC Nmap scan report for 37.238.164.4 Host is up (0.082s latency). Not shown: 998 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 23/tcp open telnet BusyBox telnetd 1.00-pre7 - 1.14.0 | fingerprint-strings: | HTTPOptions: | OPTIONS / HTTP/1.0 | Login: Password: | Error! left 2 chance. | Password: | Help: | HELP | Login: Password: | NCP: | DmdT^@^@^@ | ^@^@^@^A^@^@^@^@ | NULL: | connect number is limited | SIPOptions: | OPTIONS sip:nm SIP/2.0 | Via: SIP/2.0/TCP nm;branch=foo | From: ;tag=root | | Call-ID: 50000 | CSeq: 42 OPTIONS | Max-Forwards: 70 | Content-Length: 0 | Contact: | Accept: application/sdp | Login: Password: | Error! left 2 chance. | Password: | Error! left 1 chance. | Password: | Error! left 0 chance. |_ Login timed out after 60 seconds 80/tcp open http Mini web server 1.0 (ZTE ZXV10 W300 ADSL router http config) |_http-title: HG8546G |_http-server-header: Mini web server 1.0 ZTE corp 2005. 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service : SF-Port23-TCP:V=7.95%I=7%D=12/31%Time=6954DCCA%P=x86_64-pc-linux-gnu%r(NUL SF:L,20,"\n\rThe\x20connect\x20number\x20is\x20limited\n")%r(HTTPOptions,5 SF:E,"\xff\xfd\x01\xff\xfd\x1f\xff\xfd!\xff\xfb\x01\xff\xfb\x03OPTIONS\x20 SF:/\x20HTTP/1\.0\r\n\r\nLogin:\x20Password:\x20\r\n\r\n\rError!\x20\x20le SF:ft\x202\x20chance\.\r\n\rPassword:\x20")%r(Help,26,"\xff\xfd\x01\xff\xf SF:d\x1f\xff\xfd!\xff\xfb\x01\xff\xfb\x03HELP\r\nLogin:\x20Password:\x20") SF:%r(SIPOptions,1A0,"\xff\xfd\x01\xff\xfd\x1f\xff\xfd!\xff\xfb\x01\xff\xf SF:b\x03OPTIONS\x20sip:nm\x20SIP/2\.0\r\nVia:\x20SIP/2\.0/TCP\x20nm;branch SF:=foo\r\nFrom:\x20;tag=root\r\nTo:\x20\r\nCall-I SF:D:\x2050000\r\nCSeq:\x2042\x20OPTIONS\r\nMax-Forwards:\x2070\r\nContent SF:-Length:\x200\r\nContact:\x20\r\nAccept:\x20application/sdp\ SF:r\n\r\nLogin:\x20Password:\x20\r\n\r\n\rError!\x20\x20left\x202\x20chan SF:ce\.\r\n\rPassword:\x20\r\n\r\n\rError!\x20\x20left\x201\x20chance\.\r\ SF:n\rPassword:\x20\r\n\r\n\rError!\x20\x20left\x200\x20chance\.\r\n\r\r\n SF:\rLogin\x20timed\x20out\x20after\x2060\x20seconds\r\n\r\n\r\n\r\n\r\n\r SF:\n\r\n\r\n")%r(NCP,47,"\xff\xfd\x01\xff\xfd\x1f\xff\xfd!\xff\xfb\x01\xf SF:f\xfb\x03DmdT\^@\^@\^@\x08\x20\x08\x08\x20\x08\x08\x20\x08\x08\x20\x08\ SF:x08\x20\x08\x08\x20\x08\x08\x20\x08\x08\x20\x08\x08\x20\x08\x08\x20\x08 SF:\^@\^@\^@\^A\^@\^@\^@\^@"); Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: phone|general purpose|storage-misc Running (JUST GUESSING): Google Android 10.X (88%), Linux 4.X|2.6.X|3.X (88%), HP embedded (87%) OS CPE: cpe:/o:google:android:10 cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:2.6 cpe:/o:linux:linux_kernel:3 cpe:/h:hp:p2000_g3 Aggressive OS guesses: Android 9 - 10 (Linux 4.9 - 4.14) (88%), Linux 2.6.32 - 3.13 (88%), Linux 3.10 - 4.11 (88%), Linux 3.2 - 4.14 (88%), Linux 2.6.32 - 3.10 (87%), HP P2000 G3 NAS device (87%) No exact OS matches for host (test conditions non-ideal). Network Distance: 18 hops Service Info: OS: Linux 2.4.17; Device: broadband router; CPE: cpe:/h:zte:zxv10_w300, cpe:/o:montavista:linux_kernel:2.4.17 TRACEROUTE (using port 80/tcp) HOP RTT ADDRESS 1 0.03 ms 172.18.0.1 2 7.69 ms 172.31.1.1 3 6.02 ms 26472.your-cloud.host (162.55.119.126) 4 ... 5 6 5.57 ms core-spine-rdev1.cloud2.fsn1.hetzner.com (213.239.239.77) 7 5.53 ms core24.fsn1.hetzner.com (213.239.227.222) 8 9.95 ms core0.fra.hetzner.com (213.239.224.82) 9 10.69 ms FRF-Equinix-R3.earthlinktele.com (80.81.196.43) 10 ... 11 62.78 ms 185.71.204.33 12 ... 14 15 80.41 ms 37.236.250.186 16 81.79 ms 37.236.240.166 17 ... 18 85.65 ms 37.238.164.4 OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 54.32 seconds