Scan Time: Wed Dec 31 08:00:41 2025 Target: 91.230.168.26 ---------------------------------------- Starting Nmap 7.95 ( https://nmap.org ) at 2025-12-31 07:57 UTC Nmap scan report for meza.probe.onyphe.net (91.230.168.26) Host is up (0.16s latency). Not shown: 996 closed tcp ports (reset) PORT STATE SERVICE VERSION 25/tcp filtered smtp 80/tcp open http hidden |_http-server-header: hidden |_http-title: Did not follow redirect to https://meza.probe.onyphe.net/ | fingerprint-strings: | FourOhFourRequest: | HTTP/1.0 301 Moved Permanently | Location: https:///nice%20ports%2C/Trinity.txt.bak | Content-Length: 0 | Connection: close | Date: Wed, 31 Dec 2025 07:57:46 GMT | Server: hidden | GenericLines: | HTTP/1.0 400 Bad Request | Content-Type: text/html | Content-Length: 345 | Connection: close | Date: Wed, 31 Dec 2025 07:57:46 GMT | Server: hidden | | | | | 400 Bad Request | | |

400 Bad Request

| | | GetRequest, HTTPOptions: | HTTP/1.0 301 Moved Permanently | Location: https:/// | Content-Length: 0 | Connection: close | Date: Wed, 31 Dec 2025 07:57:40 GMT | Server: hidden | RTSPRequest: | HTTP/1.0 400 Bad Request | Content-Type: text/html | Content-Length: 345 | Connection: close | Date: Wed, 31 Dec 2025 07:57:40 GMT | Server: hidden | | | | | 400 Bad Request | | |

400 Bad Request

| |_ 443/tcp open ssl/https hidden |_ssl-date: TLS randomness does not represent time |_http-title: Big Data for Cyber Defense | ONYPHE | tls-alpn: | http/1.0 | http/1.1 |_ h2 |_http-server-header: hidden | ssl-cert: Subject: commonName=*.probe.onyphe.net | Subject Alternative Name: DNS:*.probe.onyphe.net, DNS:probe.onyphe.net | Not valid before: 2025-11-15T00:00:00 |_Not valid after: 2026-12-16T23:59:59 | fingerprint-strings: | FourOhFourRequest: | HTTP/1.0 404 Not Found | Content-Type: text/html | Content-Length: 341 | Connection: close | Date: Wed, 31 Dec 2025 07:57:52 GMT | Server: hidden | | | | | 404 Not Found | | |

404 Not Found

| | | GetRequest: | HTTP/1.0 200 OK | Content-Type: text/html | ETag: "2079668692" | Last-Modified: Mon, 29 Dec 2025 16:55:22 GMT | Content-Length: 15115 | Connection: close | Date: Wed, 31 Dec 2025 07:57:46 GMT | Server: hidden | | | | | | | Big Data for Cyber Defense | ONYPHE | \n\n\n\x20\n\x20\x20400\x20Bad\x20Request\n\x20\n\x20\n\x20\x20

400\x20Bad\x20Request

\n\x20\n\n")%r(F SF:ourOhFourRequest,B1,"HTTP/1\.0\x20301\x20Moved\x20Permanently\r\nLocati SF:on:\x20https:///nice%20ports%2C/Trinity\.txt\.bak\r\nContent-Length:\x2 SF:00\r\nConnection:\x20close\r\nDate:\x20Wed,\x2031\x20Dec\x202025\x2007: SF:57:46\x20GMT\r\nServer:\x20hidden\r\n\r\n")%r(GenericLines,1EB,"HTTP/1\ SF:.0\x20400\x20Bad\x20Request\r\nContent-Type:\x20text/html\r\nContent-Le SF:ngth:\x20345\r\nConnection:\x20close\r\nDate:\x20Wed,\x2031\x20Dec\x202 SF:025\x2007:57:46\x20GMT\r\nServer:\x20hidden\r\n\r\n<\?xml\x20version=\" SF:1\.0\"\x20encoding=\"iso-8859-1\"\?>\n\n\n\x20\n\x20\x20400\x20Bad\x20Requ SF:est\n\x20\n\x20\n\x20\x20

400\x20Bad\x20Request SF:

\n\x20\n\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port443-TCP:V=7.95%T=SSL%I=7%D=12/31%Time=6954D77B%P=x86_64-pc-linux-gn SF:u%r(GetRequest,3BD8,"HTTP/1\.0\x20200\x20OK\r\nContent-Type:\x20text/ht SF:ml\r\nETag:\x20\"2079668692\"\r\nLast-Modified:\x20Mon,\x2029\x20Dec\x2 SF:02025\x2016:55:22\x20GMT\r\nContent-Length:\x2015115\r\nConnection:\x20 SF:close\r\nDate:\x20Wed,\x2031\x20Dec\x202025\x2007:57:46\x20GMT\r\nServe SF:r:\x20hidden\r\n\r\n\n\n\n SF:\n\x20\x20\x20\x20\n\x20\x20\x20\x20\n\x20 SF:\x20\x20\x20\n\x20\x20\x20\x20Big\x20Data\x20f SF:or\x20Cyber\x20Defense\x20\|\x20ONYPHE\n\x20\x20\x20\x20\n\n\n\x20\n\x20\x20404\x20Not\x20Found\n\x2 SF:0\n\x20\n\x20\x20

404\x20Not\x20Found

\n\x20 SF:\n\n"); Device type: general purpose Running: Linux 5.X OS CPE: cpe:/o:linux:linux_kernel:5 OS details: Linux 5.0 - 5.14 Network Distance: 25 hops TRACEROUTE (using port 5900/tcp) HOP RTT ADDRESS 1 0.03 ms 172.18.0.1 2 2.73 ms 172.31.1.1 3 0.89 ms 26472.your-cloud.host (162.55.119.126) 4 ... 5 6 1.10 ms core-spine-rdev1.cloud2.fsn1.hetzner.com (213.239.239.77) 7 1.13 ms core23.fsn1.hetzner.com (213.239.227.202) 8 5.65 ms core1.fra.hetzner.com (213.239.224.70) 9 5.86 ms fra-fra15-pb2-ptx.de.eu (57.128.121.216) 10 ... 12 13 14.10 ms be104.lil1-rbx8-sbb2-nc5.fr.eu (54.36.50.233) 14 18.89 ms lon-drch-sbb1-nc5.uk.eu (54.36.50.230) 15 91.39 ms nyc-ny1-sbb2-8k.nj.us (192.99.146.133) 16 ... 17 97.90 ms be102.bhs-g1-nc5.qc.ca (198.27.73.204) 18 119.10 ms be101.chi-ch2-sbb1-8k.il.us (198.27.73.207) 19 ... 20 164.96 ms be103.pdx-prt1-sbb1-8k.oregon.us (142.44.208.161) 21 167.05 ms pdx1-hil1-g2-nc5.il.us (142.44.208.229) 22 ... 24 25 159.40 ms meza.probe.onyphe.net (91.230.168.26) OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 194.50 seconds