Wikipedia:Open proxies noticeboard/Requests

Looking to make a new report? You're in the wrong place! Please go to Wikipedia:Open proxies noticeboard#Reporting and fill in the relevant box.

Shortcut

WP:OP/R

2012-present Archives

Index

6, 7, 8, 9, 10, 11, 12, 13, 14, 15
16, 17, 18, 19, 20, 21, 22, 23, 24, 25
26, 27, 28, 29, 30, 31, 32, 33, 34, 35
36, 37, 38, 39, 40, 41, 42, 43, 44, 45
46, 47, 48, 49, 50, 51, 52

This page has archives. Sections older than 41666.5 days may be automatically archived by when more than 5 sections are present.

185.121.94.157

– This proxy check request is closed and will soon be archived by a bot.

185.121.94.157 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Block evasion. Editing previous entires. Tule-hog (talk) 15:42, 18 May 2025 (UTC)[reply]

Open proxy blocked Urban VPN. — Naomi Amethyst 05:02, 19 May 2025 (UTC)[reply]

82.208.33.205

– This proxy check request is closed and will soon be archived by a bot.

82.208.33.205 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Flagged as a proxy by whatsmyip among others, and abused by LTA that normally uses proxies. 184.152.65.118 (talk) 05:40, 19 May 2025 (UTC)[reply]

Likely IP is an open proxy

Nmap scan report for 82.208.33.205
Host is up, received user-set (0.14s latency).
Scanned at 2025-05-23 05:29:13 UTC for 406s
Not shown: 65521 filtered tcp ports (no-response)
PORT      STATE SERVICE    REASON         VERSION
1001/tcp  open  rtsp       syn-ack ttl 54
|_rtsp-methods: ERROR: Script execution failed (use -d to debug)
| fingerprint-strings:
|   FourOhFourRequest, GetRequest, HTTPOptions:
|     HTTP/1.0 200 OK
|     content-length: 0
|   RTSPRequest:
|     RTSP/1.0 501 Not Implemented
|     content-length: 0
|   SIPOptions:
|     SIP/2.0 501 Not Implemented
|_    content-length: 0
7880/tcp  open  ssl/rtsp   syn-ack ttl 54
|_ssl-date: TLS randomness does not represent time
| fingerprint-strings:
|   FourOhFourRequest, GetRequest, HTTPOptions:
|     HTTP/1.0 400 Bad Request
|     content-length: 0
|   RTSPRequest:
|     RTSP/1.0 400 Bad Request
|     content-length: 0
|   SIPOptions:
|     SIP/2.0 400 Bad Request
|_    content-length: 0
| ssl-cert: Subject: commonName=185.255.103.243
| Issuer: commonName=185.255.103.243
| Public Key type: rsa
| Public Key bits: 2048
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2024-05-19T10:32:36
| Not valid after:  9999-12-31T23:59:59
| MD5:   ef08:6f68:7a47:8a2a:231a:8145:fd54:99be
| SHA-1: b376:6fdc:f0eb:5fd1:616f:f076:b9ec:2573:66c1:38d7
| -----BEGIN CERTIFICATE-----
| MIICtjCCAZ6gAwIBAgIIFQGTvuW1gcgwDQYJKoZIhvcNAQELBQAwGjEYMBYGA1UE
| AwwPMTg1LjI1NS4xMDMuMjQzMCAXDTI0MDUxOTEwMzIzNloYDzk5OTkxMjMxMjM1
| OTU5WjAaMRgwFgYDVQQDDA8xODUuMjU1LjEwMy4yNDMwggEiMA0GCSqGSIb3DQEB
| AQUAA4IBDwAwggEKAoIBAQDFApEWgkWVJHfox2aq59ajuGO0Pu58Pr7e8+DtoL5w
| MaivHrnmqY4nZ52I3/UWWZJsBEoHpOEIibQXI2XAdRyTkPtlhBSDBVPBjbCjmv3w
| 6EBxs8HzoxtwSUWMb84K0wKja9m31bzZjg1GX8RLT+wG6vor9eOQMrw6eD/R+Rwr
| aaun3YO41WpOJ3DyaESA9JDEhPBRwMtd1ZA0vg8/PQoZPIPTJlfF+bKR7p64dumc
| keRb1b0thhTk+jzURl7+q36et2ELHF9S95qY/wJtSwiuB2Jbsef0NwPN4aInIchH
| EWgFTDlrE1Gfq+BMw4Z8BYqy5ShNa07rvwg4zGe+JBHVAgMBAAEwDQYJKoZIhvcN
| AQELBQADggEBAGg8nk5xy092CUMoszvGPXqH52lLn1nFPh47n5yGwcRv6LxzDJC/
| Pt40G9Pg5CDSy4V3qKs7+gI7fsfHudh5oVHcA5ni73fBvPgvIGxI65oeCvhw58IU
| hkbL1tP1NlwOqCMnDdGS2M+WSy5aJcxlvx+voaoYZgvJhuzR8SGMfrIo6ZR67W3R
| K/yRR5XcIX7K/FuRwhrwtfuV5eaURsqZRiyOrB/g4IvgmmB0H0ANGWFbIJwGaWMY
| 8A5wf1WQpgjHbd2asPK7/Tr4HKN6MNJWeGE0Y0YTgRb08k6Mr1mHLNFmFEaldNIB
| DtjGFv9REJONMoHrTkdFC7i1MROhEvolAOY=
|_-----END CERTIFICATE-----
9143/tcp  open  unknown    syn-ack ttl 54
| fingerprint-strings:
|   FourOhFourRequest:
|     HTTP/1.0 200 OK
|     Date: Fri, 23 May 2025 05:34:40 GMT
|     Content-Length: 150
|     Content-Type: text/html; charset=utf-8
|     <html>
|     <head><title>Node Exporter</title></head>
|     <body>
|     <h1>Node Exporter</h1>
|     <p><a href="/metrics">Metrics</a></p>
|     </body>
|     </html>
|   GenericLines, Help, Kerberos, RTSPRequest, SSLSessionReq, TLSSessionReq, TerminalServerCookie:
|     HTTP/1.1 400 Bad Request
|     Content-Type: text/plain; charset=utf-8
|     Connection: close
|     Request
|   GetRequest:
|     HTTP/1.0 200 OK
|     Date: Fri, 23 May 2025 05:34:12 GMT
|     Content-Length: 150
|     Content-Type: text/html; charset=utf-8
|     <html>
|     <head><title>Node Exporter</title></head>
|     <body>
|     <h1>Node Exporter</h1>
|     <p><a href="/metrics">Metrics</a></p>
|     </body>
|     </html>
|   HTTPOptions:
|     HTTP/1.0 200 OK
|     Date: Fri, 23 May 2025 05:34:13 GMT
|     Content-Length: 150
|     Content-Type: text/html; charset=utf-8
|     <html>
|     <head><title>Node Exporter</title></head>
|     <body>
|     <h1>Node Exporter</h1>
|     <p><a href="/metrics">Metrics</a></p>
|     </body>
|_    </html>
44445/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:34:17 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
44446/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:34:17 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
44464/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:34:17 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
|_http-title: Site doesn't have a title.
44465/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:34:17 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
49155/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:34:17 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
|_http-title: Site doesn't have a title.
49156/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:34:17 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
50100/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:34:17 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
50101/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:34:17 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
|_http-title: Site doesn't have a title.
51523/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:34:17 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
|_http-title: Site doesn't have a title.
51524/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:34:17 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
|_http-title: Site doesn't have a title.
59100/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:34:17 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
59101/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:34:17 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
9 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port1001-TCP:V=7.94SVN%I=7%D=5/23%Time=683008D9%P=x86_64-pc-linux-gnu%r
SF:(GetRequest,26,"HTTP/1\.0\x20200\x20OK\r\ncontent-length:\x200\r\n\r\n"
SF:)%r(HTTPOptions,26,"HTTP/1\.0\x20200\x20OK\r\ncontent-length:\x200\r\n\
SF:r\n")%r(RTSPRequest,33,"RTSP/1\.0\x20501\x20Not\x20Implemented\r\nconte
SF:nt-length:\x200\r\n\r\n")%r(FourOhFourRequest,26,"HTTP/1\.0\x20200\x20O
SF:K\r\ncontent-length:\x200\r\n\r\n")%r(SIPOptions,32,"SIP/2\.0\x20501\x2
SF:0Not\x20Implemented\r\ncontent-length:\x200\r\n\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port7880-TCP:V=7.94SVN%T=SSL%I=7%D=5/23%Time=683008E6%P=x86_64-pc-linux
SF:-gnu%r(GetRequest,2F,"HTTP/1\.0\x20400\x20Bad\x20Request\r\ncontent-len
SF:gth:\x200\r\n\r\n")%r(HTTPOptions,2F,"HTTP/1\.0\x20400\x20Bad\x20Reques
SF:t\r\ncontent-length:\x200\r\n\r\n")%r(RTSPRequest,2F,"RTSP/1\.0\x20400\
SF:x20Bad\x20Request\r\ncontent-length:\x200\r\n\r\n")%r(FourOhFourRequest
SF:,2F,"HTTP/1\.0\x20400\x20Bad\x20Request\r\ncontent-length:\x200\r\n\r\n
SF:")%r(SIPOptions,2E,"SIP/2\.0\x20400\x20Bad\x20Request\r\ncontent-length
SF::\x200\r\n\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port9143-TCP:V=7.94SVN%I=7%D=5/23%Time=683008D4%P=x86_64-pc-linux-gnu%r
SF:(GenericLines,67,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nContent-Type:\x
SF:20text/plain;\x20charset=utf-8\r\nConnection:\x20close\r\n\r\n400\x20Ba
SF:d\x20Request")%r(GetRequest,10B,"HTTP/1\.0\x20200\x20OK\r\nDate:\x20Fri
SF:,\x2023\x20May\x202025\x2005:34:12\x20GMT\r\nContent-Length:\x20150\r\n
SF:Content-Type:\x20text/html;\x20charset=utf-8\r\n\r\n<html>\n\t\t\t<head
SF:><title>Node\x20Exporter</title></head>\n\t\t\t<body>\n\t\t\t<h1>Node\x
SF:20Exporter</h1>\n\t\t\t<p><a\x20href=\"/metrics\">Metrics</a></p>\n\t\t
SF:\t</body>\n\t\t\t</html>")%r(HTTPOptions,10B,"HTTP/1\.0\x20200\x20OK\r\
SF:nDate:\x20Fri,\x2023\x20May\x202025\x2005:34:13\x20GMT\r\nContent-Lengt
SF:h:\x20150\r\nContent-Type:\x20text/html;\x20charset=utf-8\r\n\r\n<html>
SF:\n\t\t\t<head><title>Node\x20Exporter</title></head>\n\t\t\t<body>\n\t\
SF:t\t<h1>Node\x20Exporter</h1>\n\t\t\t<p><a\x20href=\"/metrics\">Metrics<
SF:/a></p>\n\t\t\t</body>\n\t\t\t</html>")%r(RTSPRequest,67,"HTTP/1\.1\x20
SF:400\x20Bad\x20Request\r\nContent-Type:\x20text/plain;\x20charset=utf-8\
SF:r\nConnection:\x20close\r\n\r\n400\x20Bad\x20Request")%r(Help,67,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nContent-Type:\x20text/plain;\x20charse
SF:t=utf-8\r\nConnection:\x20close\r\n\r\n400\x20Bad\x20Request")%r(SSLSes
SF:sionReq,67,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nContent-Type:\x20text
SF:/plain;\x20charset=utf-8\r\nConnection:\x20close\r\n\r\n400\x20Bad\x20R
SF:equest")%r(TerminalServerCookie,67,"HTTP/1\.1\x20400\x20Bad\x20Request\
SF:r\nContent-Type:\x20text/plain;\x20charset=utf-8\r\nConnection:\x20clos
SF:e\r\n\r\n400\x20Bad\x20Request")%r(TLSSessionReq,67,"HTTP/1\.1\x20400\x
SF:20Bad\x20Request\r\nContent-Type:\x20text/plain;\x20charset=utf-8\r\nCo
SF:nnection:\x20close\r\n\r\n400\x20Bad\x20Request")%r(Kerberos,67,"HTTP/1
SF:\.1\x20400\x20Bad\x20Request\r\nContent-Type:\x20text/plain;\x20charset
SF:=utf-8\r\nConnection:\x20close\r\n\r\n400\x20Bad\x20Request")%r(FourOhF
SF:ourRequest,10B,"HTTP/1\.0\x20200\x20OK\r\nDate:\x20Fri,\x2023\x20May\x2
SF:02025\x2005:34:40\x20GMT\r\nContent-Length:\x20150\r\nContent-Type:\x20
SF:text/html;\x20charset=utf-8\r\n\r\n<html>\n\t\t\t<head><title>Node\x20E
SF:xporter</title></head>\n\t\t\t<body>\n\t\t\t<h1>Node\x20Exporter</h1>\n
SF:\t\t\t<p><a\x20href=\"/metrics\">Metrics</a></p>\n\t\t\t</body>\n\t\t\t
SF:</html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port44445-TCP:V=7.94SVN%I=7%D=5/23%Time=683008D9%P=x86_64-pc-linux-gnu%
SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require
SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:34:17\x20GMT\r\nProxy-Aut
SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port44446-TCP:V=7.94SVN%I=7%D=5/23%Time=683008D9%P=x86_64-pc-linux-gnu%
SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require
SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:34:17\x20GMT\r\nProxy-Aut
SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port44464-TCP:V=7.94SVN%I=7%D=5/23%Time=683008D9%P=x86_64-pc-linux-gnu%
SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require
SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:34:17\x20GMT\r\nProxy-Aut
SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port44465-TCP:V=7.94SVN%I=7%D=5/23%Time=683008D9%P=x86_64-pc-linux-gnu%
SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require
SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:34:17\x20GMT\r\nProxy-Aut
SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port49155-TCP:V=7.94SVN%I=7%D=5/23%Time=683008D9%P=x86_64-pc-linux-gnu%
SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require
SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:34:17\x20GMT\r\nProxy-Aut
SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port49156-TCP:V=7.94SVN%I=7%D=5/23%Time=683008D9%P=x86_64-pc-linux-gnu%
SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require
SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:34:17\x20GMT\r\nProxy-Aut
SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
Aggressive OS guesses: Linux 5.0 - 5.5 (87%), Linux 2.6.18 (87%), Linux 2.6.32 (87%), Linux 2.6.32 or 3.10 (87%), DD-WRT v24-sp1 (Linux 2.4) (87%), Linux 3.2.0 (87%), Synology DiskStation Manager 5.1 (86%), Linux 4.15 - 5.8 (86%), Linux 5.0 (86%), Linux 5.0 - 5.4 (86%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SCAN(V=7.94SVN%E=4%D=5/23%OT=1001%CT=%CU=36207%PV=N%DS=19%DC=T%G=N%TM=6830093F%P=x86_64-pc-linux-gnu)
SEQ(SP=F7%GCD=1%ISR=10B%TI=Z%II=I%TS=A)
OPS(O1=M514ST11NW7%O2=M514ST11NW7%O3=M514NNT11NW7%O4=M514ST11NW7%O5=M514ST11NW7%O6=M514ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=Y%DF=Y%T=48%W=FAF0%O=M514NNSNW7%CC=Y%Q=)
T1(R=Y%DF=Y%T=48%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
U1(R=Y%DF=N%T=48%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=Y%DFI=N%T=48%CD=S)

Uptime guess: 40.688 days (since Sat Apr 12 13:05:01 2025)
Network Distance: 19 hops
TCP Sequence Prediction: Difficulty=247 (Good luck!)
IP ID Sequence Generation: All zeros

TRACEROUTE (using port 7880/tcp)
HOP RTT       ADDRESS
1   1.12 ms   _gateway (10.199.22.3)
2   0.41 ms   rtr-ge-dmarc.tblflp.net (10.199.1.1)
3   ...
4   23.45 ms  rcmt-agw1.inet.qwest.net (71.32.31.17)
5   11.51 ms  4.68.144.73
6   13.30 ms  ae2.3612.edge6.Washington12.net.lumen.tech (4.69.226.70)
7   12.16 ms  6939-3356-stk.sp.lumen.tech (4.68.39.110)
8   102.35 ms ae33-xcr1.ltw.cw.net (195.2.24.246)
9   95.95 ms  ae37-pcr1.fnt.cw.net (195.2.2.74)
10  102.21 ms ae4-ucr1.czs.cw.net (195.2.10.233)
11  ...
12  109.50 ms ip-81-27-200-56.net.vodafone.cz (81.27.200.56)
13  112.32 ms spcom-ostrava.cust.vodafone.cz (213.192.19.14)
14  111.81 ms 91.245.14.254
15  ... 18
19  139.05 ms 82.208.33.205

Open proxy blocked — Naomi Amethyst 05:42, 23 May 2025 (UTC)[reply]

185.228.193.50

– This proxy check request is closed and will soon be archived by a bot.

185.228.193.50 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Flagged as a proxy by whatsmyip among others, and likewise abused by an LTA that normally uses proxies. See multiple entries above already blocked. 184.152.65.118 (talk) 05:43, 19 May 2025 (UTC)[reply]

Likely IP is an open proxy

Nmap scan report for 185.228.193.50
Host is up, received user-set (0.018s latency).
Scanned at 2025-05-23 05:28:54 UTC for 619s
Not shown: 65521 filtered tcp ports (no-response)
PORT      STATE SERVICE    REASON         VERSION
1001/tcp  open  rtsp       syn-ack ttl 54
|_rtsp-methods: ERROR: Script execution failed (use -d to debug)
| fingerprint-strings:
|   FourOhFourRequest, GetRequest, HTTPOptions:
|     HTTP/1.0 200 OK
|     content-length: 0
|   RTSPRequest:
|     RTSP/1.0 501 Not Implemented
|     content-length: 0
|   SIPOptions:
|     SIP/2.0 501 Not Implemented
|_    content-length: 0
7880/tcp  open  ssl/rtsp   syn-ack ttl 54
| ssl-cert: Subject: commonName=185.228.192.2
| Issuer: commonName=185.228.192.2
| Public Key type: rsa
| Public Key bits: 2048
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2024-05-19T10:00:57
| Not valid after:  9999-12-31T23:59:59
| MD5:   15a9:1d12:4c78:7bfc:3865:34aa:7014:21de
| SHA-1: 4690:a1fb:904a:2caf:b0b8:c0d5:32e5:cc75:cc29:7679
| -----BEGIN CERTIFICATE-----
| MIICsjCCAZqgAwIBAgIIHW+yWaw85N8wDQYJKoZIhvcNAQELBQAwGDEWMBQGA1UE
| AwwNMTg1LjIyOC4xOTIuMjAgFw0yNDA1MTkxMDAwNTdaGA85OTk5MTIzMTIzNTk1
| OVowGDEWMBQGA1UEAwwNMTg1LjIyOC4xOTIuMjCCASIwDQYJKoZIhvcNAQEBBQAD
| ggEPADCCAQoCggEBAJkXdCMeggFyKddofBNvgt7n1HrerxN+qREoc6Kj8nHctFyT
| NVY4Neyd8u3UueEchRhD8GWYD/Ptc9RZfr31BnUFLRQuhyaqdqz2nc5URWFfQGqk
| UK9WhH7y3WEpCAWwu8gFxXttEksOxTh/KGZncWrDo/GGf3KFkSQ86lJp9rLreOJB
| x6/CMDCq5ptLF5AYJ9d3egQ2HynEA6XbHcUqfybKOqywBVYGteaMKEn8PutA09F2
| 7nVBhKa/iQaNYwhS++LLoJ2/EznKJE6/9rew7pm8EwXPo4NPywEmU06ZMQrqfOaV
| YhL+dV95+T893K+xPJs+LUkpcI+toWnvZX7WQx8CAwEAATANBgkqhkiG9w0BAQsF
| AAOCAQEAJdZlGzNuklK7YGO21KKh7jBfTH5DDR6oD2AX9G7+EwQbnCOoNy8fs/uy
| c5OV89pezB5z0+8VdWSkmdq5OvsXyAUnxGMOLk1DhanNP6/0JCSeJAbQFqYSkh5o
| IfdOTlknLAgpG18spCS75+OW738LLUwLKaLEqKTWgcr6O7CzmHyum8uw7VWofBpP
| PYkpX2k69p9z3hvFkkH+UfHax45LbVp/gA0i5V1FLfJYLp+DjX+xXCt+2X4ytE4C
| Za/CABXgBER0gA9Xug6ymJa2DpA+4QdpQ/sCJpybiCYYWguuaqEmSkf9UOGccSHL
| Ow5Y1SP22K+RzwYt91kHKUqbP+dJwA==
|_-----END CERTIFICATE-----
|_ssl-date: TLS randomness does not represent time
| fingerprint-strings:
|   FourOhFourRequest, GetRequest, HTTPOptions:
|     HTTP/1.0 400 Bad Request
|     content-length: 0
|   RTSPRequest:
|     RTSP/1.0 400 Bad Request
|     content-length: 0
|   SIPOptions:
|     SIP/2.0 400 Bad Request
|_    content-length: 0
9143/tcp  open  unknown    syn-ack ttl 54
| fingerprint-strings:
|   FourOhFourRequest:
|     HTTP/1.0 200 OK
|     Date: Fri, 23 May 2025 05:38:02 GMT
|     Content-Length: 150
|     Content-Type: text/html; charset=utf-8
|     <html>
|     <head><title>Node Exporter</title></head>
|     <body>
|     <h1>Node Exporter</h1>
|     <p><a href="/metrics">Metrics</a></p>
|     </body>
|     </html>
|   GenericLines, Help, Kerberos, RTSPRequest, SSLSessionReq, TLSSessionReq, TerminalServerCookie:
|     HTTP/1.1 400 Bad Request
|     Content-Type: text/plain; charset=utf-8                           
|     Connection: close
|     Request
|   GetRequest, HTTPOptions:
|     HTTP/1.0 200 OK
|     Date: Fri, 23 May 2025 05:37:37 GMT
|     Content-Length: 150
|     Content-Type: text/html; charset=utf-8
|     <html>
|     <head><title>Node Exporter</title></head>
|     <body>
|     <h1>Node Exporter</h1>
|     <p><a href="/metrics">Metrics</a></p>
|     </body>
|_    </html>
44445/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:37:37 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
44446/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:37:37 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
44464/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:37:37 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
44465/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:37:37 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
|_http-title: Site doesn't have a title.
49155/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:37:37 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
49156/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:37:37 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
50100/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:                                                        
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:37:37 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
50101/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:37:37 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
|_http-title: Site doesn't have a title.
51523/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:37:37 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
51524/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:37:37 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
59100/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:37:39 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
59101/tcp open  http-proxy syn-ack ttl 54 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:37:37 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
9 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port1001-TCP:V=7.94SVN%I=7%D=5/23%Time=683009A5%P=x86_64-pc-linux-gnu%r
SF:(GetRequest,26,"HTTP/1\.0\x20200\x20OK\r\ncontent-length:\x200\r\n\r\n"
SF:)%r(HTTPOptions,26,"HTTP/1\.0\x20200\x20OK\r\ncontent-length:\x200\r\n\
SF:r\n")%r(RTSPRequest,33,"RTSP/1\.0\x20501\x20Not\x20Implemented\r\nconte
SF:nt-length:\x200\r\n\r\n")%r(FourOhFourRequest,26,"HTTP/1\.0\x20200\x20O
SF:K\r\ncontent-length:\x200\r\n\r\n")%r(SIPOptions,32,"SIP/2\.0\x20501\x2
SF:0Not\x20Implemented\r\ncontent-length:\x200\r\n\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port7880-TCP:V=7.94SVN%T=SSL%I=7%D=5/23%Time=683009B0%P=x86_64-pc-linux
SF:-gnu%r(GetRequest,2F,"HTTP/1\.0\x20400\x20Bad\x20Request\r\ncontent-len
SF:gth:\x200\r\n\r\n")%r(HTTPOptions,2F,"HTTP/1\.0\x20400\x20Bad\x20Reques
SF:t\r\ncontent-length:\x200\r\n\r\n")%r(RTSPRequest,2F,"RTSP/1\.0\x20400\
SF:x20Bad\x20Request\r\ncontent-length:\x200\r\n\r\n")%r(FourOhFourRequest
SF:,2F,"HTTP/1\.0\x20400\x20Bad\x20Request\r\ncontent-length:\x200\r\n\r\n
SF:")%r(SIPOptions,2E,"SIP/2\.0\x20400\x20Bad\x20Request\r\ncontent-length
SF::\x200\r\n\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port9143-TCP:V=7.94SVN%I=7%D=5/23%Time=683009A0%P=x86_64-pc-linux-gnu%r
SF:(GenericLines,67,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nContent-Type:\x
SF:20text/plain;\x20charset=utf-8\r\nConnection:\x20close\r\n\r\n400\x20Ba
SF:d\x20Request")%r(GetRequest,10B,"HTTP/1\.0\x20200\x20OK\r\nDate:\x20Fri
SF:,\x2023\x20May\x202025\x2005:37:37\x20GMT\r\nContent-Length:\x20150\r\n
SF:Content-Type:\x20text/html;\x20charset=utf-8\r\n\r\n<html>\n\t\t\t<head
SF:><title>Node\x20Exporter</title></head>\n\t\t\t<body>\n\t\t\t<h1>Node\x
SF:20Exporter</h1>\n\t\t\t<p><a\x20href=\"/metrics\">Metrics</a></p>\n\t\t
SF:\t</body>\n\t\t\t</html>")%r(HTTPOptions,10B,"HTTP/1\.0\x20200\x20OK\r\
SF:nDate:\x20Fri,\x2023\x20May\x202025\x2005:37:37\x20GMT\r\nContent-Lengt
SF:h:\x20150\r\nContent-Type:\x20text/html;\x20charset=utf-8\r\n\r\n<html>
SF:\n\t\t\t<head><title>Node\x20Exporter</title></head>\n\t\t\t<body>\n\t\
SF:t\t<h1>Node\x20Exporter</h1>\n\t\t\t<p><a\x20href=\"/metrics\">Metrics<
SF:/a></p>\n\t\t\t</body>\n\t\t\t</html>")%r(RTSPRequest,67,"HTTP/1\.1\x20
SF:400\x20Bad\x20Request\r\nContent-Type:\x20text/plain;\x20charset=utf-8\
SF:r\nConnection:\x20close\r\n\r\n400\x20Bad\x20Request")%r(Help,67,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nContent-Type:\x20text/plain;\x20charse
SF:t=utf-8\r\nConnection:\x20close\r\n\r\n400\x20Bad\x20Request")%r(SSLSes
SF:sionReq,67,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nContent-Type:\x20text
SF:/plain;\x20charset=utf-8\r\nConnection:\x20close\r\n\r\n400\x20Bad\x20R
SF:equest")%r(TerminalServerCookie,67,"HTTP/1\.1\x20400\x20Bad\x20Request\
SF:r\nContent-Type:\x20text/plain;\x20charset=utf-8\r\nConnection:\x20clos
SF:e\r\n\r\n400\x20Bad\x20Request")%r(TLSSessionReq,67,"HTTP/1\.1\x20400\x
SF:20Bad\x20Request\r\nContent-Type:\x20text/plain;\x20charset=utf-8\r\nCo
SF:nnection:\x20close\r\n\r\n400\x20Bad\x20Request")%r(Kerberos,67,"HTTP/1
SF:\.1\x20400\x20Bad\x20Request\r\nContent-Type:\x20text/plain;\x20charset
SF:=utf-8\r\nConnection:\x20close\r\n\r\n400\x20Bad\x20Request")%r(FourOhF
SF:ourRequest,10B,"HTTP/1\.0\x20200\x20OK\r\nDate:\x20Fri,\x2023\x20May\x2
SF:02025\x2005:38:02\x20GMT\r\nContent-Length:\x20150\r\nContent-Type:\x20
SF:text/html;\x20charset=utf-8\r\n\r\n<html>\n\t\t\t<head><title>Node\x20E
SF:xporter</title></head>\n\t\t\t<body>\n\t\t\t<h1>Node\x20Exporter</h1>\n
SF:\t\t\t<p><a\x20href=\"/metrics\">Metrics</a></p>\n\t\t\t</body>\n\t\t\t
SF:</html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port44445-TCP:V=7.94SVN%I=7%D=5/23%Time=683009A1%P=x86_64-pc-linux-gnu%
SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require
SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:37:37\x20GMT\r\nProxy-Aut
SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port44446-TCP:V=7.94SVN%I=7%D=5/23%Time=683009A1%P=x86_64-pc-linux-gnu%
SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require
SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:37:37\x20GMT\r\nProxy-Aut
SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port44464-TCP:V=7.94SVN%I=7%D=5/23%Time=683009A1%P=x86_64-pc-linux-gnu%
SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require
SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:37:37\x20GMT\r\nProxy-Aut
SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port44465-TCP:V=7.94SVN%I=7%D=5/23%Time=683009A1%P=x86_64-pc-linux-gnu%
SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require
SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:37:37\x20GMT\r\nProxy-Aut
SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port49155-TCP:V=7.94SVN%I=7%D=5/23%Time=683009A1%P=x86_64-pc-linux-gnu%
SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require
SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:37:37\x20GMT\r\nProxy-Aut
SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port49156-TCP:V=7.94SVN%I=7%D=5/23%Time=683009A1%P=x86_64-pc-linux-gnu%
SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require
SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:37:37\x20GMT\r\nProxy-Aut
SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
TCP/IP fingerprint:
SCAN(V=7.94SVN%E=4%D=5/23%OT=1001%CT=%CU=%PV=N%DS=10%DC=T%G=N%TM=68300A01%P=x86_64-pc-linux-gnu)
SEQ(SP=100%GCD=1%ISR=100%TI=Z%II=I%TS=A)
OPS(O1=M4ECST11NW7%O2=M4ECST11NW7%O3=M4ECNNT11NW7%O4=M4ECST11NW7%O5=M4ECST11NW7%O6=M4ECST11)
WIN(W1=FD80%W2=FD80%W3=FD80%W4=FD80%W5=FD80%W6=FD80)
ECN(R=Y%DF=Y%TG=40%W=FFF0%O=M4ECNNSNW7%CC=Y%Q=)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
U1(R=N)
IE(R=Y%DFI=N%TG=40%CD=S)

Uptime guess: 28.440 days (since Thu Apr 24 19:06:13 2025)
Network Distance: 10 hops
TCP Sequence Prediction: Difficulty=256 (Good luck!)
IP ID Sequence Generation: All zeros

TRACEROUTE (using port 1001/tcp)
HOP RTT      ADDRESS
1   0.91 ms  _gateway (10.199.22.3)
2   0.23 ms  rtr-ge-dmarc.tblflp.net (10.199.1.1)
3   ...
4   2.61 ms  71-32-31-17.rcmt.qwest.net (71.32.31.17)
5   10.87 ms 4.68.144.73
6   ...
7   78.26 ms ae3.cr1-was1.ip4.gtt.net (199.229.230.97)
8   16.72 ms ae0.cr5-nyc12.ip4.gtt.net (89.149.140.94)
9   ...
10  18.79 ms 185.228.193.50

Open proxy blocked — Naomi Amethyst 05:46, 23 May 2025 (UTC)[reply]

194.233.150.250

– This proxy check request is closed and will soon be archived by a bot.

194.233.150.250 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Yet another IP abused by BMN123 (see above) and flagged as a proxy by multiple sources. 184.152.65.118 (talk) 06:11, 19 May 2025 (UTC)[reply]

Likely IP is an open proxy

Nmap scan report for 194.233.150.250.static.snthostings.com (194.233.150.250)
Host is up, received user-set (0.017s latency).
Scanned at 2025-05-23 05:28:28 UTC for 1800s
Not shown: 65521 filtered tcp ports (no-response)
PORT      STATE SERVICE    REASON         VERSION
1001/tcp  open  rtsp       syn-ack ttl 53
|_rtsp-methods: ERROR: Script execution failed (use -d to debug)
| fingerprint-strings:
|   FourOhFourRequest, GetRequest, HTTPOptions:
|     HTTP/1.0 200 OK
|     content-length: 0
|   RTSPRequest:
|     RTSP/1.0 501 Not Implemented
|     content-length: 0
|   SIPOptions:
|     SIP/2.0 501 Not Implemented
|_    content-length: 0
7880/tcp  open  ssl/rtsp   syn-ack ttl 53
| ssl-cert: Subject: commonName=207.211.212.129
| Issuer: commonName=207.211.212.129
| Public Key type: rsa
| Public Key bits: 2048
| Signature Algorithm: sha256WithRSAEncryption
| Not valid before: 2024-05-19T09:59:25
| Not valid after:  9999-12-31T23:59:59
| MD5:   788a:696d:e448:7973:c1d9:2553:dc4d:8f32
| SHA-1: efc5:e3a4:a2c2:14f7:ce45:1169:c8d4:2514:0b30:2101
| -----BEGIN CERTIFICATE-----
| MIICtzCCAZ+gAwIBAgIJAIXYl2DGNeGfMA0GCSqGSIb3DQEBCwUAMBoxGDAWBgNV
| BAMMDzIwNy4yMTEuMjEyLjEyOTAgFw0yNDA1MTkwOTU5MjVaGA85OTk5MTIzMTIz
| NTk1OVowGjEYMBYGA1UEAwwPMjA3LjIxMS4yMTIuMTI5MIIBIjANBgkqhkiG9w0B
| AQEFAAOCAQ8AMIIBCgKCAQEAsLRVIsP+bwx2J8g8uo0ryC5+tpDuv6JLbJre2duh
| jQTm7TRvaKSCEnypbLglxXHL49VqXtLOzsLf9yUneNIieV06DIKPtWzs4ydJB4AO
| 8RXUz1eBI8zwIIOdunsmwb/yMqgBBmInzhCNZWMa4LCAhE/1ROrY/WeUmHQAn0JH
| eqlU/BtREdKpNUefC99RsDVCFet6WCI6+yTwelyTrwwj9KozoCwK3+b3lLNXyIOR
| FhXgDRYoNB2a61Vptu1SpYhT0618+Ng3BD+OjYr5Zp7cuTncIjBjwQN60noh7Ujy
| se9y9+RaWepQUTjK6qSKtKZ9+8zhC8kekOE3IftmLrboOQIDAQABMA0GCSqGSIb3
| DQEBCwUAA4IBAQAeUt1F6FXaSawVDrB44vOdW2ewXiW0F+gqooLUbZO0C4+lbCWF
| UAx/4UW4eB6Vz0ZDvICbOwmla/P27hsqAhlU+9GNppOlU18xjaTrWhJ+1HvAN6Tx
| 7/nJTPau++JWZbPChyxZjmoNZXpRL2aosdr8UyHtYGIFBKTy+O48PmWdjV42v4+q
| aMlexInE30NhoqQxcdkXZBOnTciLfTNR6evG5XmYlQqjFxBHKo46VahrAZohRmSx
| 5Q/R6bicmYxUgF5udJZuvecPcVKsGWbT0Z0l7AkeyO2KmpN6o8IrZIad5s07xRZ0
| DoORa0tzDUdPvydSHoLlxRZHSS7/lgmcucm/
|_-----END CERTIFICATE-----
|_ssl-date: TLS randomness does not represent time
| fingerprint-strings:
|   FourOhFourRequest, GetRequest, HTTPOptions:
|     HTTP/1.0 400 Bad Request
|     content-length: 0
|   RTSPRequest:
|     RTSP/1.0 400 Bad Request
|     content-length: 0
|   SIPOptions:
|     SIP/2.0 400 Bad Request
|_    content-length: 0
9143/tcp  open  unknown    syn-ack ttl 53
| fingerprint-strings:
|   FourOhFourRequest:
|     HTTP/1.0 200 OK
|     Date: Fri, 23 May 2025 05:57:21 GMT
|     Content-Length: 150
|     Content-Type: text/html; charset=utf-8
|     <html>
|     <head><title>Node Exporter</title></head>
|     <body>
|     <h1>Node Exporter</h1>
|     <p><a href="/metrics">Metrics</a></p>
|     </body>
|     </html>
|   GenericLines, Help, Kerberos, RTSPRequest, SSLSessionReq, TLSSessionReq, TerminalServerCookie:
|     HTTP/1.1 400 Bad Request
|     Content-Type: text/plain; charset=utf-8
|     Connection: close
|     Request
|   GetRequest, HTTPOptions:
|     HTTP/1.0 200 OK
|     Date: Fri, 23 May 2025 05:56:55 GMT
|     Content-Length: 150
|     Content-Type: text/html; charset=utf-8
|     <html>
|     <head><title>Node Exporter</title></head>
|     <body>
|     <h1>Node Exporter</h1>
|     <p><a href="/metrics">Metrics</a></p>
|     </body>
|_    </html>
44445/tcp open  http-proxy syn-ack ttl 53 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:56:56 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
44446/tcp open  http-proxy syn-ack ttl 53 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:56:56 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
44464/tcp open  http-proxy syn-ack ttl 53 (proxy authentication required)
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:56:56 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
|_http-title: Site doesn't have a title.
44465/tcp open  http-proxy syn-ack ttl 53 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:56:56 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
49155/tcp open  http-proxy syn-ack ttl 53 (proxy authentication required)
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:56:56 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
|_http-title: Site doesn't have a title.
49156/tcp open  http-proxy syn-ack ttl 53 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:56:56 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
50100/tcp open  http-proxy syn-ack ttl 53 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:56:56 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
50101/tcp open  http-proxy syn-ack ttl 53 (proxy authentication required)
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:56:56 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
|_http-title: Site doesn't have a title.
51523/tcp open  http-proxy syn-ack ttl 53 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:56:56 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
51524/tcp open  http-proxy syn-ack ttl 53 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:56:56 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
59100/tcp open  http-proxy syn-ack ttl 53 (proxy authentication required)
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:56:56 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
|_http-title: Site doesn't have a title.
59101/tcp open  http-proxy syn-ack ttl 53 (proxy authentication required)
|_http-title: Site doesn't have a title.
| fingerprint-strings:
|   SIPOptions:
|     HTTP/1.1 407 Proxy Authentication Required
|     Date: Fri, 23 May 2025 05:56:56 GMT
|     Proxy-Authenticate: Basic realm="proxy"
|     Connection: close
|_    Content-Length: 0
9 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port1001-TCP:V=7.94SVN%I=7%D=5/23%Time=68300E2C%P=x86_64-pc-linux-gnu%r
SF:(GetRequest,26,"HTTP/1\.0\x20200\x20OK\r\ncontent-length:\x200\r\n\r\n"
SF:)%r(HTTPOptions,26,"HTTP/1\.0\x20200\x20OK\r\ncontent-length:\x200\r\n\
SF:r\n")%r(RTSPRequest,33,"RTSP/1\.0\x20501\x20Not\x20Implemented\r\nconte
SF:nt-length:\x200\r\n\r\n")%r(FourOhFourRequest,26,"HTTP/1\.0\x20200\x20O
SF:K\r\ncontent-length:\x200\r\n\r\n")%r(SIPOptions,32,"SIP/2\.0\x20501\x2
SF:0Not\x20Implemented\r\ncontent-length:\x200\r\n\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port7880-TCP:V=7.94SVN%T=SSL%I=7%D=5/23%Time=68300E36%P=x86_64-pc-linux
SF:-gnu%r(GetRequest,2F,"HTTP/1\.0\x20400\x20Bad\x20Request\r\ncontent-len
SF:gth:\x200\r\n\r\n")%r(HTTPOptions,2F,"HTTP/1\.0\x20400\x20Bad\x20Reques
SF:t\r\ncontent-length:\x200\r\n\r\n")%r(RTSPRequest,2F,"RTSP/1\.0\x20400\
SF:x20Bad\x20Request\r\ncontent-length:\x200\r\n\r\n")%r(FourOhFourRequest
SF:,2F,"HTTP/1\.0\x20400\x20Bad\x20Request\r\ncontent-length:\x200\r\n\r\n
SF:")%r(SIPOptions,2E,"SIP/2\.0\x20400\x20Bad\x20Request\r\ncontent-length
SF::\x200\r\n\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port9143-TCP:V=7.94SVN%I=7%D=5/23%Time=68300E27%P=x86_64-pc-linux-gnu%r
SF:(GenericLines,67,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nContent-Type:\x
SF:20text/plain;\x20charset=utf-8\r\nConnection:\x20close\r\n\r\n400\x20Ba
SF:d\x20Request")%r(GetRequest,10B,"HTTP/1\.0\x20200\x20OK\r\nDate:\x20Fri
SF:,\x2023\x20May\x202025\x2005:56:55\x20GMT\r\nContent-Length:\x20150\r\n
SF:Content-Type:\x20text/html;\x20charset=utf-8\r\n\r\n<html>\n\t\t\t<head
SF:><title>Node\x20Exporter</title></head>\n\t\t\t<body>\n\t\t\t<h1>Node\x
SF:20Exporter</h1>\n\t\t\t<p><a\x20href=\"/metrics\">Metrics</a></p>\n\t\t
SF:\t</body>\n\t\t\t</html>")%r(HTTPOptions,10B,"HTTP/1\.0\x20200\x20OK\r\
SF:nDate:\x20Fri,\x2023\x20May\x202025\x2005:56:55\x20GMT\r\nContent-Lengt
SF:h:\x20150\r\nContent-Type:\x20text/html;\x20charset=utf-8\r\n\r\n<html>
SF:\n\t\t\t<head><title>Node\x20Exporter</title></head>\n\t\t\t<body>\n\t\
SF:t\t<h1>Node\x20Exporter</h1>\n\t\t\t<p><a\x20href=\"/metrics\">Metrics<
SF:/a></p>\n\t\t\t</body>\n\t\t\t</html>")%r(RTSPRequest,67,"HTTP/1\.1\x20
SF:400\x20Bad\x20Request\r\nContent-Type:\x20text/plain;\x20charset=utf-8\
SF:r\nConnection:\x20close\r\n\r\n400\x20Bad\x20Request")%r(Help,67,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nContent-Type:\x20text/plain;\x20charse
SF:t=utf-8\r\nConnection:\x20close\r\n\r\n400\x20Bad\x20Request")%r(SSLSes
SF:sionReq,67,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nContent-Type:\x20text
SF:/plain;\x20charset=utf-8\r\nConnection:\x20close\r\n\r\n400\x20Bad\x20R
SF:equest")%r(TerminalServerCookie,67,"HTTP/1\.1\x20400\x20Bad\x20Request\
SF:r\nContent-Type:\x20text/plain;\x20charset=utf-8\r\nConnection:\x20clos
SF:e\r\n\r\n400\x20Bad\x20Request")%r(TLSSessionReq,67,"HTTP/1\.1\x20400\x
SF:20Bad\x20Request\r\nContent-Type:\x20text/plain;\x20charset=utf-8\r\nCo
SF:nnection:\x20close\r\n\r\n400\x20Bad\x20Request")%r(Kerberos,67,"HTTP/1
SF:\.1\x20400\x20Bad\x20Request\r\nContent-Type:\x20text/plain;\x20charset
SF:=utf-8\r\nConnection:\x20close\r\n\r\n400\x20Bad\x20Request")%r(FourOhF
SF:ourRequest,10B,"HTTP/1\.0\x20200\x20OK\r\nDate:\x20Fri,\x2023\x20May\x2
SF:02025\x2005:57:21\x20GMT\r\nContent-Length:\x20150\r\nContent-Type:\x20
SF:text/html;\x20charset=utf-8\r\n\r\n<html>\n\t\t\t<head><title>Node\x20E
SF:xporter</title></head>\n\t\t\t<body>\n\t\t\t<h1>Node\x20Exporter</h1>\n
SF:\t\t\t<p><a\x20href=\"/metrics\">Metrics</a></p>\n\t\t\t</body>\n\t\t\t
SF:</html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port44445-TCP:V=7.94SVN%I=7%D=5/23%Time=68300E28%P=x86_64-pc-linux-gnu%
SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require
SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:56:56\x20GMT\r\nProxy-Aut
SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port44446-TCP:V=7.94SVN%I=7%D=5/23%Time=68300E28%P=x86_64-pc-linux-gnu%
SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require
SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:56:56\x20GMT\r\nProxy-Aut
SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port44464-TCP:V=7.94SVN%I=7%D=5/23%Time=68300E28%P=x86_64-pc-linux-gnu%
SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require
SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:56:56\x20GMT\r\nProxy-Aut
SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port44465-TCP:V=7.94SVN%I=7%D=5/23%Time=68300E28%P=x86_64-pc-linux-gnu%
SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require
SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:56:56\x20GMT\r\nProxy-Aut
SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port49155-TCP:V=7.94SVN%I=7%D=5/23%Time=68300E28%P=x86_64-pc-linux-gnu%
SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require
SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:56:56\x20GMT\r\nProxy-Aut
SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port49156-TCP:V=7.94SVN%I=7%D=5/23%Time=68300E28%P=x86_64-pc-linux-gnu%
SF:r(SIPOptions,A2,"HTTP/1\.1\x20407\x20Proxy\x20Authentication\x20Require
SF:d\r\nDate:\x20Fri,\x2023\x20May\x202025\x2005:56:56\x20GMT\r\nProxy-Aut
SF:henticate:\x20Basic\x20realm=\"proxy\"\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x200\r\n\r\n")%r(Socks5,A,"\x05\x04\0\x01\0\0\0\0\0\0");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|storage-misc|firewall|WAP
Running (JUST GUESSING): Linux 4.X|5.X|2.6.X|3.X|2.4.X (95%), Synology DiskStation Manager 5.X (90%), WatchGuard Fireware 11.X (90%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/a:synology:diskstation_manager:5.2 cpe:/o:linux:linux_kernel cpe:/o:watchguard:fireware:11.8 cpe:/o:linux:linux_kernel:2.4
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
Aggressive OS guesses: Linux 4.15 - 5.8 (95%), Linux 5.0 - 5.4 (95%), Linux 2.6.32 (95%), Linux 2.6.32 or 3.10 (95%), Linux 4.4 (95%), Linux 5.0 - 5.5 (94%), Linux 2.6.32 - 2.6.35 (93%), Linux 2.6.32 - 2.6.39 (93%), Linux 2.6.32 - 3.0 (92%), Linux 5.4 (91%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SCAN(V=7.94SVN%E=4%D=5/23%OT=1001%CT=%CU=32415%PV=N%DS=11%DC=T%G=N%TM=68300E84%P=x86_64-pc-linux-gnu)
SEQ(SP=101%GCD=1%ISR=10C%TI=Z%II=I%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=Y%DF=Y%T=3F%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
T1(R=Y%DF=Y%T=3F%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
U1(R=Y%DF=N%T=3F%IPL=164%UN=0%RIPL=G%RID=G%RIPCK=G%RUCK=G%RUD=G)
IE(R=Y%DFI=N%T=3F%CD=S)

Uptime guess: 38.987 days (since Mon Apr 14 06:17:20 2025)
Network Distance: 11 hops
TCP Sequence Prediction: Difficulty=257 (Good luck!)
IP ID Sequence Generation: All zeros

TRACEROUTE (using port 9143/tcp)
HOP RTT      ADDRESS
1   1.21 ms  _gateway (10.199.22.3)
2   0.31 ms  rtr-ge-dmarc.tblflp.net (10.199.1.1)
3   ...
4   3.73 ms  71-32-31-17.rcmt.qwest.net (71.32.31.17)
5   11.83 ms 4.68.144.73
6   12.09 ms 94.142.107.166
7   11.69 ms 190.98.170.10
8   ... 10
11  16.90 ms 194.233.150.250.static.snthostings.com (194.233.150.250)

Open proxy blocked — Naomi Amethyst 06:10, 23 May 2025 (UTC)[reply]

194.34.134.244

– This proxy check request is closed and will soon be archived by a bot.

194.34.134.244 · talk · contribs · block · log · stalk · Robtex · whois · Google · ipcheck · HTTP · geo · rangeblocks · spur · shodan

Reason: Block evasion. See list of proxies used (and SPI) for common topics. Positive ipcheck. Tule-hog (talk) 01:38, 28 May 2025 (UTC)[reply]

Nmap scan report for vsp.scapatrans.ru (194.34.134.244)
Host is up, received user-set (0.12s latency).
Scanned at 2025-05-28 06:30:11 UTC for 194s
Not shown: 65533 filtered tcp ports (no-response)
PORT     STATE SERVICE          REASON         VERSION
80/tcp   open  http             syn-ack ttl 54
|_http-title: ERROR: The requested URL could not be retrieved
| fingerprint-strings:
|   GetRequest, HTTPOptions:
|     HTTP/1.1 400 Bad Request
|     mime-version: 1.0
|     date: Wed, 28 May 2025 06:32:59 GMT
|     content-type: text/html;charset=utf-8
|     content-length: 3541
|     vary: Accept-Language
|     content-language: en
|     connection: close
|     <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
|     <html><head>
|     <meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors">
|     <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
|     <title>ERROR: The requested URL could not be retrieved</title>
|     <style type="text/css"><!--
|     Copyright (C) 1996-2023 The Squid Software Foundation and contributors
|     Squid software is distributed under GPLv2+ license and includes
|     contributions from numerous individuals and organizations.
|     Please see the COPYING and CONTRIBUTORS files for details.
|     Stylesheet for Squid Error pages
|_    Adapted
3128/tcp open  squid-http?      syn-ack ttl 54
| fingerprint-strings:
|   GetRequest, HTTPOptions:
|     HTTP/1.1 400 Bad Request
|     mime-version: 1.0
|     date: Wed, 28 May 2025 06:33:04 GMT
|     content-type: text/html;charset=utf-8
|     content-length: 3541
|     vary: Accept-Language
|     content-language: en
|     connection: close
|     <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
|     <html><head>
|     <meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors">
|     <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
|     <title>ERROR: The requested URL could not be retrieved</title>
|     <style type="text/css"><!--
|     Copyright (C) 1996-2023 The Squid Software Foundation and contributors
|     Squid software is distributed under GPLv2+ license and includes
|     contributions from numerous individuals and organizations.
|     Please see the COPYING and CONTRIBUTORS files for details.
|     Stylesheet for Squid Error pages
|_    Adapted
8081/tcp open  blackice-icecap? syn-ack ttl 54
|_mcafee-epo-agent: ePO Agent not found
| fingerprint-strings:
|   FourOhFourRequest:
|     HTTP/1.1 400 Bad Request
|     mime-version: 1.0
|     date: Wed, 28 May 2025 06:32:59 GMT
|     content-type: text/html;charset=utf-8
|     content-length: 3591
|     connection: close
|     <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
|     <html><head>
|     <meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors">
|     <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
|     <title>ERROR: The requested URL could not be retrieved</title>
|     <style type="text/css"><!--
|     Copyright (C) 1996-2023 The Squid Software Foundation and contributors
|     Squid software is distributed under GPLv2+ license and includes
|     contributions from numerous individuals and organizations.
|     Please see the COPYING and CONTRIBUTORS files for details.
|     Stylesheet for Squid Error pages
|     Adapted from design by Free CSS Templates
|     http://ww
|   GetRequest:
|     HTTP/1.1 400 Bad Request
|     mime-version: 1.0
|     date: Wed, 28 May 2025 06:32:59 GMT
|     content-type: text/html;charset=utf-8
|     content-length: 3521
|     connection: close
|     <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
|     <html><head>
|     <meta type="copyright" content="Copyright (C) 1996-2020 The Squid Software Foundation and contributors">
|     <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
|     <title>ERROR: The requested URL could not be retrieved</title>
|     <style type="text/css"><!--
|     Copyright (C) 1996-2023 The Squid Software Foundation and contributors
|     Squid software is distributed under GPLv2+ license and includes
|     contributions from numerous individuals and organizations.
|     Please see the COPYING and CONTRIBUTORS files for details.
|     Stylesheet for Squid Error pages
|     Adapted from design by Free CSS Templates
|_    http://ww
3 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=5/28%Time=6836AE1B%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,EA6,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nmime-version:\x201
SF:\.0\r\ndate:\x20Wed,\x2028\x20May\x202025\x2006:32:59\x20GMT\r\ncontent
SF:-type:\x20text/html;charset=utf-8\r\ncontent-length:\x203541\r\nvary:\x
SF:20Accept-Language\r\ncontent-language:\x20en\r\nconnection:\x20close\r\
SF:n\r\n<!DOCTYPE\x20html\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01//EN\
SF:"\x20\"http://www\.w3\.org/TR/html4/strict\.dtd\">\n<html><head>\n<meta
SF:\x20type=\"copyright\"\x20content=\"Copyright\x20\(C\)\x201996-2020\x20
SF:The\x20Squid\x20Software\x20Foundation\x20and\x20contributors\">\n<meta
SF:\x20http-equiv=\"Content-Type\"\x20content=\"text/html;\x20charset=utf-
SF:8\">\n<title>ERROR:\x20The\x20requested\x20URL\x20could\x20not\x20be\x2
SF:0retrieved</title>\n<style\x20type=\"text/css\"><!--\x20\n\x20/\*\n\x20
SF:\*\x20Copyright\x20\(C\)\x201996-2023\x20The\x20Squid\x20Software\x20Fo
SF:undation\x20and\x20contributors\n\x20\*\n\x20\*\x20Squid\x20software\x2
SF:0is\x20distributed\x20under\x20GPLv2\+\x20license\x20and\x20includes\n\
SF:x20\*\x20contributions\x20from\x20numerous\x20individuals\x20and\x20org
SF:anizations\.\n\x20\*\x20Please\x20see\x20the\x20COPYING\x20and\x20CONTR
SF:IBUTORS\x20files\x20for\x20details\.\n\x20\*/\n\n/\*\n\x20Stylesheet\x2
SF:0for\x20Squid\x20Error\x20pages\n\x20Adapted")%r(HTTPOptions,EA6,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nmime-version:\x201\.0\r\ndate:\x20Wed,
SF:\x2028\x20May\x202025\x2006:32:59\x20GMT\r\ncontent-type:\x20text/html;
SF:charset=utf-8\r\ncontent-length:\x203541\r\nvary:\x20Accept-Language\r\
SF:ncontent-language:\x20en\r\nconnection:\x20close\r\n\r\n<!DOCTYPE\x20ht
SF:ml\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01//EN\"\x20\"http://www\.w
SF:3\.org/TR/html4/strict\.dtd\">\n<html><head>\n<meta\x20type=\"copyright
SF:\"\x20content=\"Copyright\x20\(C\)\x201996-2020\x20The\x20Squid\x20Soft
SF:ware\x20Foundation\x20and\x20contributors\">\n<meta\x20http-equiv=\"Con
SF:tent-Type\"\x20content=\"text/html;\x20charset=utf-8\">\n<title>ERROR:\
SF:x20The\x20requested\x20URL\x20could\x20not\x20be\x20retrieved</title>\n
SF:<style\x20type=\"text/css\"><!--\x20\n\x20/\*\n\x20\*\x20Copyright\x20\
SF:(C\)\x201996-2023\x20The\x20Squid\x20Software\x20Foundation\x20and\x20c
SF:ontributors\n\x20\*\n\x20\*\x20Squid\x20software\x20is\x20distributed\x
SF:20under\x20GPLv2\+\x20license\x20and\x20includes\n\x20\*\x20contributio
SF:ns\x20from\x20numerous\x20individuals\x20and\x20organizations\.\n\x20\*
SF:\x20Please\x20see\x20the\x20COPYING\x20and\x20CONTRIBUTORS\x20files\x20
SF:for\x20details\.\n\x20\*/\n\n/\*\n\x20Stylesheet\x20for\x20Squid\x20Err
SF:or\x20pages\n\x20Adapted");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port3128-TCP:V=7.94SVN%I=7%D=5/28%Time=6836AE20%P=x86_64-pc-linux-gnu%r
SF:(GetRequest,EA6,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nmime-version:\x2
SF:01\.0\r\ndate:\x20Wed,\x2028\x20May\x202025\x2006:33:04\x20GMT\r\nconte
SF:nt-type:\x20text/html;charset=utf-8\r\ncontent-length:\x203541\r\nvary:
SF:\x20Accept-Language\r\ncontent-language:\x20en\r\nconnection:\x20close\
SF:r\n\r\n<!DOCTYPE\x20html\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01//E
SF:N\"\x20\"http://www\.w3\.org/TR/html4/strict\.dtd\">\n<html><head>\n<me
SF:ta\x20type=\"copyright\"\x20content=\"Copyright\x20\(C\)\x201996-2020\x
SF:20The\x20Squid\x20Software\x20Foundation\x20and\x20contributors\">\n<me
SF:ta\x20http-equiv=\"Content-Type\"\x20content=\"text/html;\x20charset=ut
SF:f-8\">\n<title>ERROR:\x20The\x20requested\x20URL\x20could\x20not\x20be\
SF:x20retrieved</title>\n<style\x20type=\"text/css\"><!--\x20\n\x20/\*\n\x
SF:20\*\x20Copyright\x20\(C\)\x201996-2023\x20The\x20Squid\x20Software\x20
SF:Foundation\x20and\x20contributors\n\x20\*\n\x20\*\x20Squid\x20software\
SF:x20is\x20distributed\x20under\x20GPLv2\+\x20license\x20and\x20includes\
SF:n\x20\*\x20contributions\x20from\x20numerous\x20individuals\x20and\x20o
SF:rganizations\.\n\x20\*\x20Please\x20see\x20the\x20COPYING\x20and\x20CON
SF:TRIBUTORS\x20files\x20for\x20details\.\n\x20\*/\n\n/\*\n\x20Stylesheet\
SF:x20for\x20Squid\x20Error\x20pages\n\x20Adapted")%r(HTTPOptions,EA6,"HTT
SF:P/1\.1\x20400\x20Bad\x20Request\r\nmime-version:\x201\.0\r\ndate:\x20We
SF:d,\x2028\x20May\x202025\x2006:33:04\x20GMT\r\ncontent-type:\x20text/htm
SF:l;charset=utf-8\r\ncontent-length:\x203541\r\nvary:\x20Accept-Language\
SF:r\ncontent-language:\x20en\r\nconnection:\x20close\r\n\r\n<!DOCTYPE\x20
SF:html\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01//EN\"\x20\"http://www\
SF:.w3\.org/TR/html4/strict\.dtd\">\n<html><head>\n<meta\x20type=\"copyrig
SF:ht\"\x20content=\"Copyright\x20\(C\)\x201996-2020\x20The\x20Squid\x20So
SF:ftware\x20Foundation\x20and\x20contributors\">\n<meta\x20http-equiv=\"C
SF:ontent-Type\"\x20content=\"text/html;\x20charset=utf-8\">\n<title>ERROR
SF::\x20The\x20requested\x20URL\x20could\x20not\x20be\x20retrieved</title>
SF:\n<style\x20type=\"text/css\"><!--\x20\n\x20/\*\n\x20\*\x20Copyright\x2
SF:0\(C\)\x201996-2023\x20The\x20Squid\x20Software\x20Foundation\x20and\x2
SF:0contributors\n\x20\*\n\x20\*\x20Squid\x20software\x20is\x20distributed
SF:\x20under\x20GPLv2\+\x20license\x20and\x20includes\n\x20\*\x20contribut
SF:ions\x20from\x20numerous\x20individuals\x20and\x20organizations\.\n\x20
SF:\*\x20Please\x20see\x20the\x20COPYING\x20and\x20CONTRIBUTORS\x20files\x
SF:20for\x20details\.\n\x20\*/\n\n/\*\n\x20Stylesheet\x20for\x20Squid\x20E
SF:rror\x20pages\n\x20Adapted");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port8081-TCP:V=7.94SVN%I=7%D=5/28%Time=6836AE1B%P=x86_64-pc-linux-gnu%r
SF:(GetRequest,E65,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nmime-version:\x2
SF:01\.0\r\ndate:\x20Wed,\x2028\x20May\x202025\x2006:32:59\x20GMT\r\nconte
SF:nt-type:\x20text/html;charset=utf-8\r\ncontent-length:\x203521\r\nconne
SF:ction:\x20close\r\n\r\n<!DOCTYPE\x20html\x20PUBLIC\x20\"-//W3C//DTD\x20
SF:HTML\x204\.01//EN\"\x20\"http://www\.w3\.org/TR/html4/strict\.dtd\">\n<
SF:html><head>\n<meta\x20type=\"copyright\"\x20content=\"Copyright\x20\(C\
SF:)\x201996-2020\x20The\x20Squid\x20Software\x20Foundation\x20and\x20cont
SF:ributors\">\n<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/htm
SF:l;\x20charset=utf-8\">\n<title>ERROR:\x20The\x20requested\x20URL\x20cou
SF:ld\x20not\x20be\x20retrieved</title>\n<style\x20type=\"text/css\"><!--\
SF:x20\n\x20/\*\n\x20\*\x20Copyright\x20\(C\)\x201996-2023\x20The\x20Squid
SF:\x20Software\x20Foundation\x20and\x20contributors\n\x20\*\n\x20\*\x20Sq
SF:uid\x20software\x20is\x20distributed\x20under\x20GPLv2\+\x20license\x20
SF:and\x20includes\n\x20\*\x20contributions\x20from\x20numerous\x20individ
SF:uals\x20and\x20organizations\.\n\x20\*\x20Please\x20see\x20the\x20COPYI
SF:NG\x20and\x20CONTRIBUTORS\x20files\x20for\x20details\.\n\x20\*/\n\n/\*\
SF:n\x20Stylesheet\x20for\x20Squid\x20Error\x20pages\n\x20Adapted\x20from\
SF:x20design\x20by\x20Free\x20CSS\x20Templates\n\x20http://ww")%r(FourOhFo
SF:urRequest,EAB,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nmime-version:\x201
SF:\.0\r\ndate:\x20Wed,\x2028\x20May\x202025\x2006:32:59\x20GMT\r\ncontent
SF:-type:\x20text/html;charset=utf-8\r\ncontent-length:\x203591\r\nconnect
SF:ion:\x20close\r\n\r\n<!DOCTYPE\x20html\x20PUBLIC\x20\"-//W3C//DTD\x20HT
SF:ML\x204\.01//EN\"\x20\"http://www\.w3\.org/TR/html4/strict\.dtd\">\n<ht
SF:ml><head>\n<meta\x20type=\"copyright\"\x20content=\"Copyright\x20\(C\)\
SF:x201996-2020\x20The\x20Squid\x20Software\x20Foundation\x20and\x20contri
SF:butors\">\n<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html;
SF:\x20charset=utf-8\">\n<title>ERROR:\x20The\x20requested\x20URL\x20could
SF:\x20not\x20be\x20retrieved</title>\n<style\x20type=\"text/css\"><!--\x2
SF:0\n\x20/\*\n\x20\*\x20Copyright\x20\(C\)\x201996-2023\x20The\x20Squid\x
SF:20Software\x20Foundation\x20and\x20contributors\n\x20\*\n\x20\*\x20Squi
SF:d\x20software\x20is\x20distributed\x20under\x20GPLv2\+\x20license\x20an
SF:d\x20includes\n\x20\*\x20contributions\x20from\x20numerous\x20individua
SF:ls\x20and\x20organizations\.\n\x20\*\x20Please\x20see\x20the\x20COPYING
SF:\x20and\x20CONTRIBUTORS\x20files\x20for\x20details\.\n\x20\*/\n\n/\*\n\
SF:x20Stylesheet\x20for\x20Squid\x20Error\x20pages\n\x20Adapted\x20from\x2
SF:0design\x20by\x20Free\x20CSS\x20Templates\n\x20http://ww");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|5.X|2.6.X|3.X (91%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
Aggressive OS guesses: Linux 4.15 - 5.8 (91%), Linux 5.0 - 5.4 (91%), Linux 2.6.32 (90%), Linux 4.4 (90%), Linux 5.0 - 5.5 (89%), Linux 2.6.32 or 3.10 (89%), Linux 2.6.32 - 2.6.35 (87%), Linux 2.6.32 - 2.6.39 (87%)
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SCAN(V=7.94SVN%E=4%D=5/28%OT=80%CT=%CU=%PV=N%DS=10%DC=T%G=N%TM=6836AE35%P=x86_64-pc-linux-gnu)
SEQ(SP=106%GCD=1%ISR=10D%TI=Z%II=I%TS=A)
OPS(O1=M5B4ST11NW7%O2=M5B4ST11NW7%O3=M5B4NNT11NW7%O4=M5B4ST11NW7%O5=M5B4ST11NW7%O6=M5B4ST11)
WIN(W1=FE88%W2=FE88%W3=FE88%W4=FE88%W5=FE88%W6=FE88)
ECN(R=Y%DF=Y%TG=40%W=FAF0%O=M5B4NNSNW7%CC=Y%Q=)
T1(R=Y%DF=Y%TG=40%S=O%A=S+%F=AS%RD=0%Q=)
T2(R=N)
T3(R=N)
T4(R=N)
U1(R=N)
IE(R=Y%DFI=N%TG=40%CD=S)

Uptime guess: 46.714 days (since Fri Apr 11 13:24:59 2025)
Network Distance: 10 hops
TCP Sequence Prediction: Difficulty=262 (Good luck!)
IP ID Sequence Generation: All zeros

TRACEROUTE (using port 80/tcp)
HOP RTT       ADDRESS
1   1.18 ms   _gateway (10.199.22.3)
2   0.34 ms   rtr-ge-dmarc.tblflp.net (10.199.1.1)
3   ...
4   2.99 ms   rcmt-agw1.inet.qwest.net (71.32.31.17)
5   11.49 ms  4.68.144.73
6   138.30 ms ae2.3204.edge7.ams1.neo.colt.net (171.75.9.210)
7   122.82 ms BR2.Amsterdam1.surf.net (213.244.164.2)
8   121.09 ms et001-4.rt.thd.hki.fi.retn.net (87.245.234.183)
9   123.74 ms gw-as51765.retn.net (87.245.244.217)
10  123.12 ms vsp.scapatrans.ru (194.34.134.244)

Open proxy blocked Urban VPN. — Naomi Amethyst 06:37, 28 May 2025 (UTC)[reply]