Nmap scan report for 192.168.1.200 Host is up (0.0000020s latency). Not shown: 65515 closed tcp ports (reset) PORT STATE SERVICE VERSION 21/tcp open ftp vsftpd (before 2.0.8) or WU-FTPD 23/tcp open telnet? | fingerprint-strings: | DNSStatusRequestTCP, DNSVersionBindReqTCP, DistCCD, JavaRMI, LANDesk-RC, LDAPBindReq, NULL, NotesRPC, RPCCheck, Radmin, TerminalServer, WMSRequest, X11Probe, mydoom, tn3270: | login: | FourOhFourRequest, GenericLines, GetRequest, HTTPOptions, LDAPSearchReq, RTSPRequest: | login: | Password: | Login incorrect | login: | Hello, Help, Kerberos, LPDString, NessusTPv10, NessusTPv11, NessusTPv12, SSLSessionReq, SSLv23SessionReq, TerminalServerCookie, Verifier, VerifierAdvanced, WWWOFFLEctrlstat: | login: | Password: | SIPOptions: | login: | Password: | Login incorrect | login: Password: | Login incorrect | login: Password: | Login incorrect | login: Password: | Login incorrect | login: Password: | Login incorrect |_ login: Password: 25/tcp open smtp Postfix smtpd |_smtp-commands: omega-decky, PIPELINING, SIZE 10240000, VRFY, ETRN, AUTH PLAIN LOGIN, ENHANCEDSTATUSCODES, 8BITMIME, DSN 80/tcp open http Apache httpd 2.4.54 |_http-title: 403 Forbidden |_http-server-header: Werkzeug/3.1.8 Python/3.11.2 110/tcp open pop3 Dovecot pop3d ([omega-decky]) |_pop3-capabilities: USER 143/tcp open imap Dovecot imapd |_imap-capabilities: IMAP4rev1 AUTH=PLAIN OK completed AUTH=LOGINA0001 CAPABILITY 389/tcp open ldap Cisco LDAP server 445/tcp open microsoft-ds | fingerprint-strings: | SMBProgNeg: | SMBr |_ "3DUfw 1433/tcp open ms-sql-s? 1883/tcp open mqtt | mqtt-subscribe: | Topics and their most recent payloads: | plant/water/pump2/status: STANDBY | plant/alarm/high_pressure: 0 | plant/water/chlorine/residual: 0.8 | plant/water/chlorine/dosing: 1.2 | plant/water/pump1/rpm: 1419 | plant/water/tank1/level: 76.6 | plant/$SYS/broker/uptime: 2847392 | plant/$SYS/broker/version: Mosquitto 2.0.15 | plant/water/valve/inlet/state: OPEN | plant/water/valve/drain/state: CLOSED | plant/water/tank1/pressure: 2.86 | plant/water/pump1/status: RUNNING | plant/alarm/low_chlorine: 0 |_ plant/alarm/pump_fault: 0 2375/tcp open docker Docker 24.0.5 | fingerprint-strings: | GetRequest: | HTTP/1.1 404 NOT FOUND | Server: Werkzeug/3.1.8 Python/3.11.2 | Date: Fri, 10 Apr 2026 06:25:23 GMT | Content-Type: application/json | Content-Length: 46 | Connection: close | {"message": "page not found", "response": 404} | HTTPOptions: | HTTP/1.1 200 OK | Server: Werkzeug/3.1.8 Python/3.11.2 | Date: Fri, 10 Apr 2026 06:25:23 GMT | Content-Type: text/html; charset=utf-8 | Allow: HEAD, OPTIONS, GET | Content-Length: 0 | Connection: close | Hello: | | |
| |Error code: 400
|Message: Bad request syntax ('EHLO').
|Error code explanation: 400 - Bad request syntax or unsupported method.
| | | RTSPRequest: | | | | |Error code: 400
|Message: Bad request version ('RTSP/1.0').
|Error code explanation: 400 - Bad request syntax or unsupported method.
| | | docker: | HTTP/1.1 200 OK | Server: Werkzeug/3.1.8 Python/3.11.2 | Date: Fri, 10 Apr 2026 06:25:23 GMT | Content-Type: application/json | Content-Length: 187 | Connection: close |_ {"Version": "24.0.5", "ApiVersion": "1.43", "MinAPIVersion": "1.12", "GitCommit": "ced0996", "GoVersion": "go1.20.6", "Os": "linux", "Arch": "amd64", "KernelVersion": "5.15.0-76-generic"} | docker-version: | KernelVersion: 5.15.0-76-generic | MinAPIVersion: 1.12 | Arch: amd64 | Os: linux | GoVersion: go1.20.6 | Version: 24.0.5 | GitCommit: ced0996 |_ ApiVersion: 1.43 3306/tcp open mysql MySQL 5.7.38-log | mysql-info: | Protocol: 10 | Version: 5.7.38-log | Thread ID: 1 | Capabilities flags: 63487 | Some Capabilities: Support41Auth, DontAllowDatabaseTableColumn, Speaks41ProtocolOld, ConnectWithDatabase, SupportsTransactions, IgnoreSpaceBeforeParenthesis, SupportsCompression, LongColumnFlag, SupportsLoadDataLocal, ODBCClient, LongPassword, Speaks41ProtocolNew, InteractiveClient, FoundRows, IgnoreSigpipes, SupportsMultipleStatments, SupportsMultipleResults, SupportsAuthPlugins | Status: Autocommit | Salt: pv!magic!O}%>UM|gu^1 |_ Auth Plugin Name: mysql_native_password 3389/tcp open ms-wbt-server xrdp 5060/tcp open sip (SIP end point; Status: 401 Unauthorized) | fingerprint-strings: | HTTPOptions: | SIP/2.0 401 Unauthorized | Via: | From: | Call-ID: | CSeq: | WWW-Authenticate: Digest realm="omega-decky", nonce="fa63b9f8e719d810", algorithm=MD5 | Content-Length: 0 | RTSPRequest: | SIP/2.0 401 Unauthorized | Via: | From: | Call-ID: | CSeq: | WWW-Authenticate: Digest realm="omega-decky", nonce="25b193b6f8c63e9d", algorithm=MD5 | Content-Length: 0 | SIPOptions: | SIP/2.0 401 Unauthorized | Via: SIP/2.0/TCP nm;branch=foo | From:Error code: 400
|Message: Bad request version ('RTSP/1.0').
|Error code explanation: 400 - Bad request syntax or unsupported method.
| | | SSLSessionReq: | | | | |Error code: 400
|Message: Bad request syntax (' | <= | ').
|Error code explanation: 400 - Bad request syntax or unsupported method.
| |_ 9200/tcp open wap-wsp? | fingerprint-strings: | GetRequest: | HTTP/1.0 200 OK | Server: elasticsearch | Date: Fri, 10 Apr 2026 06:25:23 GMT | Content-Type: application/json; charset=UTF-8 | Content-Length: 477 | X-elastic-product: Elasticsearch | {"name": "omega-decky", "cluster_name": "elasticsearch", "cluster_uuid": "xC3Pr9abTq2mNkOeLvXwYA", "version": {"number": "7.17.9", "build_flavor": "default", "build_type": "docker", "build_hash": "ef48222227ee6b9e70e502f0f0daa52435ee634d", "build_date": "2023-01-31T05:34:43.305517834Z", "build_snapshot": false, "lucene_version": "8.11.1", "minimum_wire_compatibility_version": "6.8.0", "minimum_index_compatibility_version": "6.0.0-beta1"}, "tagline": "You Know, for Search"} | HTTPOptions: | HTTP/1.0 501 Unsupported method ('OPTIONS') | Server: elasticsearch | Date: Fri, 10 Apr 2026 06:25:23 GMT | Connection: close | Content-Type: text/html;charset=utf-8 | Content-Length: 360 | | | | |Error code: 501
|Message: Unsupported method ('OPTIONS').
|Error code explanation: 501 - Server does not support this operation.
| | | RTSPRequest: | | | | |Error code: 400
|Message: Bad request version ('RTSP/1.0').
|Error code explanation: 400 - Bad request syntax or unsupported method.
| |_ 27017/tcp open mongod? |_mongodb-databases: ERROR: Script execution failed (use -d to debug) |_mongodb-info: ERROR: Script execution failed (use -d to debug) 8 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service : ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port23-TCP:V=7.92%I=9%D=4/10%Time=69D897D3%P=x86_64-redhat-linux-gnu%r( SF:NULL,7,"login:\x20")%r(GenericLines,2C,"login:\x20\xff\xfb\x01Password: SF:\x20\nLogin\x20incorrect\nlogin:\x20")%r(tn3270,16,"login:\x20\xff\xfe\ SF:x18\xff\xfe\x19\xff\xfc\x19\xff\xfe\0\xff\xfc\0")%r(GetRequest,2C,"logi SF:n:\x20\xff\xfb\x01Password:\x20\nLogin\x20incorrect\nlogin:\x20")%r(HTT SF:POptions,2C,"login:\x20\xff\xfb\x01Password:\x20\nLogin\x20incorrect\nl SF:ogin:\x20")%r(RTSPRequest,2C,"login:\x20\xff\xfb\x01Password:\x20\nLogi SF:n\x20incorrect\nlogin:\x20")%r(RPCCheck,7,"login:\x20")%r(DNSVersionBin SF:dReqTCP,7,"login:\x20")%r(DNSStatusRequestTCP,7,"login:\x20")%r(Hello,1 SF:4,"login:\x20\xff\xfb\x01Password:\x20")%r(Help,14,"login:\x20\xff\xfb\ SF:x01Password:\x20")%r(SSLSessionReq,14,"login:\x20\xff\xfb\x01Password:\ SF:x20")%r(TerminalServerCookie,14,"login:\x20\xff\xfb\x01Password:\x20")% SF:r(SSLv23SessionReq,14,"login:\x20\xff\xfb\x01Password:\x20")%r(Kerberos SF:,14,"login:\x20\xff\xfb\x01Password:\x20")%r(X11Probe,7,"login:\x20")%r SF:(FourOhFourRequest,2C,"login:\x20\xff\xfb\x01Password:\x20\nLogin\x20in SF:correct\nlogin:\x20")%r(LPDString,14,"login:\x20\xff\xfb\x01Password:\x SF:20")%r(LDAPSearchReq,2C,"login:\x20\xff\xfb\x01Password:\x20\nLogin\x20 SF:incorrect\nlogin:\x20")%r(LDAPBindReq,7,"login:\x20")%r(SIPOptions,BE," SF:login:\x20\xff\xfb\x01Password:\x20\nLogin\x20incorrect\nlogin:\x20Pass SF:word:\x20\nLogin\x20incorrect\nlogin:\x20Password:\x20\nLogin\x20incorr SF:ect\nlogin:\x20Password:\x20\nLogin\x20incorrect\nlogin:\x20Password:\x SF:20\nLogin\x20incorrect\nlogin:\x20Password:\x20")%r(LANDesk-RC,7,"login SF::\x20")%r(TerminalServer,7,"login:\x20")%r(NotesRPC,7,"login:\x20")%r(D SF:istCCD,7,"login:\x20")%r(JavaRMI,7,"login:\x20")%r(Radmin,7,"login:\x20 SF:")%r(NessusTPv12,14,"login:\x20\xff\xfb\x01Password:\x20")%r(NessusTPv1 SF:1,14,"login:\x20\xff\xfb\x01Password:\x20")%r(NessusTPv10,14,"login:\x2 SF:0\xff\xfb\x01Password:\x20")%r(WMSRequest,7,"login:\x20")%r(mydoom,7,"l SF:ogin:\x20")%r(WWWOFFLEctrlstat,14,"login:\x20\xff\xfb\x01Password:\x20" SF:)%r(Verifier,14,"login:\x20\xff\xfb\x01Password:\x20")%r(VerifierAdvanc SF:ed,14,"login:\x20\xff\xfb\x01Password:\x20"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port445-TCP:V=7.92%I=9%D=4/10%Time=69D897D8%P=x86_64-redhat-linux-gnu%r SF:(SMBProgNeg,51,"\0\0\0M\xffSMBr\0\0\0\0\x80\0\xc0\0\0\0\0\0\0\0\0\0\0\0 SF:\0\0\0@\x06\0\0\x01\0\x11\x07\0\x03\x01\0\x01\0\0\xfa\0\0\0\0\x01\0\0\0 SF:\0\0p\0\0\0\0\0\0\0\0\0\0\0\0\0\x08\x08\0\x11\"3DUfw\x88"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port1433-TCP:V=7.92%I=9%D=4/10%Time=69D897D8%P=x86_64-redhat-linux-gnu% SF:r(ms-sql-s,2F,"\x04\x01\0/\0\0\x01\0\0\0\x1a\0\x06\x01\0\x20\0\x01\x02\ SF:0!\0\x01\x03\0\"\0\x04\x04\0&\0\x01\xff\x0e\0\x07\xd0\0\0\x02\0\0\0\0\0 SF:\0"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port5060-TCP:V=7.92%I=9%D=4/10%Time=69D897E0%P=x86_64-redhat-linux-gnu% SF:r(SIPOptions,F7,"SIP/2\.0\x20401\x20Unauthorized\r\nVia:\x20SIP/2\.0/TC SF:P\x20nm;branch=foo\r\nFrom:\x20Error\x20code:\x20400
\n\x20\x20\x20\x20\x20\x20\x20\x20Messa SF:ge:\x20Bad\x20request\x20syntax\x20\('\\x16\\x03\\x00\\x00S\\x01\\x00\\ SF:x00O\\x03\\x00\?G\xc3\x97\xc3\xb7\xc2\xba,\xc3\xae\xc3\xaa\xc2\xb2`~\xc SF:3\xb3\\x00\xc3\xbd\\x82{\xc2\xb9\xc3\x95\\x96\xc3\x88w\\x9b\xc3\xa6\xc3 SF:\x84\xc3\x9b<=\xc3\x9bo\xc3\xaf\\x10n\\x00\\x00\(\\x00\\x16\\x00\\x1 SF:3\\x00'\)\.
\n\x20\x20\x20\x20\x20\x20\x20\x20Error\x20code\x20ex SF:planation:\x20400\x20-\x20Bad\x20request\x20syntax\x20or\x20unsupported SF:\x20method\.
\n\x20\x20\x20\x20\n\n")%r(GetRequest,E0, SF:"HTTP/1\.1\x20404\x20NOT\x20FOUND\r\nServer:\x20Werkzeug/3\.1\.8\x20Pyt SF:hon/3\.11\.2\r\nDate:\x20Fri,\x2010\x20Apr\x202026\x2006:25:23\x20GMT\r SF:\nContent-Type:\x20application/json\r\nContent-Length:\x2052\r\nConnect SF:ion:\x20close\r\n\r\n{\"kind\":\x20\"Status\",\x20\"status\":\x20\"Fail SF:ure\",\x20\"code\":\x20404}")%r(HTTPOptions,C7,"HTTP/1\.1\x20200\x20OK\ SF:r\nServer:\x20Werkzeug/3\.1\.8\x20Python/3\.11\.2\r\nDate:\x20Fri,\x201 SF:0\x20Apr\x202026\x2006:25:23\x20GMT\r\nContent-Type:\x20text/html;\x20c SF:harset=utf-8\r\nAllow:\x20GET,\x20HEAD,\x20OPTIONS\r\nContent-Length:\x SF:200\r\nConnection:\x20close\r\n\r\n")%r(RTSPRequest,16C,"\n\n\x20\x20\x20\x20\n\x20\x20\x20\x20\x SF:20\x20\x20\x20\n\x20\x20\x20\x20\x20\x20\x20 SF:\x20Error\x20code:\x20400
\n\x20 SF:\x20\x20\x20\x20\x20\x20\x20Message:\x20Bad\x20request\x20version\x2 SF:0\('RTSP/1\.0'\)\.
\n\x20\x20\x20\x20\x20\x20\x20\x20Error\x20cod SF:e\x20explanation:\x20400\x20-\x20Bad\x20request\x20syntax\x20or\x20unsu SF:pported\x20method\.
\n\x20\x20\x20\x20\n\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port9200-TCP:V=7.92%I=9%D=4/10%Time=69D897D3%P=x86_64-redhat-linux-gnu% SF:r(GetRequest,293,"HTTP/1\.0\x20200\x20OK\r\nServer:\x20elasticsearch\x2 SF:0\r\nDate:\x20Fri,\x2010\x20Apr\x202026\x2006:25:23\x20GMT\r\nContent-T SF:ype:\x20application/json;\x20charset=UTF-8\r\nContent-Length:\x20477\r\ SF:nX-elastic-product:\x20Elasticsearch\r\n\r\n{\"name\":\x20\"omega-decky SF:\",\x20\"cluster_name\":\x20\"elasticsearch\",\x20\"cluster_uuid\":\x20 SF:\"xC3Pr9abTq2mNkOeLvXwYA\",\x20\"version\":\x20{\"number\":\x20\"7\.17\ SF:.9\",\x20\"build_flavor\":\x20\"default\",\x20\"build_type\":\x20\"dock SF:er\",\x20\"build_hash\":\x20\"ef48222227ee6b9e70e502f0f0daa52435ee634d\ SF:",\x20\"build_date\":\x20\"2023-01-31T05:34:43\.305517834Z\",\x20\"buil SF:d_snapshot\":\x20false,\x20\"lucene_version\":\x20\"8\.11\.1\",\x20\"mi SF:nimum_wire_compatibility_version\":\x20\"6\.8\.0\",\x20\"minimum_index_ SF:compatibility_version\":\x20\"6\.0\.0-beta1\"},\x20\"tagline\":\x20\"Yo SF:u\x20Know,\x20for\x20Search\"}")%r(HTTPOptions,223,"HTTP/1\.0\x20501\x2 SF:0Unsupported\x20method\x20\('OPTIONS'\)\r\nServer:\x20elasticsearch\x20 SF:\r\nDate:\x20Fri,\x2010\x20Apr\x202026\x2006:25:23\x20GMT\r\nConnection SF::\x20close\r\nContent-Type:\x20text/html;charset=utf-8\r\nContent-Lengt SF:h:\x20360\r\n\r\n\n\n\x20\x20\x2 SF:0\x20\n\x20\x20\x20\x20\x20\x20\x20\x20\n\x20\x20\x20\x20\x20\x20\x20\x20SF:Error\x20code:\x20501
\n\x20\x20\x20\x20\x20\x20\x20\x20Message:\ SF:x20Unsupported\x20method\x20\('OPTIONS'\)\.
\n\x20\x20\x20\x20\x20\x SF:20\x20\x20Error\x20code\x20explanation:\x20501\x20-\x20Server\x20doe SF:s\x20not\x20support\x20this\x20operation\.
\n\x20\x20\x20\x20 SF:\n\n")%r(RTSPRequest,16C,"\n\n\x20\x20\x20\x20\n\x20\x20\x20\x20\x20\x20\x20\x20\n\x20\x20\x20\x20\x20\x20\x20\x20Error\x20code:\x20400
\n\x20\x20\x20\x20\x20\x20\x20 SF:\x20Message:\x20Bad\x20request\x20version\x20\('RTSP/1\.0'\)\.
\n SF:\x20\x20\x20\x20\x20\x20\x20\x20Error\x20code\x20explanation:\x20400 SF:\x20-\x20Bad\x20request\x20syntax\x20or\x20unsupported\x20method\.
\ SF:n\x20\x20\x20\x20\n\n"); MAC Address: F2:5F:2F:EE:5B:96 (Unknown) Service Info: Hosts: omega-decky, omega-decky Host script results: |_ms-sql-info: ERROR: Script execution failed (use -d to debug) | smb2-time: | date: 2026-04-10T06:33:53 |_ start_date: 2026-04-10T06:33:53 | smb-security-mode: | account_used: guest | authentication_level: user | challenge_response: supported |_ message_signing: disabled (dangerous, but default) | smb2-security-mode: | 2.0.2: |_ Message signing enabled but not required |_clock-skew: mean: -77663d15h16m57s, deviation: 109832d23h14m31s, median: -155327d06h33m54s Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 784.93 seconds