Starting Nmap 7.92 ( https://nmap.org ) at 2022-04-29 06:08 EDT
Fetchfile found /usr/bin/../share/nmap/nmap-services
Fetchfile found /usr/bin/../share/nmap/nmap.xsl
The max # of sockets we are using is: 0
————— Timing report —————
hostgroups: min 1, max 100000
rtt-timeouts: init 1000, min 100, max 10000
max-scan-delay: TCP 1000, UDP 1000, SCTP 1000
parallelism: min 0, max 0
max-retries: 10, host-timeout: 0
min-rate: 0, max-rate: 0
Fetchfile found /usr/bin/../share/nmap/nmap-payloads
Initiating ARP Ping Scan at 06:08
Scanning 192.168.56.103 [1 port]
Packet capture filter (device eth1): arp and arp[18:4] = 0x08002740 and arp[22:2] = 0x1F8B
SENT (0.1451s) ARP who-has 192.168.56.103 tell 192.168.56.104
TIMING STATS (0.1452s): IP, probes active/freshportsleft/retry_stack/outstanding/retranwait/onbench, cwnd/ssthresh/delay, timeout/srtt/rttvar/
Groupstats (1/1 incomplete): 1/////* 10.00/75/* 200000/-1/-1
192.168.56.103: 1/0/0/1/0/0 10.00/75/0 200000/-1/-1
Current sending rates: 24.99 packets / s, 1049.69 bytes / s.
Overall sending rates: 24.99 packets / s, 1049.69 bytes / s.
RCVD (0.1458s) ARP reply 192.168.56.103 is-at 08:00:27:B5:08:D5
Found 192.168.56.103 in incomplete hosts list.
ultrascan_host_probe_update called for machine 192.168.56.103 state UNKNOWN -> HOST_UP (trynum 0 time: 919)
Fetchfile found /usr/bin/../share/nmap/nmap-mac-prefixes
MAC prefix 080030 is duplicated in /usr/bin/../share/nmap/nmap-mac-prefixes; ignoring duplicates.
MAC prefix 0001C8 is duplicated in /usr/bin/../share/nmap/nmap-mac-prefixes; ignoring duplicates.
MAC prefix 080030 is duplicated in /usr/bin/../share/nmap/nmap-mac-prefixes; ignoring duplicates.
Timeout vals: srtt: -1 rttvar: -1 to: 200000 delta 628 ==> srtt: 628 rttvar: 5000 to: 100000
Timeout vals: srtt: -1 rttvar: -1 to: 200000 delta 628 ==> srtt: 628 rttvar: 5000 to: 100000
Changing ping technique for 192.168.56.103 to ARP
Moving 192.168.56.103 to completed hosts list with 0 outstanding probes.
Changing global ping host to 192.168.56.103.
Completed ARP Ping Scan at 06:08, 0.08s elapsed (1 total hosts)
Overall sending rates: 12.69 packets / s, 532.97 bytes / s.
pcap stats: 1 packets received by filter, 0 dropped by kernel.
mass_rdns: Using DNS server 62.241.198.245
mass_rdns: Using DNS server 62.241.198.246
NSOCK DEBUG [0.2410s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK INFO [0.2410s] nsock_iod_new2(): nsock_iod_new (IOD #1)
NSOCK DEBUG [0.2410s] event_new(): event_new (IOD #1) (EID #8)
NSOCK INFO [0.2410s] nsock_connect_udp(): UDP connection requested to 62.241.198.246:53 (IOD #1) EID 8
NSOCK DEBUG [0.2410s] nsock_pool_add_event(): NSE #8: Adding event (timeout in -1651226926035ms)
NSOCK INFO [0.2410s] nsock_trace_handler_callback(): Callback: CONNECT ERROR [Network is unreachable (101)] for EID 8 [62.241.198.246:53]
NSOCK DEBUG [0.2410s] event_delete(): event_delete (IOD #1) (EID #8)
NSOCK DEBUG [0.2420s] event_new(): event_new (IOD #1) (EID #18)
NSOCK INFO [0.2420s] nsock_read(): Read request from IOD #1 [62.241.198.246:53] (timeout: -1ms) EID 18
NSOCK DEBUG [0.2420s] nsock_pool_add_event(): NSE #18: Adding event (timeout in -1651226926035ms)
NSOCK INFO [0.2420s] nsock_iod_new2(): nsock_iod_new (IOD #2)
NSOCK DEBUG [0.2420s] event_new(): event_new (IOD #2) (EID #24)
NSOCK INFO [0.2420s] nsock_connect_udp(): UDP connection requested to 62.241.198.245:53 (IOD #2) EID 24
NSOCK DEBUG [0.2420s] nsock_pool_add_event(): NSE #24: Adding event (timeout in -1651226926035ms)
NSOCK INFO [0.2420s] nsock_trace_handler_callback(): Callback: CONNECT ERROR [Network is unreachable (101)] for EID 24 [62.241.198.245:53]
NSOCK DEBUG [0.2420s] event_delete(): event_delete (IOD #2) (EID #24)
NSOCK DEBUG [0.2420s] event_new(): event_new (IOD #2) (EID #34)
NSOCK INFO [0.2420s] nsock_read(): Read request from IOD #2 [62.241.198.245:53] (timeout: -1ms) EID 34
NSOCK DEBUG [0.2420s] nsock_pool_add_event(): NSE #34: Adding event (timeout in -1651226926035ms)
Initiating Parallel DNS resolution of 1 host. at 06:08
mass_rdns: TRANSMITTING for <192.168.56.103> (server <62.241.198.246>)
NSOCK DEBUG [0.2420s] event_new(): event_new (IOD #1) (EID #43)
NSOCK INFO [0.2420s] nsock_write(): Write request for 45 bytes to IOD #1 EID 43 [62.241.198.246:53]: ………….103.56.168.192.in-addr.arpa…..
NSOCK DEBUG [0.2420s] nsock_pool_add_event(): NSE #43: Adding event (timeout in 100ms)
NSOCK DEBUG [0.2420s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [0.2420s] nsock_loop(): nsock_loop() started (timeout=500ms). 3 events pending
NSOCK DEBUG FULL [0.2420s] epoll_loop(): wait for events
NSOCK DEBUG FULL [0.2420s] process_iod_events(): Processing events on IOD 1 (ev=2)
NSOCK DEBUG FULL [0.2420s] process_event(): Processing event 18 (timeout in -1651226926035ms, done=0)
NSOCK DEBUG FULL [0.2420s] process_event(): Processing event 43 (timeout in 99ms, done=0)
NSOCK DEBUG FULL [0.2420s] process_event(): NSE #43: Sending event
NSOCK INFO [0.2420s] nsock_trace_handler_callback(): Callback: WRITE ERROR [Destination address required (89)] for EID 43 [62.241.198.246:53]
NSOCK DEBUG [0.2420s] event_delete(): event_delete (IOD #1) (EID #43)
NSOCK DEBUG FULL [0.2420s] epoll_loop(): wait for events
NSOCK DEBUG [0.7420s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [0.7420s] nsock_loop(): nsock_loop() started (timeout=500ms). 2 events pending
NSOCK DEBUG FULL [0.7420s] epoll_loop(): wait for events
NSOCK DEBUG [1.2430s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [1.2430s] nsock_loop(): nsock_loop() started (timeout=500ms). 2 events pending
NSOCK DEBUG FULL [1.2430s] epoll_loop(): wait for events
NSOCK DEBUG [1.7430s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [1.7440s] nsock_loop(): nsock_loop() started (timeout=500ms). 2 events pending
NSOCK DEBUG FULL [1.7440s] epoll_loop(): wait for events
NSOCK DEBUG [2.2450s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [2.2450s] nsock_loop(): nsock_loop() started (timeout=497ms). 2 events pending
NSOCK DEBUG FULL [2.2450s] epoll_loop(): wait for events
CAPACITY <62.241.198.246> = 10
mass_rdns: TRANSMITTING for <192.168.56.103> (server <62.241.198.246>)
NSOCK DEBUG [2.7520s] event_new(): event_new (IOD #1) (EID #51)
NSOCK INFO [2.7520s] nsock_write(): Write request for 45 bytes to IOD #1 EID 51 [62.241.198.246:53]: ………….103.56.168.192.in-addr.arpa…..
NSOCK DEBUG [2.7520s] nsock_pool_add_event(): NSE #51: Adding event (timeout in 100ms)
NSOCK DEBUG [2.7520s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [2.7520s] nsock_loop(): nsock_loop() started (timeout=500ms). 3 events pending
NSOCK DEBUG FULL [2.7520s] epoll_loop(): wait for events
NSOCK DEBUG FULL [2.7520s] process_iod_events(): Processing events on IOD 1 (ev=2)
NSOCK DEBUG FULL [2.7520s] process_event(): Processing event 18 (timeout in -1651226928545ms, done=0)
NSOCK DEBUG FULL [2.7520s] process_event(): Processing event 51 (timeout in 99ms, done=0)
NSOCK DEBUG FULL [2.7520s] process_event(): NSE #51: Sending event
NSOCK INFO [2.7520s] nsock_trace_handler_callback(): Callback: WRITE ERROR [Destination address required (89)] for EID 51 [62.241.198.246:53]
NSOCK DEBUG [2.7520s] event_delete(): event_delete (IOD #1) (EID #51)
NSOCK DEBUG FULL [2.7520s] epoll_loop(): wait for events
NSOCK DEBUG [3.2540s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [3.2540s] nsock_loop(): nsock_loop() started (timeout=500ms). 2 events pending
NSOCK DEBUG FULL [3.2540s] epoll_loop(): wait for events
NSOCK DEBUG [3.7600s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [3.7600s] nsock_loop(): nsock_loop() started (timeout=500ms). 2 events pending
NSOCK DEBUG FULL [3.7600s] epoll_loop(): wait for events
NSOCK DEBUG [4.2600s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [4.2600s] nsock_loop(): nsock_loop() started (timeout=500ms). 2 events pending
NSOCK DEBUG FULL [4.2600s] epoll_loop(): wait for events
NSOCK DEBUG [4.7750s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [4.7750s] nsock_loop(): nsock_loop() started (timeout=500ms). 2 events pending
NSOCK DEBUG FULL [4.7750s] epoll_loop(): wait for events
NSOCK DEBUG [5.2870s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [5.2870s] nsock_loop(): nsock_loop() started (timeout=500ms). 2 events pending
NSOCK DEBUG FULL [5.2870s] epoll_loop(): wait for events
NSOCK DEBUG [5.7880s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [5.7890s] nsock_loop(): nsock_loop() started (timeout=500ms). 2 events pending
NSOCK DEBUG FULL [5.7890s] epoll_loop(): wait for events
NSOCK DEBUG [6.2910s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [6.2910s] nsock_loop(): nsock_loop() started (timeout=460ms). 2 events pending
NSOCK DEBUG FULL [6.2910s] epoll_loop(): wait for events
CAPACITY <62.241.198.246> = 10
CAPACITY <62.241.198.246> = 10
mass_rdns: TRANSMITTING for <192.168.56.103> (server <62.241.198.245>)
NSOCK DEBUG [6.7570s] event_new(): event_new (IOD #2) (EID #59)
NSOCK INFO [6.7570s] nsock_write(): Write request for 45 bytes to IOD #2 EID 59 [62.241.198.245:53]: ………….103.56.168.192.in-addr.arpa…..
NSOCK DEBUG [6.7570s] nsock_pool_add_event(): NSE #59: Adding event (timeout in 100ms)
NSOCK DEBUG [6.7570s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [6.7570s] nsock_loop(): nsock_loop() started (timeout=500ms). 3 events pending
NSOCK DEBUG FULL [6.7570s] epoll_loop(): wait for events
NSOCK DEBUG FULL [6.7580s] process_iod_events(): Processing events on IOD 2 (ev=2)
NSOCK DEBUG FULL [6.7580s] process_event(): Processing event 34 (timeout in -1651226932551ms, done=0)
NSOCK DEBUG FULL [6.7580s] process_event(): Processing event 59 (timeout in 99ms, done=0)
NSOCK DEBUG FULL [6.7580s] process_event(): NSE #59: Sending event
NSOCK INFO [6.7580s] nsock_trace_handler_callback(): Callback: WRITE ERROR [Destination address required (89)] for EID 59 [62.241.198.245:53]
NSOCK DEBUG [6.7580s] event_delete(): event_delete (IOD #2) (EID #59)
NSOCK DEBUG FULL [6.7580s] epoll_loop(): wait for events
NSOCK DEBUG [7.2590s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [7.2590s] nsock_loop(): nsock_loop() started (timeout=500ms). 2 events pending
NSOCK DEBUG FULL [7.2590s] epoll_loop(): wait for events
NSOCK DEBUG [7.7660s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [7.7660s] nsock_loop(): nsock_loop() started (timeout=500ms). 2 events pending
NSOCK DEBUG FULL [7.7660s] epoll_loop(): wait for events
NSOCK DEBUG [8.2790s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [8.2790s] nsock_loop(): nsock_loop() started (timeout=500ms). 2 events pending
NSOCK DEBUG FULL [8.2790s] epoll_loop(): wait for events
NSOCK DEBUG [8.7840s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [8.7840s] nsock_loop(): nsock_loop() started (timeout=474ms). 2 events pending
NSOCK DEBUG FULL [8.7840s] epoll_loop(): wait for events
CAPACITY <62.241.198.245> = 10
mass_rdns: TRANSMITTING for <192.168.56.103> (server <62.241.198.245>)
NSOCK DEBUG [9.2590s] event_new(): event_new (IOD #2) (EID #67)
NSOCK INFO [9.2590s] nsock_write(): Write request for 45 bytes to IOD #2 EID 67 [62.241.198.245:53]: ………….103.56.168.192.in-addr.arpa…..
NSOCK DEBUG [9.2590s] nsock_pool_add_event(): NSE #67: Adding event (timeout in 100ms)
NSOCK DEBUG [9.2590s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [9.2590s] nsock_loop(): nsock_loop() started (timeout=500ms). 3 events pending
NSOCK DEBUG FULL [9.2590s] epoll_loop(): wait for events
NSOCK DEBUG FULL [9.2590s] process_iod_events(): Processing events on IOD 2 (ev=2)
NSOCK DEBUG FULL [9.2590s] process_event(): Processing event 34 (timeout in -1651226935053ms, done=0)
NSOCK DEBUG FULL [9.2590s] process_event(): Processing event 67 (timeout in 99ms, done=0)
NSOCK DEBUG FULL [9.2590s] process_event(): NSE #67: Sending event
NSOCK INFO [9.2590s] nsock_trace_handler_callback(): Callback: WRITE ERROR [Destination address required (89)] for EID 67 [62.241.198.245:53]
NSOCK DEBUG [9.2590s] event_delete(): event_delete (IOD #2) (EID #67)
NSOCK DEBUG FULL [9.2590s] epoll_loop(): wait for events
NSOCK DEBUG [9.7710s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [9.7720s] nsock_loop(): nsock_loop() started (timeout=500ms). 2 events pending
NSOCK DEBUG FULL [9.7720s] epoll_loop(): wait for events
NSOCK DEBUG [10.2920s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [10.2920s] nsock_loop(): nsock_loop() started (timeout=500ms). 2 events pending
NSOCK DEBUG FULL [10.2920s] epoll_loop(): wait for events
NSOCK DEBUG [10.7950s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [10.7950s] nsock_loop(): nsock_loop() started (timeout=500ms). 2 events pending
NSOCK DEBUG FULL [10.7950s] epoll_loop(): wait for events
NSOCK DEBUG [11.2990s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [11.3000s] nsock_loop(): nsock_loop() started (timeout=500ms). 2 events pending
NSOCK DEBUG FULL [11.3000s] epoll_loop(): wait for events
NSOCK DEBUG [11.9550s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [11.9550s] nsock_loop(): nsock_loop() started (timeout=500ms). 2 events pending
NSOCK DEBUG FULL [11.9550s] epoll_loop(): wait for events
NSOCK DEBUG [12.4630s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [12.4630s] nsock_loop(): nsock_loop() started (timeout=500ms). 2 events pending
NSOCK DEBUG FULL [12.4630s] epoll_loop(): wait for events
NSOCK DEBUG [12.9860s] nsock_set_loglevel(): Set log level to FULL DEBUG
NSOCK DEBUG [12.9860s] nsock_loop(): nsock_loop() started (timeout=274ms). 2 events pending
NSOCK DEBUG FULL [12.9860s] epoll_loop(): wait for events
CAPACITY <62.241.198.245> = 10
CAPACITY <62.241.198.245> = 10
mass_rdns: DROPPING <192.168.56.103>
mass_rdns: 13.02s 0/1 [#: 2, OK: 0, NX: 0, DR: 0, SF: 0, TR: 4]
Completed Parallel DNS resolution of 1 host. at 06:08, 13.02s elapsed
NSOCK INFO [13.2610s] nsock_iod_delete(): nsock_iod_delete (IOD #1)
NSOCK INFO [13.2610s] nevent_delete(): nevent_delete on event #18 (type READ)
NSOCK DEBUG FULL [13.2610s] nevent_delete(): NSE #18: Removing event from list
NSOCK DEBUG [13.2610s] event_delete(): event_delete (IOD #1) (EID #18)
NSOCK INFO [13.2610s] nsock_iod_delete(): nsock_iod_delete (IOD #2)
NSOCK INFO [13.2610s] nevent_delete(): nevent_delete on event #34 (type READ)
NSOCK DEBUG FULL [13.2610s] nevent_delete(): NSE #34: Removing event from list
NSOCK DEBUG [13.2610s] event_delete(): event_delete (IOD #2) (EID #34)
DNS resolution of 1 IPs took 13.02s. Mode: Async [#: 2, OK: 0, NX: 0, DR: 1, SF: 0, TR: 4, CN: 0]
Initiating SYN Stealth Scan at 06:08
192.168.56.103 pingprobe type ARP is inappropriate for this scan type; resetting.
Scanning 192.168.56.103 [1 port]
Packet capture filter (device eth1): dst host 192.168.56.104 and (icmp or icmp6 or ((tcp) and (src host 192.168.56.103)))
Ultrascan timeout init for 192.168.56.103 at 1651226939.099499
SENT (13.3057s) TCP [192.168.56.104:51440 > 192.168.56.103:22 S seq=936156580 ack=0 off=6 res=0 win=1024 csum=0x038F urp=0 ] IP [ver=4 ihl=5 tos=0x00 iplen=44 id=21867 foff=0 ttl=48 proto=6 csum=0x4341]
TIMING STATS (13.3057s): IP, probes active/freshportsleft/retry_stack/outstanding/retranwait/onbench, cwnd/ssthresh/delay, timeout/srtt/rttvar/
Groupstats (1/1 incomplete): 1/////* 10.00/75/* 1000000/-1/-1
192.168.56.103: 1/0/0/1/0/0 10.00/75/0 100000/628/5000
Current sending rates: 22.17 packets / s, 975.63 bytes / s.
Overall sending rates: 22.17 packets / s, 975.63 bytes / s.
RCVD (13.3066s) TCP [192.168.56.103:22 > 192.168.56.104:51440 SA seq=1321553182 ack=936156581 off=6 res=0 win=5840 csum=0x54CA urp=0 ] IP [ver=4 ihl=5 tos=0x00 iplen=44 id=0 flg=D foff=0 ttl=64 proto=6 csum=0x48ac]
Found 192.168.56.103 in incomplete hosts list.
Discovered open port 22/tcp on 192.168.56.103
Timeout vals: srtt: 628 rttvar: 5000 to: 100000 delta 1248 ==> srtt: 705 rttvar: 3905 to: 100000
Timeout vals: srtt: -1 rttvar: -1 to: 1000000 delta 1248 ==> srtt: 1248 rttvar: 5000 to: 100000
Changing ping technique for 192.168.56.103 to tcp to port 22; flags: S
Moving 192.168.56.103 to completed hosts list with 0 outstanding probes.
Changing global ping host to 192.168.56.103.
Completed SYN Stealth Scan at 06:08, 0.05s elapsed (1 total ports)
Overall sending rates: 21.53 packets / s, 947.52 bytes / s.
pcap stats: 1 packets received by filter, 0 dropped by kernel.
Nmap scan report for 192.168.56.103
Host is up, received arp-response (0.00071s latency).
Scanned at 2022-04-29 06:08:59 EDT for 0s
PORT STATE SERVICE REASON
22/tcp open ssh syn-ack ttl 64
MAC Address: 08:00:27:B5:08:D5 (Oracle VirtualBox virtual NIC)
Final times for host: srtt: 705 rttvar: 3905 to: 100000
Read from /usr/bin/../share/nmap: nmap-mac-prefixes nmap-payloads nmap-services.
Nmap done: 1 IP address (1 host up) scanned in 13.35 seconds
Raw packets sent: 2 (72B) | Rcvd: 2 (72B)
Esa Kontio 