Nmap scan report for mxb-00145802.gslb.pphosted.com (67.231.148.190) Host is up (0.011s latency). rDNS record for 67.231.148.190: mx0a-00145802.pphosted.com Not shown: 997 closed tcp ports (reset) PORT STATE SERVICE VERSION 25/tcp open smtp | fingerprint-strings: | GenericLines: | 220 mx0a-00145802.pphosted.com ESMTP mfa-m0054486 | 5.5.1 Command unrecognized: "" | 5.5.1 Command unrecognized: "" | GetRequest: | 220 mx0a-00145802.pphosted.com ESMTP mfa-m0054486 | 4.7.0 Open proxy prohibited | Hello: | 220 mx0a-00145802.pphosted.com ESMTP mfa-m0054486 | 5.5.4 Domain name required | Help: | 220 mx0a-00145802.pphosted.com ESMTP mfa-m0046141 | 5.5.1 Command unrecognized: "HELP" | NULL: |_ 220 mx0a-00145802.pphosted.com ESMTP mfa-m0054486 |_smtp-commands: mx0a-00145802.pphosted.com Hello 208.76.253.234.rdns.ColocationAmerica.com [208.76.253.234] (may be forged), pleased to meet you, ENHANCEDSTATUSCODES, PIPELINING, 8BITMIME, SIZE 157286400, STARTTLS |_ssl-date: TLS randomness does not represent time | ssl-cert: Subject: commonName=*.gslb.pphosted.com/organizationName=Proofpoint, Inc./stateOrProvinceName=California/countryName=US | Subject Alternative Name: DNS:*.gslb.pphosted.com, DNS:*.pphosted.com, DNS:pphosted.com | Not valid before: 2025-02-04T00:00:00 |_Not valid after: 2026-02-04T23:59:59 10000/tcp open ssl/snet-sensor-mgmt? | fingerprint-strings: | GetRequest, HTTPOptions, RTSPRequest: | HTTP/1.1 400 Bad Request | Date: Sun, 06 Jul 2025 21:05:09 GMT | Server: | Strict-Transport-Security: max-age=31536000; includeSubDomains | Content-Length: 12 | Connection: close | Content-Type: text/html; charset=iso-8859-1 | Request. | Help, SSLSessionReq, TLSSessionReq, TerminalServerCookie: | HTTP/1.1 400 Bad Request | Date: Sun, 06 Jul 2025 21:05:24 GMT | Server: | Strict-Transport-Security: max-age=31536000; includeSubDomains | Content-Length: 12 | Connection: close | Content-Type: text/html; charset=iso-8859-1 |_ Request. | ssl-cert: Subject: commonName=*.pphosted.com/organizationName=Proofpoint, Inc./stateOrProvinceName=California/countryName=US | Subject Alternative Name: DNS:*.pphosted.com, DNS:*.gslb.pphosted.com, DNS:pphosted.com | Not valid before: 2025-02-04T00:00:00 |_Not valid after: 2026-02-04T23:59:59 10001/tcp open ssl/scp-config? | fingerprint-strings: | GetRequest, HTTPOptions, RTSPRequest: | HTTP/1.1 400 Bad Request | Date: Sun, 06 Jul 2025 21:05:09 GMT | Server: | Strict-Transport-Security: max-age=31536000; includeSubDomains | Content-Length: 12 | Connection: close | Content-Type: text/html; charset=iso-8859-1 | Request. | Help, SSLSessionReq, TerminalServerCookie: | HTTP/1.1 400 Bad Request | Date: Sun, 06 Jul 2025 21:05:24 GMT | Server: | Strict-Transport-Security: max-age=31536000; includeSubDomains | Content-Length: 12 | Connection: close | Content-Type: text/html; charset=iso-8859-1 | Request. | TLSSessionReq: | HTTP/1.1 400 Bad Request | Date: Sun, 06 Jul 2025 21:05:25 GMT | Server: | Strict-Transport-Security: max-age=31536000; includeSubDomains | Content-Length: 12 | Connection: close | Content-Type: text/html; charset=iso-8859-1 |_ Request. | ssl-cert: Subject: commonName=*.pphosted.com/organizationName=Proofpoint, Inc./stateOrProvinceName=California/countryName=US | Subject Alternative Name: DNS:*.pphosted.com, DNS:*.gslb.pphosted.com, DNS:pphosted.com | Not valid before: 2025-02-04T00:00:00 |_Not valid after: 2026-02-04T23:59:59 3 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service : ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port25-TCP:V=7.92%I=7%D=7/6%Time=686AE4F5%P=x86_64-redhat-linux-gnu%r(N SF:ULL,33,"220\x20mx0a-00145802\.pphosted\.com\x20ESMTP\x20mfa-m0054486\r\ SF:n")%r(Hello,53,"220\x20mx0a-00145802\.pphosted\.com\x20ESMTP\x20mfa-m00 SF:54486\r\n501\x205\.5\.4\x20Domain\x20name\x20required\r\n")%r(Help,5B," SF:220\x20mx0a-00145802\.pphosted\.com\x20ESMTP\x20mfa-m0046141\r\n500\x20 SF:5\.5\.1\x20Command\x20unrecognized:\x20\"HELP\"\r\n")%r(GenericLines,7B SF:,"220\x20mx0a-00145802\.pphosted\.com\x20ESMTP\x20mfa-m0054486\r\n500\x SF:205\.5\.1\x20Command\x20unrecognized:\x20\"\"\r\n500\x205\.5\.1\x20Comm SF:and\x20unrecognized:\x20\"\"\r\n")%r(GetRequest,54,"220\x20mx0a-0014580 SF:2\.pphosted\.com\x20ESMTP\x20mfa-m0054486\r\n421\x204\.7\.0\x20Open\x20 SF:proxy\x20prohibited\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port10000-TCP:V=7.92%T=SSL%I=7%D=7/6%Time=686AE505%P=x86_64-redhat-linu SF:x-gnu%r(GetRequest,EC,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20S SF:un,\x2006\x20Jul\x202025\x2021:05:09\x20GMT\r\nServer:\x20\x20\r\nStric SF:t-Transport-Security:\x20max-age=31536000;\x20includeSubDomains\r\nCont SF:ent-Length:\x2012\r\nConnection:\x20close\r\nContent-Type:\x20text/html SF:;\x20charset=iso-8859-1\r\n\r\nBad\x20Request\.")%r(HTTPOptions,EC,"HTT SF:P/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Sun,\x2006\x20Jul\x202025\x SF:2021:05:09\x20GMT\r\nServer:\x20\x20\r\nStrict-Transport-Security:\x20m SF:ax-age=31536000;\x20includeSubDomains\r\nContent-Length:\x2012\r\nConne SF:ction:\x20close\r\nContent-Type:\x20text/html;\x20charset=iso-8859-1\r\ SF:n\r\nBad\x20Request\.")%r(RTSPRequest,EC,"HTTP/1\.1\x20400\x20Bad\x20Re SF:quest\r\nDate:\x20Sun,\x2006\x20Jul\x202025\x2021:05:09\x20GMT\r\nServe SF:r:\x20\x20\r\nStrict-Transport-Security:\x20max-age=31536000;\x20includ SF:eSubDomains\r\nContent-Length:\x2012\r\nConnection:\x20close\r\nContent SF:-Type:\x20text/html;\x20charset=iso-8859-1\r\n\r\nBad\x20Request\.")%r( SF:Help,EC,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Sun,\x2006\x20J SF:ul\x202025\x2021:05:24\x20GMT\r\nServer:\x20\x20\r\nStrict-Transport-Se SF:curity:\x20max-age=31536000;\x20includeSubDomains\r\nContent-Length:\x2 SF:012\r\nConnection:\x20close\r\nContent-Type:\x20text/html;\x20charset=i SF:so-8859-1\r\n\r\nBad\x20Request\.")%r(SSLSessionReq,EC,"HTTP/1\.1\x2040 SF:0\x20Bad\x20Request\r\nDate:\x20Sun,\x2006\x20Jul\x202025\x2021:05:24\x SF:20GMT\r\nServer:\x20\x20\r\nStrict-Transport-Security:\x20max-age=31536 SF:000;\x20includeSubDomains\r\nContent-Length:\x2012\r\nConnection:\x20cl SF:ose\r\nContent-Type:\x20text/html;\x20charset=iso-8859-1\r\n\r\nBad\x20 SF:Request\.")%r(TerminalServerCookie,EC,"HTTP/1\.1\x20400\x20Bad\x20Reque SF:st\r\nDate:\x20Sun,\x2006\x20Jul\x202025\x2021:05:24\x20GMT\r\nServer:\ SF:x20\x20\r\nStrict-Transport-Security:\x20max-age=31536000;\x20includeSu SF:bDomains\r\nContent-Length:\x2012\r\nConnection:\x20close\r\nContent-Ty SF:pe:\x20text/html;\x20charset=iso-8859-1\r\n\r\nBad\x20Request\.")%r(TLS SF:SessionReq,EC,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Sun,\x200 SF:6\x20Jul\x202025\x2021:05:24\x20GMT\r\nServer:\x20\x20\r\nStrict-Transp SF:ort-Security:\x20max-age=31536000;\x20includeSubDomains\r\nContent-Leng SF:th:\x2012\r\nConnection:\x20close\r\nContent-Type:\x20text/html;\x20cha SF:rset=iso-8859-1\r\n\r\nBad\x20Request\."); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port10001-TCP:V=7.92%T=SSL%I=7%D=7/6%Time=686AE505%P=x86_64-redhat-linu SF:x-gnu%r(GetRequest,EC,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20S SF:un,\x2006\x20Jul\x202025\x2021:05:09\x20GMT\r\nServer:\x20\x20\r\nStric SF:t-Transport-Security:\x20max-age=31536000;\x20includeSubDomains\r\nCont SF:ent-Length:\x2012\r\nConnection:\x20close\r\nContent-Type:\x20text/html SF:;\x20charset=iso-8859-1\r\n\r\nBad\x20Request\.")%r(HTTPOptions,EC,"HTT SF:P/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Sun,\x2006\x20Jul\x202025\x SF:2021:05:09\x20GMT\r\nServer:\x20\x20\r\nStrict-Transport-Security:\x20m SF:ax-age=31536000;\x20includeSubDomains\r\nContent-Length:\x2012\r\nConne SF:ction:\x20close\r\nContent-Type:\x20text/html;\x20charset=iso-8859-1\r\ SF:n\r\nBad\x20Request\.")%r(RTSPRequest,EC,"HTTP/1\.1\x20400\x20Bad\x20Re SF:quest\r\nDate:\x20Sun,\x2006\x20Jul\x202025\x2021:05:09\x20GMT\r\nServe SF:r:\x20\x20\r\nStrict-Transport-Security:\x20max-age=31536000;\x20includ SF:eSubDomains\r\nContent-Length:\x2012\r\nConnection:\x20close\r\nContent SF:-Type:\x20text/html;\x20charset=iso-8859-1\r\n\r\nBad\x20Request\.")%r( SF:Help,EC,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Sun,\x2006\x20J SF:ul\x202025\x2021:05:24\x20GMT\r\nServer:\x20\x20\r\nStrict-Transport-Se SF:curity:\x20max-age=31536000;\x20includeSubDomains\r\nContent-Length:\x2 SF:012\r\nConnection:\x20close\r\nContent-Type:\x20text/html;\x20charset=i SF:so-8859-1\r\n\r\nBad\x20Request\.")%r(SSLSessionReq,EC,"HTTP/1\.1\x2040 SF:0\x20Bad\x20Request\r\nDate:\x20Sun,\x2006\x20Jul\x202025\x2021:05:24\x SF:20GMT\r\nServer:\x20\x20\r\nStrict-Transport-Security:\x20max-age=31536 SF:000;\x20includeSubDomains\r\nContent-Length:\x2012\r\nConnection:\x20cl SF:ose\r\nContent-Type:\x20text/html;\x20charset=iso-8859-1\r\n\r\nBad\x20 SF:Request\.")%r(TerminalServerCookie,EC,"HTTP/1\.1\x20400\x20Bad\x20Reque SF:st\r\nDate:\x20Sun,\x2006\x20Jul\x202025\x2021:05:24\x20GMT\r\nServer:\ SF:x20\x20\r\nStrict-Transport-Security:\x20max-age=31536000;\x20includeSu SF:bDomains\r\nContent-Length:\x2012\r\nConnection:\x20close\r\nContent-Ty SF:pe:\x20text/html;\x20charset=iso-8859-1\r\n\r\nBad\x20Request\.")%r(TLS SF:SessionReq,EC,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Sun,\x200 SF:6\x20Jul\x202025\x2021:05:25\x20GMT\r\nServer:\x20\x20\r\nStrict-Transp SF:ort-Security:\x20max-age=31536000;\x20includeSubDomains\r\nContent-Leng SF:th:\x2012\r\nConnection:\x20close\r\nContent-Type:\x20text/html;\x20cha SF:rset=iso-8859-1\r\n\r\nBad\x20Request\."); OS fingerprint not ideal because: Host distance (8 network hops) is greater than five No OS matches for host Network Distance: 8 hops TRACEROUTE (using port 80/tcp) HOP RTT ADDRESS 1 0.19 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177) 2 0.50 ms gw.mcom-colocationamerica.com (208.64.231.81) 3 0.58 ms r2b4.n1.p1401.lax.multacom.net (64.69.46.11) 4 0.81 ms hu0-5-0-25.ccr41.lax01.atlas.cogentco.com (38.88.244.128) 5 13.65 ms be3097.ccr81.sjc13.atlas.cogentco.com (154.54.40.157) 6 12.42 ms be6009.ccr41.sjc03.atlas.cogentco.com (154.54.169.38) 7 ... 8 11.69 ms mx0a-00145802.pphosted.com (67.231.148.190) OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 158.93 seconds