Degenerate 184.173.89.130

Hostname: dentzone-production.neovisture.net

Region: Houston,United States

Whois:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# Query terms are ambiguous.  The query is assumed to be:
#     "n 184.173.89.130"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=184.173.89.130?showDetails=true&showARIN=false&ext=netref2
#

NetRange:       184.172.0.0 - 184.173.255.255
CIDR:           184.172.0.0/15
NetName:        NETBLK-THEPLANET-BLK-17
NetHandle:      NET-184-172-0-0-1
Parent:         NET184 (NET-184-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       AS36420, AS30315, AS13749, AS21844
Organization:   ThePlanet.com Internet Services, Inc. (TPCM)
RegDate:        2010-10-06
Updated:        2012-02-24
Ref:            http://whois.arin.net/rest/net/NET-184-172-0-0-1

OrgName:        ThePlanet.com Internet Services, Inc.
OrgId:          TPCM
Address:        315 Capitol
Address:        Suite 205
City:           Houston
StateProv:      TX
PostalCode:     77002
Country:        US
RegDate:        1999-08-31
Updated:        2010-10-13
Ref:            http://whois.arin.net/rest/org/TPCM

ReferralServer: rwhois://rwhois.theplanet.com:4321

OrgNOCHandle: THEPL-ARIN
OrgNOCName:   The Planet NOC
OrgNOCPhone:  +1-281-714-3000 
OrgNOCEmail:  noc@theplanet.com
OrgNOCRef:    http://whois.arin.net/rest/poc/THEPL-ARIN

OrgTechHandle: TECHN33-ARIN
OrgTechName:   Technical Support
OrgTechPhone:  +1-281-714-3000 
OrgTechEmail:  admins@theplanet.com
OrgTechRef:    http://whois.arin.net/rest/poc/TECHN33-ARIN

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName:   The Planet Abuse
OrgAbusePhone:  +1-281-714-3560 
OrgAbuseEmail:  abuse@softlayer.com
OrgAbuseRef:    http://whois.arin.net/rest/poc/ABUSE271-ARIN

RNOCHandle: THEPL-ARIN
RNOCName:   The Planet NOC
RNOCPhone:  +1-281-714-3000 
RNOCEmail:  noc@theplanet.com
RNOCRef:    http://whois.arin.net/rest/poc/THEPL-ARIN

RAbuseHandle: ABUSE271-ARIN
RAbuseName:   The Planet Abuse
RAbusePhone:  +1-281-714-3560 
RAbuseEmail:  abuse@softlayer.com
RAbuseRef:    http://whois.arin.net/rest/poc/ABUSE271-ARIN

RTechHandle: TECHN33-ARIN
RTechName:   Technical Support
RTechPhone:  +1-281-714-3000 
RTechEmail:  admins@theplanet.com
RTechRef:    http://whois.arin.net/rest/poc/TECHN33-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#



Found a referral to rwhois.theplanet.com:4321.

%rwhois V-1.5:003fff:00 rwhois.softlayer.com (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:NETBLK-SOFTLAYER.184.173.64.0/18
network:Auth-Area:184.173.64.0/18
network:Network-Name:SOFTLAYER-184.173.64.0
network:IP-Network:184.173.89.128/29
network:IP-Network-Block:184.173.89.128-184.173.89.135
network:Organization;I:Neovisture
network:Street-Address:2802 Flint Trl
network:City:Keller
network:State:TX
network:Postal-Code:76248
network:Country-Code:US
network:Tech-Contact;I:sysadmins@softlayer.com
network:Abuse-Contact;I:abuse@neovisture.net
network:Admin-Contact;I:IPADM258-ARIN
network:Created:2009-12-21 15:35:35
network:Updated:2011-09-23 14:39:58
network:Updated-By:ipadmin@softlayer.com

%ok

Host Scan:

Starting Nmap 5.00 ( http://nmap.org ) at 2015-01-01 13:01 CST
Interesting ports on dentzone-production.neovisture.net (184.173.89.130):
Not shown: 1961 closed ports
PORT      STATE         SERVICE        VERSION
21/tcp    open          ftp            ProFTPD 1.3.3c
22/tcp    filtered      ssh
25/tcp    filtered      smtp
53/tcp    open          domain         ISC BIND none
80/tcp    open          http           Apache httpd
|_ html-title: PDR LINX: Restoring Excellence
106/tcp   open          pop3pw         poppassd
110/tcp   open          pop3           Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10)
111/tcp   open          rpcbind
|  rpcinfo:  
|  100000  2    111/udp  rpcbind  
|  100024  1   1004/udp  status   
|  100000  2    111/tcp  rpcbind  
|_ 100024  1   1007/tcp  status   
135/tcp   filtered      msrpc
139/tcp   filtered      netbios-ssn
143/tcp   open          imap           Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp   open          ssl/http       Apache httpd
|_ html-title: phpinfo()
|_ sslv2: server still supports SSLv2
445/tcp   filtered      microsoft-ds
465/tcp   open          ssl/smtp       Postfix smtpd
|_ smtp-commands: EHLO dentzone-production.neovisture.net, PIPELINING, SIZE 51200000, ETRN, AUTH PLAIN LOGIN CRAM-MD5 DIGEST-MD5, ENHANCEDSTATUSCODES, 8BITMIME, DSN
808/tcp   open          ccproxy-http?
993/tcp   open          ssl/imap       Courier Imapd (released 2004)
|_ sslv2: server still supports SSLv2
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA AUTH=PLAIN THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
995/tcp   open          ssl/pop3       Courier pop3d
|_ sslv2: server still supports SSLv2
|_ pop3-capabilities: USER IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP LOGIN-DELAY(10) TOP
1007/tcp  open          rpcbind
3306/tcp  open          mysql          MySQL (unauthorized)
8443/tcp  open          ssl/https-alt?
|_ html-title: Site doesn"t have a title (text/html).
9999/tcp  open          http           Apache httpd
|  robots.txt: has 1 disallowed entry 
|_ /
|_ html-title: Urchin 6
34571/tcp open          unknown
34572/tcp open          unknown
34573/tcp open          ssl/unknown
53/udp    open          domain         ISC BIND none
68/udp    open|filtered dhcpc
111/udp   open          rpcbind
123/udp   open          ntp            NTP v4
135/udp   open|filtered msrpc
136/udp   open|filtered profile
137/udp   open|filtered netbios-ns
138/udp   open|filtered netbios-dgm
139/udp   open|filtered netbios-ssn
161/udp   open|filtered snmp
445/udp   open|filtered microsoft-ds
520/udp   open|filtered route
631/udp   open|filtered ipp
1001/udp  open|filtered unknown
5353/udp  open|filtered zeroconf
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at http://www.insecure.org/cgi-bin/servicefp-submit.cgi :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port8443-TCP:V=5.00%T=SSL%I=7%D=1/1%Time=54A59DDC%P=x86_64-unknown-linux-gnu%r(GenericLines,1F5,"HTTP/1.0 400 Bad Request
Connection:
SF: close
Content-Type: text/html
Content-Length: 349
Da
SF:te: Thu, 01 Jan 2015 19:19:56 GMT
Server: sw-cp
SF:-server


SF:


 
SF:
  400 - Bad Request
 
 <
SF:body>
  400 - Bad Request
 

")%r(GetRequest,6B6,"HTTP/1.0 200 OK
Connection: close
SF:r
Expires: Sat, 31 Jan 2015 19:19:56 GMT
Expires:
SF: Fri, 28 May 1999 00:00:00 GMT
Cache-Control: m
SF:ax-age=2592000
Cache-Control: no-store, no-cache, must-reva
SF:lidate
Cache-Control: post-check=0, pre-check=0
Last-Modifi
SF:ed: Thu, 01 Jan 2015 19:19:57 GMT
Pragma: no-ca
SF:che
P3P: CP="NON COR CURa ADMa OUR NOR UNI 
SF:COM NAV STA"
Content-type: text/html
Date: Thu, 0
SF:1 Jan 2015 19:19:57 GMT
Server: sw-cp-server


SF:r
		
		
		
		
		
		
			var opt_no_frames = false;
	
SF:t	var opt_integrated_mode = false;
		
")%r(H
SF:TTPOptions,6B6,"HTTP/1.0 200 OK
Connection: close
Expir
SF:es: Sat, 31 Jan 2015 19:19:57 GMT
Expires: Fri,
SF: 28 May 1999 00:00:00 GMT
Cache-Control: max-age=2
SF:592000
Cache-Control: no-store, no-cache, must-revalidate
SF:
Cache-Control: post-check=0, pre-check=0
Last-Modified: T
SF:hu, 01 Jan 2015 19:19:57 GMT
Pragma: no-cache
P
SF:3P: CP="NON COR CURa ADMa OUR NOR UNI COM N
SF:AV STA"
Content-type: text/html
Date: Thu, 01 Jan
SF: 2015 19:19:57 GMT
Server: sw-cp-server


		<
SF:html>
		
		
		
		

SF:t	
			var opt_no_frames = false;
			varx
SF:20opt_integrated_mode = false;
		
");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port34572-TCP:V=5.00%I=7%D=1/1%Time=54A59DCF%P=x86_64-unknown-linux-gnu
SF:%r(GenericLines,1A,"HTTP/1.1 400 Bad Request

")%r(GetReque
SF:st,1A,"HTTP/1.1 400 Bad Request

")%r(HTTPOptions,1A,"HTTP/
SF:1.1 400 Bad Request

")%r(RTSPRequest,1A,"HTTP/1.1 400
SF:x20Bad Request

")%r(Help,1A,"HTTP/1.1 400 Bad Request

SF:
")%r(SSLSessionReq,1A,"HTTP/1.1 400 Bad Request

")%r(Fou
SF:rOhFourRequest,1A,"HTTP/1.1 400 Bad Request

")%r(LPDString
SF:,1A,"HTTP/1.1 400 Bad Request

")%r(SIPOptions,1A,"HTTP/1.
SF:1 400 Bad Request

");
Device type: general purpose|WAP|router
Running (JUST GUESSING) : Linux 2.6.X|2.4.X (99%), Linksys Linux 2.4.X (94%), MikroTik RouterOS 3.X (91%)
Aggressive OS guesses: Linux 2.6.9 - 2.6.26 (99%), Linux 2.6.9 - 2.6.18 (97%), Linux 2.6.18 - 2.6.27 (96%), Linux 2.6.5 (SUSE Enterprise Server 9) (96%), Linux 2.6.15 - 2.6.24 (95%), Linux 2.6.22 (95%), OpenWrt White Russian 0.9 (Linux 2.4.30) (94%), OpenWrt Kamikaze 7.09 (Linux 2.6.22) (94%), Linux 2.6.18 (CentOS 5, x86_64, SMP) (94%), Linux 2.6.27 (94%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 10 hops
Service Info: Hosts: localhost.localdomain,  dentzone-production.neovisture.net; OS: Unix

Host script results:
|_ nbstat: ERROR: Name query failed: TIMEOUT

OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 1232.32 seconds

Hostname: dentzone-production.neovisture.net

Region: Houston,United States

Whois:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# Query terms are ambiguous.  The query is assumed to be:
#     "n 184.173.89.130"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=184.173.89.130?showDetails=true&showARIN=false&ext=netref2
#

NetRange:       184.172.0.0 - 184.173.255.255
CIDR:           184.172.0.0/15
NetName:        NETBLK-THEPLANET-BLK-17
NetHandle:      NET-184-172-0-0-1
Parent:         NET184 (NET-184-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       AS36420, AS30315, AS13749, AS21844
Organization:   ThePlanet.com Internet Services, Inc. (TPCM)
RegDate:        2010-10-06
Updated:        2012-02-24
Ref:            http://whois.arin.net/rest/net/NET-184-172-0-0-1

OrgName:        ThePlanet.com Internet Services, Inc.
OrgId:          TPCM
Address:        315 Capitol
Address:        Suite 205
City:           Houston
StateProv:      TX
PostalCode:     77002
Country:        US
RegDate:        1999-08-31
Updated:        2010-10-13
Ref:            http://whois.arin.net/rest/org/TPCM

ReferralServer: rwhois://rwhois.theplanet.com:4321

OrgNOCHandle: THEPL-ARIN
OrgNOCName:   The Planet NOC
OrgNOCPhone:  +1-281-714-3000 
OrgNOCEmail:  noc@theplanet.com
OrgNOCRef:    http://whois.arin.net/rest/poc/THEPL-ARIN

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName:   The Planet Abuse
OrgAbusePhone:  +1-281-714-3560 
OrgAbuseEmail:  abuse@softlayer.com
OrgAbuseRef:    http://whois.arin.net/rest/poc/ABUSE271-ARIN

OrgTechHandle: TECHN33-ARIN
OrgTechName:   Technical Support
OrgTechPhone:  +1-281-714-3000 
OrgTechEmail:  admins@theplanet.com
OrgTechRef:    http://whois.arin.net/rest/poc/TECHN33-ARIN

RAbuseHandle: ABUSE271-ARIN
RAbuseName:   The Planet Abuse
RAbusePhone:  +1-281-714-3560 
RAbuseEmail:  abuse@softlayer.com
RAbuseRef:    http://whois.arin.net/rest/poc/ABUSE271-ARIN

RTechHandle: TECHN33-ARIN
RTechName:   Technical Support
RTechPhone:  +1-281-714-3000 
RTechEmail:  admins@theplanet.com
RTechRef:    http://whois.arin.net/rest/poc/TECHN33-ARIN

RNOCHandle: THEPL-ARIN
RNOCName:   The Planet NOC
RNOCPhone:  +1-281-714-3000 
RNOCEmail:  noc@theplanet.com
RNOCRef:    http://whois.arin.net/rest/poc/THEPL-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#



Found a referral to rwhois.theplanet.com:4321.

%rwhois V-1.5:003fff:00 rwhois.softlayer.com (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:NETBLK-SOFTLAYER.184.173.64.0/18
network:Auth-Area:184.173.64.0/18
network:Network-Name:SOFTLAYER-184.173.64.0
network:IP-Network:184.173.89.128/29
network:IP-Network-Block:184.173.89.128-184.173.89.135
network:Organization;I:Neovisture
network:Street-Address:2802 Flint Trl
network:City:Keller
network:State:TX
network:Postal-Code:76248
network:Country-Code:US
network:Tech-Contact;I:sysadmins@softlayer.com
network:Abuse-Contact;I:abuse@neovisture.net
network:Admin-Contact;I:IPADM258-ARIN
network:Created:2009-12-21 15:35:35
network:Updated:2011-09-23 14:39:58
network:Updated-By:ipadmin@softlayer.com

%ok

Host Scan:

Starting Nmap 5.00 ( http://nmap.org ) at 2015-01-01 15:06 CST
Interesting ports on dentzone-production.neovisture.net (184.173.89.130):
Not shown: 1961 closed ports
PORT      STATE         SERVICE        VERSION
21/tcp    open          ftp            ProFTPD 1.3.3c
22/tcp    filtered      ssh
25/tcp    filtered      smtp
53/tcp    open          domain         ISC BIND none
80/tcp    open          http           Apache httpd
|_ html-title: PDR LINX: Restoring Excellence
106/tcp   open          pop3pw         poppassd
110/tcp   open          pop3           Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10)
111/tcp   open          rpcbind
|  rpcinfo:  
|  100000  2    111/udp  rpcbind  
|  100024  1   1004/udp  status   
|  100000  2    111/tcp  rpcbind  
|_ 100024  1   1007/tcp  status   
135/tcp   filtered      msrpc
139/tcp   filtered      netbios-ssn
143/tcp   open          imap           Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp   open          ssl/http       Apache httpd
|_ sslv2: server still supports SSLv2
|_ html-title: phpinfo()
445/tcp   filtered      microsoft-ds
465/tcp   open          ssl/smtp       Postfix smtpd
|_ smtp-commands: EHLO dentzone-production.neovisture.net, PIPELINING, SIZE 51200000, ETRN, AUTH PLAIN LOGIN CRAM-MD5 DIGEST-MD5, ENHANCEDSTATUSCODES, 8BITMIME, DSN
808/tcp   open          ccproxy-http?
993/tcp   open          ssl/imap       Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA AUTH=PLAIN THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
|_ sslv2: server still supports SSLv2
995/tcp   open          ssl/pop3       Courier pop3d
|_ pop3-capabilities: USER IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP LOGIN-DELAY(10) TOP
|_ sslv2: server still supports SSLv2
1007/tcp  open          rpcbind
3306/tcp  open          mysql          MySQL (unauthorized)
8443/tcp  open          ssl/https-alt?
|_ html-title: Site doesn"t have a title (text/html).
9999/tcp  open          http           Apache httpd
|  robots.txt: has 1 disallowed entry 
|_ /
|_ html-title: Urchin 6
34571/tcp open          unknown
34572/tcp open          unknown
34573/tcp open          ssl/unknown
53/udp    open          domain         ISC BIND none
68/udp    open|filtered dhcpc
111/udp   open          rpcbind
123/udp   open          ntp            NTP v4
135/udp   open|filtered msrpc
136/udp   open|filtered profile
137/udp   open|filtered netbios-ns
138/udp   open|filtered netbios-dgm
139/udp   open|filtered netbios-ssn
161/udp   open|filtered snmp
445/udp   open|filtered microsoft-ds
520/udp   open|filtered route
631/udp   open|filtered ipp
1001/udp  open|filtered unknown
5353/udp  open|filtered zeroconf
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at http://www.insecure.org/cgi-bin/servicefp-submit.cgi :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port8443-TCP:V=5.00%T=SSL%I=7%D=1/1%Time=54A5BB28%P=x86_64-unknown-linux-gnu%r(GenericLines,1F5,"HTTP/1.0 400 Bad Request
Connection:
SF: close
Content-Type: text/html
Content-Length: 349
Da
SF:te: Thu, 01 Jan 2015 21:24:56 GMT
Server: sw-cp
SF:-server


SF:


 
SF:
  400 - Bad Request
 
 <
SF:body>
  400 - Bad Request
 

")%r(GetRequest,6B6,"HTTP/1.0 200 OK
Connection: close
SF:r
Expires: Sat, 31 Jan 2015 21:24:56 GMT
Expires:
SF: Fri, 28 May 1999 00:00:00 GMT
Cache-Control: m
SF:ax-age=2592000
Cache-Control: no-store, no-cache, must-reva
SF:lidate
Cache-Control: post-check=0, pre-check=0
Last-Modifi
SF:ed: Thu, 01 Jan 2015 21:24:56 GMT
Pragma: no-ca
SF:che
P3P: CP="NON COR CURa ADMa OUR NOR UNI 
SF:COM NAV STA"
Content-type: text/html
Date: Thu, 0
SF:1 Jan 2015 21:24:57 GMT
Server: sw-cp-server


SF:r
		
		
		
		
		
		
			var opt_no_frames = false;
	
SF:t	var opt_integrated_mode = false;
		
")%r(H
SF:TTPOptions,6B6,"HTTP/1.0 200 OK
Connection: close
Expir
SF:es: Sat, 31 Jan 2015 21:24:57 GMT
Expires: Fri,
SF: 28 May 1999 00:00:00 GMT
Cache-Control: max-age=2
SF:592000
Cache-Control: no-store, no-cache, must-revalidate
SF:
Cache-Control: post-check=0, pre-check=0
Last-Modified: T
SF:hu, 01 Jan 2015 21:24:57 GMT
Pragma: no-cache
P
SF:3P: CP="NON COR CURa ADMa OUR NOR UNI COM N
SF:AV STA"
Content-type: text/html
Date: Thu, 01 Jan
SF: 2015 21:24:57 GMT
Server: sw-cp-server


		<
SF:html>
		
		
		
		

SF:t	
			var opt_no_frames = false;
			varx
SF:20opt_integrated_mode = false;
		
");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port34572-TCP:V=5.00%I=7%D=1/1%Time=54A5BB1B%P=x86_64-unknown-linux-gnu
SF:%r(GenericLines,1A,"HTTP/1.1 400 Bad Request

")%r(GetReque
SF:st,1A,"HTTP/1.1 400 Bad Request

")%r(HTTPOptions,1A,"HTTP/
SF:1.1 400 Bad Request

")%r(RTSPRequest,1A,"HTTP/1.1 400
SF:x20Bad Request

")%r(Help,1A,"HTTP/1.1 400 Bad Request

SF:
")%r(SSLSessionReq,1A,"HTTP/1.1 400 Bad Request

")%r(Fou
SF:rOhFourRequest,1A,"HTTP/1.1 400 Bad Request

")%r(LPDString
SF:,1A,"HTTP/1.1 400 Bad Request

")%r(SIPOptions,1A,"HTTP/1.
SF:1 400 Bad Request

");
Device type: general purpose
Running: Linux 2.6.X
OS details: Linux 2.6.9 - 2.6.26
Network Distance: 10 hops
Service Info: Hosts: localhost.localdomain,  dentzone-production.neovisture.net; OS: Unix

Host script results:
|_ nbstat: ERROR: Name query failed: TIMEOUT

OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 1209.55 seconds

Hostname: dentzone-production.neovisture.net

Region: Houston,United States

Whois:

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# Query terms are ambiguous.  The query is assumed to be:
#     "n 184.173.89.130"
#
# Use "?" to get help.
#

#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=184.173.89.130?showDetails=true&showARIN=false&ext=netref2
#

NetRange:       184.172.0.0 - 184.173.255.255
CIDR:           184.172.0.0/15
NetName:        NETBLK-THEPLANET-BLK-17
NetHandle:      NET-184-172-0-0-1
Parent:         NET184 (NET-184-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       AS36420, AS30315, AS13749, AS21844
Organization:   ThePlanet.com Internet Services, Inc. (TPCM)
RegDate:        2010-10-06
Updated:        2012-02-24
Ref:            http://whois.arin.net/rest/net/NET-184-172-0-0-1

OrgName:        ThePlanet.com Internet Services, Inc.
OrgId:          TPCM
Address:        315 Capitol
Address:        Suite 205
City:           Houston
StateProv:      TX
PostalCode:     77002
Country:        US
RegDate:        1999-08-31
Updated:        2010-10-13
Ref:            http://whois.arin.net/rest/org/TPCM

ReferralServer: rwhois://rwhois.theplanet.com:4321

OrgAbuseHandle: ABUSE271-ARIN
OrgAbuseName:   The Planet Abuse
OrgAbusePhone:  +1-281-714-3560 
OrgAbuseEmail:  abuse@softlayer.com
OrgAbuseRef:    http://whois.arin.net/rest/poc/ABUSE271-ARIN

OrgTechHandle: TECHN33-ARIN
OrgTechName:   Technical Support
OrgTechPhone:  +1-281-714-3000 
OrgTechEmail:  admins@theplanet.com
OrgTechRef:    http://whois.arin.net/rest/poc/TECHN33-ARIN

OrgNOCHandle: THEPL-ARIN
OrgNOCName:   The Planet NOC
OrgNOCPhone:  +1-281-714-3000 
OrgNOCEmail:  noc@theplanet.com
OrgNOCRef:    http://whois.arin.net/rest/poc/THEPL-ARIN

RTechHandle: TECHN33-ARIN
RTechName:   Technical Support
RTechPhone:  +1-281-714-3000 
RTechEmail:  admins@theplanet.com
RTechRef:    http://whois.arin.net/rest/poc/TECHN33-ARIN

RNOCHandle: THEPL-ARIN
RNOCName:   The Planet NOC
RNOCPhone:  +1-281-714-3000 
RNOCEmail:  noc@theplanet.com
RNOCRef:    http://whois.arin.net/rest/poc/THEPL-ARIN

RAbuseHandle: ABUSE271-ARIN
RAbuseName:   The Planet Abuse
RAbusePhone:  +1-281-714-3560 
RAbuseEmail:  abuse@softlayer.com
RAbuseRef:    http://whois.arin.net/rest/poc/ABUSE271-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#



Found a referral to rwhois.theplanet.com:4321.

%rwhois V-1.5:003fff:00 rwhois.softlayer.com (by Network Solutions, Inc. V-1.5.9.5)
network:Class-Name:network
network:ID:NETBLK-SOFTLAYER.184.173.64.0/18
network:Auth-Area:184.173.64.0/18
network:Network-Name:SOFTLAYER-184.173.64.0
network:IP-Network:184.173.89.128/29
network:IP-Network-Block:184.173.89.128-184.173.89.135
network:Organization;I:Neovisture
network:Street-Address:2802 Flint Trl
network:City:Keller
network:State:TX
network:Postal-Code:76248
network:Country-Code:US
network:Tech-Contact;I:sysadmins@softlayer.com
network:Abuse-Contact;I:abuse@neovisture.net
network:Admin-Contact;I:IPADM258-ARIN
network:Created:2009-12-21 15:35:35
network:Updated:2011-09-23 14:39:58
network:Updated-By:ipadmin@softlayer.com

%ok

Host Scan:

Starting Nmap 5.00 ( http://nmap.org ) at 2015-01-01 18:28 CST
Interesting ports on dentzone-production.neovisture.net (184.173.89.130):
Not shown: 1961 closed ports
PORT      STATE         SERVICE        VERSION
21/tcp    open          ftp            ProFTPD 1.3.3c
22/tcp    filtered      ssh
25/tcp    filtered      smtp
53/tcp    open          domain         ISC BIND none
80/tcp    open          http           Apache httpd
|_ html-title: PDR LINX: Restoring Excellence
106/tcp   open          pop3pw         poppassd
110/tcp   open          pop3           Courier pop3d
|_ pop3-capabilities: USER STLS IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP TOP LOGIN-DELAY(10)
111/tcp   open          rpcbind
|  rpcinfo:  
|  100000  2    111/udp  rpcbind  
|  100024  1   1004/udp  status   
|  100000  2    111/tcp  rpcbind  
|_ 100024  1   1007/tcp  status   
135/tcp   filtered      msrpc
139/tcp   filtered      netbios-ssn
143/tcp   open          imap           Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA STARTTLS THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
443/tcp   open          ssl/http       Apache httpd
|_ sslv2: server still supports SSLv2
|_ html-title: phpinfo()
445/tcp   filtered      microsoft-ds
465/tcp   open          ssl/smtp       Postfix smtpd
|_ smtp-commands: EHLO dentzone-production.neovisture.net, PIPELINING, SIZE 51200000, ETRN, AUTH PLAIN LOGIN CRAM-MD5 DIGEST-MD5, ENHANCEDSTATUSCODES, 8BITMIME, DSN
808/tcp   open          ccproxy-http?
993/tcp   open          ssl/imap       Courier Imapd (released 2004)
|_ imap-capabilities: THREAD=ORDEREDSUBJECT QUOTA AUTH=PLAIN THREAD=REFERENCES UIDPLUS ACL2=UNION SORT ACL IMAP4rev1 IDLE NAMESPACE CHILDREN
|_ sslv2: server still supports SSLv2
995/tcp   open          ssl/pop3       Courier pop3d
|_ sslv2: server still supports SSLv2
|_ pop3-capabilities: USER IMPLEMENTATION(Courier Mail Server) UIDL PIPELINING APOP LOGIN-DELAY(10) TOP
1007/tcp  open          rpcbind
3306/tcp  open          mysql          MySQL (unauthorized)
8443/tcp  open          ssl/https-alt?
|_ html-title: Site doesn"t have a title (text/html).
9999/tcp  open          http           Apache httpd
|_ html-title: Urchin 6
|  robots.txt: has 1 disallowed entry 
|_ /
34571/tcp open          unknown
34572/tcp open          unknown
34573/tcp open          ssl/unknown
53/udp    open          domain         ISC BIND none
68/udp    open|filtered dhcpc
111/udp   open          rpcbind
123/udp   open          ntp            NTP v4
135/udp   open|filtered msrpc
136/udp   open|filtered profile
137/udp   open|filtered netbios-ns
138/udp   open|filtered netbios-dgm
139/udp   open|filtered netbios-ssn
161/udp   open|filtered snmp
445/udp   open|filtered microsoft-ds
520/udp   open|filtered route
631/udp   open|filtered ipp
1001/udp  open|filtered unknown
5353/udp  open|filtered zeroconf
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at http://www.insecure.org/cgi-bin/servicefp-submit.cgi :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port8443-TCP:V=5.00%T=SSL%I=7%D=1/1%Time=54A5EA76%P=x86_64-unknown-linux-gnu%r(GenericLines,1F5,"HTTP/1.0 400 Bad Request
Connection:
SF: close
Content-Type: text/html
Content-Length: 349
Da
SF:te: Fri, 02 Jan 2015 00:46:46 GMT
Server: sw-cp
SF:-server


SF:


 
SF:
  400 - Bad Request
 
 <
SF:body>
  400 - Bad Request
 

")%r(GetRequest,6B6,"HTTP/1.0 200 OK
Connection: close
SF:r
Expires: Sun, 01 Feb 2015 00:46:46 GMT
Expires:
SF: Fri, 28 May 1999 00:00:00 GMT
Cache-Control: m
SF:ax-age=2592000
Cache-Control: no-store, no-cache, must-reva
SF:lidate
Cache-Control: post-check=0, pre-check=0
Last-Modifi
SF:ed: Fri, 02 Jan 2015 00:46:46 GMT
Pragma: no-ca
SF:che
P3P: CP="NON COR CURa ADMa OUR NOR UNI 
SF:COM NAV STA"
Content-type: text/html
Date: Fri, 0
SF:2 Jan 2015 00:46:46 GMT
Server: sw-cp-server


SF:r
		
		
		
		
		
		
			var opt_no_frames = false;
	
SF:t	var opt_integrated_mode = false;
		
")%r(H
SF:TTPOptions,6B6,"HTTP/1.0 200 OK
Connection: close
Expir
SF:es: Sun, 01 Feb 2015 00:46:47 GMT
Expires: Fri,
SF: 28 May 1999 00:00:00 GMT
Cache-Control: max-age=2
SF:592000
Cache-Control: no-store, no-cache, must-revalidate
SF:
Cache-Control: post-check=0, pre-check=0
Last-Modified: F
SF:ri, 02 Jan 2015 00:46:47 GMT
Pragma: no-cache
P
SF:3P: CP="NON COR CURa ADMa OUR NOR UNI COM N
SF:AV STA"
Content-type: text/html
Date: Fri, 02 Jan
SF: 2015 00:46:47 GMT
Server: sw-cp-server


		<
SF:html>
		
		
		
		

SF:t	
			var opt_no_frames = false;
			varx
SF:20opt_integrated_mode = false;
		
");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port34572-TCP:V=5.00%I=7%D=1/1%Time=54A5EA69%P=x86_64-unknown-linux-gnu
SF:%r(GenericLines,1A,"HTTP/1.1 400 Bad Request

")%r(GetReque
SF:st,1A,"HTTP/1.1 400 Bad Request

")%r(HTTPOptions,1A,"HTTP/
SF:1.1 400 Bad Request

")%r(RTSPRequest,1A,"HTTP/1.1 400
SF:x20Bad Request

")%r(Help,1A,"HTTP/1.1 400 Bad Request

SF:
")%r(SSLSessionReq,1A,"HTTP/1.1 400 Bad Request

")%r(Fou
SF:rOhFourRequest,1A,"HTTP/1.1 400 Bad Request

")%r(LPDString
SF:,1A,"HTTP/1.1 400 Bad Request

")%r(SIPOptions,1A,"HTTP/1.
SF:1 400 Bad Request

");
Device type: general purpose
Running: Linux 2.6.X
OS details: Linux 2.6.9 - 2.6.26
Network Distance: 10 hops
Service Info: Hosts: localhost.localdomain,  dentzone-production.neovisture.net; OS: Unix

Host script results:
|_ nbstat: ERROR: Name query failed: TIMEOUT

OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 1226.05 seconds
BACK  |  HOME