# Nmap 7.93 scan initiated Thu Apr 25 14:50:57 2024 as: nmap -A -p 22,25,443,465,587 -T4 --script vuln -oN /opt/i_nmap_nove_postak_vuln.txt postak.vsb.cz
Nmap scan report for postak.vsb.cz (158.196.149.150)
Host is up (0.00025s latency).
Other addresses for postak.vsb.cz (not scanned): 2001:718:1001:149::150

PORT    STATE  SERVICE    VERSION
22/tcp  open   ssh        Fortinet VPN/firewall sshd (protocol 2.0)
25/tcp  open   smtp       FortiMail smtpd (time zone: +0200)
| smtp-vuln-cve2010-4344: 
|_  The SMTP server is not Exim: NOT VULNERABLE
443/tcp open   ssl/https
| http-enum: 
|   /mail/: Mail folder
|   /console/: Potentially interesting folder
|_  /user/: Potentially interesting folder
|_http-csrf: Couldn't find any CSRF vulnerabilities.
|_http-stored-xss: Couldn't find any stored XSS vulnerabilities.
|_http-dombased-xss: Couldn't find any DOM based XSS.
| fingerprint-strings: 
|   FourOhFourRequest, GetRequest, HTTPOptions: 
|     HTTP/1.1 400 Bad Request
|     Date: Thu, 25 Apr 2024 12:51:19 GMT
|     Content-Length: 226
|     Connection: close
|     Content-Type: text/html; charset=iso-8859-1
|     <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
|     <html><head>
|     <title>400 Bad Request</title>
|     </head><body>
|     <h1>Bad Request</h1>
|     <p>Your browser sent a request that this server could not understand.<br />
|     </p>
|     </body></html>
|   RTSPRequest: 
|     HTTP/1.1 400 Bad Request
|     Date: Thu, 25 Apr 2024 12:51:29 GMT
|     Content-Length: 226
|     Connection: close
|     Content-Type: text/html; charset=iso-8859-1
|     <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
|     <html><head>
|     <title>400 Bad Request</title>
|     </head><body>
|     <h1>Bad Request</h1>
|     <p>Your browser sent a request that this server could not understand.<br />
|     </p>
|_    </body></html>
465/tcp open   ssl/smtp   FortiMail smtpd (time zone: +0200)
|_ssl-ccs-injection: No reply from server (TIMEOUT)
| smtp-vuln-cve2010-4344: 
|_  The SMTP server is not Exim: NOT VULNERABLE
587/tcp closed submission
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.93%T=SSL%I=7%D=4/25%Time=662A51C7%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,178,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Thu,\
SF:x2025\x20Apr\x202024\x2012:51:19\x20GMT\r\nContent-Length:\x20226\r\nCo
SF:nnection:\x20close\r\nContent-Type:\x20text/html;\x20charset=iso-8859-1
SF:\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IETF//DTD\x20HTML\x202\.0//
SF:EN\">\n<html><head>\n<title>400\x20Bad\x20Request</title>\n</head><body
SF:>\n<h1>Bad\x20Request</h1>\n<p>Your\x20browser\x20sent\x20a\x20request\
SF:x20that\x20this\x20server\x20could\x20not\x20understand\.<br\x20/>\n</p
SF:>\n</body></html>\n")%r(HTTPOptions,178,"HTTP/1\.1\x20400\x20Bad\x20Req
SF:uest\r\nDate:\x20Thu,\x2025\x20Apr\x202024\x2012:51:19\x20GMT\r\nConten
SF:t-Length:\x20226\r\nConnection:\x20close\r\nContent-Type:\x20text/html;
SF:\x20charset=iso-8859-1\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IETF/
SF:/DTD\x20HTML\x202\.0//EN\">\n<html><head>\n<title>400\x20Bad\x20Request
SF:</title>\n</head><body>\n<h1>Bad\x20Request</h1>\n<p>Your\x20browser\x2
SF:0sent\x20a\x20request\x20that\x20this\x20server\x20could\x20not\x20unde
SF:rstand\.<br\x20/>\n</p>\n</body></html>\n")%r(FourOhFourRequest,178,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Thu,\x2025\x20Apr\x202024\
SF:x2012:51:19\x20GMT\r\nContent-Length:\x20226\r\nConnection:\x20close\r\
SF:nContent-Type:\x20text/html;\x20charset=iso-8859-1\r\n\r\n<!DOCTYPE\x20
SF:HTML\x20PUBLIC\x20\"-//IETF//DTD\x20HTML\x202\.0//EN\">\n<html><head>\n
SF:<title>400\x20Bad\x20Request</title>\n</head><body>\n<h1>Bad\x20Request
SF:</h1>\n<p>Your\x20browser\x20sent\x20a\x20request\x20that\x20this\x20se
SF:rver\x20could\x20not\x20understand\.<br\x20/>\n</p>\n</body></html>\n")
SF:%r(RTSPRequest,178,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Thu,
SF:\x2025\x20Apr\x202024\x2012:51:29\x20GMT\r\nContent-Length:\x20226\r\nC
SF:onnection:\x20close\r\nContent-Type:\x20text/html;\x20charset=iso-8859-
SF:1\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IETF//DTD\x20HTML\x202\.0/
SF:/EN\">\n<html><head>\n<title>400\x20Bad\x20Request</title>\n</head><bod
SF:y>\n<h1>Bad\x20Request</h1>\n<p>Your\x20browser\x20sent\x20a\x20request
SF:\x20that\x20this\x20server\x20could\x20not\x20understand\.<br\x20/>\n</
SF:p>\n</body></html>\n");
Aggressive OS guesses: Linux 3.2 - 4.9 (96%), Linux 2.6.32 - 3.10 (95%), Linux 2.6.32 (95%), Sony X75CH-series Android TV (Android 5.0) (94%), Linux 3.1 (93%), Linux 3.2 (93%), AXIS 210A or 211 Network Camera (Linux 2.6.17) (92%), Linux 2.6.32 - 2.6.35 (92%), Linux 2.6.32 - 3.5 (92%), Linux 2.6.32 - 3.13 (92%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 2 hops
Service Info: Device: firewall

TRACEROUTE (using port 587/tcp)
HOP RTT     ADDRESS
1   0.26 ms 158.196.94.2
2   0.24 ms postak.vsb.cz (158.196.149.150)

OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Thu Apr 25 14:53:20 2024 -- 1 IP address (1 host up) scanned in 143.56 seconds
