User:ClueBot IV/WPOPreports/137.164.143.112

From Wikipedia, the free encyclopedia

• IP: 137.164.143.112
• End result: Open proxy. Open proxy.
• Reverse DNS: 137.164.143.112

Contents 1 Whois 2 DNSBL 3 NMap 4 Proxy Check

[edit] Whois

OrgName:    CENIC 
OrgID:      CENIC
Address:    5757 Plaza Drive, Suite 205
City:       Cypress
StateProv:  CA
PostalCode: 90630-5029
Country:    US

NetRange:   137.164.0.0 - 137.164.255.255 
CIDR:       137.164.0.0/16 
NetName:    CALREN
NetHandle:  NET-137-164-0-0-1
Parent:     NET-137-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.CSU.NET
NameServer: NS2.CSU.NET
NameServer: NS3.CSU.NET
Comment:    
RegDate:    1989-12-21
Updated:    2007-05-03

OrgTechHandle: OPERA63-ARIN
OrgTechName:   CENIC Operations 
OrgTechPhone:  +1-714-220-3494
OrgTechEmail:  noc@cenic.org

# ARIN WHOIS database, last updated 2008-06-05 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

[edit] DNSBL

• 112.143.164.137.dnsbl.njabl.org (NJABL) = Nothing. — more information.
• 112.143.164.137.ircbl.ahbl.org (IRCBL) = Nothing. — more information.
• 112.143.164.137.tor.dnsbl.sectoor.de (SECTOOR) = Nothing. — more information.
• 112.143.164.137.tor.ahbl.org (AHBL) = Nothing. — more information.
• 112.143.164.137.no-more-funn.moensted.dk (NoMoreFunn) = Nothing. — more information.
• 112.143.164.137.dnsbl.sorbs.net (SORBS) = Nothing. — more information.
• 112.143.164.137.list.dsbl.org (DSBL) = Nothing. — more information.
• 112.143.164.137.xbl.spamhaus.org (XBL) = Nothing. — more information.

[edit] NMap

Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2008-06-06 06:59 EDT
Interesting ports on 137.164.143.112:
PORT      STATE SERVICE         VERSION
21/tcp    open  ftp             Microsoft ftpd
80/tcp    open  http-proxy      Microsoft ISA Server http proxy
135/tcp   open  msrpc           Microsoft Windows RPC
445/tcp   open  microsoft-ds    Microsoft Windows 2003 microsoft-ds
1028/tcp  open  unknown
1030/tcp  open  iad1?
1032/tcp  open  msrpc           Microsoft Windows RPC
1037/tcp  open  unknown
1039/tcp  open  ssl/unknown
1041/tcp  open  ssl/unknown
1046/tcp  open  ssl/unknown
1053/tcp  open  msrpc           Microsoft Windows RPC
1055/tcp  open  msrpc           Microsoft Windows RPC
1066/tcp  open  msrpc           Microsoft Windows RPC
1080/tcp  open  socks?
1745/tcp  open  unknown
3822/tcp  open  msrpc           Microsoft Windows RPC
4824/tcp  open  http            Microsoft IIS webserver 6.0
5631/tcp  open  pcanywheredata?
8080/tcp  open  http            Microsoft IIS httpd
33833/tcp open  time             (32 bits)
33835/tcp open  ssl/time         (32 bits)
4 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at http://www.insecure.org/cgi-bin/servicefp-submit.cgi :
Service Info: OS: Windows

Nmap finished: 1 IP address (1 host up) scanned in 47.307 seconds

[edit] Proxy Check

137.164.143.112 open 80 HTTPGET