Re: hp laserjet telnet NSE script

[Ron <ron () skullsecurity net>]

Aaron Leininger wrote:
> This is my first humble attempt at functional NSE. I still really have no firm grasp over the language so please forgive any mistakes. 
>
> The attached NSE script will connect to the telnet port on an HP laserjet and issue the commands /\r\n\r\n\r\n\r\n as a probe of sorts. 
> This emulates the "/" command to display the default settings on the printer and the remaining carriage returns will grab the rest of the output. If you look at the output, you'll see a few places where it says "press return to continue"..That's what the extra carriage returns were for. 
>
> Anyway, it is VERY rough and not nearly ready for any production use. Please modify as you wish. I'd love to see how to streamline it better. I'm very poor with LUA code. For example, it will run on any port 23 now. It probably should only run when an open port between 9100-9107(standard for laserJets) is found as well as the open port 23. Also, maybe there is a way to parse the more useful data out of the current rather large data dump. I just haven't been able to figure out how exactly to do either of those things, nor am I 100% sure which parts of the data the average nmapper might consider critical to have. Also attached is a text file containing sample output from the script in its current form. Personal details of my network have been obscured in the output. I used nmap 4.85beta3 to test this script. 
>
> Thanks,
> Aaron

Hey,

I agree with what Brandon said. I've attached the (sanitized) output of 
running against a subnet at my office with a boadload of printers 
(commonly known as, every subnet). Hope it helps!

Ron


Starting Nmap 4.85BETA3 ( http://nmap.org ) at 2009-03-04 14:02 CST
--------------- Timing report ---------------
  hostgroups: min 1, max 100000
  rtt-timeouts: init 500, min 100, max 1250
  max-scan-delay: TCP 10, UDP 1000
  parallelism: min 0, max 0
  max-retries: 6, host-timeout: 0
  min-rate: 0, max-rate: 0
---------------------------------------------
Initiating Ping Scan at 14:02
Scanning 256 hosts [1 port/host]
Completed Ping Scan at 14:02, 1.83s elapsed (256 total hosts)
Overall sending rates: 260.70 packets / s.
mass_rdns: Using DNS server x.x.x.21
mass_rdns: Using DNS server x.x.x.179
Initiating Parallel DNS resolution of 256 hosts. at 14:02
mass_rdns: 0.00s 0/36 [#: 2, OK: 0, NX: 0, DR: 0, SF: 0, TR: 21]
Completed Parallel DNS resolution of 256 hosts. at 14:02, 2.50s elapsed
DNS resolution of 36 IPs took 2.50s. Mode: Async [#: 2, OK: 3, NX: 33, DR: 0, SF: 0, TR: 39, CN: 0]
Initiating Connect Scan at 14:02
Scanning 36 hosts [1 port/host]
Discovered open port 23/tcp on x.x.x.3
Discovered open port 23/tcp on x.x.x.10
Discovered open port 23/tcp on x.x.x.11
Discovered open port 23/tcp on x.x.x.13
Discovered open port 23/tcp on x.x.x.14
Discovered open port 23/tcp on x.x.x.16
Discovered open port 23/tcp on x.x.x.18
Discovered open port 23/tcp on x.x.x.20
Discovered open port 23/tcp on x.x.x.21
Discovered open port 23/tcp on x.x.x.12
Discovered open port 23/tcp on x.x.x.43
Discovered open port 23/tcp on x.x.x.38
Discovered open port 23/tcp on x.x.x.224
Discovered open port 23/tcp on x.x.x.42
Discovered open port 23/tcp on x.x.x.220
Discovered open port 23/tcp on x.x.x.26
Discovered open port 23/tcp on x.x.x.27
Discovered open port 23/tcp on x.x.x.28
Discovered open port 23/tcp on x.x.x.22
Discovered open port 23/tcp on x.x.x.29
Discovered open port 23/tcp on x.x.x.31
Discovered open port 23/tcp on x.x.x.36
Discovered open port 23/tcp on x.x.x.253
Discovered open port 23/tcp on x.x.x.23
Discovered open port 23/tcp on x.x.x.32
Discovered open port 23/tcp on x.x.x.225
Discovered open port 23/tcp on x.x.x.251
Discovered open port 23/tcp on x.x.x.39
Increased max_successful_tryno for x.x.x.34 to 1 (packet drop)
Increased max_successful_tryno for x.x.x.30 to 1 (packet drop)
Completed Connect Scan at 14:02, 0.11s elapsed (36 total ports)
Overall sending rates: 334.19 packets / s.
NSE: Initiating script scanning.
NSE: Script scanning 36 hosts.
NSE: Initialized 1 rules
NSE: Matching rules.
NSE: Running scripts.
NSE: Runlevel: 1.000000
Initiating NSE at 14:02
Running 28 script threads:
NSE (4.661s): Starting hptelnet against x.x.x.3:23.
NSE (4.661s): Starting hptelnet against x.x.x.10:23.
NSE (4.661s): Starting hptelnet against x.x.x.11:23.
NSE (4.661s): Starting hptelnet against x.x.x.12:23.
NSE (4.661s): Starting hptelnet against x.x.x.13:23.
NSE (4.661s): Starting hptelnet against x.x.x.14:23.
NSE (4.661s): Starting hptelnet against x.x.x.16:23.
NSE (4.661s): Starting hptelnet against x.x.x.18:23.
NSE (4.661s): Starting hptelnet against x.x.x.20:23.
NSE (4.661s): Starting hptelnet against x.x.x.21:23.
NSE (4.661s): Starting hptelnet against x.x.x.22:23.
NSE (4.661s): Starting hptelnet against x.x.x.23:23.
NSE (4.661s): Starting hptelnet against x.x.x.26:23.
NSE (4.661s): Starting hptelnet against x.x.x.27:23.
NSE (4.661s): Starting hptelnet against x.x.x.28:23.
NSE (4.661s): Starting hptelnet against x.x.x.29:23.
NSE (4.661s): Starting hptelnet against x.x.x.31:23.
NSE (4.661s): Starting hptelnet against x.x.x.32:23.
NSE (4.661s): Starting hptelnet against x.x.x.36:23.
NSE (4.661s): Starting hptelnet against x.x.x.38:23.
NSE (4.661s): Starting hptelnet against x.x.x.39:23.
NSE (4.661s): Starting hptelnet against x.x.x.42:23.
NSE (4.661s): Starting hptelnet against x.x.x.43:23.
NSE (4.661s): Starting hptelnet against x.x.x.220:23.
NSE (4.661s): Starting hptelnet against x.x.x.224:23.
NSE (4.661s): Starting hptelnet against x.x.x.225:23.
NSE (4.661s): Starting hptelnet against x.x.x.251:23.
NSE (4.661s): Starting hptelnet against x.x.x.253:23.
NSE (9.676s): Finished hptelnet against x.x.x.3:23.
NSE (9.676s): Finished hptelnet against x.x.x.10:23.
NSE (9.676s): Finished hptelnet against x.x.x.12:23.
NSE (9.677s): Finished hptelnet against x.x.x.13:23.
NSE (9.677s): Finished hptelnet against x.x.x.18:23.
NSE (9.677s): Finished hptelnet against x.x.x.14:23.
NSE (9.677s): Finished hptelnet against x.x.x.16:23.
NSE (9.677s): Finished hptelnet against x.x.x.20:23.
NSE (9.677s): Finished hptelnet against x.x.x.21:23.
NSE (9.677s): Finished hptelnet against x.x.x.11:23.
NSE (14.687s): Finished hptelnet against x.x.x.38:23.
NSE (14.687s): Finished hptelnet against x.x.x.39:23.
NSE (14.687s): Finished hptelnet against x.x.x.43:23.
NSE (14.687s): Finished hptelnet against x.x.x.220:23.
NSE (14.687s): Finished hptelnet against x.x.x.225:23.
NSE (14.687s): Finished hptelnet against x.x.x.31:23.
NSE (14.687s): Finished hptelnet against x.x.x.23:23.
NSE (14.687s): Finished hptelnet against x.x.x.29:23.
NSE (14.687s): Finished hptelnet against x.x.x.26:23.
NSE (14.688s): Finished hptelnet against x.x.x.36:23.
NSE (19.698s): Finished hptelnet against x.x.x.22:23.
NSE (19.698s): Finished hptelnet against x.x.x.42:23.
NSE (19.698s): Finished hptelnet against x.x.x.224:23.
NSE (19.699s): Finished hptelnet against x.x.x.28:23.
NSE (19.699s): Finished hptelnet against x.x.x.253:23.
NSE (19.699s): Finished hptelnet against x.x.x.32:23.
NSE (19.699s): Finished hptelnet against x.x.x.251:23.
NSE (19.699s): Finished hptelnet against x.x.x.27:23.
Completed NSE at 14:02, 15.04s elapsed
NSE: Script scanning completed.
Host x.x.x.1 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 4s
Interesting ports on x.x.x.1:
PORT   STATE  SERVICE REASON
23/tcp closed telnet  conn-refused
Final times for host: srtt: 4102 rttvar: 4762  to: 100000

Host x.x.x.3 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 9s
Interesting ports on x.x.x.3:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFB\x01\xFF\xFB\x03\xFF\xFD\x18\xFF\xFD\x1FCCC
|  
|  *********************************************************************
|  
|    Location:  XXX
|    Asset Tag: MB-123456789
|    Asset Tag: MB-123456789
|  
|  *********************************************************************
|  
|    This system is for the use of authorized users only.
|    Individuals using this computer system without authority
|    or in excess of their authority, are subject to having all of
|    their activities on this system monitored and recorded by system
|    personnel.
|  
|    Anyone using this system expressly consents to such monitoring
|    and is advised that if such monitoring reveals possible
|    evidence of criminal activity, system personnel may provide the
|    evidence of such monitoring to law enforcement officials.
|  
|  **********************************************************************
|  
|  
|  
|  User Access Verification
|  
|  Username: /
|  Password: 
|  
|  % Authentication failed.
|  
|  
|  User Access Verification
|  
|  Username: 
|  
|  User Access Verification
|  
|  Username: 
|  
|  User Access Verification
|  
|_ Username: 
Final times for host: srtt: 2647 rttvar: 3869  to: 100000

Host x.x.x.10 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 9s
Interesting ports on x.x.x.10:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFB\x01\xFF\xFB\x03\xFF\xFD\x18\xFF\xFD\x1FCCC
|  
|  *********************************************************************
|  
|    Location:  XXX
|    Asset Tag: MB-123456789
|  
|  *********************************************************************
|  
|    This system is for the use of authorized users only.
|    Individuals using this computer system without authority
|    or in excess of their authority, are subject to having all of
|    their activities on this system monitored and recorded by system
|    personnel.
|  
|    Anyone using this system expressly consents to such monitoring
|    and is advised that if such monitoring reveals possible
|    evidence of criminal activity, system personnel may provide the
|    evidence of such monitoring to law enforcement officials.
|  
|  **********************************************************************
|  
|  
|  
|  User Access Verification
|  
|  Username: /
|  Password: 
|  
|  % Authentication failed.
|  
|  
|  User Access Verification
|  
|  Username: 
|  
|  User Access Verification
|  
|  Username: 
|  
|  User Access Verification
|  
|_ Username: 
Final times for host: srtt: 8101 rttvar: 8102  to: 100000

Host x.x.x.11 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 9s
Interesting ports on x.x.x.11:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFB\x01\xFF\xFB\x03\xFF\xFD\x18\xFF\xFD\x1FCCC
|  
|  *********************************************************************
|  
|    Location:  XXX
D
|    Asset Tag: MB-123456789
|  
|  *********************************************************************
|  
|    This system is for the use of authorized users only.
|    Individuals using this computer system without authority
|    or in excess of their authority, are subject to having all of
|    their activities on this system monitored and recorded by system
|    personnel.
|  
|    Anyone using this system expressly consents to such monitoring
|    and is advised that if such monitoring reveals possible
|    evidence of criminal activity, system personnel may provide the
|    evidence of such monitoring to law enforcement officials.
|  
|  **********************************************************************
|  
|  
|  
|  User Access Verification
|  
|  Username: /
|  Password: 
|  
|  % Authentication failed.
|  
|  
|  User Access Verification
|  
|  Username: 
|  
|  User Access Verification
|  
|  Username: 
|  
|  User Access Verification
|  
|_ Username: 
Final times for host: srtt: 10386 rttvar: 10641  to: 100000

Host x.x.x.12 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 9s
Interesting ports on x.x.x.12:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFB\x01\xFF\xFB\x03\xFF\xFD\x18\xFF\xFD\x1FCCC
|  
|  *********************************************************************
|  
|    Location:  XXX
|    Asset Tag: MB-123456789
|  
|  *********************************************************************
|  
|    This system is for the use of authorized users only.
|    Individuals using this computer system without authority
|    or in excess of their authority, are subject to having all of
|    their activities on this system monitored and recorded by system
|    personnel.
|  
|    Anyone using this system expressly consents to such monitoring
|    and is advised that if such monitoring reveals possible
|    evidence of criminal activity, system personnel may provide the
|    evidence of such monitoring to law enforcement officials.
|  
|  **********************************************************************
|  
|  
|  
|  User Access Verification
|  
|  Username: /
|  Password: 
|  
|  % Authentication failed.
|  
|  
|  User Access Verification
|  
|  Username: 
|  
|  User Access Verification
|  
|  Username: 
|  
|  User Access Verification
|  
|_ Username: 
Final times for host: srtt: 3124 rttvar: 5217  to: 100000

Host x.x.x.13 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 9s
Interesting ports on x.x.x.13:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFB\x01\xFF\xFB\x03\xFF\xFD\x18\xFF\xFD\x1FCCC
|  
|  *********************************************************************
|  
|    Location:  XXX
|    Asset Tag: MB-123456789
|  
|  *********************************************************************
|  
|    This system is for the use of authorized users only.
|    Individuals using this computer system without authority
|    or in excess of their authority, are subject to having all of
|    their activities on this system monitored and recorded by system
|    personnel.
|  
|    Anyone using this system expressly consents to such monitoring
|    and is advised that if such monitoring reveals possible
|    evidence of criminal activity, system personnel may provide the
|    evidence of such monitoring to law enforcement officials.
|  
|  **********************************************************************
|  
|  
|  
|  User Access Verification
|  
|  Username: /
|  Password: 
|  
|  % Authentication failed.
|  
|  
|  User Access Verification
|  
|  Username: 
|  
|  User Access Verification
|  
|  Username: 
|  
|  User Access Verification
|  
|_ Username: 
Final times for host: srtt: 6270 rttvar: 5574  to: 100000

Host x.x.x.14 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 9s
Interesting ports on x.x.x.14:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFB\x01\xFF\xFB\x03\xFF\xFD\x18\xFF\xFD\x1FCCC
|  
|  *********************************************************************
|  
|    Location:  XXX
|    Asset Tag: MB-123456789
|  
|  *********************************************************************
|  
|    This system is for the use of authorized users only.
|    Individuals using this computer system without authority
|    or in excess of their authority, are subject to having all of
|    their activities on this system monitored and recorded by system
|    personnel.
|  
|    Anyone using this system expressly consents to such monitoring
|    and is advised that if such monitoring reveals possible
|    evidence of criminal activity, system personnel may provide the
|    evidence of such monitoring to law enforcement officials.
|  
|  **********************************************************************
|  
|  
|  
|  User Access Verification
|  
|  Username: /
|  Password: 
|  
|  % Authentication failed.
|  
|  
|  User Access Verification
|  
|  Username: 
|  
|  User Access Verification
|  
|  Username: 
|  
|  User Access Verification
|  
|_ Username: 
Final times for host: srtt: 6193 rttvar: 5314  to: 100000

Host x.x.x.16 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 9s
Interesting ports on x.x.x.16:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFB\x01\xFF\xFB\x03\xFF\xFD\x18\xFF\xFD\x1FCCC
|  
|  *********************************************************************
|  
|    Location:  XXX
|    Asset Tag: MB-123456789
|  
|  *********************************************************************
|  
|    This system is for the use of authorized users only.
|    Individuals using this computer system without authority
|    or in excess of their authority, are subject to having all of
|    their activities on this system monitored and recorded by system
|    personnel.
|  
|    Anyone using this system expressly consents to such monitoring
|    and is advised that if such monitoring reveals possible
|    evidence of criminal activity, system personnel may provide the
|    evidence of such monitoring to law enforcement officials.
|  
|  **********************************************************************
|  
|  
|  
|  User Access Verification
|  
|  Username: /
|  Password: 
|  
|  % Authentication failed.
|  
|  
|  User Access Verification
|  
|  Username: 
|  
|  User Access Verification
|  
|  Username: 
|  
|  User Access Verification
|  
|_ Username: 
Final times for host: srtt: 2460 rttvar: 4444  to: 100000

Host x.x.x.18 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 9s
Interesting ports on x.x.x.18:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFB\x01\xFF\xFB\x03\xFF\xFD\x18\xFF\xFD\x1FCCC
|  
|  *********************************************************************
|  
|    Location:  XXX
|    Asset Tag: MB-123456789
|  
|  *********************************************************************
|  
|    This system is for the use of authorized users only.
|    Individuals using this computer system without authority
|    or in excess of their authority, are subject to having all of
|    their activities on this system monitored and recorded by system
|    personnel.
|  
|    Anyone using this system expressly consents to such monitoring
|    and is advised that if such monitoring reveals possible
|    evidence of criminal activity, system personnel may provide the
|    evidence of such monitoring to law enforcement officials.
|  
|  **********************************************************************
|  
|  
|  
|  User Access Verification
|  
|  Username: /
|  Password: 
|  
|  % Authentication failed.
|  
|  
|  User Access Verification
|  
|  Username: 
|  
|  User Access Verification
|  
|  Username: 
|  
|  User Access Verification
|  
|_ Username: 
Final times for host: srtt: 5679 rttvar: 4601  to: 100000

Host x.x.x.20 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 9s
Interesting ports on x.x.x.20:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFC\x01
|  HP JetDirect
|  
|_ Password: Password: 
Final times for host: srtt: 5459 rttvar: 4290  to: 100000

Host x.x.x.21 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 9s
Interesting ports on x.x.x.21:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFC\x01
|  HP JetDirect
|  
|_ Password: Password: 
Final times for host: srtt: 5869 rttvar: 4549  to: 100000

Host x.x.x.22 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 19s
Interesting ports on x.x.x.22:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFC\x01
|  HP JetDirect
|  
|_ Password: Password: 
Final times for host: srtt: 5793 rttvar: 4538  to: 100000

Host x.x.x.23 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 14s
Interesting ports on x.x.x.23:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFC\x01
|  HP JetDirect
|  
|_ Password: Password: 
Final times for host: srtt: 8537 rttvar: 6918  to: 100000

Host x.x.x.26 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 14s
Interesting ports on x.x.x.26:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFC\x01
|  HP JetDirect
|  
|_ Password: Password: 
Final times for host: srtt: 6037 rttvar: 5256  to: 100000

Host x.x.x.27 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 19s
Interesting ports on x.x.x.27:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFC\x01
|  HP JetDirect
|  
|_ Password: Password: 
Final times for host: srtt: 6302 rttvar: 5384  to: 100000

Host x.x.x.28 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 19s
Interesting ports on x.x.x.28:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFC\x01
|  HP JetDirect
|  
|_ Password: Password: 
Final times for host: srtt: 7404 rttvar: 5999  to: 100000

Host x.x.x.29 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 14s
Interesting ports on x.x.x.29:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFC\x01
|  HP JetDirect
|  
|_ Password: Password: 
Final times for host: srtt: 6061 rttvar: 5473  to: 100000

Host x.x.x.30 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 4s
Interesting ports on x.x.x.30:
PORT   STATE  SERVICE REASON
23/tcp closed telnet  conn-refused
Final times for host: srtt: 5634 rttvar: 4885  to: 100000

Host x.x.x.31 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 14s
Interesting ports on x.x.x.31:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFC\x01
|  HP JetDirect
|  
|_ Password: Password: 
Final times for host: srtt: 5993 rttvar: 5405  to: 100000

Host x.x.x.32 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 19s
Interesting ports on x.x.x.32:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFC\x01
|  HP JetDirect
|  
|_ Password: Password: 
Final times for host: srtt: 5556 rttvar: 4404  to: 100000

Host x.x.x.34 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 4s
Interesting ports on x.x.x.34:
PORT   STATE  SERVICE REASON
23/tcp closed telnet  conn-refused
Final times for host: srtt: 2984 rttvar: 4144  to: 100000

Host x.x.x.36 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 14s
Interesting ports on x.x.x.36:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFC\x01
|  HP JetDirect
|  
|_ Password: Password: 
Final times for host: srtt: 7226 rttvar: 6005  to: 100000

Host x.x.x.38 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 14s
Interesting ports on x.x.x.38:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFB\x03\xFF\xFB\x01\x07HP JetDirect
|  
|  Enter username: /
|  Enter password: 
|  Password incorrect.
|  
|_ Enter username: 
Final times for host: srtt: 4463 rttvar: 4609  to: 100000

Host x.x.x.39 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 14s
Interesting ports on x.x.x.39:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFB\x03\xFF\xFB\x01\x07HP JetDirect
|  
|  Enter username: /
|  Enter password: 
|  Password incorrect.
|  
|_ Enter username: 
Final times for host: srtt: 3755 rttvar: 5126  to: 100000

Host wpg969stg1.me.mbgov.ca (x.x.x.40) appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 4s
Interesting ports on wpg969stg1.me.mbgov.ca (x.x.x.40):
PORT   STATE  SERVICE REASON
23/tcp closed telnet  conn-refused
Final times for host: srtt: 2002 rttvar: 3896  to: 100000

Host x.x.x.42 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 19s
Interesting ports on x.x.x.42:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFB\x03\xFF\xFB\x01\x07HP JetDirect
|  
|  Enter username: /
|  Enter password: 
|  Password incorrect.
|  
|_ Enter username: 
Final times for host: srtt: 4306 rttvar: 4616  to: 100000

Host x.x.x.43 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 14s
Interesting ports on x.x.x.43:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFB\x01\xFF\xFB\x03\x07HP JetDirect
|  
|  Enter username: /
|  Enter password: 
|  Password incorrect.
|  
|  Enter username: 
|  Enter password: 
|  Password incorrect.
|  
|_ Enter username: 
Final times for host: srtt: 3046 rttvar: 4843  to: 100000

Host wpg969cmsd1.me.mbgov.ca (x.x.x.49) appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 4s
Interesting ports on wpg969cmsd1.me.mbgov.ca (x.x.x.49):
PORT   STATE  SERVICE REASON
23/tcp closed telnet  conn-refused
Final times for host: srtt: 2033 rttvar: 3932  to: 100000

Host x.x.x.50 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 4s
Interesting ports on x.x.x.50:
PORT   STATE  SERVICE REASON
23/tcp closed telnet  conn-refused
Final times for host: srtt: 3375 rttvar: 3794  to: 100000

Host x.x.x.119 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 4s
Interesting ports on x.x.x.119:
PORT   STATE  SERVICE REASON
23/tcp closed telnet  conn-refused
Final times for host: srtt: 3849 rttvar: 4562  to: 100000

Host wpg969ss1.shared.mbgov.ca (x.x.x.134) appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 4s
Interesting ports on wpg969ss1.shared.mbgov.ca (x.x.x.134):
PORT   STATE  SERVICE REASON
23/tcp closed telnet  conn-refused
Final times for host: srtt: 2779 rttvar: 4707  to: 100000

Host x.x.x.220 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 14s
Interesting ports on x.x.x.220:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFB\x00\xFF\xFD\x00\xFF\xFB\x01\xFF\xFB\x03\xFF\xFD\x03\x1B[1}\x1B[0;37;40m\x1B[2J\x1B[1;1HLogin 
Name:  /
|  Password:    
|  Invalid login.
|  Login Name:  
|  Password:    
|  Invalid login.
|_ Login Name:  
Final times for host: srtt: 3065 rttvar: 4671  to: 100000

Host x.x.x.224 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 19s
Interesting ports on x.x.x.224:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFB\x03\xFF\xFB\x01\x07HP JetDirect
|  
|  Enter username: /
|  Enter password: 
|  Password incorrect.
|  
|_ Enter username: 
Final times for host: srtt: 7207 rttvar: 5893  to: 100000

Host x.x.x.225 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 14s
Interesting ports on x.x.x.225:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFB\x01\xFF\xFB\x03\x07HP JetDirect
|  
|  Enter username: /
|  Enter password: 
|  Password incorrect.
|  
|  Enter username: 
|  Enter password: 
|  Password incorrect.
|  
|_ Enter username: 
Final times for host: srtt: 2628 rttvar: 3962  to: 100000

Host x.x.x.251 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 19s
Interesting ports on x.x.x.251:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFC\x01
|  HP JetDirect
|  
|_ Password: Password: 
Final times for host: srtt: 5210 rttvar: 4286  to: 100000

Host x.x.x.253 appears to be up ... good.
Scanned at 2009-03-04 14:02:31 CST for 19s
Interesting ports on x.x.x.253:
PORT   STATE SERVICE REASON
23/tcp open  telnet  syn-ack
|  hptelnet: \xFF\xFC\x01
|  HP JetDirect
|  
|_ Password: Password: 
Final times for host: srtt: 5519 rttvar: 4414  to: 100000

Read from .: nmap-services.
Nmap done: 256 IP addresses (36 hosts up) scanned in 19.74 seconds


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org