Document provided below is a sample Infrastructure Discovery report automatically generated by Apteriks portal.

Ingredients

1 minute to open up a free account at Apteriks

5 minutes to deploy a single copy of a tiny Sentinel software within the environment that you need to investigate or manage. Sentinel establishes the SSL-encrypted connection to the portal and securely links to your account. It is the Sentinel that performs the actual discovery and passes on the collected data to the portal for the analysis.

Estimates

It takes slightly over 1 hour to perform the deep scan of a network containing 1000 IP nodes,- such as the datacenter of yours or your customer's. The deep scan will cover over 6200 mostly used TCP ports, inventory, speed measurements and name resolution.

It takes slightly over 1 second to generate the Infrastructure Discovery report for any managed network, including those within Apteriks IP Address Manager.

Infrastructure Discovery Report

 

This report contains the Infrastructure Discovery data for the below mentioned networks.

Goals

The primary goal of this report is to provide IT Management/Security with the following critical data:

  • Identify network items in "red zone" - vulnerable, slowest, most exposed, lacking configuration.
  • Inventorize the actual devices and services that run on the network.

Pre-requisites

In order to collect data required to produce this report, a single Sentinel agent program needs to be installed within the managed environment.

Read more about how Apteriks works.

Methodology

This report was automatically generated by the Apteriks portal.

The following discovery techniques were used to produce this report:

  • ICMP ping sweep & DNS
  • TCP Port scanning
  • SNMP Discovery and Inventory

Completeness

All discoveries and data collection were done by the Sentinel agent, and the following factors influence the completeness of this report:

  • Clear the path. Make sure that firewalls or network filters do not block the communication between the Sentinel and the scanned networks;
  • Scan for more. In order to detect active network services and vulnerabilities, you will need to scan for as many TCP ports as possible. If you do not have the premium account, you are scanning for a very small subset of network services.
  • Enable SNMP. Turn on this protocol on your devices and specify SNMP credentials during the scanning. This populates the inventory, such as Vendor/Hardware/Software details. Take care of the security - use SNMPv3 with encryption and authentication.

Target scope

IP Address Space
Sample Company

Network address
10.55.104.0/24

Network Name
Network 10.55.104.0

Network Description
Public WEB hosting segment, DC South

Report generation time
28-Jul-15 7:46:14 PM (UTC)

Table of contents

Summary of key observations

Top 10 slowest nodes

Top 10 most exposed nodes

Top 10 TCP Services

Nodes with naming issues

Vendor distribution

Device Inventory

Databases

Domain Controllers

VMware ESXi servers

File shares

DNS servers

Security vulnerabilities

Nodes down or with unknown status

All discovered services

TCP service groups

All discovered nodes

Summary of key observations

 

Total size of analyzed network(s)
254
IP Nodes: 83 (32%)
Node status
Top 10 slowest nodes

This chapter highlights network nodes with the worst Round Trip Time. They were the slowest to reply to the discovery requests. Note that the time is measured between the Sentinel agent that performed the discovery and the destination nodes.

The average Round Trip Time is 18.3 msec.

 

The following table provides the list of slowest nodes on the network.

Name DNS Name IP Address Round trip time (ms)
switch01.internal.company.com switch01.internal.company.com 10.55.104.60 57
kyoto01.extranet.company.com kyoto01.extranet.company.com 10.55.104.58 55
ip54.mox.extranet.company.com ip54.mox.extranet.company.com 10.55.104.54 40
ip55.mox.extranet.company.com ip55.mox.extranet.company.com 10.55.104.55 40
ip53.mox.extranet.company.com ip53.mox.extranet.company.com 10.55.104.53 37
server03.internal.company.com server03.internal.company.com 10.55.104.65 28
in101.spamfilter01.internal.com in101.spamfilter01.internal.com 10.55.104.61 27
server03.internal.company.com server03.internal.company.com 10.55.104.66 27
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.161 27
sh06.extranet.company.com sh06.extranet.company.com 10.55.104.94 26
Top 10 most exposed nodes

This chapter lists network nodes with the biggest amount of enabled TCP services. These would typically be the servers in the datacenter, but can also be nodes with a lot of default open TCP ports. Open TCP services can be exploited by malicious users to gain access to a computer. To improve the security, leave only the services that you know are necessary for the operation, and close down others.

 

The following table provides the list of most exposed nodes on the network.

Name DNS Name IP Address # Services Enabled TCP Services
hosted.internal.company.com hosted.internal.company.com 10.55.104.15 18 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 111 (sunrpc), 143 (imap), 443 (https), 587 (submission), 750 (rfile), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 2526 (ema-sent-lm), 3306 (mysql), 5986 (wsmans), 10050 (zabbix-agent)
hosted.internal.company.com hosted.internal.company.com 10.55.104.21 18 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 111 (sunrpc), 143 (imap), 443 (https), 587 (submission), 750 (rfile), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 2526 (ema-sent-lm), 3306 (mysql), 5986 (wsmans), 10050 (zabbix-agent)
hosted.internal.company.com hosted.internal.company.com 10.55.104.47 18 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 111 (sunrpc), 143 (imap), 443 (https), 587 (submission), 750 (rfile), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 2526 (ema-sent-lm), 3306 (mysql), 5986 (wsmans), 10050 (zabbix-agent)
hosted.internal.company.com hosted.internal.company.com 10.55.104.48 18 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 111 (sunrpc), 143 (imap), 443 (https), 587 (submission), 750 (rfile), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 2526 (ema-sent-lm), 3306 (mysql), 5986 (wsmans), 10050 (zabbix-agent)
hosted.internal.company.com hosted.internal.company.com 10.55.104.49 18 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 111 (sunrpc), 143 (imap), 443 (https), 587 (submission), 750 (rfile), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 2526 (ema-sent-lm), 3306 (mysql), 5986 (wsmans), 10050 (zabbix-agent)
server02.internal.company.com server02.internal.company.com 10.55.104.20 14 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 587 (submission), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 2526 (ema-sent-lm), 3306 (mysql), 10050 (zabbix-agent)
hosted.internal.company.com hosted.internal.company.com 10.55.104.44 14 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 587 (submission), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 2526 (ema-sent-lm), 3306 (mysql), 10050 (zabbix-agent)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.160 13 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql), 10050 (zabbix-agent)
sh07.extranet.company.com sh07.extranet.company.com 10.55.104.107 13 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql), 10050 (zabbix-agent)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.109 13 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql), 10050 (zabbix-agent)
Top 10 TCP Services

This chapter lists TCP services that are most frequently enabled on scanned network(s).

TCP Service Enabled on # of nodes
80 (http) 61
443 (https) 60
22 (ssh) 55
21 (ftp), 3306 (mysql) 38
143 (imap), 10050 (zabbix-agent) 37
2222 (EtherNet/IP-1) 36
110 (pop3), 995 (pop3s) 35
2525 (ms-v-worlds) 33
53 (domain) 29
993 (imaps) 26
Nodes with naming issues

This chapter lists network nodes that lack DNS or administrative names. As a rule, every IP host must have the proper DNS name, especially when it comes to servers.

Out of 83 analyzed network nodes, 3 nodes have naming issues.

 

 

The following table provides the list of nodes that lack DNS names.

IP Address Administrative name # TCP Services
10.55.104.140 2
10.55.104.144 5
10.55.104.145 legacy-x.company.com 8
Vendor distribution

This chapter shows the distribution of hardware/software vendors detected by SNMP protocol.

The content of this chapter is determined by the level of SNMP protocol adoption on the network. If SNMP protocol is enabled on the device and credentials are provided during the infrastructure discovery, the device details will be retrieved.

 

During the discovery, 12 device(s) responded to SNMP queries.

There are 71 other device(s) on this network without SNMP support; please enable it and scan the network again in order to derive better conclusions. Please note that only SNMPv3 in "authPriv" mode provides the adequate level of security by enforcing proper encryption and authentication.

 

The following table provides the list of detected device vendors.

Vendor name Device count
ciscoSystems 1
Juniper Networks, Inc. 1
net-snmp 2
Microsoft 5
Network Appliance Corporation 2
TU Braunschweig 1
Device inventory

This chapter shows the inventory details as reported by devices during the scanning.

The content of this chapter is determined by the level of SNMP protocol adoption on the network. If SNMP protocol is enabled on the device and credentials are provided during the infrastructure discovery, the device details will be retrieved.

 

During the discovery, 12 device(s) responded to SNMP queries.

There are 71 device(s) on this network without SNMP support; please enable it and scan the network again in order to derive better conclusions.

 

Node Name Vendor System name System uptime System description
10.55.104.1 router03.extranet.company.com (router03.extranet.company.com) ciscoSystems R03 133 day(s) 6 hour(s) and 31 min Cisco IOS Software, C1900 Software (C1900-UNIVERSALK9-M), Version 15.2(4)M3, RELEASE SOFTWARE (fc2) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2013 by Cisco Systems, Inc. Compiled Tue 26-Feb-13 02:11 by prod_rel_team
10.55.104.2 router04.extranet.company.com (router04.extranet.company.com) Juniper Networks, Inc. JR4.company.com 41 day(s) 17 hour(s) and 3 min Juniper Networks, Inc. srx240h2 internet router, kernel JUNOS 11.4R10.3 #0: 2013-11-15 06:56:20 UTC builder@singlath:/volume/build/junos/11.4/release/11.4R10.3/obj-octeon/bsd/kernels/JSRXNLE/kernel Build date: 2013-11-15 07:18:28 UTC Copyright (c) 19
10.55.104.61 in101.spamfilter01.internal.com (in101.spamfilter01.internal.com) net-snmp spamfilter02.internal.com 8 day(s) 11 hour(s) and 25 min Linux spamfilter02.internal.com 3.2.0-4-amd64 #1 SMP Debian 3.2.65-1+deb7u2 x86_64
10.55.104.62 in102.spamfilter02.internal.com (in102.spamfilter02.internal.com) net-snmp spamfilter02.internal.com 8 day(s) 11 hour(s) and 21 min Linux spamfilter02.internal.com 3.2.0-4-amd64 #1 SMP Debian 3.2.65-1+deb7u2 x86_64
10.55.104.118 airfleet03.extranet.company.com (airfleet03.extranet.company.com) Microsoft xps118 0 day(s) 5 hour(s) and 15 min Hardware: Intel64 Family 6 Model 23 Stepping 6 AT/AT COMPATIBLE - Software: Windows Version 6.3 (Build 9600 Multiprocessor Free)
10.55.104.119 hosted.extranet.company.com (hosted.extranet.company.com) Microsoft xps119 71 day(s) 20 hour(s) and 32 min Hardware: Intel64 Family 6 Model 23 Stepping 6 AT/AT COMPATIBLE - Software: Windows Version 6.3 (Build 9600 Multiprocessor Free)
10.55.104.121 hosted.extranet.company.com (hosted.extranet.company.com) Microsoft xps121 71 day(s) 18 hour(s) and 3 min Hardware: Intel64 Family 6 Model 23 Stepping 6 AT/AT COMPATIBLE - Software: Windows Version 6.3 (Build 9600 Multiprocessor Free)
10.55.104.122 hosted.extranet.company.com (hosted.extranet.company.com) Microsoft xps122 71 day(s) 20 hour(s) and 32 min Hardware: Intel64 Family 6 Model 23 Stepping 6 AT/AT COMPATIBLE - Software: Windows Version 6.3 (Build 9600 Multiprocessor Free)
10.55.104.125 hosted.extranet.company.com (hosted.extranet.company.com) Microsoft xps125 72 day(s) 4 hour(s) and 57 min Hardware: Intel64 Family 6 Model 23 Stepping 6 AT/AT COMPATIBLE - Software: Windows Version 6.3 (Build 9600 Multiprocessor Free)
10.55.104.140 Network Appliance Corporation name 179 day(s) 18 hour(s) and 40 min NetApp Release 8.1.1P1 7-Mode: Tue Aug 21 16:54:20 PDT 2011
10.55.104.144 Network Appliance Corporation name 3 day(s) 5 hour(s) and 46 min NetApp Release 8.1.1P1 7-Mode: Tue Aug 21 16:54:20 PDT 2011
10.55.104.204 hosted.extranet.company.com (hosted.extranet.company.com) TU Braunschweig Linksys3Name 6 day(s) 3 hour(s) and 10 min Linux (none) 2.4.20 mips
Databases

This chapter shows the list of discovered databases. They are listed based on the assumption that all databases use their default TCP ports.

Overview
Database type Count
Microsoft SQL 1
Oracle 1
MySQL 38
PostgreSQL -
DB2 (pre-version 8) -
DB2 (version 8 and later) -
MongoDB 2
Sybase -
Teradata -
TOTAL 42
Microsoft SQL databases

Microsoft SQL Server is a relational database management system developed by Microsoft.

# Node Name DNS Name
1 10.55.104.137 hosted.extranet.company.com hosted.extranet.company.com
Oracle databases

Oracle Database (commonly referred to as Oracle RDBMS or simply as Oracle) is an object-relational database management system[3] produced and marketed by Oracle Corporation.

# Node Name DNS Name
1 10.55.104.50 astra02.extranet.company.com astra02.extranet.company.com
MySQL databases

MySQL is a relational database management system (RDBMS) with open source code; it is the most widely used open-source database.

# Node Name DNS Name
1 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
2 10.55.104.20 server02.internal.company.com server02.internal.company.com
3 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
4 10.55.104.23 hosted.internal.company.com hosted.internal.company.com
5 10.55.104.24 mox.extranet.company.com mox.extranet.company.com
6 10.55.104.41 hosted.internal.company.com hosted.internal.company.com
7 10.55.104.44 hosted.internal.company.com hosted.internal.company.com
8 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
9 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
10 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
11 10.55.104.53 ip53.mox.extranet.company.com ip53.mox.extranet.company.com
12 10.55.104.54 ip54.mox.extranet.company.com ip54.mox.extranet.company.com
13 10.55.104.55 ip55.mox.extranet.company.com ip55.mox.extranet.company.com
14 10.55.104.65 server03.internal.company.com server03.internal.company.com
15 10.55.104.66 server03.internal.company.com server03.internal.company.com
16 10.55.104.70 monitor01.internal.company.com monitor01.internal.company.com
17 10.55.104.71 hosted.internal.company.com hosted.internal.company.com
18 10.55.104.88 hosted.extranet.company.com hosted.extranet.company.com
19 10.55.104.90 rbmedia02.extranet.company.com rbmedia02.extranet.company.com
20 10.55.104.93 sh05.extranet.company.com sh05.extranet.company.com
21 10.55.104.94 sh06.extranet.company.com sh06.extranet.company.com
22 10.55.104.107 sh07.extranet.company.com sh07.extranet.company.com
23 10.55.104.108 siena01.extranet.company.com siena01.extranet.company.com
24 10.55.104.109 hosted.extranet.company.com hosted.extranet.company.com
25 10.55.104.116 bukhara01.extranet.company.com bukhara01.extranet.company.com
26 10.55.104.122 hosted.extranet.company.com hosted.extranet.company.com
27 10.55.104.127 hosted.extranet.company.com hosted.extranet.company.com
28 10.55.104.133 hosted.extranet.company.com hosted.extranet.company.com
29 10.55.104.138 hosted.extranet.company.com hosted.extranet.company.com
30 10.55.104.144
31 10.55.104.148 pathway04.extranet.company.com pathway04.extranet.company.com
32 10.55.104.149 sh05.extranet.company.com sh05.extranet.company.com
33 10.55.104.150 sh06.extranet.company.com sh06.extranet.company.com
34 10.55.104.154 hosted.extranet.company.com hosted.extranet.company.com
35 10.55.104.155 hosted.extranet.company.com hosted.extranet.company.com
36 10.55.104.156 hosted.extranet.company.com hosted.extranet.company.com
37 10.55.104.160 hosted.extranet.company.com hosted.extranet.company.com
38 10.55.104.161 hosted.extranet.company.com hosted.extranet.company.com
MongoDB databases

MongoDB (from humongous) is a cross-platform document-oriented database. Classified as a NoSQL database, MongoDB eschews the traditional table-based relational database structure in favor of JSON-like documents with dynamic schemas (MongoDB calls the format BSON), making the integration of data in certain types of applications easier and faster. MongoDB is free and open-source software.

# Node Name DNS Name
1 10.55.104.51 php4.extranet.company.com php4.extranet.company.com
2 10.55.104.52 vps03.extranet.company.com vps03.extranet.company.com
Domain Controllers

This chapter shows the list of discovered Domain Controllers. On Microsoft Servers, a domain controller (DC) is a server that responds to security authentication requests (logging in, checking permissions, etc.) within the Windows Server domain.

# Node Name DNS Name
1 10.55.104.98 hosted.extranet.company.com hosted.extranet.company.com
2 10.55.104.99 hosted.extranet.company.com hosted.extranet.company.com
VMware ESXi servers

This chapter shows the list of discovered VMware ESXi servers. VMware ESXi (formerly ESX) is an enterprise-class, type-1 hypervisor developed by VMware for deploying and serving virtual computers. ESX runs on bare metal (without running an operating system) unlike other VMware products.

# Node Name DNS Name
1 10.55.104.40 vps02.internal.company.com vps02.internal.company.com
2 10.55.104.58 kyoto01.extranet.company.com kyoto01.extranet.company.com
3 10.55.104.113 hosted.extranet.company.com hosted.extranet.company.com
4 10.55.104.114 hosted.extranet.company.com hosted.extranet.company.com
5 10.55.104.119 hosted.extranet.company.com hosted.extranet.company.com
6 10.55.104.130 hosted.extranet.company.com hosted.extranet.company.com
7 10.55.104.145 legacy-x.company.com
File Shares

This chapter shows the list of discovered file shares. The Common Internet File System (CIFS) is the standard way that computer users share files across corporate intranets and the Internet. An enhanced version of the Microsoft open, cross-platform Server Message Block (SMB) protocol, CIFS is a native file-sharing protocol in Windows and is supported by many other operating systems.

# Node Name DNS Name
1 10.55.104.98 hosted.extranet.company.com hosted.extranet.company.com
2 10.55.104.99 hosted.extranet.company.com hosted.extranet.company.com
3 10.55.104.118 airfleet03.extranet.company.com airfleet03.extranet.company.com
4 10.55.104.119 hosted.extranet.company.com hosted.extranet.company.com
5 10.55.104.121 hosted.extranet.company.com hosted.extranet.company.com
6 10.55.104.122 hosted.extranet.company.com hosted.extranet.company.com
7 10.55.104.125 hosted.extranet.company.com hosted.extranet.company.com
DNS Servers

This chapter shows the list of discovered DNS servers. The most important function of Domain Name System (DNS) servers is the translation (resolution) of human-memorable domain names and hostnames into the corresponding numeric Internet Protocol (IP) addresses.

# Node Name DNS Name
1 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
2 10.55.104.20 server02.internal.company.com server02.internal.company.com
3 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
4 10.55.104.23 hosted.internal.company.com hosted.internal.company.com
5 10.55.104.44 hosted.internal.company.com hosted.internal.company.com
6 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
7 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
8 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
9 10.55.104.65 server03.internal.company.com server03.internal.company.com
10 10.55.104.66 server03.internal.company.com server03.internal.company.com
11 10.55.104.93 sh05.extranet.company.com sh05.extranet.company.com
12 10.55.104.94 sh06.extranet.company.com sh06.extranet.company.com
13 10.55.104.98 hosted.extranet.company.com hosted.extranet.company.com
14 10.55.104.99 hosted.extranet.company.com hosted.extranet.company.com
15 10.55.104.104 airfleet02.extranet.company.com airfleet02.extranet.company.com
16 10.55.104.107 sh07.extranet.company.com sh07.extranet.company.com
17 10.55.104.109 hosted.extranet.company.com hosted.extranet.company.com
18 10.55.104.116 bukhara01.extranet.company.com bukhara01.extranet.company.com
19 10.55.104.118 airfleet03.extranet.company.com airfleet03.extranet.company.com
20 10.55.104.121 hosted.extranet.company.com hosted.extranet.company.com
21 10.55.104.122 hosted.extranet.company.com hosted.extranet.company.com
22 10.55.104.133 hosted.extranet.company.com hosted.extranet.company.com
23 10.55.104.138 hosted.extranet.company.com hosted.extranet.company.com
24 10.55.104.148 pathway04.extranet.company.com pathway04.extranet.company.com
25 10.55.104.149 sh05.extranet.company.com sh05.extranet.company.com
26 10.55.104.150 sh06.extranet.company.com sh06.extranet.company.com
27 10.55.104.154 hosted.extranet.company.com hosted.extranet.company.com
28 10.55.104.155 hosted.extranet.company.com hosted.extranet.company.com
29 10.55.104.160 hosted.extranet.company.com hosted.extranet.company.com
Security vulnerabilities

This chapter shows the list of discovered security vulnerabilities. In order to detect them you need to scan for as many TCP ports as possible, otherwise most of running services and security issues will go unnoticed.

Overview

Recommendation Applicable to # of nodes
Replace Telnet with secure alternative 2
Replace FTP with secure alternative 38
Replace Remote Shell with secure alternative 1
Replace SNMPv1/2 with secure SNMPv3 9
Disable POP3 35
Disable IMAP 26
Replace IMAP with secure alternative 11
Disable LDAP 1
Replace LDAP with secure alternative 2
Consider disabling HTTP 57
Are you a security wizard and know how to improve and expand this section? Tell us and enjoy the result!

Replace Telnet with secure alternative

This chapter lists the nodes that use Telnet protocol.

Telnet is highly insecure protocol that provides virtual terminal connection to the remote host; it does not encrypt any data sent over the connection (including passwords).

Secure Shell (SSH) protocol is the secure alternative to Telnet. It supports authentication and encryption of all data sent over the connection.

Recommendation: On the following nodes, replace Telnet with its secure alternative, SSH protocol.

# Node Name DNS Name
1 10.55.104.16 pdu03.extranet.company.com pdu03.extranet.company.com
2 10.55.104.60 switch01.internal.company.com switch01.internal.company.com

Replace FTP with secure alternative

This chapter lists the nodes that use FTP protocol.

The File Transfer Protocol (FTP) is a standard network protocol used to transfer computer files from one host to another host over the network. FTP was not designed to be a secure protocol, and has many security weaknesses.

Recommendation: On the following nodes, replace FTP protocol with one of its secure alternatives, for example FTPS, SFTP, or FTP over SSH protocols.

# Node Name DNS Name
1 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
2 10.55.104.16 pdu03.extranet.company.com pdu03.extranet.company.com
3 10.55.104.20 server02.internal.company.com server02.internal.company.com
4 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
5 10.55.104.23 hosted.internal.company.com hosted.internal.company.com
6 10.55.104.24 mox.extranet.company.com mox.extranet.company.com
7 10.55.104.44 hosted.internal.company.com hosted.internal.company.com
8 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
9 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
10 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
11 10.55.104.53 ip53.mox.extranet.company.com ip53.mox.extranet.company.com
12 10.55.104.54 ip54.mox.extranet.company.com ip54.mox.extranet.company.com
13 10.55.104.55 ip55.mox.extranet.company.com ip55.mox.extranet.company.com
14 10.55.104.65 server03.internal.company.com server03.internal.company.com
15 10.55.104.66 server03.internal.company.com server03.internal.company.com
16 10.55.104.71 hosted.internal.company.com hosted.internal.company.com
17 10.55.104.88 hosted.extranet.company.com hosted.extranet.company.com
18 10.55.104.90 rbmedia02.extranet.company.com rbmedia02.extranet.company.com
19 10.55.104.93 sh05.extranet.company.com sh05.extranet.company.com
20 10.55.104.94 sh06.extranet.company.com sh06.extranet.company.com
21 10.55.104.107 sh07.extranet.company.com sh07.extranet.company.com
22 10.55.104.108 siena01.extranet.company.com siena01.extranet.company.com
23 10.55.104.109 hosted.extranet.company.com hosted.extranet.company.com
24 10.55.104.116 bukhara01.extranet.company.com bukhara01.extranet.company.com
25 10.55.104.122 hosted.extranet.company.com hosted.extranet.company.com
26 10.55.104.127 hosted.extranet.company.com hosted.extranet.company.com
27 10.55.104.129 hosted.extranet.company.com hosted.extranet.company.com
28 10.55.104.133 hosted.extranet.company.com hosted.extranet.company.com
29 10.55.104.134 hosted.extranet.company.com hosted.extranet.company.com
30 10.55.104.136 hosted.extranet.company.com hosted.extranet.company.com
31 10.55.104.138 hosted.extranet.company.com hosted.extranet.company.com
32 10.55.104.148 pathway04.extranet.company.com pathway04.extranet.company.com
33 10.55.104.149 sh05.extranet.company.com sh05.extranet.company.com
34 10.55.104.150 sh06.extranet.company.com sh06.extranet.company.com
35 10.55.104.154 hosted.extranet.company.com hosted.extranet.company.com
36 10.55.104.155 hosted.extranet.company.com hosted.extranet.company.com
37 10.55.104.160 hosted.extranet.company.com hosted.extranet.company.com
38 10.55.104.161 hosted.extranet.company.com hosted.extranet.company.com

Replace Remote Shell with secure alternative

This chapter lists the nodes that use RShell protocol.

Remote Shell (rsh) is a command line computer program that can execute shell commands as another user, and on another computer across a computer network. RShell sends unencrypted information over the network.

Secure Shell (SSH) protocol is the secure alternative to RShell. It supports authentication and encryption of all data sent over the connection.

Recommendation: On the following nodes, replace RShell with its secure alternative, SSH protocol.

# Node Name DNS Name
1 10.55.104.92 monitor02.extranet.company.com monitor02.extranet.company.com

Replace SNMPv1/2 with secure SNMPv3

This chapter lists the nodes that use SNMPv1 or SNMPv2 protocols.

SNMP is an Internet-standard protocol for managing devices on IP networks. Earlier version of SNMP (v1 and v2) lack security features, such as advanced authentication and encryption.

SNMP version 3 addresses many security weaknesses and provides the reliable way to manage network devices. Note that SNMPv3 has several security modes that provide different level of protection of your data; it is recommended to use the "authPriv" mode that uses both strong authentication and encryption.

Recommendation: On the following nodes, replace SNMPv1/2 with SNMPv3

# Node Name DNS Name
1 10.55.104.1 router03.extranet.company.com router03.extranet.company.com
2 10.55.104.61 in101.spamfilter01.internal.com in101.spamfilter01.internal.com
3 10.55.104.62 in102.spamfilter02.internal.com in102.spamfilter02.internal.com
4 10.55.104.118 airfleet03.extranet.company.com airfleet03.extranet.company.com
5 10.55.104.119 hosted.extranet.company.com hosted.extranet.company.com
6 10.55.104.121 hosted.extranet.company.com hosted.extranet.company.com
7 10.55.104.122 hosted.extranet.company.com hosted.extranet.company.com
8 10.55.104.125 hosted.extranet.company.com hosted.extranet.company.com
9 10.55.104.204 hosted.extranet.company.com hosted.extranet.company.com

Disable POP3

This chapter lists the nodes that use both POP3 and POP3S protocol.

Post Office Protocol (POP3) is an application-layer Internet standard protocol used by local e-mail clients to retrieve e-mail from a remote server. POP3 does not protect the authentication credentials and does not encrypt the connection.

Secure POP3 (POP3S) is an encrypted version of POP3 protocol.

Recommendation: On the following nodes, disable POP3 and continue to use POP3S protocol.

# Node Name DNS Name
1 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
2 10.55.104.20 server02.internal.company.com server02.internal.company.com
3 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
4 10.55.104.23 hosted.internal.company.com hosted.internal.company.com
5 10.55.104.24 mox.extranet.company.com mox.extranet.company.com
6 10.55.104.44 hosted.internal.company.com hosted.internal.company.com
7 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
8 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
9 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
10 10.55.104.53 ip53.mox.extranet.company.com ip53.mox.extranet.company.com
11 10.55.104.54 ip54.mox.extranet.company.com ip54.mox.extranet.company.com
12 10.55.104.55 ip55.mox.extranet.company.com ip55.mox.extranet.company.com
13 10.55.104.65 server03.internal.company.com server03.internal.company.com
14 10.55.104.66 server03.internal.company.com server03.internal.company.com
15 10.55.104.88 hosted.extranet.company.com hosted.extranet.company.com
16 10.55.104.90 rbmedia02.extranet.company.com rbmedia02.extranet.company.com
17 10.55.104.93 sh05.extranet.company.com sh05.extranet.company.com
18 10.55.104.94 sh06.extranet.company.com sh06.extranet.company.com
19 10.55.104.104 airfleet02.extranet.company.com airfleet02.extranet.company.com
20 10.55.104.107 sh07.extranet.company.com sh07.extranet.company.com
21 10.55.104.108 siena01.extranet.company.com siena01.extranet.company.com
22 10.55.104.109 hosted.extranet.company.com hosted.extranet.company.com
23 10.55.104.116 bukhara01.extranet.company.com bukhara01.extranet.company.com
24 10.55.104.121 hosted.extranet.company.com hosted.extranet.company.com
25 10.55.104.122 hosted.extranet.company.com hosted.extranet.company.com
26 10.55.104.127 hosted.extranet.company.com hosted.extranet.company.com
27 10.55.104.133 hosted.extranet.company.com hosted.extranet.company.com
28 10.55.104.138 hosted.extranet.company.com hosted.extranet.company.com
29 10.55.104.148 pathway04.extranet.company.com pathway04.extranet.company.com
30 10.55.104.149 sh05.extranet.company.com sh05.extranet.company.com
31 10.55.104.150 sh06.extranet.company.com sh06.extranet.company.com
32 10.55.104.154 hosted.extranet.company.com hosted.extranet.company.com
33 10.55.104.155 hosted.extranet.company.com hosted.extranet.company.com
34 10.55.104.160 hosted.extranet.company.com hosted.extranet.company.com
35 10.55.104.161 hosted.extranet.company.com hosted.extranet.company.com

Disable IMAP

This chapter lists the nodes that use both IMAP and IMAPS protocols simultaneously.

Internet Message Access Protocol (IMAP) is an application-layer Internet standard protocol used by local e-mail clients to retrieve e-mail from a remote server. The standard implementation of IMAP does not encrypt the data sent over the network.

IMAP over SSL (IMAPS) provides the same functionality, but adds the encryption for all data being transmitted.

Recommendation: On the following nodes, disable IMAP and continue using IMAPS protocol.

# Node Name DNS Name
1 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
2 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
3 10.55.104.23 hosted.internal.company.com hosted.internal.company.com
4 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
5 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
6 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
7 10.55.104.61 in101.spamfilter01.internal.com in101.spamfilter01.internal.com
8 10.55.104.62 in102.spamfilter02.internal.com in102.spamfilter02.internal.com
9 10.55.104.65 server03.internal.company.com server03.internal.company.com
10 10.55.104.66 server03.internal.company.com server03.internal.company.com
11 10.55.104.93 sh05.extranet.company.com sh05.extranet.company.com
12 10.55.104.94 sh06.extranet.company.com sh06.extranet.company.com
13 10.55.104.104 airfleet02.extranet.company.com airfleet02.extranet.company.com
14 10.55.104.107 sh07.extranet.company.com sh07.extranet.company.com
15 10.55.104.109 hosted.extranet.company.com hosted.extranet.company.com
16 10.55.104.116 bukhara01.extranet.company.com bukhara01.extranet.company.com
17 10.55.104.121 hosted.extranet.company.com hosted.extranet.company.com
18 10.55.104.122 hosted.extranet.company.com hosted.extranet.company.com
19 10.55.104.133 hosted.extranet.company.com hosted.extranet.company.com
20 10.55.104.138 hosted.extranet.company.com hosted.extranet.company.com
21 10.55.104.148 pathway04.extranet.company.com pathway04.extranet.company.com
22 10.55.104.149 sh05.extranet.company.com sh05.extranet.company.com
23 10.55.104.150 sh06.extranet.company.com sh06.extranet.company.com
24 10.55.104.154 hosted.extranet.company.com hosted.extranet.company.com
25 10.55.104.155 hosted.extranet.company.com hosted.extranet.company.com
26 10.55.104.160 hosted.extranet.company.com hosted.extranet.company.com

Replace IMAP with secure alternative

This chapter lists the nodes that use IMAP protocol.

Internet Message Access Protocol (IMAP) is an application-layer Internet standard protocol used by local e-mail clients to retrieve e-mail from a remote server. The standard implementation of IMAP does not encrypt the data sent over the network.

IMAP over SSL (IMAPS) provides the same functionality, but adds the encryption for all data being transmitted.

Recommendation: On the following nodes, replace IMAP with IMAPS protocol.

# Node Name DNS Name
1 10.55.104.20 server02.internal.company.com server02.internal.company.com
2 10.55.104.24 mox.extranet.company.com mox.extranet.company.com
3 10.55.104.44 hosted.internal.company.com hosted.internal.company.com
4 10.55.104.53 ip53.mox.extranet.company.com ip53.mox.extranet.company.com
5 10.55.104.54 ip54.mox.extranet.company.com ip54.mox.extranet.company.com
6 10.55.104.55 ip55.mox.extranet.company.com ip55.mox.extranet.company.com
7 10.55.104.88 hosted.extranet.company.com hosted.extranet.company.com
8 10.55.104.90 rbmedia02.extranet.company.com rbmedia02.extranet.company.com
9 10.55.104.108 siena01.extranet.company.com siena01.extranet.company.com
10 10.55.104.127 hosted.extranet.company.com hosted.extranet.company.com
11 10.55.104.161 hosted.extranet.company.com hosted.extranet.company.com

Disable LDAP

This chapter lists the nodes that use both LDAP and LDAPS protocols simultaneously.

The Lightweight Directory Access Protocol (LDAP) is an open, vendor-neutral, industry standard application protocol for accessing and maintaining distributed directory information services over IP network. LDAP does not encrypt the data sent over the network.

LDAP over SSL (LDAPS) provides the same functionality, but adds the encryption for all data being transmitted.

Recommendation: On the following nodes, disable LDAP and contunue to use LDAPS protocol.

# Node Name DNS Name
1 10.55.104.129 hosted.extranet.company.com hosted.extranet.company.com

Replace LDAP with secure alternative

This chapter lists the nodes that use LDAP protocol.

The Lightweight Directory Access Protocol (LDAP) is an open, vendor-neutral, industry standard application protocol for accessing and maintaining distributed directory information services over IP network. LDAP does not encrypt the data sent over the network.

Recommendation: On the following nodes, replace LDAP wiht its security alternative, LDAPS protocol.

# Node Name DNS Name
1 10.55.104.98 hosted.extranet.company.com hosted.extranet.company.com
2 10.55.104.99 hosted.extranet.company.com hosted.extranet.company.com

Consider disabling HTTP

This chapter lists the nodes that use both HTTP and HTTPS protocols simultaneously.

The Hypertext Transfer Protocol (HTTP) is an application protocol for distributed, collaborative, hypermedia information systems. However, HTTP does not provide any encryption means for the data being transmitted.

HTTPS (also called HTTP over TLS, HTTP over SSL, and HTTP Secure) consists of communication over HTTP within an encrypted connection

Recommendation: Many nodes use both protocols simultaneously for redirecting HTTP traffic to HTTPS. However on some of them it might be recommended to disable HTTP and continue using HTTPS protocol only.

# Node Name DNS Name
1 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
2 10.55.104.16 pdu03.extranet.company.com pdu03.extranet.company.com
3 10.55.104.20 server02.internal.company.com server02.internal.company.com
4 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
5 10.55.104.23 hosted.internal.company.com hosted.internal.company.com
6 10.55.104.24 mox.extranet.company.com mox.extranet.company.com
7 10.55.104.40 vps02.internal.company.com vps02.internal.company.com
8 10.55.104.41 hosted.internal.company.com hosted.internal.company.com
9 10.55.104.44 hosted.internal.company.com hosted.internal.company.com
10 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
11 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
12 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
13 10.55.104.53 ip53.mox.extranet.company.com ip53.mox.extranet.company.com
14 10.55.104.54 ip54.mox.extranet.company.com ip54.mox.extranet.company.com
15 10.55.104.55 ip55.mox.extranet.company.com ip55.mox.extranet.company.com
16 10.55.104.58 kyoto01.extranet.company.com kyoto01.extranet.company.com
17 10.55.104.61 in101.spamfilter01.internal.com in101.spamfilter01.internal.com
18 10.55.104.62 in102.spamfilter02.internal.com in102.spamfilter02.internal.com
19 10.55.104.65 server03.internal.company.com server03.internal.company.com
20 10.55.104.66 server03.internal.company.com server03.internal.company.com
21 10.55.104.70 monitor01.internal.company.com monitor01.internal.company.com
22 10.55.104.71 hosted.internal.company.com hosted.internal.company.com
23 10.55.104.88 hosted.extranet.company.com hosted.extranet.company.com
24 10.55.104.90 rbmedia02.extranet.company.com rbmedia02.extranet.company.com
25 10.55.104.93 sh05.extranet.company.com sh05.extranet.company.com
26 10.55.104.94 sh06.extranet.company.com sh06.extranet.company.com
27 10.55.104.96 brava02.extranet.company.com brava02.extranet.company.com
28 10.55.104.97 costa01.extranet.company.com costa01.extranet.company.com
29 10.55.104.104 airfleet02.extranet.company.com airfleet02.extranet.company.com
30 10.55.104.107 sh07.extranet.company.com sh07.extranet.company.com
31 10.55.104.108 siena01.extranet.company.com siena01.extranet.company.com
32 10.55.104.109 hosted.extranet.company.com hosted.extranet.company.com
33 10.55.104.113 hosted.extranet.company.com hosted.extranet.company.com
34 10.55.104.114 hosted.extranet.company.com hosted.extranet.company.com
35 10.55.104.116 bukhara01.extranet.company.com bukhara01.extranet.company.com
36 10.55.104.118 airfleet03.extranet.company.com airfleet03.extranet.company.com
37 10.55.104.119 hosted.extranet.company.com hosted.extranet.company.com
38 10.55.104.121 hosted.extranet.company.com hosted.extranet.company.com
39 10.55.104.122 hosted.extranet.company.com hosted.extranet.company.com
40 10.55.104.125 hosted.extranet.company.com hosted.extranet.company.com
41 10.55.104.127 hosted.extranet.company.com hosted.extranet.company.com
42 10.55.104.129 hosted.extranet.company.com hosted.extranet.company.com
43 10.55.104.130 hosted.extranet.company.com hosted.extranet.company.com
44 10.55.104.133 hosted.extranet.company.com hosted.extranet.company.com
45 10.55.104.134 hosted.extranet.company.com hosted.extranet.company.com
46 10.55.104.138 hosted.extranet.company.com hosted.extranet.company.com
47 10.55.104.140
48 10.55.104.144
49 10.55.104.145 legacy-x.company.com
50 10.55.104.148 pathway04.extranet.company.com pathway04.extranet.company.com
51 10.55.104.149 sh05.extranet.company.com sh05.extranet.company.com
52 10.55.104.150 sh06.extranet.company.com sh06.extranet.company.com
53 10.55.104.154 hosted.extranet.company.com hosted.extranet.company.com
54 10.55.104.155 hosted.extranet.company.com hosted.extranet.company.com
55 10.55.104.156 hosted.extranet.company.com hosted.extranet.company.com
56 10.55.104.160 hosted.extranet.company.com hosted.extranet.company.com
57 10.55.104.161 hosted.extranet.company.com hosted.extranet.company.com
Nodes down or with unknown status

This chapter provides the list of nodes that have the configured DNS name, but do not respond to discovery requests.

Typically, there would be two reasons for this situation:

  • The hode is temporarily down
  • The node has been removed from the network, but the DNS name was forgotten to be cleared

There are 13 nodes detected in this category.

# Node Name DNS Name
1 10.55.104.5 pdu01.extranet.company.com pdu01.extranet.company.com
2 10.55.104.6 pdu02.extranet.company.com pdu02.extranet.company.com
3 10.55.104.7 ns3.experimental.eu ns3.experimental.eu
4 10.55.104.8 hosted.extranet.company.com hosted.extranet.company.com
5 10.55.104.10 ip01.sd5.extranet.company.com ip01.sd5.extranet.company.com
6 10.55.104.11 ip02.sd5.extranet.company.com ip02.sd5.extranet.company.com
7 10.55.104.12 ip03.sd5.extranet.company.com ip03.sd5.extranet.company.com
8 10.55.104.13 ip04.sd5.extranet.company.com ip04.sd5.extranet.company.com
9 10.55.104.14 ip05.sd5.extranet.company.com ip05.sd5.extranet.company.com
10 10.55.104.50 astra02.extranet.company.com astra02.extranet.company.com
11 10.55.104.51 php4.extranet.company.com php4.extranet.company.com
12 10.55.104.52 vps03.extranet.company.com vps03.extranet.company.com
13 10.55.104.204 hosted.extranet.company.com hosted.extranet.company.com
All discovered services

This chapter provides the list of all discovered TCP services, giving you the precise operational status of active services.

In total, 48 TCP services were discovered on 83 devices.

# TCP Service Enabled on # of nodes
1 TCP port 21 (ftp) 38
2 TCP port 22 (ssh) 55
3 TCP port 23 (telnet) 2
4 TCP port 53 (domain) 29
5 TCP port 80 (http) 61
6 TCP port 88 (kerberos) 2
7 TCP port 110 (pop3) 35
8 TCP port 111 (sunrpc) 5
9 TCP port 139 (netbios-ssn) 2
10 TCP port 143 (imap) 37
11 TCP port 161 (snmp) 1
12 TCP port 389 (ldap) 3
13 TCP port 427 (svrloc) 4
14 TCP port 443 (https) 60
15 TCP port 445 (microsoft-ds) 7
16 TCP port 465 (urd) 2
17 TCP port 514 (shell) 1
18 TCP port 515 (printer) 1
19 TCP port 587 (submission) 9
20 TCP port 636 (ldaps) 1
21 TCP port 750 (rfile) 5
22 TCP port 873 (rsync) 1
23 TCP port 902 (ideafarm-door) 7
24 TCP port 993 (imaps) 26
25 TCP port 995 (pop3s) 35
26 TCP port 1433 (ms-sql-s) 1
27 TCP port 1521 (ncube-lm) 1
28 TCP port 1723 (pptp) 1
29 TCP port 2222 (EtherNet/IP-1) 36
30 TCP port 2525 (ms-v-worlds) 33
31 TCP port 2526 (ema-sent-lm) 7
32 TCP port 3306 (mysql) 38
33 TCP port 3389 (ms-wbt-server) 4
34 TCP port 5000 (commplex-main) 1
35 TCP port 5001 (commplex-link) 1
36 TCP port 5006 (wsm-server) 1
37 TCP port 5985 (wsman) 2
38 TCP port 5986 (wsmans) 5
39 TCP port 5989 (wbem-https) 7
40 TCP port 6602 (wsscomfrmwk) 1
41 TCP port 8000 (irdmi) 7
42 TCP port 8080 (http-alt) 1
43 TCP port 8100 (xprint-server) 7
44 TCP port 9090 (websm) 1
45 TCP port 10050 (zabbix-agent) 37
46 TCP port 10051 (zabbix-trapper) 4
47 TCP port 27017 2
48 TCP port 47001 (winrm) 2
TCP service groups

This chapter groups network nodes by the TCP Service that runs on them. It allows you to see which nodes perform a particular function on your network, putting guesswork aside.

TCP Service 21 (ftp)

Service description : File Transfer [Control]

More details on the utilization and abuse of port 21

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
2 10.55.104.16 pdu03.extranet.company.com pdu03.extranet.company.com
3 10.55.104.20 server02.internal.company.com server02.internal.company.com
4 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
5 10.55.104.23 hosted.internal.company.com hosted.internal.company.com
6 10.55.104.24 mox.extranet.company.com mox.extranet.company.com
7 10.55.104.44 hosted.internal.company.com hosted.internal.company.com
8 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
9 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
10 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
11 10.55.104.53 ip53.mox.extranet.company.com ip53.mox.extranet.company.com
12 10.55.104.54 ip54.mox.extranet.company.com ip54.mox.extranet.company.com
13 10.55.104.55 ip55.mox.extranet.company.com ip55.mox.extranet.company.com
14 10.55.104.65 server03.internal.company.com server03.internal.company.com
15 10.55.104.66 server03.internal.company.com server03.internal.company.com
16 10.55.104.71 hosted.internal.company.com hosted.internal.company.com
17 10.55.104.88 hosted.extranet.company.com hosted.extranet.company.com
18 10.55.104.90 rbmedia02.extranet.company.com rbmedia02.extranet.company.com
19 10.55.104.93 sh05.extranet.company.com sh05.extranet.company.com
20 10.55.104.94 sh06.extranet.company.com sh06.extranet.company.com
21 10.55.104.107 sh07.extranet.company.com sh07.extranet.company.com
22 10.55.104.108 siena01.extranet.company.com siena01.extranet.company.com
23 10.55.104.109 hosted.extranet.company.com hosted.extranet.company.com
24 10.55.104.116 bukhara01.extranet.company.com bukhara01.extranet.company.com
25 10.55.104.122 hosted.extranet.company.com hosted.extranet.company.com
26 10.55.104.127 hosted.extranet.company.com hosted.extranet.company.com
27 10.55.104.129 hosted.extranet.company.com hosted.extranet.company.com
28 10.55.104.133 hosted.extranet.company.com hosted.extranet.company.com
29 10.55.104.134 hosted.extranet.company.com hosted.extranet.company.com
30 10.55.104.136 hosted.extranet.company.com hosted.extranet.company.com
31 10.55.104.138 hosted.extranet.company.com hosted.extranet.company.com
32 10.55.104.148 pathway04.extranet.company.com pathway04.extranet.company.com
33 10.55.104.149 sh05.extranet.company.com sh05.extranet.company.com
34 10.55.104.150 sh06.extranet.company.com sh06.extranet.company.com
35 10.55.104.154 hosted.extranet.company.com hosted.extranet.company.com
36 10.55.104.155 hosted.extranet.company.com hosted.extranet.company.com
37 10.55.104.160 hosted.extranet.company.com hosted.extranet.company.com
38 10.55.104.161 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 22 (ssh)

Service description : The Secure Shell (SSH) Protocol

More details on the utilization and abuse of port 22

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.9 fw01.extranet.company.com fw01.extranet.company.com
2 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
3 10.55.104.20 server02.internal.company.com server02.internal.company.com
4 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
5 10.55.104.23 hosted.internal.company.com hosted.internal.company.com
6 10.55.104.24 mox.extranet.company.com mox.extranet.company.com
7 10.55.104.40 vps02.internal.company.com vps02.internal.company.com
8 10.55.104.41 hosted.internal.company.com hosted.internal.company.com
9 10.55.104.44 hosted.internal.company.com hosted.internal.company.com
10 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
11 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
12 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
13 10.55.104.53 ip53.mox.extranet.company.com ip53.mox.extranet.company.com
14 10.55.104.54 ip54.mox.extranet.company.com ip54.mox.extranet.company.com
15 10.55.104.55 ip55.mox.extranet.company.com ip55.mox.extranet.company.com
16 10.55.104.58 kyoto01.extranet.company.com kyoto01.extranet.company.com
17 10.55.104.61 in101.spamfilter01.internal.com in101.spamfilter01.internal.com
18 10.55.104.62 in102.spamfilter02.internal.com in102.spamfilter02.internal.com
19 10.55.104.65 server03.internal.company.com server03.internal.company.com
20 10.55.104.66 server03.internal.company.com server03.internal.company.com
21 10.55.104.70 monitor01.internal.company.com monitor01.internal.company.com
22 10.55.104.71 hosted.internal.company.com hosted.internal.company.com
23 10.55.104.88 hosted.extranet.company.com hosted.extranet.company.com
24 10.55.104.90 rbmedia02.extranet.company.com rbmedia02.extranet.company.com
25 10.55.104.92 monitor02.extranet.company.com monitor02.extranet.company.com
26 10.55.104.93 sh05.extranet.company.com sh05.extranet.company.com
27 10.55.104.94 sh06.extranet.company.com sh06.extranet.company.com
28 10.55.104.104 airfleet02.extranet.company.com airfleet02.extranet.company.com
29 10.55.104.107 sh07.extranet.company.com sh07.extranet.company.com
30 10.55.104.108 siena01.extranet.company.com siena01.extranet.company.com
31 10.55.104.109 hosted.extranet.company.com hosted.extranet.company.com
32 10.55.104.111 mgt-fw01.extranet.company.com mgt-fw01.extranet.company.com
33 10.55.104.112 mgt-fw02.extranet.company.com mgt-fw02.extranet.company.com
34 10.55.104.113 hosted.extranet.company.com hosted.extranet.company.com
35 10.55.104.114 hosted.extranet.company.com hosted.extranet.company.com
36 10.55.104.116 bukhara01.extranet.company.com bukhara01.extranet.company.com
37 10.55.104.118 airfleet03.extranet.company.com airfleet03.extranet.company.com
38 10.55.104.119 hosted.extranet.company.com hosted.extranet.company.com
39 10.55.104.121 hosted.extranet.company.com hosted.extranet.company.com
40 10.55.104.122 hosted.extranet.company.com hosted.extranet.company.com
41 10.55.104.127 hosted.extranet.company.com hosted.extranet.company.com
42 10.55.104.130 hosted.extranet.company.com hosted.extranet.company.com
43 10.55.104.133 hosted.extranet.company.com hosted.extranet.company.com
44 10.55.104.134 hosted.extranet.company.com hosted.extranet.company.com
45 10.55.104.138 hosted.extranet.company.com hosted.extranet.company.com
46 10.55.104.144
47 10.55.104.145 legacy-x.company.com
48 10.55.104.148 pathway04.extranet.company.com pathway04.extranet.company.com
49 10.55.104.149 sh05.extranet.company.com sh05.extranet.company.com
50 10.55.104.150 sh06.extranet.company.com sh06.extranet.company.com
51 10.55.104.154 hosted.extranet.company.com hosted.extranet.company.com
52 10.55.104.155 hosted.extranet.company.com hosted.extranet.company.com
53 10.55.104.156 hosted.extranet.company.com hosted.extranet.company.com
54 10.55.104.160 hosted.extranet.company.com hosted.extranet.company.com
55 10.55.104.161 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 23 (telnet)

Service description : Telnet

More details on the utilization and abuse of port 23

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.16 pdu03.extranet.company.com pdu03.extranet.company.com
2 10.55.104.60 switch01.internal.company.com switch01.internal.company.com
TCP Service 53 (domain)

Service description : Domain Name Server

More details on the utilization and abuse of port 53

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
2 10.55.104.20 server02.internal.company.com server02.internal.company.com
3 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
4 10.55.104.23 hosted.internal.company.com hosted.internal.company.com
5 10.55.104.44 hosted.internal.company.com hosted.internal.company.com
6 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
7 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
8 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
9 10.55.104.65 server03.internal.company.com server03.internal.company.com
10 10.55.104.66 server03.internal.company.com server03.internal.company.com
11 10.55.104.93 sh05.extranet.company.com sh05.extranet.company.com
12 10.55.104.94 sh06.extranet.company.com sh06.extranet.company.com
13 10.55.104.98 hosted.extranet.company.com hosted.extranet.company.com
14 10.55.104.99 hosted.extranet.company.com hosted.extranet.company.com
15 10.55.104.104 airfleet02.extranet.company.com airfleet02.extranet.company.com
16 10.55.104.107 sh07.extranet.company.com sh07.extranet.company.com
17 10.55.104.109 hosted.extranet.company.com hosted.extranet.company.com
18 10.55.104.116 bukhara01.extranet.company.com bukhara01.extranet.company.com
19 10.55.104.118 airfleet03.extranet.company.com airfleet03.extranet.company.com
20 10.55.104.121 hosted.extranet.company.com hosted.extranet.company.com
21 10.55.104.122 hosted.extranet.company.com hosted.extranet.company.com
22 10.55.104.133 hosted.extranet.company.com hosted.extranet.company.com
23 10.55.104.138 hosted.extranet.company.com hosted.extranet.company.com
24 10.55.104.148 pathway04.extranet.company.com pathway04.extranet.company.com
25 10.55.104.149 sh05.extranet.company.com sh05.extranet.company.com
26 10.55.104.150 sh06.extranet.company.com sh06.extranet.company.com
27 10.55.104.154 hosted.extranet.company.com hosted.extranet.company.com
28 10.55.104.155 hosted.extranet.company.com hosted.extranet.company.com
29 10.55.104.160 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 80 (http)

Service description : World Wide Web HTTP

More details on the utilization and abuse of port 80

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
2 10.55.104.16 pdu03.extranet.company.com pdu03.extranet.company.com
3 10.55.104.20 server02.internal.company.com server02.internal.company.com
4 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
5 10.55.104.23 hosted.internal.company.com hosted.internal.company.com
6 10.55.104.24 mox.extranet.company.com mox.extranet.company.com
7 10.55.104.40 vps02.internal.company.com vps02.internal.company.com
8 10.55.104.41 hosted.internal.company.com hosted.internal.company.com
9 10.55.104.44 hosted.internal.company.com hosted.internal.company.com
10 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
11 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
12 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
13 10.55.104.53 ip53.mox.extranet.company.com ip53.mox.extranet.company.com
14 10.55.104.54 ip54.mox.extranet.company.com ip54.mox.extranet.company.com
15 10.55.104.55 ip55.mox.extranet.company.com ip55.mox.extranet.company.com
16 10.55.104.58 kyoto01.extranet.company.com kyoto01.extranet.company.com
17 10.55.104.60 switch01.internal.company.com switch01.internal.company.com
18 10.55.104.61 in101.spamfilter01.internal.com in101.spamfilter01.internal.com
19 10.55.104.62 in102.spamfilter02.internal.com in102.spamfilter02.internal.com
20 10.55.104.65 server03.internal.company.com server03.internal.company.com
21 10.55.104.66 server03.internal.company.com server03.internal.company.com
22 10.55.104.70 monitor01.internal.company.com monitor01.internal.company.com
23 10.55.104.71 hosted.internal.company.com hosted.internal.company.com
24 10.55.104.88 hosted.extranet.company.com hosted.extranet.company.com
25 10.55.104.90 rbmedia02.extranet.company.com rbmedia02.extranet.company.com
26 10.55.104.92 monitor02.extranet.company.com monitor02.extranet.company.com
27 10.55.104.93 sh05.extranet.company.com sh05.extranet.company.com
28 10.55.104.94 sh06.extranet.company.com sh06.extranet.company.com
29 10.55.104.96 brava02.extranet.company.com brava02.extranet.company.com
30 10.55.104.97 costa01.extranet.company.com costa01.extranet.company.com
31 10.55.104.104 airfleet02.extranet.company.com airfleet02.extranet.company.com
32 10.55.104.107 sh07.extranet.company.com sh07.extranet.company.com
33 10.55.104.108 siena01.extranet.company.com siena01.extranet.company.com
34 10.55.104.109 hosted.extranet.company.com hosted.extranet.company.com
35 10.55.104.113 hosted.extranet.company.com hosted.extranet.company.com
36 10.55.104.114 hosted.extranet.company.com hosted.extranet.company.com
37 10.55.104.116 bukhara01.extranet.company.com bukhara01.extranet.company.com
38 10.55.104.118 airfleet03.extranet.company.com airfleet03.extranet.company.com
39 10.55.104.119 hosted.extranet.company.com hosted.extranet.company.com
40 10.55.104.121 hosted.extranet.company.com hosted.extranet.company.com
41 10.55.104.122 hosted.extranet.company.com hosted.extranet.company.com
42 10.55.104.125 hosted.extranet.company.com hosted.extranet.company.com
43 10.55.104.127 hosted.extranet.company.com hosted.extranet.company.com
44 10.55.104.129 hosted.extranet.company.com hosted.extranet.company.com
45 10.55.104.130 hosted.extranet.company.com hosted.extranet.company.com
46 10.55.104.133 hosted.extranet.company.com hosted.extranet.company.com
47 10.55.104.134 hosted.extranet.company.com hosted.extranet.company.com
48 10.55.104.136 hosted.extranet.company.com hosted.extranet.company.com
49 10.55.104.137 hosted.extranet.company.com hosted.extranet.company.com
50 10.55.104.138 hosted.extranet.company.com hosted.extranet.company.com
51 10.55.104.140
52 10.55.104.144
53 10.55.104.145 legacy-x.company.com
54 10.55.104.148 pathway04.extranet.company.com pathway04.extranet.company.com
55 10.55.104.149 sh05.extranet.company.com sh05.extranet.company.com
56 10.55.104.150 sh06.extranet.company.com sh06.extranet.company.com
57 10.55.104.154 hosted.extranet.company.com hosted.extranet.company.com
58 10.55.104.155 hosted.extranet.company.com hosted.extranet.company.com
59 10.55.104.156 hosted.extranet.company.com hosted.extranet.company.com
60 10.55.104.160 hosted.extranet.company.com hosted.extranet.company.com
61 10.55.104.161 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 88 (kerberos)

Service description : Kerberos

More details on the utilization and abuse of port 88

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.98 hosted.extranet.company.com hosted.extranet.company.com
2 10.55.104.99 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 110 (pop3)

Service description : Post Office Protocol - Version 3

More details on the utilization and abuse of port 110

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
2 10.55.104.20 server02.internal.company.com server02.internal.company.com
3 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
4 10.55.104.23 hosted.internal.company.com hosted.internal.company.com
5 10.55.104.24 mox.extranet.company.com mox.extranet.company.com
6 10.55.104.44 hosted.internal.company.com hosted.internal.company.com
7 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
8 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
9 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
10 10.55.104.53 ip53.mox.extranet.company.com ip53.mox.extranet.company.com
11 10.55.104.54 ip54.mox.extranet.company.com ip54.mox.extranet.company.com
12 10.55.104.55 ip55.mox.extranet.company.com ip55.mox.extranet.company.com
13 10.55.104.65 server03.internal.company.com server03.internal.company.com
14 10.55.104.66 server03.internal.company.com server03.internal.company.com
15 10.55.104.88 hosted.extranet.company.com hosted.extranet.company.com
16 10.55.104.90 rbmedia02.extranet.company.com rbmedia02.extranet.company.com
17 10.55.104.93 sh05.extranet.company.com sh05.extranet.company.com
18 10.55.104.94 sh06.extranet.company.com sh06.extranet.company.com
19 10.55.104.104 airfleet02.extranet.company.com airfleet02.extranet.company.com
20 10.55.104.107 sh07.extranet.company.com sh07.extranet.company.com
21 10.55.104.108 siena01.extranet.company.com siena01.extranet.company.com
22 10.55.104.109 hosted.extranet.company.com hosted.extranet.company.com
23 10.55.104.116 bukhara01.extranet.company.com bukhara01.extranet.company.com
24 10.55.104.121 hosted.extranet.company.com hosted.extranet.company.com
25 10.55.104.122 hosted.extranet.company.com hosted.extranet.company.com
26 10.55.104.127 hosted.extranet.company.com hosted.extranet.company.com
27 10.55.104.133 hosted.extranet.company.com hosted.extranet.company.com
28 10.55.104.138 hosted.extranet.company.com hosted.extranet.company.com
29 10.55.104.148 pathway04.extranet.company.com pathway04.extranet.company.com
30 10.55.104.149 sh05.extranet.company.com sh05.extranet.company.com
31 10.55.104.150 sh06.extranet.company.com sh06.extranet.company.com
32 10.55.104.154 hosted.extranet.company.com hosted.extranet.company.com
33 10.55.104.155 hosted.extranet.company.com hosted.extranet.company.com
34 10.55.104.160 hosted.extranet.company.com hosted.extranet.company.com
35 10.55.104.161 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 111 (sunrpc)

Service description : SUN Remote Procedure Call

More details on the utilization and abuse of port 111

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
2 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
3 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
4 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
5 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
TCP Service 139 (netbios-ssn)

Service description : NETBIOS Session Service

More details on the utilization and abuse of port 139

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.98 hosted.extranet.company.com hosted.extranet.company.com
2 10.55.104.99 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 143 (imap)

Service description : Internet Message Access Protocol

More details on the utilization and abuse of port 143

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
2 10.55.104.20 server02.internal.company.com server02.internal.company.com
3 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
4 10.55.104.23 hosted.internal.company.com hosted.internal.company.com
5 10.55.104.24 mox.extranet.company.com mox.extranet.company.com
6 10.55.104.44 hosted.internal.company.com hosted.internal.company.com
7 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
8 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
9 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
10 10.55.104.53 ip53.mox.extranet.company.com ip53.mox.extranet.company.com
11 10.55.104.54 ip54.mox.extranet.company.com ip54.mox.extranet.company.com
12 10.55.104.55 ip55.mox.extranet.company.com ip55.mox.extranet.company.com
13 10.55.104.61 in101.spamfilter01.internal.com in101.spamfilter01.internal.com
14 10.55.104.62 in102.spamfilter02.internal.com in102.spamfilter02.internal.com
15 10.55.104.65 server03.internal.company.com server03.internal.company.com
16 10.55.104.66 server03.internal.company.com server03.internal.company.com
17 10.55.104.88 hosted.extranet.company.com hosted.extranet.company.com
18 10.55.104.90 rbmedia02.extranet.company.com rbmedia02.extranet.company.com
19 10.55.104.93 sh05.extranet.company.com sh05.extranet.company.com
20 10.55.104.94 sh06.extranet.company.com sh06.extranet.company.com
21 10.55.104.104 airfleet02.extranet.company.com airfleet02.extranet.company.com
22 10.55.104.107 sh07.extranet.company.com sh07.extranet.company.com
23 10.55.104.108 siena01.extranet.company.com siena01.extranet.company.com
24 10.55.104.109 hosted.extranet.company.com hosted.extranet.company.com
25 10.55.104.116 bukhara01.extranet.company.com bukhara01.extranet.company.com
26 10.55.104.121 hosted.extranet.company.com hosted.extranet.company.com
27 10.55.104.122 hosted.extranet.company.com hosted.extranet.company.com
28 10.55.104.127 hosted.extranet.company.com hosted.extranet.company.com
29 10.55.104.133 hosted.extranet.company.com hosted.extranet.company.com
30 10.55.104.138 hosted.extranet.company.com hosted.extranet.company.com
31 10.55.104.148 pathway04.extranet.company.com pathway04.extranet.company.com
32 10.55.104.149 sh05.extranet.company.com sh05.extranet.company.com
33 10.55.104.150 sh06.extranet.company.com sh06.extranet.company.com
34 10.55.104.154 hosted.extranet.company.com hosted.extranet.company.com
35 10.55.104.155 hosted.extranet.company.com hosted.extranet.company.com
36 10.55.104.160 hosted.extranet.company.com hosted.extranet.company.com
37 10.55.104.161 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 161 (snmp)

Service description : SNMP

More details on the utilization and abuse of port 161

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.71 hosted.internal.company.com hosted.internal.company.com
TCP Service 389 (ldap)

Service description : Lightweight Directory Access Protocol

More details on the utilization and abuse of port 389

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.98 hosted.extranet.company.com hosted.extranet.company.com
2 10.55.104.99 hosted.extranet.company.com hosted.extranet.company.com
3 10.55.104.129 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 427 (svrloc)

Service description : Server Location

More details on the utilization and abuse of port 427

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.40 vps02.internal.company.com vps02.internal.company.com
2 10.55.104.113 hosted.extranet.company.com hosted.extranet.company.com
3 10.55.104.130 hosted.extranet.company.com hosted.extranet.company.com
4 10.55.104.145 legacy-x.company.com
TCP Service 443 (https)

Service description : http protocol over TLS/SSL

More details on the utilization and abuse of port 443

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.9 fw01.extranet.company.com fw01.extranet.company.com
2 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
3 10.55.104.16 pdu03.extranet.company.com pdu03.extranet.company.com
4 10.55.104.20 server02.internal.company.com server02.internal.company.com
5 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
6 10.55.104.23 hosted.internal.company.com hosted.internal.company.com
7 10.55.104.24 mox.extranet.company.com mox.extranet.company.com
8 10.55.104.40 vps02.internal.company.com vps02.internal.company.com
9 10.55.104.41 hosted.internal.company.com hosted.internal.company.com
10 10.55.104.44 hosted.internal.company.com hosted.internal.company.com
11 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
12 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
13 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
14 10.55.104.53 ip53.mox.extranet.company.com ip53.mox.extranet.company.com
15 10.55.104.54 ip54.mox.extranet.company.com ip54.mox.extranet.company.com
16 10.55.104.55 ip55.mox.extranet.company.com ip55.mox.extranet.company.com
17 10.55.104.58 kyoto01.extranet.company.com kyoto01.extranet.company.com
18 10.55.104.61 in101.spamfilter01.internal.com in101.spamfilter01.internal.com
19 10.55.104.62 in102.spamfilter02.internal.com in102.spamfilter02.internal.com
20 10.55.104.65 server03.internal.company.com server03.internal.company.com
21 10.55.104.66 server03.internal.company.com server03.internal.company.com
22 10.55.104.70 monitor01.internal.company.com monitor01.internal.company.com
23 10.55.104.71 hosted.internal.company.com hosted.internal.company.com
24 10.55.104.88 hosted.extranet.company.com hosted.extranet.company.com
25 10.55.104.90 rbmedia02.extranet.company.com rbmedia02.extranet.company.com
26 10.55.104.93 sh05.extranet.company.com sh05.extranet.company.com
27 10.55.104.94 sh06.extranet.company.com sh06.extranet.company.com
28 10.55.104.96 brava02.extranet.company.com brava02.extranet.company.com
29 10.55.104.97 costa01.extranet.company.com costa01.extranet.company.com
30 10.55.104.104 airfleet02.extranet.company.com airfleet02.extranet.company.com
31 10.55.104.107 sh07.extranet.company.com sh07.extranet.company.com
32 10.55.104.108 siena01.extranet.company.com siena01.extranet.company.com
33 10.55.104.109 hosted.extranet.company.com hosted.extranet.company.com
34 10.55.104.111 mgt-fw01.extranet.company.com mgt-fw01.extranet.company.com
35 10.55.104.112 mgt-fw02.extranet.company.com mgt-fw02.extranet.company.com
36 10.55.104.113 hosted.extranet.company.com hosted.extranet.company.com
37 10.55.104.114 hosted.extranet.company.com hosted.extranet.company.com
38 10.55.104.116 bukhara01.extranet.company.com bukhara01.extranet.company.com
39 10.55.104.118 airfleet03.extranet.company.com airfleet03.extranet.company.com
40 10.55.104.119 hosted.extranet.company.com hosted.extranet.company.com
41 10.55.104.121 hosted.extranet.company.com hosted.extranet.company.com
42 10.55.104.122 hosted.extranet.company.com hosted.extranet.company.com
43 10.55.104.125 hosted.extranet.company.com hosted.extranet.company.com
44 10.55.104.127 hosted.extranet.company.com hosted.extranet.company.com
45 10.55.104.129 hosted.extranet.company.com hosted.extranet.company.com
46 10.55.104.130 hosted.extranet.company.com hosted.extranet.company.com
47 10.55.104.133 hosted.extranet.company.com hosted.extranet.company.com
48 10.55.104.134 hosted.extranet.company.com hosted.extranet.company.com
49 10.55.104.138 hosted.extranet.company.com hosted.extranet.company.com
50 10.55.104.140
51 10.55.104.144
52 10.55.104.145 legacy-x.company.com
53 10.55.104.148 pathway04.extranet.company.com pathway04.extranet.company.com
54 10.55.104.149 sh05.extranet.company.com sh05.extranet.company.com
55 10.55.104.150 sh06.extranet.company.com sh06.extranet.company.com
56 10.55.104.154 hosted.extranet.company.com hosted.extranet.company.com
57 10.55.104.155 hosted.extranet.company.com hosted.extranet.company.com
58 10.55.104.156 hosted.extranet.company.com hosted.extranet.company.com
59 10.55.104.160 hosted.extranet.company.com hosted.extranet.company.com
60 10.55.104.161 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 445 (microsoft-ds)

Service description : Microsoft-DS

More details on the utilization and abuse of port 445

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.98 hosted.extranet.company.com hosted.extranet.company.com
2 10.55.104.99 hosted.extranet.company.com hosted.extranet.company.com
3 10.55.104.118 airfleet03.extranet.company.com airfleet03.extranet.company.com
4 10.55.104.119 hosted.extranet.company.com hosted.extranet.company.com
5 10.55.104.121 hosted.extranet.company.com hosted.extranet.company.com
6 10.55.104.122 hosted.extranet.company.com hosted.extranet.company.com
7 10.55.104.125 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 465 (urd)

Service description : URL Rendesvous Directory for SSM

More details on the utilization and abuse of port 465

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.61 in101.spamfilter01.internal.com in101.spamfilter01.internal.com
2 10.55.104.62 in102.spamfilter02.internal.com in102.spamfilter02.internal.com
TCP Service 514 (shell)

Service description : cmd like exec, but automatic authentication is performed as for login server

More details on the utilization and abuse of port 514

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.92 monitor02.extranet.company.com monitor02.extranet.company.com
TCP Service 515 (printer)

Service description : spooler

More details on the utilization and abuse of port 515

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.71 hosted.internal.company.com hosted.internal.company.com
TCP Service 587 (submission)

Service description : Message Submission

More details on the utilization and abuse of port 587

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
2 10.55.104.20 server02.internal.company.com server02.internal.company.com
3 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
4 10.55.104.44 hosted.internal.company.com hosted.internal.company.com
5 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
6 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
7 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
8 10.55.104.61 in101.spamfilter01.internal.com in101.spamfilter01.internal.com
9 10.55.104.62 in102.spamfilter02.internal.com in102.spamfilter02.internal.com
TCP Service 636 (ldaps)

Service description : ldap protocol over TLS/SSL (was sldap)

More details on the utilization and abuse of port 636

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.129 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 750 (rfile)

Service description :

More details on the utilization and abuse of port 750

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
2 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
3 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
4 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
5 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
TCP Service 873 (rsync)

Service description : rsync

More details on the utilization and abuse of port 873

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.71 hosted.internal.company.com hosted.internal.company.com
TCP Service 902 (ideafarm-door)

Service description : self documenting Telnet Door

More details on the utilization and abuse of port 902

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.40 vps02.internal.company.com vps02.internal.company.com
2 10.55.104.58 kyoto01.extranet.company.com kyoto01.extranet.company.com
3 10.55.104.113 hosted.extranet.company.com hosted.extranet.company.com
4 10.55.104.114 hosted.extranet.company.com hosted.extranet.company.com
5 10.55.104.119 hosted.extranet.company.com hosted.extranet.company.com
6 10.55.104.130 hosted.extranet.company.com hosted.extranet.company.com
7 10.55.104.145 legacy-x.company.com
TCP Service 993 (imaps)

Service description : imap4 protocol over TLS/SSL

More details on the utilization and abuse of port 993

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
2 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
3 10.55.104.23 hosted.internal.company.com hosted.internal.company.com
4 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
5 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
6 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
7 10.55.104.61 in101.spamfilter01.internal.com in101.spamfilter01.internal.com
8 10.55.104.62 in102.spamfilter02.internal.com in102.spamfilter02.internal.com
9 10.55.104.65 server03.internal.company.com server03.internal.company.com
10 10.55.104.66 server03.internal.company.com server03.internal.company.com
11 10.55.104.93 sh05.extranet.company.com sh05.extranet.company.com
12 10.55.104.94 sh06.extranet.company.com sh06.extranet.company.com
13 10.55.104.104 airfleet02.extranet.company.com airfleet02.extranet.company.com
14 10.55.104.107 sh07.extranet.company.com sh07.extranet.company.com
15 10.55.104.109 hosted.extranet.company.com hosted.extranet.company.com
16 10.55.104.116 bukhara01.extranet.company.com bukhara01.extranet.company.com
17 10.55.104.121 hosted.extranet.company.com hosted.extranet.company.com
18 10.55.104.122 hosted.extranet.company.com hosted.extranet.company.com
19 10.55.104.133 hosted.extranet.company.com hosted.extranet.company.com
20 10.55.104.138 hosted.extranet.company.com hosted.extranet.company.com
21 10.55.104.148 pathway04.extranet.company.com pathway04.extranet.company.com
22 10.55.104.149 sh05.extranet.company.com sh05.extranet.company.com
23 10.55.104.150 sh06.extranet.company.com sh06.extranet.company.com
24 10.55.104.154 hosted.extranet.company.com hosted.extranet.company.com
25 10.55.104.155 hosted.extranet.company.com hosted.extranet.company.com
26 10.55.104.160 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 995 (pop3s)

Service description : pop3 protocol over TLS/SSL (was spop3)

More details on the utilization and abuse of port 995

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
2 10.55.104.20 server02.internal.company.com server02.internal.company.com
3 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
4 10.55.104.23 hosted.internal.company.com hosted.internal.company.com
5 10.55.104.24 mox.extranet.company.com mox.extranet.company.com
6 10.55.104.44 hosted.internal.company.com hosted.internal.company.com
7 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
8 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
9 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
10 10.55.104.53 ip53.mox.extranet.company.com ip53.mox.extranet.company.com
11 10.55.104.54 ip54.mox.extranet.company.com ip54.mox.extranet.company.com
12 10.55.104.55 ip55.mox.extranet.company.com ip55.mox.extranet.company.com
13 10.55.104.65 server03.internal.company.com server03.internal.company.com
14 10.55.104.66 server03.internal.company.com server03.internal.company.com
15 10.55.104.88 hosted.extranet.company.com hosted.extranet.company.com
16 10.55.104.90 rbmedia02.extranet.company.com rbmedia02.extranet.company.com
17 10.55.104.93 sh05.extranet.company.com sh05.extranet.company.com
18 10.55.104.94 sh06.extranet.company.com sh06.extranet.company.com
19 10.55.104.104 airfleet02.extranet.company.com airfleet02.extranet.company.com
20 10.55.104.107 sh07.extranet.company.com sh07.extranet.company.com
21 10.55.104.108 siena01.extranet.company.com siena01.extranet.company.com
22 10.55.104.109 hosted.extranet.company.com hosted.extranet.company.com
23 10.55.104.116 bukhara01.extranet.company.com bukhara01.extranet.company.com
24 10.55.104.121 hosted.extranet.company.com hosted.extranet.company.com
25 10.55.104.122 hosted.extranet.company.com hosted.extranet.company.com
26 10.55.104.127 hosted.extranet.company.com hosted.extranet.company.com
27 10.55.104.133 hosted.extranet.company.com hosted.extranet.company.com
28 10.55.104.138 hosted.extranet.company.com hosted.extranet.company.com
29 10.55.104.148 pathway04.extranet.company.com pathway04.extranet.company.com
30 10.55.104.149 sh05.extranet.company.com sh05.extranet.company.com
31 10.55.104.150 sh06.extranet.company.com sh06.extranet.company.com
32 10.55.104.154 hosted.extranet.company.com hosted.extranet.company.com
33 10.55.104.155 hosted.extranet.company.com hosted.extranet.company.com
34 10.55.104.160 hosted.extranet.company.com hosted.extranet.company.com
35 10.55.104.161 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 1433 (ms-sql-s)

Service description : Microsoft-SQL-Server

More details on the utilization and abuse of port 1433

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.137 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 1521 (ncube-lm)

Service description : nCube License Manager

More details on the utilization and abuse of port 1521

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.50 astra02.extranet.company.com astra02.extranet.company.com
TCP Service 1723 (pptp)

Service description : pptp

More details on the utilization and abuse of port 1723

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.129 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 2222 (EtherNet/IP-1)

Service description : EtherNet/IP I/O

More details on the utilization and abuse of port 2222

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
2 10.55.104.20 server02.internal.company.com server02.internal.company.com
3 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
4 10.55.104.23 hosted.internal.company.com hosted.internal.company.com
5 10.55.104.24 mox.extranet.company.com mox.extranet.company.com
6 10.55.104.44 hosted.internal.company.com hosted.internal.company.com
7 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
8 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
9 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
10 10.55.104.53 ip53.mox.extranet.company.com ip53.mox.extranet.company.com
11 10.55.104.54 ip54.mox.extranet.company.com ip54.mox.extranet.company.com
12 10.55.104.55 ip55.mox.extranet.company.com ip55.mox.extranet.company.com
13 10.55.104.65 server03.internal.company.com server03.internal.company.com
14 10.55.104.66 server03.internal.company.com server03.internal.company.com
15 10.55.104.88 hosted.extranet.company.com hosted.extranet.company.com
16 10.55.104.90 rbmedia02.extranet.company.com rbmedia02.extranet.company.com
17 10.55.104.93 sh05.extranet.company.com sh05.extranet.company.com
18 10.55.104.94 sh06.extranet.company.com sh06.extranet.company.com
19 10.55.104.104 airfleet02.extranet.company.com airfleet02.extranet.company.com
20 10.55.104.107 sh07.extranet.company.com sh07.extranet.company.com
21 10.55.104.108 siena01.extranet.company.com siena01.extranet.company.com
22 10.55.104.109 hosted.extranet.company.com hosted.extranet.company.com
23 10.55.104.116 bukhara01.extranet.company.com bukhara01.extranet.company.com
24 10.55.104.118 airfleet03.extranet.company.com airfleet03.extranet.company.com
25 10.55.104.121 hosted.extranet.company.com hosted.extranet.company.com
26 10.55.104.122 hosted.extranet.company.com hosted.extranet.company.com
27 10.55.104.127 hosted.extranet.company.com hosted.extranet.company.com
28 10.55.104.133 hosted.extranet.company.com hosted.extranet.company.com
29 10.55.104.138 hosted.extranet.company.com hosted.extranet.company.com
30 10.55.104.148 pathway04.extranet.company.com pathway04.extranet.company.com
31 10.55.104.149 sh05.extranet.company.com sh05.extranet.company.com
32 10.55.104.150 sh06.extranet.company.com sh06.extranet.company.com
33 10.55.104.154 hosted.extranet.company.com hosted.extranet.company.com
34 10.55.104.155 hosted.extranet.company.com hosted.extranet.company.com
35 10.55.104.160 hosted.extranet.company.com hosted.extranet.company.com
36 10.55.104.161 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 2525 (ms-v-worlds)

Service description : MS V-Worlds

More details on the utilization and abuse of port 2525

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
2 10.55.104.20 server02.internal.company.com server02.internal.company.com
3 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
4 10.55.104.23 hosted.internal.company.com hosted.internal.company.com
5 10.55.104.24 mox.extranet.company.com mox.extranet.company.com
6 10.55.104.44 hosted.internal.company.com hosted.internal.company.com
7 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
8 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
9 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
10 10.55.104.53 ip53.mox.extranet.company.com ip53.mox.extranet.company.com
11 10.55.104.54 ip54.mox.extranet.company.com ip54.mox.extranet.company.com
12 10.55.104.55 ip55.mox.extranet.company.com ip55.mox.extranet.company.com
13 10.55.104.65 server03.internal.company.com server03.internal.company.com
14 10.55.104.66 server03.internal.company.com server03.internal.company.com
15 10.55.104.88 hosted.extranet.company.com hosted.extranet.company.com
16 10.55.104.90 rbmedia02.extranet.company.com rbmedia02.extranet.company.com
17 10.55.104.93 sh05.extranet.company.com sh05.extranet.company.com
18 10.55.104.94 sh06.extranet.company.com sh06.extranet.company.com
19 10.55.104.104 airfleet02.extranet.company.com airfleet02.extranet.company.com
20 10.55.104.107 sh07.extranet.company.com sh07.extranet.company.com
21 10.55.104.108 siena01.extranet.company.com siena01.extranet.company.com
22 10.55.104.109 hosted.extranet.company.com hosted.extranet.company.com
23 10.55.104.116 bukhara01.extranet.company.com bukhara01.extranet.company.com
24 10.55.104.121 hosted.extranet.company.com hosted.extranet.company.com
25 10.55.104.127 hosted.extranet.company.com hosted.extranet.company.com
26 10.55.104.133 hosted.extranet.company.com hosted.extranet.company.com
27 10.55.104.138 hosted.extranet.company.com hosted.extranet.company.com
28 10.55.104.149 sh05.extranet.company.com sh05.extranet.company.com
29 10.55.104.150 sh06.extranet.company.com sh06.extranet.company.com
30 10.55.104.154 hosted.extranet.company.com hosted.extranet.company.com
31 10.55.104.155 hosted.extranet.company.com hosted.extranet.company.com
32 10.55.104.160 hosted.extranet.company.com hosted.extranet.company.com
33 10.55.104.161 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 2526 (ema-sent-lm)

Service description : EMA License Manager

More details on the utilization and abuse of port 2526

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
2 10.55.104.20 server02.internal.company.com server02.internal.company.com
3 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
4 10.55.104.44 hosted.internal.company.com hosted.internal.company.com
5 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
6 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
7 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
TCP Service 3306 (mysql)

Service description : MySQL

More details on the utilization and abuse of port 3306

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
2 10.55.104.20 server02.internal.company.com server02.internal.company.com
3 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
4 10.55.104.23 hosted.internal.company.com hosted.internal.company.com
5 10.55.104.24 mox.extranet.company.com mox.extranet.company.com
6 10.55.104.41 hosted.internal.company.com hosted.internal.company.com
7 10.55.104.44 hosted.internal.company.com hosted.internal.company.com
8 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
9 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
10 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
11 10.55.104.53 ip53.mox.extranet.company.com ip53.mox.extranet.company.com
12 10.55.104.54 ip54.mox.extranet.company.com ip54.mox.extranet.company.com
13 10.55.104.55 ip55.mox.extranet.company.com ip55.mox.extranet.company.com
14 10.55.104.65 server03.internal.company.com server03.internal.company.com
15 10.55.104.66 server03.internal.company.com server03.internal.company.com
16 10.55.104.70 monitor01.internal.company.com monitor01.internal.company.com
17 10.55.104.71 hosted.internal.company.com hosted.internal.company.com
18 10.55.104.88 hosted.extranet.company.com hosted.extranet.company.com
19 10.55.104.90 rbmedia02.extranet.company.com rbmedia02.extranet.company.com
20 10.55.104.93 sh05.extranet.company.com sh05.extranet.company.com
21 10.55.104.94 sh06.extranet.company.com sh06.extranet.company.com
22 10.55.104.107 sh07.extranet.company.com sh07.extranet.company.com
23 10.55.104.108 siena01.extranet.company.com siena01.extranet.company.com
24 10.55.104.109 hosted.extranet.company.com hosted.extranet.company.com
25 10.55.104.116 bukhara01.extranet.company.com bukhara01.extranet.company.com
26 10.55.104.122 hosted.extranet.company.com hosted.extranet.company.com
27 10.55.104.127 hosted.extranet.company.com hosted.extranet.company.com
28 10.55.104.133 hosted.extranet.company.com hosted.extranet.company.com
29 10.55.104.138 hosted.extranet.company.com hosted.extranet.company.com
30 10.55.104.144
31 10.55.104.148 pathway04.extranet.company.com pathway04.extranet.company.com
32 10.55.104.149 sh05.extranet.company.com sh05.extranet.company.com
33 10.55.104.150 sh06.extranet.company.com sh06.extranet.company.com
34 10.55.104.154 hosted.extranet.company.com hosted.extranet.company.com
35 10.55.104.155 hosted.extranet.company.com hosted.extranet.company.com
36 10.55.104.156 hosted.extranet.company.com hosted.extranet.company.com
37 10.55.104.160 hosted.extranet.company.com hosted.extranet.company.com
38 10.55.104.161 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 3389 (ms-wbt-server)

Service description : MS WBT Server

More details on the utilization and abuse of port 3389

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.125 hosted.extranet.company.com hosted.extranet.company.com
2 10.55.104.129 hosted.extranet.company.com hosted.extranet.company.com
3 10.55.104.136 hosted.extranet.company.com hosted.extranet.company.com
4 10.55.104.137 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 5000 (commplex-main)

Service description :

More details on the utilization and abuse of port 5000

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.71 hosted.internal.company.com hosted.internal.company.com
TCP Service 5001 (commplex-link)

Service description :

More details on the utilization and abuse of port 5001

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.71 hosted.internal.company.com hosted.internal.company.com
TCP Service 5006 (wsm-server)

Service description : wsm server

More details on the utilization and abuse of port 5006

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.71 hosted.internal.company.com hosted.internal.company.com
TCP Service 5985 (wsman)

Service description : WBEM WS-Management HTTP

More details on the utilization and abuse of port 5985

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.136 hosted.extranet.company.com hosted.extranet.company.com
2 10.55.104.137 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 5986 (wsmans)

Service description : WBEM WS-Management HTTP over TLS/SSL

More details on the utilization and abuse of port 5986

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
2 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
3 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
4 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
5 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
TCP Service 5989 (wbem-https)

Service description : WBEM CIM-XML (HTTPS)

More details on the utilization and abuse of port 5989

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.40 vps02.internal.company.com vps02.internal.company.com
2 10.55.104.58 kyoto01.extranet.company.com kyoto01.extranet.company.com
3 10.55.104.113 hosted.extranet.company.com hosted.extranet.company.com
4 10.55.104.114 hosted.extranet.company.com hosted.extranet.company.com
5 10.55.104.119 hosted.extranet.company.com hosted.extranet.company.com
6 10.55.104.130 hosted.extranet.company.com hosted.extranet.company.com
7 10.55.104.145 legacy-x.company.com
TCP Service 6602 (wsscomfrmwk)

Service description : Windows WSS Communication Framework

More details on the utilization and abuse of port 6602

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.129 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 8000 (irdmi)

Service description : iRDMI

More details on the utilization and abuse of port 8000

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.40 vps02.internal.company.com vps02.internal.company.com
2 10.55.104.58 kyoto01.extranet.company.com kyoto01.extranet.company.com
3 10.55.104.113 hosted.extranet.company.com hosted.extranet.company.com
4 10.55.104.114 hosted.extranet.company.com hosted.extranet.company.com
5 10.55.104.119 hosted.extranet.company.com hosted.extranet.company.com
6 10.55.104.130 hosted.extranet.company.com hosted.extranet.company.com
7 10.55.104.145 legacy-x.company.com
TCP Service 8080 (http-alt)

Service description : HTTP Alternate (see port 80)

More details on the utilization and abuse of port 8080

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.96 brava02.extranet.company.com brava02.extranet.company.com
TCP Service 8100 (xprint-server)

Service description : Xprint Server

More details on the utilization and abuse of port 8100

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.40 vps02.internal.company.com vps02.internal.company.com
2 10.55.104.58 kyoto01.extranet.company.com kyoto01.extranet.company.com
3 10.55.104.113 hosted.extranet.company.com hosted.extranet.company.com
4 10.55.104.114 hosted.extranet.company.com hosted.extranet.company.com
5 10.55.104.119 hosted.extranet.company.com hosted.extranet.company.com
6 10.55.104.130 hosted.extranet.company.com hosted.extranet.company.com
7 10.55.104.145 legacy-x.company.com
TCP Service 9090 (websm)

Service description : WebSM

More details on the utilization and abuse of port 9090

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.96 brava02.extranet.company.com brava02.extranet.company.com
TCP Service 10050 (zabbix-agent)

Service description : Zabbix Agent

More details on the utilization and abuse of port 10050

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.15 hosted.internal.company.com hosted.internal.company.com
2 10.55.104.20 server02.internal.company.com server02.internal.company.com
3 10.55.104.21 hosted.internal.company.com hosted.internal.company.com
4 10.55.104.24 mox.extranet.company.com mox.extranet.company.com
5 10.55.104.41 hosted.internal.company.com hosted.internal.company.com
6 10.55.104.44 hosted.internal.company.com hosted.internal.company.com
7 10.55.104.47 hosted.internal.company.com hosted.internal.company.com
8 10.55.104.48 hosted.internal.company.com hosted.internal.company.com
9 10.55.104.49 hosted.internal.company.com hosted.internal.company.com
10 10.55.104.53 ip53.mox.extranet.company.com ip53.mox.extranet.company.com
11 10.55.104.54 ip54.mox.extranet.company.com ip54.mox.extranet.company.com
12 10.55.104.55 ip55.mox.extranet.company.com ip55.mox.extranet.company.com
13 10.55.104.70 monitor01.internal.company.com monitor01.internal.company.com
14 10.55.104.88 hosted.extranet.company.com hosted.extranet.company.com
15 10.55.104.90 rbmedia02.extranet.company.com rbmedia02.extranet.company.com
16 10.55.104.92 monitor02.extranet.company.com monitor02.extranet.company.com
17 10.55.104.93 sh05.extranet.company.com sh05.extranet.company.com
18 10.55.104.94 sh06.extranet.company.com sh06.extranet.company.com
19 10.55.104.107 sh07.extranet.company.com sh07.extranet.company.com
20 10.55.104.108 siena01.extranet.company.com siena01.extranet.company.com
21 10.55.104.109 hosted.extranet.company.com hosted.extranet.company.com
22 10.55.104.125 hosted.extranet.company.com hosted.extranet.company.com
23 10.55.104.127 hosted.extranet.company.com hosted.extranet.company.com
24 10.55.104.133 hosted.extranet.company.com hosted.extranet.company.com
25 10.55.104.134 hosted.extranet.company.com hosted.extranet.company.com
26 10.55.104.136 hosted.extranet.company.com hosted.extranet.company.com
27 10.55.104.137 hosted.extranet.company.com hosted.extranet.company.com
28 10.55.104.138 hosted.extranet.company.com hosted.extranet.company.com
29 10.55.104.144
30 10.55.104.148 pathway04.extranet.company.com pathway04.extranet.company.com
31 10.55.104.149 sh05.extranet.company.com sh05.extranet.company.com
32 10.55.104.150 sh06.extranet.company.com sh06.extranet.company.com
33 10.55.104.154 hosted.extranet.company.com hosted.extranet.company.com
34 10.55.104.155 hosted.extranet.company.com hosted.extranet.company.com
35 10.55.104.156 hosted.extranet.company.com hosted.extranet.company.com
36 10.55.104.160 hosted.extranet.company.com hosted.extranet.company.com
37 10.55.104.161 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 10051 (zabbix-trapper)

Service description : Zabbix Trapper

More details on the utilization and abuse of port 10051

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.41 hosted.internal.company.com hosted.internal.company.com
2 10.55.104.70 monitor01.internal.company.com monitor01.internal.company.com
3 10.55.104.92 monitor02.extranet.company.com monitor02.extranet.company.com
4 10.55.104.156 hosted.extranet.company.com hosted.extranet.company.com
TCP Service 27017

Service description :

More details on the utilization and abuse of port 27017

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.51 php4.extranet.company.com php4.extranet.company.com
2 10.55.104.52 vps03.extranet.company.com vps03.extranet.company.com
TCP Service 47001 (winrm)

Service description : Windows Remote Management Service

More details on the utilization and abuse of port 47001

Devices on which this service is enabled:

# Node Name DNS Name
1 10.55.104.136 hosted.extranet.company.com hosted.extranet.company.com
2 10.55.104.137 hosted.extranet.company.com hosted.extranet.company.com
All discovered nodes

This chapter provides the list of all discovered network nodes, along with TCP services that run on them.

Name DNS Name IP Address # TCP Services Enabled TCP Services
router03.extranet.company.com router03.extranet.company.com 10.55.104.1 0
router04.extranet.company.com router04.extranet.company.com 10.55.104.2 0
gateway03.extranet.company.com gateway03.extranet.company.com 10.55.104.3 0
gateway04.extranet.company.com gateway04.extranet.company.com 10.55.104.4 0
pdu01.extranet.company.com pdu01.extranet.company.com 10.55.104.5 0
pdu02.extranet.company.com pdu02.extranet.company.com 10.55.104.6 0
ns3.experimental.eu ns3.experimental.eu 10.55.104.7 0
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.8 0
fw01.extranet.company.com fw01.extranet.company.com 10.55.104.9 2 22 (ssh), 443 (https)
ip01.sd5.extranet.company.com ip01.sd5.extranet.company.com 10.55.104.10 0
ip02.sd5.extranet.company.com ip02.sd5.extranet.company.com 10.55.104.11 0
ip03.sd5.extranet.company.com ip03.sd5.extranet.company.com 10.55.104.12 0
ip04.sd5.extranet.company.com ip04.sd5.extranet.company.com 10.55.104.13 0
ip05.sd5.extranet.company.com ip05.sd5.extranet.company.com 10.55.104.14 0
hosted.internal.company.com hosted.internal.company.com 10.55.104.15 18 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 111 (sunrpc), 143 (imap), 443 (https), 587 (submission), 750 (rfile), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 2526 (ema-sent-lm), 3306 (mysql), 5986 (wsmans), 10050 (zabbix-agent)
pdu03.extranet.company.com pdu03.extranet.company.com 10.55.104.16 4 21 (ftp), 23 (telnet), 80 (http), 443 (https)
server02.internal.company.com server02.internal.company.com 10.55.104.20 14 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 587 (submission), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 2526 (ema-sent-lm), 3306 (mysql), 10050 (zabbix-agent)
hosted.internal.company.com hosted.internal.company.com 10.55.104.21 18 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 111 (sunrpc), 143 (imap), 443 (https), 587 (submission), 750 (rfile), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 2526 (ema-sent-lm), 3306 (mysql), 5986 (wsmans), 10050 (zabbix-agent)
hosted.internal.company.com hosted.internal.company.com 10.55.104.23 12 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql)
mox.extranet.company.com mox.extranet.company.com 10.55.104.24 11 21 (ftp), 22 (ssh), 80 (http), 110 (pop3), 143 (imap), 443 (https), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql), 10050 (zabbix-agent)
vps02.internal.company.com vps02.internal.company.com 10.55.104.40 8 22 (ssh), 80 (http), 427 (svrloc), 443 (https), 902 (ideafarm-door), 5989 (wbem-https), 8000 (irdmi), 8100 (xprint-server)
hosted.internal.company.com hosted.internal.company.com 10.55.104.41 6 22 (ssh), 80 (http), 443 (https), 3306 (mysql), 10050 (zabbix-agent), 10051 (zabbix-trapper)
hosted.internal.company.com hosted.internal.company.com 10.55.104.44 14 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 587 (submission), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 2526 (ema-sent-lm), 3306 (mysql), 10050 (zabbix-agent)
hosted.internal.company.com hosted.internal.company.com 10.55.104.47 18 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 111 (sunrpc), 143 (imap), 443 (https), 587 (submission), 750 (rfile), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 2526 (ema-sent-lm), 3306 (mysql), 5986 (wsmans), 10050 (zabbix-agent)
hosted.internal.company.com hosted.internal.company.com 10.55.104.48 18 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 111 (sunrpc), 143 (imap), 443 (https), 587 (submission), 750 (rfile), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 2526 (ema-sent-lm), 3306 (mysql), 5986 (wsmans), 10050 (zabbix-agent)
hosted.internal.company.com hosted.internal.company.com 10.55.104.49 18 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 111 (sunrpc), 143 (imap), 443 (https), 587 (submission), 750 (rfile), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 2526 (ema-sent-lm), 3306 (mysql), 5986 (wsmans), 10050 (zabbix-agent)
astra02.extranet.company.com astra02.extranet.company.com 10.55.104.50 1 1521 (ncube-lm)
php4.extranet.company.com php4.extranet.company.com 10.55.104.51 1 27017
vps03.extranet.company.com vps03.extranet.company.com 10.55.104.52 1 27017
ip53.mox.extranet.company.com ip53.mox.extranet.company.com 10.55.104.53 11 21 (ftp), 22 (ssh), 80 (http), 110 (pop3), 143 (imap), 443 (https), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql), 10050 (zabbix-agent)
ip54.mox.extranet.company.com ip54.mox.extranet.company.com 10.55.104.54 11 21 (ftp), 22 (ssh), 80 (http), 110 (pop3), 143 (imap), 443 (https), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql), 10050 (zabbix-agent)
ip55.mox.extranet.company.com ip55.mox.extranet.company.com 10.55.104.55 11 21 (ftp), 22 (ssh), 80 (http), 110 (pop3), 143 (imap), 443 (https), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql), 10050 (zabbix-agent)
kyoto01.extranet.company.com kyoto01.extranet.company.com 10.55.104.58 7 22 (ssh), 80 (http), 443 (https), 902 (ideafarm-door), 5989 (wbem-https), 8000 (irdmi), 8100 (xprint-server)
switch01.internal.company.com switch01.internal.company.com 10.55.104.60 2 23 (telnet), 80 (http)
in101.spamfilter01.internal.com in101.spamfilter01.internal.com 10.55.104.61 7 22 (ssh), 80 (http), 143 (imap), 443 (https), 465 (urd), 587 (submission), 993 (imaps)
in102.spamfilter02.internal.com in102.spamfilter02.internal.com 10.55.104.62 7 22 (ssh), 80 (http), 143 (imap), 443 (https), 465 (urd), 587 (submission), 993 (imaps)
server03.internal.company.com server03.internal.company.com 10.55.104.65 12 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql)
server03.internal.company.com server03.internal.company.com 10.55.104.66 12 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql)
monitor01.internal.company.com monitor01.internal.company.com 10.55.104.70 6 22 (ssh), 80 (http), 443 (https), 3306 (mysql), 10050 (zabbix-agent), 10051 (zabbix-trapper)
hosted.internal.company.com hosted.internal.company.com 10.55.104.71 11 21 (ftp), 22 (ssh), 80 (http), 161 (snmp), 443 (https), 515 (printer), 873 (rsync), 3306 (mysql), 5000 (commplex-main), 5001 (commplex-link), 5006 (wsm-server)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.88 11 21 (ftp), 22 (ssh), 80 (http), 110 (pop3), 143 (imap), 443 (https), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql), 10050 (zabbix-agent)
rbmedia02.extranet.company.com rbmedia02.extranet.company.com 10.55.104.90 11 21 (ftp), 22 (ssh), 80 (http), 110 (pop3), 143 (imap), 443 (https), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql), 10050 (zabbix-agent)
monitor02.extranet.company.com monitor02.extranet.company.com 10.55.104.92 5 22 (ssh), 80 (http), 514 (shell), 10050 (zabbix-agent), 10051 (zabbix-trapper)
sh05.extranet.company.com sh05.extranet.company.com 10.55.104.93 13 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql), 10050 (zabbix-agent)
sh06.extranet.company.com sh06.extranet.company.com 10.55.104.94 13 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql), 10050 (zabbix-agent)
brava02.extranet.company.com brava02.extranet.company.com 10.55.104.96 4 80 (http), 443 (https), 8080 (http-alt), 9090 (websm)
costa01.extranet.company.com costa01.extranet.company.com 10.55.104.97 2 80 (http), 443 (https)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.98 5 53 (domain), 88 (kerberos), 139 (netbios-ssn), 389 (ldap), 445 (microsoft-ds)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.99 5 53 (domain), 88 (kerberos), 139 (netbios-ssn), 389 (ldap), 445 (microsoft-ds)
airfleet02.extranet.company.com airfleet02.extranet.company.com 10.55.104.104 10 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds)
sh07.extranet.company.com sh07.extranet.company.com 10.55.104.107 13 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql), 10050 (zabbix-agent)
siena01.extranet.company.com siena01.extranet.company.com 10.55.104.108 11 21 (ftp), 22 (ssh), 80 (http), 110 (pop3), 143 (imap), 443 (https), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql), 10050 (zabbix-agent)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.109 13 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql), 10050 (zabbix-agent)
mgt-fw01.extranet.company.com mgt-fw01.extranet.company.com 10.55.104.111 2 22 (ssh), 443 (https)
mgt-fw02.extranet.company.com mgt-fw02.extranet.company.com 10.55.104.112 2 22 (ssh), 443 (https)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.113 8 22 (ssh), 80 (http), 427 (svrloc), 443 (https), 902 (ideafarm-door), 5989 (wbem-https), 8000 (irdmi), 8100 (xprint-server)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.114 7 22 (ssh), 80 (http), 443 (https), 902 (ideafarm-door), 5989 (wbem-https), 8000 (irdmi), 8100 (xprint-server)
bukhara01.extranet.company.com bukhara01.extranet.company.com 10.55.104.116 12 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql)
airfleet03.extranet.company.com airfleet03.extranet.company.com 10.55.104.118 6 22 (ssh), 53 (domain), 80 (http), 443 (https), 445 (microsoft-ds), 2222 (EtherNet/IP-1)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.119 8 22 (ssh), 80 (http), 443 (https), 445 (microsoft-ds), 902 (ideafarm-door), 5989 (wbem-https), 8000 (irdmi), 8100 (xprint-server)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.121 11 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 445 (microsoft-ds), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.122 12 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 445 (microsoft-ds), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 3306 (mysql)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.125 5 80 (http), 443 (https), 445 (microsoft-ds), 3389 (ms-wbt-server), 10050 (zabbix-agent)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.127 11 21 (ftp), 22 (ssh), 80 (http), 110 (pop3), 143 (imap), 443 (https), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql), 10050 (zabbix-agent)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.129 8 21 (ftp), 80 (http), 389 (ldap), 443 (https), 636 (ldaps), 1723 (pptp), 3389 (ms-wbt-server), 6602 (wsscomfrmwk)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.130 8 22 (ssh), 80 (http), 427 (svrloc), 443 (https), 902 (ideafarm-door), 5989 (wbem-https), 8000 (irdmi), 8100 (xprint-server)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.133 13 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql), 10050 (zabbix-agent)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.134 5 21 (ftp), 22 (ssh), 80 (http), 443 (https), 10050 (zabbix-agent)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.136 6 21 (ftp), 80 (http), 3389 (ms-wbt-server), 5985 (wsman), 10050 (zabbix-agent), 47001 (winrm)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.137 6 80 (http), 1433 (ms-sql-s), 3389 (ms-wbt-server), 5985 (wsman), 10050 (zabbix-agent), 47001 (winrm)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.138 13 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql), 10050 (zabbix-agent)
10.55.104.140 2 80 (http), 443 (https)
10.55.104.144 5 22 (ssh), 80 (http), 443 (https), 3306 (mysql), 10050 (zabbix-agent)
legacy-x.company.com 10.55.104.145 8 22 (ssh), 80 (http), 427 (svrloc), 443 (https), 902 (ideafarm-door), 5989 (wbem-https), 8000 (irdmi), 8100 (xprint-server)
pathway04.extranet.company.com pathway04.extranet.company.com 10.55.104.148 12 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 3306 (mysql), 10050 (zabbix-agent)
sh05.extranet.company.com sh05.extranet.company.com 10.55.104.149 13 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql), 10050 (zabbix-agent)
sh06.extranet.company.com sh06.extranet.company.com 10.55.104.150 13 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql), 10050 (zabbix-agent)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.154 13 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql), 10050 (zabbix-agent)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.155 13 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql), 10050 (zabbix-agent)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.156 6 22 (ssh), 80 (http), 443 (https), 3306 (mysql), 10050 (zabbix-agent), 10051 (zabbix-trapper)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.160 13 21 (ftp), 22 (ssh), 53 (domain), 80 (http), 110 (pop3), 143 (imap), 443 (https), 993 (imaps), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql), 10050 (zabbix-agent)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.161 11 21 (ftp), 22 (ssh), 80 (http), 110 (pop3), 143 (imap), 443 (https), 995 (pop3s), 2222 (EtherNet/IP-1), 2525 (ms-v-worlds), 3306 (mysql), 10050 (zabbix-agent)
hosted.extranet.company.com hosted.extranet.company.com 10.55.104.204 0