nmap

adot@kali:~/htb/Machines/Resolute$ nmap -p 88,135,139,445,464,593,636,3268,3269,5985,9389,47001-49823 -A -T5 -Pn 10.10.10.169 -v
Starting Nmap 7.94SVN ( https://nmap.org ) at 2024-03-30 14:49 CDT
NSE: Loaded 156 scripts for scanning.
NSE: Script Pre-scanning.
Initiating NSE at 14:49
Completed NSE at 14:49, 0.00s elapsed
Initiating NSE at 14:49
Completed NSE at 14:49, 0.00s elapsed
Initiating NSE at 14:49
Completed NSE at 14:49, 0.00s elapsed
Initiating Parallel DNS resolution of 1 host. at 14:49
Completed Parallel DNS resolution of 1 host. at 14:49, 0.02s elapsed
Initiating Connect Scan at 14:49
Scanning 10.10.10.169 [2834 ports]
Discovered open port 139/tcp on 10.10.10.169
Discovered open port 445/tcp on 10.10.10.169
Discovered open port 135/tcp on 10.10.10.169
Discovered open port 49665/tcp on 10.10.10.169
Discovered open port 3269/tcp on 10.10.10.169
Discovered open port 49670/tcp on 10.10.10.169
Discovered open port 88/tcp on 10.10.10.169
Discovered open port 593/tcp on 10.10.10.169
Discovered open port 5985/tcp on 10.10.10.169
Discovered open port 49666/tcp on 10.10.10.169
Discovered open port 47001/tcp on 10.10.10.169
Discovered open port 636/tcp on 10.10.10.169
Discovered open port 49664/tcp on 10.10.10.169
Discovered open port 9389/tcp on 10.10.10.169
Discovered open port 3268/tcp on 10.10.10.169
Discovered open port 49667/tcp on 10.10.10.169
Warning: 10.10.10.169 giving up on port because retransmission cap hit (2).
Discovered open port 464/tcp on 10.10.10.169
Discovered open port 49679/tcp on 10.10.10.169
Discovered open port 49684/tcp on 10.10.10.169
Discovered open port 49678/tcp on 10.10.10.169
Completed Connect Scan at 14:49, 5.41s elapsed (2834 total ports)
Initiating Service scan at 14:49
Scanning 20 services on 10.10.10.169
Completed Service scan at 14:50, 54.42s elapsed (20 services on 1 host)
NSE: Script scanning 10.10.10.169.
Initiating NSE at 14:50
Completed NSE at 14:50, 9.80s elapsed
Initiating NSE at 14:50
Completed NSE at 14:50, 1.24s elapsed
Initiating NSE at 14:50
Completed NSE at 14:50, 0.00s elapsed
Nmap scan report for 10.10.10.169
Host is up (0.047s latency).
Not shown: 2813 closed tcp ports (conn-refused)
PORT      STATE    SERVICE      VERSION
88/tcp    open     kerberos-sec Microsoft Windows Kerberos (server time: 2024-03-30 19:56:22Z)
135/tcp   open     msrpc        Microsoft Windows RPC
139/tcp   open     netbios-ssn  Microsoft Windows netbios-ssn
445/tcp   open     microsoft-ds Windows Server 2016 Standard 14393 microsoft-ds (workgroup: MEGABANK)
464/tcp   open     kpasswd5?
593/tcp   open     ncacn_http   Microsoft Windows RPC over HTTP 1.0
636/tcp   open     tcpwrapped
3268/tcp  open     ldap         Microsoft Windows Active Directory LDAP (Domain: megabank.local, Site: Default-First-Site-Name)
3269/tcp  open     tcpwrapped
5985/tcp  open     http         Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
|_http-server-header: Microsoft-HTTPAPI/2.0
|_http-title: Not Found
9389/tcp  open     mc-nmf       .NET Message Framing
47001/tcp open     http         Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
|_http-server-header: Microsoft-HTTPAPI/2.0
|_http-title: Not Found
48734/tcp filtered unknown
49664/tcp open     msrpc        Microsoft Windows RPC
49665/tcp open     msrpc        Microsoft Windows RPC
49666/tcp open     msrpc        Microsoft Windows RPC
49667/tcp open     msrpc        Microsoft Windows RPC
49670/tcp open     msrpc        Microsoft Windows RPC
49678/tcp open     ncacn_http   Microsoft Windows RPC over HTTP 1.0
49679/tcp open     msrpc        Microsoft Windows RPC
49684/tcp open     msrpc        Microsoft Windows RPC
Service Info: Host: RESOLUTE; OS: Windows; CPE: cpe:/o:microsoft:windows

Host script results:
| smb-os-discovery: 
|   OS: Windows Server 2016 Standard 14393 (Windows Server 2016 Standard 6.3)
|   Computer name: Resolute
|   NetBIOS computer name: RESOLUTE\x00
|   Domain name: megabank.local
|   Forest name: megabank.local
|   FQDN: Resolute.megabank.local
|_  System time: 2024-03-30T12:57:15-07:00
| smb2-time: 
|   date: 2024-03-30T19:57:12
|_  start_date: 2024-03-30T19:41:14
| smb-security-mode: 
|   account_used: guest
|   authentication_level: user
|   challenge_response: supported
|_  message_signing: required
| smb2-security-mode: 
|   3:1:1: 
|_    Message signing enabled and required
|_clock-skew: mean: 2h27m01s, deviation: 4h02m31s, median: 7m00s

NSE: Script Post-scanning.
Initiating NSE at 14:50
Completed NSE at 14:50, 0.00s elapsed
Initiating NSE at 14:50
Completed NSE at 14:50, 0.00s elapsed
Initiating NSE at 14:50
Completed NSE at 14:50, 0.00s elapsed
Read data files from: /usr/bin/../share/nmap
Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 71.22 seconds