Example Scan Results

This is a made-up scan of a made-up server, for the activity above.

Nmap scan report for 192.0.2.15
Host is up (0.012s latency).
PORT     STATE SERVICE     VERSION
21/tcp   open  ftp         vsftpd 2.3.4
22/tcp   open  ssh         OpenSSH 7.2p2 Ubuntu 4ubuntu2.10
80/tcp   open  http        Apache httpd 2.4.18 ((Ubuntu))
139/tcp  open  netbios-ssn Samba smbd 3.X - 4.X
445/tcp  open  netbios-ssn Samba smbd 3.X - 4.X
3306/tcp open  mysql       MySQL 5.5.62
Service Info: Host: FILESRV01; OS: Linux

Things to notice (try it yourself first)

Every version number is old, which suggests the server hasn't been updated in years
vsftpd 2.3.4 is a famous version that shipped with a backdoor, so it's the obvious first target
The database (MySQL) is reachable directly from the network instead of only from the web server
File sharing (Samba) is open, so the next step would be to check for anonymous access to shares
The host name FILESRV01 tells you what the server is used for

Back to Enumeration