Nmap scan report for mx1.hc2706-39.iphmx.com (216.71.152.49) Host is up (0.011s latency). Other addresses for mx1.hc2706-39.iphmx.com (not scanned): 216.71.137.79 216.71.140.205 216.71.140.196 216.71.137.81 216.71.140.198 68.232.154.118 216.71.137.82 216.71.140.200 216.71.137.63 216.71.137.80 216.71.140.197 68.232.153.39 216.71.137.83 216.71.146.118 216.71.140.199 rDNS record for 216.71.152.49: esa2.hc2706-39.iphmx.com Not shown: 998 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 25/tcp open smtp IronPort smtpd | smtp-commands: esa2.hc2706-39.iphmx.com, 8BITMIME, SIZE 104857600, STARTTLS |_ The following commands are recognized auth data ehlo helo help mail noop quit rcpt rset starttls vrfy |_ssl-date: TLS randomness does not represent time | ssl-cert: Subject: commonName=mx1.hc2706-39.iphmx.com/organizationName=Cisco Systems Inc./stateOrProvinceName=California/countryName=US | Subject Alternative Name: DNS:mx1.hc2706-39.iphmx.com, DNS:mx2.hc2706-39.iphmx.com, DNS:ob1.hc2706-39.iphmx.com, DNS:esa1.hc2706-39.iphmx.com, DNS:esa2.hc2706-39.iphmx.com, DNS:esa3.hc2706-39.iphmx.com, DNS:esa4.hc2706-39.iphmx.com, DNS:esa5.hc2706-39.iphmx.com, DNS:esa6.hc2706-39.iphmx.com, DNS:esa7.hc2706-39.iphmx.com, DNS:esa8.hc2706-39.iphmx.com, DNS:esa9.hc2706-39.iphmx.com, DNS:esa10.hc2706-39.iphmx.com, DNS:esa11.hc2706-39.iphmx.com, DNS:esa12.hc2706-39.iphmx.com, DNS:esa13.hc2706-39.iphmx.com, DNS:esa14.hc2706-39.iphmx.com, DNS:esa15.hc2706-39.iphmx.com, DNS:esa16.hc2706-39.iphmx.com | Not valid before: 2025-02-13T13:59:27 |_Not valid after: 2026-02-13T13:58:27 587/tcp closed submission Device type: general purpose Running (JUST GUESSING): FreeBSD 11.X (92%) OS CPE: cpe:/o:freebsd:freebsd:11.0 Aggressive OS guesses: FreeBSD 11.0-RELEASE (92%), FreeBSD 11.2-STABLE (91%), FreeBSD 11.0-STABLE or 11.0-RELEASE (87%) No exact OS matches for host (test conditions non-ideal). Network Distance: 11 hops Service Info: OS: AsyncOS; Device: specialized; CPE: cpe:/o:cisco:asyncos TRACEROUTE (using port 587/tcp) HOP RTT ADDRESS 1 3.20 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177) 2 10.83 ms gw.mcom-colocationamerica.com (208.64.231.81) 3 0.84 ms r2b4.n1.p1401.lax.multacom.net (64.69.46.11) 4 ... 5 12.22 ms be3097.ccr81.sjc13.atlas.cogentco.com (154.54.40.157) 6 12.45 ms be5973.agr22.sjc13.atlas.cogentco.com (154.54.168.186) 7 12.22 ms be3521.nr51.b020943-0.sjc13.atlas.cogentco.com (154.24.71.90) 8 11.34 ms 38.142.10.98 9 12.11 ms 68.232.128.5 10 11.11 ms 139.138.24.107 11 11.64 ms esa2.hc2706-39.iphmx.com (216.71.152.49) OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 50.62 seconds