Nmap scan report for cname.dingtalk.com.gds.alibabadns.com (47.246.137.199)
Host is up (0.058s latency).
Not shown: 998 filtered tcp ports (no-response)
PORT STATE SERVICE VERSION
80/tcp open http DingTalk/1.0.0
|_http-title: Did not follow redirect to https://cname.dingtalk.com.gds.alibabadns.com/
| fingerprint-strings:
| FourOhFourRequest:
| HTTP/1.1 301 Moved Permanently
| Server: DingTalk/1.0.0
| Date: Sat, 13 Sep 2025 02:58:56 GMT
| Content-Type: text/html
| Content-Length: 246
| Connection: close
| Location: https:///nice%20ports,/Trinity.txt.bak
|
|
| 301 Moved Permanently
|
| 301 Moved Permanently
|
Powered by DingTalk/1.0.0
tengine
|
|
| GetRequest, HTTPOptions:
| HTTP/1.1 301 Moved Permanently
| Server: DingTalk/1.0.0
| Date: Sat, 13 Sep 2025 02:58:55 GMT
| Content-Type: text/html
| Content-Length: 246
| Connection: close
| Location: https:///
|
|
| 301 Moved Permanently
|
| 301 Moved Permanently
|
Powered by DingTalk/1.0.0
tengine
|
|
| RTSPRequest:
|
|
| 400 Bad Request
|
| 400 Bad Request
|
Powered by DingTalk/1.0.0
tengine
|
|
| X11Probe:
| HTTP/1.1 400 Bad Request
| Server: DingTalk/1.0.0
| Date: Sat, 13 Sep 2025 02:58:55 GMT
| Content-Type: text/html
| Content-Length: 234
| Connection: close
|
|
| 400 Bad Request
|
| 400 Bad Request
|
Powered by DingTalk/1.0.0
tengine
|
|_
|_http-server-header: DingTalk/1.0.0
443/tcp open ssl/https DingTalk/1.0.0
|_ssl-date: TLS randomness does not represent time
| fingerprint-strings:
| FourOhFourRequest:
| HTTP/1.1 404 Not Found
| Server: DingTalk/1.0.0
| Date: Sat, 13 Sep 2025 02:59:02 GMT
| Content-Type: text/html
| Content-Length: 230
| Connection: close
|
|
| 404 Not Found
|
| 404 Not Found
|
Powered by DingTalk/1.0.0
tengine
|
|
| GetRequest:
| HTTP/1.1 403 Forbidden
| Server: DingTalk/1.0.0
| Date: Sat, 13 Sep 2025 02:59:01 GMT
| Content-Type: text/html
| Content-Length: 230
| Connection: close
|
|
| 403 Forbidden
|
| 403 Forbidden
|
Powered by DingTalk/1.0.0
tengine
|
|
| HTTPOptions:
| HTTP/1.1 405 Not Allowed
| Server: DingTalk/1.0.0
| Date: Sat, 13 Sep 2025 02:59:01 GMT
| Content-Type: text/html
| Content-Length: 234
| Connection: close
|
|
| 405 Not Allowed
|
| 405 Not Allowed
|
Powered by DingTalk/1.0.0
tengine
|
|
| tor-versions:
| HTTP/1.1 400 Bad Request
| Server: DingTalk/1.0.0
| Date: Sat, 13 Sep 2025 02:59:02 GMT
| Content-Type: text/html
| Content-Length: 234
| Connection: close
|
|
| 400 Bad Request
|
| 400 Bad Request
|
Powered by DingTalk/1.0.0
tengine
|
|_
|_http-title: 403 Forbidden
| ssl-cert: Subject: commonName=*.dingtalk.com/organizationName=Alibaba (China) Technology Co., Ltd./stateOrProvinceName=ZheJiang/countryName=CN
| Subject Alternative Name: DNS:*.dingtalk.com, DNS:dingtalk.com
| Not valid before: 2025-03-07T08:36:16
|_Not valid after: 2026-04-08T08:36:15
|_http-server-header: DingTalk/1.0.0
| tls-alpn:
| h2
|_ http/1.1
| tls-nextprotoneg:
| h2
|_ http/1.1
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.92%I=7%D=9/12%Time=68C4DDEF%P=x86_64-redhat-linux-gnu%r(
SF:GetRequest,1AB,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServer:\x20
SF:DingTalk/1\.0\.0\r\nDate:\x20Sat,\x2013\x20Sep\x202025\x2002:58:55\x20G
SF:MT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20246\r\nConnectio
SF:n:\x20close\r\nLocation:\x20https:///\r\n\r\n\r\n\r\n30
SF:1\x20Moved\x20Permanently\r\n\r\n301\x
SF:20Moved\x20Permanently
\r\n
Powered\x20by\x20DingTalk/
SF:1\.0\.0
tengine\r\n\r\n\r\n")%r(HTTPO
SF:ptions,1AB,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServer:\x20Ding
SF:Talk/1\.0\.0\r\nDate:\x20Sat,\x2013\x20Sep\x202025\x2002:58:55\x20GMT\r
SF:\nContent-Type:\x20text/html\r\nContent-Length:\x20246\r\nConnection:\x
SF:20close\r\nLocation:\x20https:///\r\n\r\n\r\n\r\n301\x2
SF:0Moved\x20Permanently\r\n\r\n301\x20Mo
SF:ved\x20Permanently
\r\n
Powered\x20by\x20DingTalk/1\.0
SF:\.0
tengine\r\n\r\n\r\n")%r(RTSPReque
SF:st,EA,"\r\n\r\n400\x20Bad\x20Request\r\n
SF:\r\n400\x20Bad\x20Request
\r\n
Power
SF:ed\x20by\x20DingTalk/1\.0\.0
tengine\r\n\r\n
SF:\r\n")%r(X11Probe,184,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nSer
SF:ver:\x20DingTalk/1\.0\.0\r\nDate:\x20Sat,\x2013\x20Sep\x202025\x2002:58
SF::55\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20234\r\nC
SF:onnection:\x20close\r\n\r\n\r\n\r\n400\x20Bad\x20Reques
SF:t\r\n\r\n400\x20Bad\x20Request
\r\n
Powered\x20by\x20DingTalk/1\.0\.0
tengine\r\n\r\n\r\n")%r(FourOhFourRequest,1C8,"HTTP/1\.1\x2
SF:0301\x20Moved\x20Permanently\r\nServer:\x20DingTalk/1\.0\.0\r\nDate:\x2
SF:0Sat,\x2013\x20Sep\x202025\x2002:58:56\x20GMT\r\nContent-Type:\x20text/
SF:html\r\nContent-Length:\x20246\r\nConnection:\x20close\r\nLocation:\x20
SF:https:///nice%20ports,/Trinity\.txt\.bak\r\n\r\n\r\n\r\n301\x20Moved\x20Permanently\r\n\r\n30
SF:1\x20Moved\x20Permanently
\r\n
Powered\x20by\x20DingTa
SF:lk/1\.0\.0
tengine\r\n\r\n\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.92%T=SSL%I=7%D=9/12%Time=68C4DDF5%P=x86_64-redhat-linux
SF:-gnu%r(GetRequest,17E,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20Ding
SF:Talk/1\.0\.0\r\nDate:\x20Sat,\x2013\x20Sep\x202025\x2002:59:01\x20GMT\r
SF:\nContent-Type:\x20text/html\r\nContent-Length:\x20230\r\nConnection:\x
SF:20close\r\n\r\n\r\n\r\n403\x20Forbidden\
SF:r\n\r\n403\x20Forbidden
\r\n
Powered
SF:\x20by\x20DingTalk/1\.0\.0
tengine\r\n\r\n\r\n")%r(HTTPOptions,184,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nSe
SF:rver:\x20DingTalk/1\.0\.0\r\nDate:\x20Sat,\x2013\x20Sep\x202025\x2002:5
SF:9:01\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20234\r\n
SF:Connection:\x20close\r\n\r\n\r\n\r\n405\x20Not\x20Allow
SF:ed\r\n\r\n405\x20Not\x20Allowed
\r\n
Powered\x20by\x20DingTalk/1\.0\.0
tengine\r\n\r\n\r\n")%r(FourOhFourRequest,17E,"HTTP/1\.1\x
SF:20404\x20Not\x20Found\r\nServer:\x20DingTalk/1\.0\.0\r\nDate:\x20Sat,\x
SF:2013\x20Sep\x202025\x2002:59:02\x20GMT\r\nContent-Type:\x20text/html\r\
SF:nContent-Length:\x20230\r\nConnection:\x20close\r\n\r\n\r\n\r\n404\x20Not\x20Found\r\n\r\n404
SF:\x20Not\x20Found
\r\n
Powered\x20by\x20DingTalk/1\.0\.
SF:0
tengine\r\n\r\n\r\n")%r(tor-version
SF:s,184,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20DingTalk/1\.0\.
SF:0\r\nDate:\x20Sat,\x2013\x20Sep\x202025\x2002:59:02\x20GMT\r\nContent-T
SF:ype:\x20text/html\r\nContent-Length:\x20234\r\nConnection:\x20close\r\n
SF:\r\n\r\n\r\n400\x20Bad\x20Request\r\n\r\n400\x20Bad\x20Request
\r\n
Powered\
SF:x20by\x20DingTalk/1\.0\.0
tengine\r\n\r\n\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Network Distance: 16 hops
TRACEROUTE (using port 443/tcp)
HOP RTT ADDRESS
1 0.22 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177)
2 0.64 ms gw.mcom-colocationamerica.com (208.64.231.81)
3 1.55 ms r1b4.n1p1400.lax.multacom.net (64.69.46.9)
4 ...
5 67.74 ms be2931.ccr31.phx01.atlas.cogentco.com (154.54.44.85)
6 20.06 ms be5471.ccr21.elp02.atlas.cogentco.com (154.54.166.57)
7 30.97 ms be3821.ccr31.dfw01.atlas.cogentco.com (154.54.165.25)
8 37.79 ms port-channel8121.ccr91.jan02.atlas.cogentco.com (154.54.40.250)
9 45.37 ms be3009.ccr41.atl01.atlas.cogentco.com (154.54.29.133)
10 61.54 ms port-channel3482.ccr91.dca04.atlas.cogentco.com (154.54.169.177)
11 63.02 ms be8248.rcr21.b003320-1.dca04.atlas.cogentco.com (154.54.171.70)
12 ... 15
16 58.43 ms 47.246.137.199
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 43.55 seconds