Editing Marcotrix.xyz Reconnaissance Report (section)

== Targeted Service Checks ==

Important scope note:

* A full TCP port sweep was not performed because the domain was not verified.
* The checks below targeted ports already identified by Shodan InternetDB or by DNS/mail service evidence.

Shodan InternetDB for <code>57.131.38.220</code>:

<pre>
{
  "cpes": [
    "cpe:/a:caddyserver:caddy",
    "cpe:/a:golang:go",
    "cpe:/a:ntp:ntp:4"
  ],
  "hostnames": ["mail.marcotrix.xyz"],
  "ip": "57.131.38.220",
  "ports": [80, 123, 143, 443, 465, 587, 993, 5201],
  "tags": ["starttls"],
  "vulns": []
}
</pre>

Targeted nmap TCP check:

<pre>
PORT     STATE  SERVICE    VERSION
80/tcp   open   http       Caddy httpd
123/tcp  closed ntp
143/tcp  closed imap
443/tcp  open   ssl/https?
465/tcp  closed smtps
587/tcp  closed submission
993/tcp  closed imaps
5201/tcp open   iperf3
</pre>

Targeted mail-port check:

<pre>
25/tcp  filtered smtp
110/tcp closed   pop3
143/tcp closed   imap
465/tcp closed   smtps
587/tcp closed   submission
993/tcp closed   imaps
995/tcp closed   pop3s
</pre>

Targeted UDP check:

<pre>
123/udp open ntp NTP v4 (secondary server)
</pre>

Interpretation:

* Inbound mail to the advertised MX may not be reachable from this vantage point (<code>25/tcp filtered</code>; submission/IMAP closed).
* <code>5201/tcp</code> is open as iperf3, which is typically a network performance testing service.
* <code>123/udp</code> is open as NTP v4.