Editing 430.ch Reconnaissance Report (section)

=== Full TCP Scan Summary ===

IPv4 full TCP scan command:

<pre>
nmap -Pn -sS -T3 -p- --max-retries 2 83.228.241.21 83.228.241.25 -oN /root/recon-430ch/nmap-ipv4-full.txt
</pre>

IPv6 full TCP scan command:

<pre>
nmap -Pn -6 -sT -T3 -p- --max-retries 2 2001:1600:18:102::167 2001:1600:18:102::26f -oN /root/recon-430ch/nmap-ipv6-full.txt
</pre>

<code>83.228.241.21</code> / <code>2001:1600:18:102::167</code>:

<pre>
22/tcp  open  ssh
80/tcp  open  http
443/tcp open  https
</pre>

IPv4 notes:

<pre>
Not shown: 65532 filtered tcp ports (no-response)
</pre>

IPv6 notes:

<pre>
Not shown: 65532 filtered tcp ports (no-response)
</pre>

<code>83.228.241.25</code> / <code>2001:1600:18:102::26f</code>:

IPv4:

<pre>
22/tcp   open     ssh
80/tcp   open     http
443/tcp  open     https
5355/tcp open     llmnr
6567/tcp open     esp
8080/tcp filtered http-proxy
</pre>

IPv6:

<pre>
22/tcp   open  ssh
80/tcp   open  http
443/tcp  open  https
5355/tcp open  llmnr
6567/tcp open  esp
8080/tcp open  http-proxy
</pre>

Nmap labels for <code>5355</code>, <code>6567</code>, and <code>8080</code> should be interpreted carefully:

* <code>5355</code> is conventionally LLMNR, but version probes did not complete with a more certain identification before being stopped.
* <code>6567</code> was labeled <code>esp?</code> by nmap because the response fingerprint was not recognized. The port number and behavior align with a likely game service, especially Mindustry.
* <code>8080</code> on IPv6 was confirmed by service detection as Apache HTTPD <code>2.4.67 (Debian)</code>.