What might the reason be NMAP is giving a different result when scanning:
- bulk domains?
- service detection enabled?
When scanning bulk, where domain X is part of, this is the result I get:
PORT STATE SERVICE 21/tcp open ftp 22/tcp open ssh 25/tcp filtered smtp 80/tcp open http
When scanning the same domain X individually:
PORT STATE SERVICE 21/tcp open ftp 22/tcp open ssh 25/tcp open smtp 80/tcp open http
So why does it show filtered as State when scanning bulk - and when scanning individually, it shows the state as open?
When I enable service detection (-sV), this is what I get of domain X scanning individually:
PORT STATE SERVICE VERSION 21/tcp open tcpwrapped 22/tcp open tcpwrapped 25/tcp open smtp Postfix smtpd 80/tcp open http Apache httpd
Why is the service of port 21 and 22 of the same domain out of the sudden now tcpwrapped?
The same behavior exists when scanning yet again bulk, with service detection.
This makes on sense!
Has anyone got an idea how I can scan bulk, without getting a "tcpwrapped" or a "filtered" as result?