# Nmap 7.94SVN scan initiated Thu Feb 20 12:30:08 2025 as: nmap --privileged -sV -p- -T4 -O --min-parallelism 100 --max-rtt-timeout 1s -oN /var/www/html/nmap/results/4fba80f7-8502-4d66-8cb1-2ae5ecc7ec0c.txt 132.185.160.179 151.101.64.82 212.58.255.217 151.101.192.82 35.178.11.2 212.58.244.72 132.185.151.134 52.97.146.72 151.101.0.82 132.185.151.149 10.10.48.41 198.51.45.9 132.185.132.21 132.185.132.34 212.58.242.5 212.58.244.205 132.185.160.177 132.185.151.150 132.185.142.146 212.58.251.122 212.58.228.104 132.185.160.180 192.168.193.10 212.58.249.156 52.98.204.168 132.185.151.149 212.58.249.120 198.51.44.9 10.72.136.19 10.52.69.191 132.185.160.100 212.58.249.144 132.185.132.3 132.185.132.19 132.185.151.134 212.58.244.98 63.33.109.90 52.97.146.88 212.58.244.83 132.185.132.16 132.185.151.133 132.185.161.179 151.101.128.81 151.101.192.82 13.227.219.58 52.97.146.8 2.16.6.220 151.101.0.81 52.98.196.24 212.58.228.23 212.58.228.15 81.144.28.238 52.98.204.152 212.58.226.147 52.98.205.88 132.185.160.177 132.185.158.45 212.58.244.187 132.185.161.176 81.144.28.241 212.58.249.224 52.98.214.120 99.80.224.186 212.58.244.104 212.58.228.78 132.185.151.133 132.185.132.32 132.185.151.150 151.101.64.82 198.51.44.9 151.101.192.82 212.58.228.25 132.185.132.12 23.53.112.149 3.9.51.107 212.58.251.122 132.185.132.16 132.185.151.148 132.185.160.176 198.51.45.9 212.58.228.94 212.58.244.22 151.101.0.82 132.185.153.97 132.185.132.16 212.58.251.88 34.90.160.40 212.58.244.16 151.101.128.82 151.101.192.81 212.58.244.186 132.185.151.132 10.72.136.19 132.185.142.146 212.58.249.112 212.58.244.17 151.101.192.82 212.58.228.86 172.29.161.54 212.58.249.146 151.101.64.82 132.185.151.132 54.155.236.209 132.185.161.177 81.144.28.241 212.58.244.16 132.185.132.130 132.185.161.180 132.185.132.13 212.58.249.147 212.58.249.183 212.58.249.199 172.31.55.87 212.58.228.26 151.101.192.82 212.58.244.98 13.227.219.83 212.58.228.62 198.51.45.9 2.16.6.202 10.57.48.79 212.58.249.121 212.58.244.129 151.101.64.82 132.185.144.154 212.58.244.15 132.185.159.183 212.58.249.145 212.58.249.144 52.209.149.93 132.185.160.176 151.101.0.82 132.185.132.16 151.101.64.82 132.185.240.37 212.58.228.21 132.185.161.176 151.101.128.82 212.58.230.158 212.58.249.199 132.185.161.100 151.101.64.81 212.58.244.9 207.169.33.39 212.58.226.91 13.227.219.122 172.29.120.48 151.101.128.82 212.58.226.146 151.101.0.82 212.58.249.206 132.185.161.177 212.58.244.15 212.58.249.113 132.185.132.21 34.90.160.40 52.97.146.120 212.58.244.23 212.58.247.239 212.58.228.100 212.58.249.113 212.58.249.207 212.58.244.57 212.58.250.23 46.137.181.193 132.185.160.177 212.58.244.83 54.77.244.106 52.16.246.43 81.144.28.241 212.58.242.133 212.58.249.198 212.58.249.198 52.97.166.168 23.53.112.149 212.58.244.73 52.19.225.170 212.58.244.56 132.185.151.148 151.101.128.82 148.163.199.65 132.185.132.1 132.185.69.251 132.185.132.17 212.58.226.92 212.58.244.210 18.200.133.248 132.185.132.2 212.58.249.112 212.58.249.200 198.51.44.9 212.58.230.134 52.97.178.72 132.185.132.10 52.98.198.248 132.185.161.177 132.185.132.141 151.101.0.82 13.41.43.220 151.101.0.82 212.58.236.67 212.58.249.225 212.58.255.218 132.185.132.199 132.185.161.176 212.58.244.99 13.227.219.18 198.51.45.9 151.101.128.82 132.185.132.142 212.58.249.141 132.185.160.176 40.99.148.200 54.77.66.137 132.185.132.21 151.101.64.82 212.58.228.29 151.101.192.82 212.58.244.56 132.185.161.100 212.58.228.35 151.101.128.82 52.97.131.248
Warning: 132.185.160.179 giving up on port because retransmission cap hit (6).
Nmap scan report for mailout0.cwwtf.bbc.co.uk (132.185.160.179)
Host is up (0.0091s latency).
Not shown: 65188 closed tcp ports (reset), 342 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.82
Host is up (0.0028s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B7274E%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100147-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2012:59:57\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100147-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOpti
SF:ons,200,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20c
SF:lose\r\nContent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-After:\x2
SF:00\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-ca
SF:che\r\nX-Served-By:\x20cache-ams21027-AMS\r\nAccept-Ranges:\x20bytes\r\
SF:nDate:\x20Thu,\x2020\x20Feb\x202025\x2012:59:57\x20GMT\r\nVia:\x201\.1\
SF:x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\
SF:x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\
SF:x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x2
SF:0been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams210
SF:27-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,94,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21041\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\.1
SF:\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2
SF:011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x2
SF:0cache-ams21022\r\n\r\nBad\x20Request")%r(FourOhFourRequest,200,"HTTP/1
SF:\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent
SF:-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-t
SF:ype:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served
SF:-By:\x20cache-ams21082-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Thu,\
SF:x2020\x20Feb\x202025\x2012:59:57\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\
SF:r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</
SF:title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\
SF:.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\
SF:x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21082-AMS\x20\(151
SF:\.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B72754%P=x86_64-pc-linux-
SF:gnu%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCo
SF:nnection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/p
SF:lain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21029\r\n\r\nRequest
SF:ed\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20
SF:Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d09341
SF:8c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20
SF:this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guide
SF:s/common-400-errors#error-421-misdirected-request\x20for\x20more\x20inf
SF:ormation\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x20421\x20Misdire
SF:cted\x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\nco
SF:ntent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-am
SF:s21079\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subje
SF:ct\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\
SF:[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20
SF:in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\
SF:.fastly\.com/en/guides/common-400-errors#error-421-misdirected-request\
SF:x20for\x20more\x20information\.\r\n\r")%r(tor-versions,96,"HTTP/1\.1\x2
SF:0400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011
SF:\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20ca
SF:che-ams2100105\r\n\r\nBad\x20Request")%r(RTSPRequest,96,"HTTP/1\.1\x204
SF:00\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011\r
SF:\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cach
SF:e-ams2100141\r\n\r\nBad\x20Request")%r(RPCCheck,96,"HTTP/1\.1\x20400\x2
SF:0Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011\r\ncon
SF:tent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams
SF:2100120\r\n\r\nBad\x20Request")%r(DNSVersionBindReqTCP,94,"HTTP/1\.1\x2
SF:0400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011
SF:\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20ca
SF:che-ams21081\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.192.82
Host is up (0.0028s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B7274E%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100109-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2012:59:57\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100109-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOpt
SF:ions,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20
SF:close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x
SF:200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-c
SF:ache\r\nX-Served-By:\x20cache-ams21049-AMS\r\nAccept-Ranges:\x20bytes\r
SF:\nDate:\x20Thu,\x2020\x20Feb\x202025\x2012:59:57\x20GMT\r\nVia:\x201\.1
SF:\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown
SF:\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown
SF:\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x
SF:20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21
SF:049-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21052\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\
SF:x20cache-ams2100103\r\n\r\nBad\x20Request")%r(FourOhFourRequest,205,"HT
SF:TP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconte
SF:nt-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Se
SF:rved-By:\x20cache-ams2100122-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x2
SF:0Thu,\x2020\x20Feb\x202025\x2012:59:57\x20GMT\r\nVia:\x201\.1\x20varnis
SF:h\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain
SF:\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain
SF::\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20
SF:added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100122-AMS\
SF:x20\(151\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B72754%P=x86_64-pc-linux-
SF:gnu%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCo
SF:nnection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/p
SF:lain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21023\r\n\r\nRequest
SF:ed\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20
SF:Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d09341
SF:8c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20
SF:this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guide
SF:s/common-400-errors#error-421-misdirected-request\x20for\x20more\x20inf
SF:ormation\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x20421\x20Misdire
SF:cted\x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\nco
SF:ntent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-am
SF:s21045\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subje
SF:ct\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\
SF:[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20
SF:in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\
SF:.fastly\.com/en/guides/common-400-errors#error-421-misdirected-request\
SF:x20for\x20more\x20information\.\r\n\r")%r(tor-versions,94,"HTTP/1\.1\x2
SF:0400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011
SF:\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20ca
SF:che-ams21024\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"HTTP/1\.1\x20400
SF:\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011\r\n
SF:content-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-
SF:ams21077\r\n\r\nBad\x20Request")%r(RPCCheck,96,"HTTP/1\.1\x20400\x20Bad
SF:\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100
SF:117\r\n\r\nBad\x20Request")%r(DNSVersionBindReqTCP,94,"HTTP/1\.1\x20400
SF:\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011\r\n
SF:content-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-
SF:ams21050\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip117.telhc.bbc.co.uk (212.58.244.72)
Host is up (0.0093s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B7274E%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.97.146.72
Host is up (0.010s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for 151.101.0.82
Host is up (0.0024s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B7274E%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,1FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21077-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2012:59:57\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21077-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOptions,1
SF:FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\
SF:r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\
SF:ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r
SF:\nX-Served-By:\x20cache-ams21038-AMS\r\nAccept-Ranges:\x20bytes\r\nDate
SF::\x20Thu,\x2020\x20Feb\x202025\x2012:59:57\x20GMT\r\nVia:\x201\.1\x20va
SF:rnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20do
SF:main\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20do
SF:main:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been
SF:\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21038-AM
SF:S\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,96,"HTTP/1\.
SF:1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x
SF:2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x
SF:20cache-ams2100115\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1\x20
SF:400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011\
SF:r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cac
SF:he-ams2100146\r\n\r\nBad\x20Request")%r(FourOhFourRequest,1FF,"HTTP/1\.
SF:1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent-L
SF:ength:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-typ
SF:e:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served-B
SF:y:\x20cache-ams21082-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Thu,\x2
SF:020\x20Feb\x202025\x2012:59:57\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\r\
SF:n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</ti
SF:tle>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\.\
SF:x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\x2
SF:0to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21082-AMS\x20\(151\.
SF:101\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B72754%P=x86_64-pc-linux-
SF:gnu%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCo
SF:nnection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/p
SF:lain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21038\r\n\r\nRequest
SF:ed\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20
SF:Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d09341
SF:8c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20
SF:this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guide
SF:s/common-400-errors#error-421-misdirected-request\x20for\x20more\x20inf
SF:ormation\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x20421\x20Misdire
SF:cted\x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\nco
SF:ntent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-am
SF:s2100136\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Sub
SF:ject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x2
SF:0\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x
SF:20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://doc
SF:s\.fastly\.com/en/guides/common-400-errors#error-421-misdirected-reques
SF:t\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,94,"HTTP/1\.1\
SF:x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x20
SF:11\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20
SF:cache-ams21044\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"HTTP/1\.1\x204
SF:00\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011\r
SF:\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cach
SF:e-ams21064\r\n\r\nBad\x20Request")%r(RPCCheck,96,"HTTP/1\.1\x20400\x20B
SF:ad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011\r\nconte
SF:nt-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21
SF:00132\r\n\r\nBad\x20Request")%r(DNSVersionBindReqTCP,94,"HTTP/1\.1\x204
SF:00\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011\r
SF:\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cach
SF:e-ams21076\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for dns2.p09.nsone.net (198.51.45.9)
Host is up (0.0028s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for ftping501.bc.bbc.co.uk (212.58.242.5)
Host is up (0.0093s latency).
Not shown: 65530 closed tcp ports (reset)
PORT    STATE    SERVICE   VERSION
21/tcp  open     ftp       ProFTPD 1.3.5b
25/tcp  filtered smtp
80/tcp  open     http      Apache httpd 2.4.6 ((Red Hat Enterprise Linux) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5)
123/tcp filtered ntp
443/tcp open     ssl/https Apache/2.4.6 (Red Hat Enterprise Linux) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (94%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 3.10 - 3.12 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 3.13 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.9 (89%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Unix

Nmap scan report for bbc-vip194.telhc.bbc.co.uk (212.58.244.205)
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B73A83%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type:\x20te
SF:xt/html\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2014:21:54\x20GMT\r\nCon
SF:nection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x20html>
SF:\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--\x20VER
SF:SION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BBC\x20-\
SF:x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\x20<met
SF:a\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content-Type\"
SF:>\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"encoding\
SF:">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20initial-s
SF:cale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20\x20<me
SF:ta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatible\">\n
SF:\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20name=\"rob
SF:ots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\x20name
SF:=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x20of\x2
SF:0the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x20headli
SF:nes,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x20much\x
SF:20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\"\x20na
SF:me=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www\.bbc\.
SF:co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\x20")%r
SF:(HTTPOptions,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type:\x2
SF:0text/html\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2014:21:54\x20GMT\r\n
SF:Connection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x20ht
SF:ml>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--\x20
SF:VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BBC\x2
SF:0-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\x20<
SF:meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content-Typ
SF:e\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"encodi
SF:ng\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20initia
SF:l-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20\x20
SF:<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatible\"
SF:>\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20name=\"
SF:robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\x20n
SF:ame=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x20of
SF:\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x20hea
SF:dlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x20muc
SF:h\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\"\x2
SF:0name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www\.bb
SF:c\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\x20"
SF:);
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B73A89%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type
SF::\x20text/html\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2014:22:00\x20GMT
SF:\r\nConnection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x
SF:20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--
SF:\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BB
SF:C\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\
SF:x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content
SF:-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"en
SF:coding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20in
SF:itial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20
SF:\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatib
SF:le\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20nam
SF:e=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\
SF:x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x
SF:20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x2
SF:0headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x2
SF:0much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\
SF:"\x20name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www
SF:\.bbc\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\
SF:x20")%r(HTTPOptions,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-T
SF:ype:\x20text/html\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2014:22:00\x20
SF:GMT\r\nConnection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYP
SF:E\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<
SF:!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x2
SF:0BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x
SF:20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Cont
SF:ent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\
SF:"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x2
SF:0initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\
SF:x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compa
SF:tible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20
SF:name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width
SF:\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20bes
SF:t\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport
SF:\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and
SF:\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Onli
SF:ne\"\x20name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://
SF:www\.bbc\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x
SF:20\x20");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin1.cwwtf.bbc.co.uk (132.185.160.177)
Host is up (0.0096s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for cloud.virt.ch.bbc.co.uk (132.185.142.146)
Host is up (0.011s latency).
Not shown: 65430 filtered tcp ports (no-response), 101 closed tcp ports (reset)
PORT     STATE SERVICE   VERSION
21/tcp   open  ftp       vsftpd 3.0.3
80/tcp   open  http      Apache httpd 2.4.29
443/tcp  open  ssl/https Apache/2.4.29 (Ubuntu)
8443/tcp open  ssl/http  Apache httpd 2.4.29
Device type: general purpose|storage-misc|firewall|broadband router
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (87%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (86%), Zhone embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Linux 2.6.32 (87%), Linux 3.10 - 3.12 (87%), Linux 4.4 (87%), Linux 2.6.39 (86%), Linux 3.4 (86%), Linux 3.5 (86%), Synology DiskStation Manager 5.1 (86%), WatchGuard Fireware 11.8 (86%), Linux 2.6.32 or 3.10 (86%), Zhone GPON home gateway (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Hosts: default, artifactory-noforge.virt.ch.bbc.co.uk; OS: Unix

Nmap scan report for lists1.telhc.bbc.co.uk (212.58.251.122)
Host is up (0.0097s latency).
Not shown: 65528 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
587/tcp   open     smtp       Sendmail 8.14.9+Sun/8.12.9
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (87%), Oracle Solaris 11|10 (86%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:oracle:solaris:11 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (87%), Oracle Solaris 11 (86%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Unix

Nmap scan report for mailout1.cwwtf.bbc.co.uk (132.185.160.180)
Host is up (0.0095s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip094.lbh.bbc.co.uk (212.58.249.156)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B73A83%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type:\x20te
SF:xt/html\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2014:21:53\x20GMT\r\nCon
SF:nection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x20html>
SF:\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--\x20VER
SF:SION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BBC\x20-\
SF:x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\x20<met
SF:a\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content-Type\"
SF:>\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"encoding\
SF:">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20initial-s
SF:cale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20\x20<me
SF:ta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatible\">\n
SF:\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20name=\"rob
SF:ots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\x20name
SF:=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x20of\x2
SF:0the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x20headli
SF:nes,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x20much\x
SF:20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\"\x20na
SF:me=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www\.bbc\.
SF:co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\x20")%r
SF:(HTTPOptions,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type:\x2
SF:0text/html\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2014:21:53\x20GMT\r\n
SF:Connection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x20ht
SF:ml>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--\x20
SF:VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BBC\x2
SF:0-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\x20<
SF:meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content-Typ
SF:e\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"encodi
SF:ng\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20initia
SF:l-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20\x20
SF:<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatible\"
SF:>\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20name=\"
SF:robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\x20n
SF:ame=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x20of
SF:\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x20hea
SF:dlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x20muc
SF:h\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\"\x2
SF:0name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www\.bb
SF:c\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\x20"
SF:);
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B73A89%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type
SF::\x20text/html\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2014:21:59\x20GMT
SF:\r\nConnection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x
SF:20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--
SF:\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BB
SF:C\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\
SF:x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content
SF:-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"en
SF:coding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20in
SF:itial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20
SF:\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatib
SF:le\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20nam
SF:e=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\
SF:x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x
SF:20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x2
SF:0headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x2
SF:0much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\
SF:"\x20name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www
SF:\.bbc\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\
SF:x20")%r(HTTPOptions,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-T
SF:ype:\x20text/html\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2014:21:59\x20
SF:GMT\r\nConnection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYP
SF:E\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<
SF:!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x2
SF:0BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x
SF:20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Cont
SF:ent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\
SF:"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x2
SF:0initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\
SF:x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compa
SF:tible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20
SF:name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width
SF:\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20bes
SF:t\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport
SF:\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and
SF:\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Onli
SF:ne\"\x20name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://
SF:www\.bbc\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x
SF:20\x20");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 4.9 (88%), Linux 3.10 - 3.12 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.98.204.168
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for bbc-vip058.lbh.bbc.co.uk (212.58.249.120)
Host is up (0.0094s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B73A83%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (96%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (96%), Linux 4.0 (92%), Linux 3.10 - 4.11 (90%), Linux 3.11 - 4.1 (90%), Linux 3.2 - 4.9 (90%), Linux 5.1 (90%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (89%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ns4.demysdns.co.uk (198.51.44.9)
Host is up (0.0030s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for gatea.cwwtf.bbc.co.uk (132.185.160.100)
Host is up (0.0100s latency).
Not shown: 65530 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (91%), Sun OpenSolaris (86%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:opensolaris cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (91%), Sun Solaris 10 (SPARC) (91%), Sun OpenSolaris 2009.06 (86%), Sun Solaris 9 (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip082.lbh.bbc.co.uk (212.58.249.144)
Host is up (0.0099s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (95%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (95%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (89%), Linux 2.6.32 - 2.6.35 (87%), Linux 2.6.32 - 2.6.39 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip197.telhc.bbc.co.uk (212.58.244.98)
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ec2-63-33-109-90.eu-west-1.compute.amazonaws.com (63.33.109.90)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      nginx 1.14.1
443/tcp open  ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B73A89%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1B0,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-
SF:Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max
SF:-Age=3600;\x20Path=/;\x20Expires=Thu,\x2020\x20Feb\x202025\x2015:22:00\
SF:x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://picos\.tools\.bb
SF:c\.co\.uk/landing\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x2
SF:0charset=utf-8\r\nContent-Length:\x2072\r\nDate:\x20Thu,\x2020\x20Feb\x
SF:202025\x2014:22:00\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20R
SF:edirect\.\x20Redirecting\x20to\x20https://picos\.tools\.bbc\.co\.uk/lan
SF:ding")%r(HTTPOptions,1B0,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\n
SF:Set-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x2
SF:0Max-Age=3600;\x20Path=/;\x20Expires=Thu,\x2020\x20Feb\x202025\x2015:22
SF::00\x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://picos\.tools
SF:\.bbc\.co\.uk/landing\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain
SF:;\x20charset=utf-8\r\nContent-Length:\x2072\r\nDate:\x20Thu,\x2020\x20F
SF:eb\x202025\x2014:22:00\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\
SF:x20Redirect\.\x20Redirecting\x20to\x20https://picos\.tools\.bbc\.co\.uk
SF:/landing")%r(FourOhFourRequest,1DD,"HTTP/1\.1\x20307\x20Temporary\x20Re
SF:direct\r\nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F
SF:nice%2520ports%252C%2FTri%256Eity\.txt%252ebak%22%7D;\x20Max-Age=3600;\
SF:x20Path=/;\x20Expires=Thu,\x2020\x20Feb\x202025\x2015:22:01\x20GMT;\x20
SF:HttpOnly;\x20Secure\r\nLocation:\x20https://picos\.tools\.bbc\.co\.uk/l
SF:anding\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x20charset=ut
SF:f-8\r\nContent-Length:\x2072\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x201
SF:4:22:01\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20Redirect\.\x
SF:20Redirecting\x20to\x20https://picos\.tools\.bbc\.co\.uk/landing")%r(RT
SF:SPRequest,2F,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20clos
SF:e\r\n\r\n")%r(TerminalServerCookie,2F,"HTTP/1\.1\x20400\x20Bad\x20Reque
SF:st\r\nConnection:\x20close\r\n\r\n")%r(SMBProgNeg,2F,"HTTP/1\.1\x20400\
SF:x20Bad\x20Request\r\nConnection:\x20close\r\n\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for 52.97.146.88
Host is up (0.012s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for bbc-vip128.telhc.bbc.co.uk (212.58.244.83)
Host is up (0.0095s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailout0.telhc.bbc.co.uk (132.185.161.179)
Host is up (0.0092s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.81
Host is up (0.0026s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B73A82%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100124-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2014:21:54\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100124-AMS\x20\(151\.101\.128\.81\)</p></body></html>")%r(HTTPOpt
SF:ions,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20
SF:close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x
SF:200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-c
SF:ache\r\nX-Served-By:\x20cache-ams21021-AMS\r\nAccept-Ranges:\x20bytes\r
SF:\nDate:\x20Thu,\x2020\x20Feb\x202025\x2014:21:54\x20GMT\r\nVia:\x201\.1
SF:\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown
SF:\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown
SF:\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x
SF:20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21
SF:021-AMS\x20\(151\.101\.128\.81\)</p></body></html>")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21021\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\
SF:x20cache-ams21045\r\n\r\nBad\x20Request")%r(FourOhFourRequest,205,"HTTP
SF:/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent
SF:-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serv
SF:ed-By:\x20cache-ams2100106-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20T
SF:hu,\x2020\x20Feb\x202025\x2014:21:54\x20GMT\r\nVia:\x201\.1\x20varnish\
SF:r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x
SF:20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\
SF:x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20ad
SF:ded\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100106-AMS\x2
SF:0\(151\.101\.128\.81\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B73A89%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100089\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb348716e94e9f83a
SF:c23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100
SF:100\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\
SF:x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7c
SF:cb348716e94e9f83ac23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\
SF:x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fa
SF:stly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20
SF:for\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1
SF:\x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100107\r\n\r\nRequested\x20host\x20does\x20not\x20m
SF:atch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS
SF:\x20certificate\x20\[7ccb348716e94e9f83ac23533d4648b0a3a69ede6bd4117e83
SF:0122876855c81a\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVi
SF:sit\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-
SF:misdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versi
SF:ons,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r
SF:\nx-served-by:\x20cache-ams21075\r\n\r\nBad\x20Request")%r(RTSPRequest,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100108\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for server-13-227-219-58.ams54.r.cloudfront.net (13.227.219.58)
Host is up (0.0027s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Amazon CloudFront httpd
443/tcp open  ssl/https CloudFront
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for 52.97.146.8
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for a2-16-6-220.deploy.static.akamaitechnologies.com (2.16.6.220)
Host is up (0.0029s latency).
Not shown: 65531 filtered tcp ports (no-response)
PORT     STATE  SERVICE          VERSION
53/tcp   closed domain
80/tcp   open   http             AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
443/tcp  open   ssl/https?
8883/tcp open   ssl/secure-mqtt?
Device type: general purpose|storage-misc|firewall
Running (JUST GUESSING): Linux 2.6.X|4.X|3.X|5.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (86%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:5 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 4.4 (92%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.0 (89%), Linux 5.0 - 5.4 (88%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 2.6.18 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.0.81
Host is up (0.0026s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B73A82%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,1FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21079-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2014:21:54\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21079-AMS\x20\(151\.101\.0\.81\)</p></body></html>")%r(HTTPOptions,2
SF:03,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\
SF:r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\
SF:ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r
SF:\nX-Served-By:\x20cache-ams2100124-AMS\r\nAccept-Ranges:\x20bytes\r\nDa
SF:te:\x20Thu,\x2020\x20Feb\x202025\x2014:21:54\x20GMT\r\nVia:\x201\.1\x20
SF:varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20
SF:domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20
SF:domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20be
SF:en\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams210012
SF:4-AMS\x20\(151\.101\.0\.81\)</p></body></html>")%r(RTSPRequest,94,"HTTP
SF:/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21051\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1\x
SF:20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x201
SF:1\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20c
SF:ache-ams2100105\r\n\r\nBad\x20Request")%r(FourOhFourRequest,1FF,"HTTP/1
SF:\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent
SF:-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-t
SF:ype:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served
SF:-By:\x20cache-ams21050-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Thu,\
SF:x2020\x20Feb\x202025\x2014:21:54\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\
SF:r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</
SF:title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\
SF:.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\
SF:x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21050-AMS\x20\(151
SF:\.101\.0\.81\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B73A89%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100131\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb348716e94e9f83a
SF:c23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100
SF:126\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\
SF:x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7c
SF:cb348716e94e9f83ac23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\
SF:x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fa
SF:stly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20
SF:for\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1
SF:\x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21058\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[7ccb348716e94e9f83ac23533d4648b0a3a69ede6bd4117e8301
SF:22876855c81a\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams21045\r\n\r\nBad\x20Request")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100122\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.98.196.24
Host is up (0.012s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for 212.58.228.23
Host is up (0.0090s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  closed https
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: firewall|proxy server|WAP|general purpose|phone|telecom-misc
Running: Check Point embedded, Citrix embedded, Juniper IVE OS 7.X, Linksys embedded, Linux 2.4.X|2.6.X, ISS embedded, Avaya Communication Manager
OS CPE: cpe:/h:checkpoint:zonealarm_z100g cpe:/h:juniper:mag2600 cpe:/h:linksys:wap54g cpe:/o:linux:linux_kernel:2.4.18 cpe:/h:iss:proventia_gx3002c cpe:/o:linux:linux_kernel:2.6.24 cpe:/o:linux:linux_kernel:2.6.11 cpe:/a:avaya:communication_manager
Too many fingerprints match this host to give specific OS details

Nmap scan report for 212.58.228.15
Host is up (0.0096s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|firewall|storage-misc|WAP|webcam
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X|2.4.X (92%), WatchGuard Fireware 11.X (86%), Synology DiskStation Manager 5.X (85%), Tandberg embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:watchguard:fireware:11.8 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:linux:linux_kernel:2.4 cpe:/h:tandberg:vcs
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 4.4 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 2.6.32 - 3.0 (88%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 4.0 (87%), Linux 2.6.18 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.98.204.152
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for 52.98.205.88
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for 132.185.158.45
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
113/tcp closed ident
443/tcp open   ssl/https?
OS fingerprint not ideal because: Didn't receive UDP response. Please try again with -sSU
No OS matches for host

Nmap scan report for fmt-vip47.telhc.bbc.co.uk (212.58.244.187)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B73A83%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin0.telhc.bbc.co.uk (132.185.161.176)
Host is up (0.010s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip162.lbh.bbc.co.uk (212.58.249.224)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B73A83%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 3.10 - 3.12 (90%), Linux 5.1 (89%), Linux 2.6.32 (89%), Linux 2.6.32 or 3.10 (89%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.98.214.120
Host is up (0.012s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for ec2-99-80-224-186.eu-west-1.compute.amazonaws.com (99.80.224.186)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B73A82%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,32F8,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Thu,\x2020
SF:\x20Feb\x202025\x2014:21:53\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e
SF:98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOC
SF:TYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x
SF:20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20
SF:\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x2
SF:0\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"C
SF:ontent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equi
SF:v=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,
SF:\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x
SF:20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Co
SF:mpatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\
SF:x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wi
SF:dth\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20
SF:best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sp
SF:ort\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20
SF:and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20O
SF:nline\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,
SF:147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Thu,\x2020\x20Feb\x
SF:202025\x2014:21:53\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Leng
SF:th:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agen
SF:t-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</
SF:title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cent
SF:er>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTS
SF:PRequest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Thu,\x2020
SF:\x20Feb\x202025\x2014:21:53\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r
SF:\n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>
SF:\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>open
SF:resty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B73A87%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,17D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Th
SF:u,\x2020\x20Feb\x202025\x2014:21:58\x20GMT\r\nContent-Type:\x20text/htm
SF:l\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nServer:\x20BBC-G
SF:TM\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x20SSL\x20certif
SF:icate\x20was\x20sent</title></head>\r\n<body>\r\n<center><h1>400\x20Bad
SF:\x20Request</h1></center>\r\n<center>No\x20required\x20SSL\x20certifica
SF:te\x20was\x20sent</center>\r\n<hr><center>openresty</center>\r\n</body>
SF:\r\n</html>\r\n")%r(HTTPOptions,17D,"HTTP/1\.1\x20400\x20Bad\x20Request
SF:\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2014:21:58\x20GMT\r\nContent-Ty
SF:pe:\x20text/html\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nS
SF:erver:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x
SF:20SSL\x20certificate\x20was\x20sent</title></head>\r\n<body>\r\n<center
SF:><h1>400\x20Bad\x20Request</h1></center>\r\n<center>No\x20required\x20S
SF:SL\x20certificate\x20was\x20sent</center>\r\n<hr><center>openresty</cen
SF:ter>\r\n</body>\r\n</html>\r\n")%r(FourOhFourRequest,17D,"HTTP/1\.1\x20
SF:400\x20Bad\x20Request\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2014:21:58
SF:\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20234\r\nConn
SF:ection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>40
SF:0\x20No\x20required\x20SSL\x20certificate\x20was\x20sent</title></head>
SF:\r\n<body>\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<cente
SF:r>No\x20required\x20SSL\x20certificate\x20was\x20sent</center>\r\n<hr><
SF:center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(tor-versions,12
SF:D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Thu,\x2020\x20Feb\x20
SF:2025\x2014:21:58\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length
SF::\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\
SF:n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\r\n<center
SF:><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>openresty</cent
SF:er>\r\n</body>\r\n</html>\r\n")%r(RTSPRequest,12D,"HTTP/1\.1\x20400\x20
SF:Bad\x20Request\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2014:22:03\x20GMT
SF:\r\nContent-Type:\x20text/html\r\nContent-Length:\x20154\r\nConnection:
SF:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20Ba
SF:d\x20Request</title></head>\r\n<body>\r\n<center><h1>400\x20Bad\x20Requ
SF:est</h1></center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</htm
SF:l>\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bbc-vip140.telhc.bbc.co.uk (212.58.244.104)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.228.25
Host is up (0.0095s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|storage-misc|firewall
Running (JUST GUESSING): Linux 2.6.X|4.X|3.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (86%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 4.4 (92%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 4.0 (87%), Linux 2.6.18 (87%), Linux 2.6.32 - 3.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gatec.lh.bbc.co.uk (132.185.132.12)
Host is up (0.0092s latency).
All 65535 scanned ports on gatec.lh.bbc.co.uk (132.185.132.12) are in ignored states.
Not shown: 65535 filtered tcp ports (no-response)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Sun Solaris 8|9
OS CPE: cpe:/o:sun:sunos:5.8 cpe:/o:sun:sunos:5.9
OS details: Sun Solaris 8, Sun Solaris 9 (SPARC)

Nmap scan report for a23-53-112-149.deploy.static.akamaitechnologies.com (23.53.112.149)
Host is up (0.0033s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE  VERSION
80/tcp  open  http     AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
443/tcp open  ssl/http AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|5.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5
Aggressive OS guesses: Linux 4.15 - 5.8 (85%), Linux 5.0 - 5.4 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin0.cwwtf.bbc.co.uk (132.185.160.176)
Host is up (0.0096s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.228.94
Host is up (0.0092s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  closed https
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: firewall|proxy server|WAP|general purpose|phone|telecom-misc
Running: Check Point embedded, Citrix embedded, Juniper IVE OS 7.X, Linksys embedded, Linux 2.4.X|2.6.X, ISS embedded, Avaya Communication Manager
OS CPE: cpe:/h:checkpoint:zonealarm_z100g cpe:/h:juniper:mag2600 cpe:/h:linksys:wap54g cpe:/o:linux:linux_kernel:2.4.18 cpe:/h:iss:proventia_gx3002c cpe:/o:linux:linux_kernel:2.6.24 cpe:/o:linux:linux_kernel:2.6.11 cpe:/a:avaya:communication_manager
Too many fingerprints match this host to give specific OS details

Nmap scan report for 212.58.244.22
Host is up (0.0095s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B73A83%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for support0.telhc.bbc.co.uk (212.58.251.88)
Host is up (0.0098s latency).
Not shown: 65525 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
21/tcp    open     ftp?
22/tcp    open     ssh?
25/tcp    filtered smtp
80/tcp    open     http       Apache httpd 2.2.34 ((Unix) mod_ssl/2.2.34 OpenSSL/1.0.1t)
443/tcp   open     ssl/http   Apache httpd 2.2.34 ((Unix) mod_ssl/2.2.34 OpenSSL/1.0.1t)
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
5000/tcp  open     upnp?
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port21-TCP:V=7.94SVN%I=7%D=2/20%Time=67B73A7D%P=x86_64-pc-linux-gnu%r(N
SF:ULL,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(GenericLines
SF:,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(Help,1E,"421\x2
SF:0for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(GetRequest,1E,"421\x20for\
SF:x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(HTTPOptions,1E,"421\x20for\x20f
SF:tp\x20use\x20ftp\.bbc\.co\.uk\n")%r(RTSPRequest,1E,"421\x20for\x20ftp\x
SF:20use\x20ftp\.bbc\.co\.uk\n")%r(RPCCheck,1E,"421\x20for\x20ftp\x20use\x
SF:20ftp\.bbc\.co\.uk\n")%r(DNSVersionBindReqTCP,1E,"421\x20for\x20ftp\x20
SF:use\x20ftp\.bbc\.co\.uk\n")%r(DNSStatusRequestTCP,1E,"421\x20for\x20ftp
SF:\x20use\x20ftp\.bbc\.co\.uk\n")%r(SSLSessionReq,1E,"421\x20for\x20ftp\x
SF:20use\x20ftp\.bbc\.co\.uk\n")%r(TerminalServerCookie,1E,"421\x20for\x20
SF:ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(TLSSessionReq,1E,"421\x20for\x20ft
SF:p\x20use\x20ftp\.bbc\.co\.uk\n")%r(Kerberos,1E,"421\x20for\x20ftp\x20us
SF:e\x20ftp\.bbc\.co\.uk\n")%r(SMBProgNeg,1E,"421\x20for\x20ftp\x20use\x20
SF:ftp\.bbc\.co\.uk\n")%r(X11Probe,1E,"421\x20for\x20ftp\x20use\x20ftp\.bb
SF:c\.co\.uk\n")%r(FourOhFourRequest,1E,"421\x20for\x20ftp\x20use\x20ftp\.
SF:bbc\.co\.uk\n")%r(LPDString,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.c
SF:o\.uk\n")%r(LDAPSearchReq,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\
SF:.uk\n")%r(LDAPBindReq,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\
SF:n")%r(SIPOptions,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r
SF:(LANDesk-RC,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(Term
SF:inalServer,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(NCP,1
SF:E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(NotesRPC,1E,"421\
SF:x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(JavaRMI,1E,"421\x20for\x
SF:20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(WMSRequest,1E,"421\x20for\x20ftp
SF:\x20use\x20ftp\.bbc\.co\.uk\n")%r(oracle-tns,1E,"421\x20for\x20ftp\x20u
SF:se\x20ftp\.bbc\.co\.uk\n")%r(ms-sql-s,1E,"421\x20for\x20ftp\x20use\x20f
SF:tp\.bbc\.co\.uk\n")%r(afp,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\
SF:.uk\n")%r(giop,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port5000-TCP:V=7.94SVN%I=7%D=2/20%Time=67B73A82%P=x86_64-pc-linux-gnu%r
SF:(NULL,45E,"\+\+\+\x20\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
SF:\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\
SF:*\*\*\*\*\*\*\*\*\*\r\n\+\+\+\x20\r\n\+\+\+\x20\x20\x20\x20\x20\x20\x20
SF:\x20Atos\x20-\x20BBC\x20Internet\x20Operations\x20-\x20Support\x20Chat\
SF:x20Area\r\n\+\+\+\x20\r\n\+\+\+\x20\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
SF:\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\
SF:*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\r\n\+\+\+\x20\r\n\+\+\+\x20This\x20ch
SF:at\x20area\x20is\x20for\x20the\x20use\x20of\x20employees\x20and\x20cust
SF:omers\x20of\x20Atos\x20Internet\r\n\+\+\+\x20Operations\x20\(BBC\)\x20f
SF:or\x20business\x20communications\.\x20\x20Others\x20with\x20explicit\x2
SF:0\r\n\+\+\+\x20permission\x20of\x20Internet\x20Operations\x20may\x20als
SF:o\x20use\x20the\x20service\.\x20\x20If\x20you\x20do\x20\r\n\+\+\+\x20no
SF:t\x20have\x20permission\x20to\x20use\x20this\x20talker\x20you\x20should
SF:\x20disconnect\x20now\.\r\n\+\+\+\x20\r\n\+\+\+\x20Please\x20remember\x
SF:20that\x20this\x20is\x20a\x20semi-public\x20forum\x20and\x20as\x20such\
SF:x20you\x20should\x20\r\n\+\+\+\x20not\x20say\x20anything\x20on\x20the\x
SF:20talker\x20that\x20you\x20would\x20not\x20say\x20in\x20public\.\x20\x2
SF:0The\x20\r\n\+\+\+\x20use\x20of\x20lists\x20and\x20whispers\x20can\x20m
SF:inimise\x20the\x20audience\x20of\x20your\x20comments\x20\r\n\+\+\+\x20b
SF:ut\x20should\x20not\x20be\x20considered\x20as\x20secure\.\r\n\+\+\+\x20
SF:\r\n\+\+\+\x20Use\x20of\x20the\x20talker\x20will\x20be\x20periodically\
SF:x20monitored\x20to\x20ensure\x20that\x20it\x20is\x20\r\n\+\+\+\x20")%r(
SF:GenericLines,45E,"\+\+\+\x20\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\
SF:*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
SF:\*\*\*\*\*\*\*\*\*\*\*\*\*\r\n\+\+\+\x20\r\n\+\+\+\x20\x20\x20\x20\x20\
SF:x20\x20\x20Atos\x20-\x20BBC\x20Internet\x20Operations\x20-\x20Support\x
SF:20Chat\x20Area\r\n\+\+\+\x20\r\n\+\+\+\x20\*\*\*\*\*\*\*\*\*\*\*\*\*\*\
SF:*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
SF:\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\r\n\+\+\+\x20\r\n\+\+\+\x20Thi
SF:s\x20chat\x20area\x20is\x20for\x20the\x20use\x20of\x20employees\x20and\
SF:x20customers\x20of\x20Atos\x20Internet\r\n\+\+\+\x20Operations\x20\(BBC
SF:\)\x20for\x20business\x20communications\.\x20\x20Others\x20with\x20expl
SF:icit\x20\r\n\+\+\+\x20permission\x20of\x20Internet\x20Operations\x20may
SF:\x20also\x20use\x20the\x20service\.\x20\x20If\x20you\x20do\x20\r\n\+\+\
SF:+\x20not\x20have\x20permission\x20to\x20use\x20this\x20talker\x20you\x2
SF:0should\x20disconnect\x20now\.\r\n\+\+\+\x20\r\n\+\+\+\x20Please\x20rem
SF:ember\x20that\x20this\x20is\x20a\x20semi-public\x20forum\x20and\x20as\x
SF:20such\x20you\x20should\x20\r\n\+\+\+\x20not\x20say\x20anything\x20on\x
SF:20the\x20talker\x20that\x20you\x20would\x20not\x20say\x20in\x20public\.
SF:\x20\x20The\x20\r\n\+\+\+\x20use\x20of\x20lists\x20and\x20whispers\x20c
SF:an\x20minimise\x20the\x20audience\x20of\x20your\x20comments\x20\r\n\+\+
SF:\+\x20but\x20should\x20not\x20be\x20considered\x20as\x20secure\.\r\n\+\
SF:+\+\x20\r\n\+\+\+\x20Use\x20of\x20the\x20talker\x20will\x20be\x20period
SF:ically\x20monitored\x20to\x20ensure\x20that\x20it\x20is\x20\r\n\+\+\+\x
SF:20");
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (87%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (87%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 40.160.90.34.bc.googleusercontent.com (34.90.160.40)
Host is up (0.0057s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http-proxy F5 BIG-IP load balancer http proxy
443/tcp open  ssl/https  Apache
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B73A89%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,F2,"HTTP/1\.1\x20301\x20301\r\ndate:\x20Thu,\x2020\x20
SF:Feb\x202025\x2014:22:00\x20GMT\r\nserver:\x20Apache\r\nlocation:\x20htt
SF:ps://www\.sap\.com/products/recruiting-software\.html\r\nx-content-type
SF:-options:\x20nosniff\r\ncontent-length:\x200\r\nx-xss-protection:\x201;
SF:\x20mode=block\r\nconnection:\x20close\r\n\r\n")%r(HTTPOptions,F2,"HTTP
SF:/1\.1\x20301\x20301\r\ndate:\x20Thu,\x2020\x20Feb\x202025\x2014:22:00\x
SF:20GMT\r\nserver:\x20Apache\r\nlocation:\x20https://www\.sap\.com/produc
SF:ts/recruiting-software\.html\r\nx-content-type-options:\x20nosniff\r\nc
SF:ontent-length:\x200\r\nx-xss-protection:\x201;\x20mode=block\r\nconnect
SF:ion:\x20close\r\n\r\n")%r(FourOhFourRequest,115,"HTTP/1\.1\x20301\x2030
SF:1\r\ndate:\x20Thu,\x2020\x20Feb\x202025\x2014:22:00\x20GMT\r\nserver:\x
SF:20Apache\r\nlocation:\x20https://www\.sap\.com/products/recruiting-soft
SF:ware\.html\r\nx-content-type-options:\x20nosniff\r\ncontent-length:\x20
SF:0\r\ncontent-type:\x20application/x-trash\r\nx-xss-protection:\x201;\x2
SF:0mode=block\r\nconnection:\x20close\r\n\r\n")%r(tor-versions,CF,"HTTP/1
SF:\.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\ncache-control:
SF:\x20no-cache\r\ncontent-type:\x20text/html\r\nconnection:\x20close\r\n\
SF:r\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20browser\x20sent\
SF:x20an\x20invalid\x20request\.\n</body></html>\n")%r(RTSPRequest,CF,"HTT
SF:P/1\.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\ncache-contr
SF:ol:\x20no-cache\r\ncontent-type:\x20text/html\r\nconnection:\x20close\r
SF:\n\r\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20browser\x20se
SF:nt\x20an\x20invalid\x20request\.\n</body></html>\n")%r(RPCCheck,CF,"HTT
SF:P/1\.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\ncache-contr
SF:ol:\x20no-cache\r\ncontent-type:\x20text/html\r\nconnection:\x20close\r
SF:\n\r\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20browser\x20se
SF:nt\x20an\x20invalid\x20request\.\n</body></html>\n")%r(DNSVersionBindRe
SF:qTCP,CF,"HTTP/1\.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\
SF:ncache-control:\x20no-cache\r\ncontent-type:\x20text/html\r\nconnection
SF::\x20close\r\n\r\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20b
SF:rowser\x20sent\x20an\x20invalid\x20request\.\n</body></html>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: Device: load balancer

Nmap scan report for bbc-vip169.telhc.bbc.co.uk (212.58.244.16)
Host is up (0.0091s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B73A83%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.82
Host is up (0.0024s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B73A82%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21030-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2014:21:54\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21030-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOptions
SF:,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clos
SF:e\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\
SF:r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache
SF:\r\nX-Served-By:\x20cache-ams21082-AMS\r\nAccept-Ranges:\x20bytes\r\nDa
SF:te:\x20Thu,\x2020\x20Feb\x202025\x2014:21:54\x20GMT\r\nVia:\x201\.1\x20
SF:varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20
SF:domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20
SF:domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20be
SF:en\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21082-
SF:AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,96,"HTTP
SF:/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams2100127\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1
SF:\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2
SF:011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x2
SF:0cache-ams2100088\r\n\r\nBad\x20Request")%r(FourOhFourRequest,205,"HTTP
SF:/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent
SF:-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serv
SF:ed-By:\x20cache-ams2100137-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20T
SF:hu,\x2020\x20Feb\x202025\x2014:21:54\x20GMT\r\nVia:\x201\.1\x20varnish\
SF:r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x
SF:20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\
SF:x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20ad
SF:ded\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100137-AMS\x2
SF:0\(151\.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B73A89%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21028\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21022\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams2100107\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100088\r\n\r\nBad\x20Request")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100123\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.192.81
Host is up (0.0027s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B73A83%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100140-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2014:21:54\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100140-AMS\x20\(151\.101\.192\.81\)</p></body></html>")%r(HTTPOpt
SF:ions,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20
SF:close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x
SF:200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-c
SF:ache\r\nX-Served-By:\x20cache-ams2100093-AMS\r\nAccept-Ranges:\x20bytes
SF:\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2014:21:54\x20GMT\r\nVia:\x201\
SF:.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unkno
SF:wn\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unkno
SF:wn\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has
SF:\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams
SF:2100093-AMS\x20\(151\.101\.192\.81\)</p></body></html>")%r(RTSPRequest,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100094\r\n\r\nBad\x20Request")%r(X11Probe,94,"H
SF:TTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams21040\r\n\r\nBad\x20Request")%r(FourOhFourRequest,205
SF:,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\
SF:nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nc
SF:ontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\n
SF:X-Served-By:\x20cache-ams2100129-AMS\r\nAccept-Ranges:\x20bytes\r\nDate
SF::\x20Thu,\x2020\x20Feb\x202025\x2014:21:54\x20GMT\r\nVia:\x201\.1\x20va
SF:rnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20do
SF:main\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20do
SF:main:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been
SF:\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100129-
SF:AMS\x20\(151\.101\.192\.81\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B73A89%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100106\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb348716e94e9f83a
SF:c23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100
SF:111\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\
SF:x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7c
SF:cb348716e94e9f83ac23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\
SF:x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fa
SF:stly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20
SF:for\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1
SF:\x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100096\r\n\r\nRequested\x20host\x20does\x20not\x20m
SF:atch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS
SF:\x20certificate\x20\[7ccb348716e94e9f83ac23533d4648b0a3a69ede6bd4117e83
SF:0122876855c81a\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVi
SF:sit\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-
SF:misdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versi
SF:ons,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r
SF:\nx-served-by:\x20cache-ams2100119\r\n\r\nBad\x20Request")%r(RTSPReques
SF:t,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams2100139\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for fmt-vip46.telhc.bbc.co.uk (212.58.244.186)
Host is up (0.0089s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B73A83%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip050.lbh.bbc.co.uk (212.58.249.112)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 3.10 - 3.12 (92%), Linux 4.0 (92%), Linux 2.6.32 - 2.6.35 (90%), Linux 4.9 (90%), Linux 3.13 (90%), Linux 2.6.32 - 2.6.39 (90%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip170.telhc.bbc.co.uk (212.58.244.17)
Host is up (0.0092s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B73A83%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.228.86
Host is up (0.0096s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  closed https
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: firewall|proxy server|WAP|general purpose|phone|telecom-misc
Running: Check Point embedded, Citrix embedded, Juniper IVE OS 7.X, Linksys embedded, Linux 2.4.X|2.6.X, ISS embedded, Avaya Communication Manager
OS CPE: cpe:/h:checkpoint:zonealarm_z100g cpe:/h:juniper:mag2600 cpe:/h:linksys:wap54g cpe:/o:linux:linux_kernel:2.4.18 cpe:/h:iss:proventia_gx3002c cpe:/o:linux:linux_kernel:2.6.24 cpe:/o:linux:linux_kernel:2.6.11 cpe:/a:avaya:communication_manager
Too many fingerprints match this host to give specific OS details

Nmap scan report for bbc-vip084.lbh.bbc.co.uk (212.58.249.146)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B73A83%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 3.10 - 3.12 (90%), Linux 2.6.32 or 3.10 (89%), Linux 3.13 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ec2-54-155-236-209.eu-west-1.compute.amazonaws.com (54.155.236.209)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Node.js Express framework
443/tcp open  ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B73A89%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-
SF:Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max
SF:-Age=3600;\x20Path=/;\x20Expires=Thu,\x2020\x20Feb\x202025\x2015:22:00\
SF:x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.
SF:com/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x
SF:20charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Thu,\x2020\x20Feb\
SF:x202025\x2014:22:00\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20
SF:Redirect\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-re
SF:quired")%r(HTTPOptions,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r
SF:\nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\
SF:x20Max-Age=3600;\x20Path=/;\x20Expires=Thu,\x2020\x20Feb\x202025\x2015:
SF:22:00\x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\
SF:.bbc\.com/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Thu,\x2020\x
SF:20Feb\x202025\x2014:22:00\x20GMT\r\nConnection:\x20close\r\n\r\nTempora
SF:ry\x20Redirect\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/lo
SF:gin-required")%r(FourOhFourRequest,1E3,"HTTP/1\.1\x20307\x20Temporary\x
SF:20Redirect\r\nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%2
SF:2%2Fnice%2520ports%252C%2FTri%256Eity\.txt%252ebak%22%7D;\x20Max-Age=36
SF:00;\x20Path=/;\x20Expires=Thu,\x2020\x20Feb\x202025\x2015:22:00\x20GMT;
SF:\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.com/log
SF:in-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x20chars
SF:et=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Thu,\x2020\x20Feb\x202025
SF:\x2014:22:00\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20Redirec
SF:t\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-required"
SF:)%r(RTSPRequest,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-C
SF:ookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max-
SF:Age=3600;\x20Path=/;\x20Expires=Thu,\x2020\x20Feb\x202025\x2015:22:06\x
SF:20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.c
SF:om/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x2
SF:0charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Thu,\x2020\x20Feb\x
SF:202025\x2014:22:06\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20R
SF:edirect\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-req
SF:uired");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|2.6.X|3.X (87%)
OS CPE: cpe:/o:linux:linux_kernel:4.0 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10
Aggressive OS guesses: Linux 4.0 (87%), Linux 2.6.32 (85%), Linux 2.6.32 or 3.10 (85%), Linux 4.4 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin1.telhc.bbc.co.uk (132.185.161.177)
Host is up (0.0093s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailout1.telhc.bbc.co.uk (132.185.161.180)
Host is up (0.0091s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gated.lh.bbc.co.uk (132.185.132.13)
Host is up (0.0099s latency).
All 65535 scanned ports on gated.lh.bbc.co.uk (132.185.132.13) are in ignored states.
Not shown: 65535 filtered tcp ports (no-response)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Sun Solaris 8|9
OS CPE: cpe:/o:sun:sunos:5.8 cpe:/o:sun:sunos:5.9
OS details: Sun Solaris 8, Sun Solaris 9 (SPARC)

Nmap scan report for bbc-vip085.lbh.bbc.co.uk (212.58.249.147)
Host is up (0.0092s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B73A83%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 3.10 - 3.12 (90%), Linux 2.6.32 or 3.10 (89%), Linux 2.6.32 - 2.6.35 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip121.lbh.bbc.co.uk (212.58.249.183)
Host is up (0.0092s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (94%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 3.10 - 3.12 (92%), Linux 2.6.32 - 2.6.35 (90%), Linux 4.9 (90%), Linux 3.13 (90%), Linux 2.6.32 - 2.6.39 (90%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip137.lbh.bbc.co.uk (212.58.249.199)
Host is up (0.0092s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B73A83%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (90%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ipsecure-maud.test.bbc.co.uk (212.58.228.26)
Host is up (0.0091s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|storage-misc|firewall|webcam
Running (JUST GUESSING): Linux 2.6.X|4.X|3.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (86%), Tandberg embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8 cpe:/h:tandberg:vcs
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 4.4 (92%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.0 (89%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 2.6.18 (87%), Linux 2.6.32 - 3.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for server-13-227-219-83.ams54.r.cloudfront.net (13.227.219.83)
Host is up (0.0023s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Amazon CloudFront httpd
443/tcp open  ssl/https CloudFront
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for a2-16-6-202.deploy.static.akamaitechnologies.com (2.16.6.202)
Host is up (0.0025s latency).
Not shown: 65532 filtered tcp ports (no-response)
PORT     STATE SERVICE          VERSION
80/tcp   open  http             AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
443/tcp  open  ssl/https?
8883/tcp open  ssl/secure-mqtt?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|5.X|2.6.X|3.X (91%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10
Aggressive OS guesses: Linux 4.15 - 5.8 (91%), Linux 5.0 - 5.4 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 5.0 - 5.5 (89%), Linux 2.6.32 - 2.6.35 (87%), Linux 4.4 (87%), Linux 2.6.32 - 2.6.39 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip059.lbh.bbc.co.uk (212.58.249.121)
Host is up (0.0091s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B73A83%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (90%), Linux 5.1 (89%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip152.telhc.bbc.co.uk (212.58.244.129)
Host is up (0.0089s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE VERSION
80/tcp  open  http?
443/tcp open  https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B73A83%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip168.telhc.bbc.co.uk (212.58.244.15)
Host is up (0.0093s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B73A83%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 132.185.159.183
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE  VERSION
113/tcp closed ident
443/tcp open   ssl/http SAP Business Connector
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip083.lbh.bbc.co.uk (212.58.249.145)
Host is up (0.0095s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (90%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Warning: 132.185.161.100 giving up on port because retransmission cap hit (6).
Warning: 132.185.161.176 giving up on port because retransmission cap hit (6).
Nmap scan report for ec2-52-209-149-93.eu-west-1.compute.amazonaws.com (52.209.149.93)
Host is up (0.019s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B74C73%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,7F5C,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Thu,\x2020
SF:\x20Feb\x202025\x2015:38:26\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e
SF:98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOC
SF:TYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x
SF:20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20
SF:\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x2
SF:0\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"C
SF:ontent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equi
SF:v=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,
SF:\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x
SF:20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Co
SF:mpatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\
SF:x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wi
SF:dth\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20
SF:best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sp
SF:ort\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20
SF:and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20O
SF:nline\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,
SF:147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Thu,\x2020\x20Feb\x
SF:202025\x2015:38:26\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Leng
SF:th:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agen
SF:t-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</
SF:title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cent
SF:er>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTS
SF:PRequest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Thu,\x2020
SF:\x20Feb\x202025\x2015:38:26\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r
SF:\n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>
SF:\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>open
SF:resty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B74C78%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,17D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Th
SF:u,\x2020\x20Feb\x202025\x2015:38:31\x20GMT\r\nContent-Type:\x20text/htm
SF:l\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nServer:\x20BBC-G
SF:TM\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x20SSL\x20certif
SF:icate\x20was\x20sent</title></head>\r\n<body>\r\n<center><h1>400\x20Bad
SF:\x20Request</h1></center>\r\n<center>No\x20required\x20SSL\x20certifica
SF:te\x20was\x20sent</center>\r\n<hr><center>openresty</center>\r\n</body>
SF:\r\n</html>\r\n")%r(HTTPOptions,17D,"HTTP/1\.1\x20400\x20Bad\x20Request
SF:\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2015:38:31\x20GMT\r\nContent-Ty
SF:pe:\x20text/html\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nS
SF:erver:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x
SF:20SSL\x20certificate\x20was\x20sent</title></head>\r\n<body>\r\n<center
SF:><h1>400\x20Bad\x20Request</h1></center>\r\n<center>No\x20required\x20S
SF:SL\x20certificate\x20was\x20sent</center>\r\n<hr><center>openresty</cen
SF:ter>\r\n</body>\r\n</html>\r\n")%r(FourOhFourRequest,17D,"HTTP/1\.1\x20
SF:400\x20Bad\x20Request\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2015:38:31
SF:\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20234\r\nConn
SF:ection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>40
SF:0\x20No\x20required\x20SSL\x20certificate\x20was\x20sent</title></head>
SF:\r\n<body>\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<cente
SF:r>No\x20required\x20SSL\x20certificate\x20was\x20sent</center>\r\n<hr><
SF:center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(tor-versions,12
SF:D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Thu,\x2020\x20Feb\x20
SF:2025\x2015:38:31\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length
SF::\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\
SF:n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\r\n<center
SF:><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>openresty</cent
SF:er>\r\n</body>\r\n</html>\r\n")%r(RTSPRequest,12D,"HTTP/1\.1\x20400\x20
SF:Bad\x20Request\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2015:38:36\x20GMT
SF:\r\nContent-Type:\x20text/html\r\nContent-Length:\x20154\r\nConnection:
SF:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20Ba
SF:d\x20Request</title></head>\r\n<body>\r\n<center><h1>400\x20Bad\x20Requ
SF:est</h1></center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</htm
SF:l>\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for 212.58.228.21
Host is up (0.0096s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|storage-misc|firewall
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (91%), Linux 4.4 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 4.0 (87%), Linux 2.6.18 (87%), Linux 2.6.32 - 3.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gatea.telhc.bbc.co.uk (132.185.161.100)
Host is up (0.0095s latency).
Not shown: 65282 closed tcp ports (reset), 248 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
53/tcp    open  domain     ISC BIND 9.9.9-P8
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Oracle Solaris 11 (85%)
OS CPE: cpe:/o:oracle:solaris:11
Aggressive OS guesses: Oracle Solaris 11 (85%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 15 hops

Nmap scan report for 151.101.64.81
Host is up (0.0030s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B74C74%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,200,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21054-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2015:38:27\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21054-AMS\x20\(151\.101\.64\.81\)</p></body></html>")%r(HTTPOptions,
SF:200,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close
SF:\r\nContent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-After:\x200\r
SF:\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\
SF:r\nX-Served-By:\x20cache-ams21070-AMS\r\nAccept-Ranges:\x20bytes\r\nDat
SF:e:\x20Thu,\x2020\x20Feb\x202025\x2015:38:27\x20GMT\r\nVia:\x201\.1\x20v
SF:arnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20d
SF:omain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20d
SF:omain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20bee
SF:n\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21070-A
SF:MS\x20\(151\.101\.64\.81\)</p></body></html>")%r(RTSPRequest,96,"HTTP/1
SF:\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:
SF:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:
SF:\x20cache-ams2100095\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1\x
SF:20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x201
SF:1\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20c
SF:ache-ams2100134\r\n\r\nBad\x20Request")%r(FourOhFourRequest,200,"HTTP/1
SF:\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent
SF:-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-t
SF:ype:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served
SF:-By:\x20cache-ams21074-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Thu,\
SF:x2020\x20Feb\x202025\x2015:38:27\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\
SF:r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</
SF:title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\
SF:.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\
SF:x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21074-AMS\x20\(151
SF:\.101\.64\.81\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B74C7A%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21077\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb348716e94e9f83ac2
SF:3533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams210014
SF:4\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb
SF:348716e94e9f83ac23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100084\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[7ccb348716e94e9f83ac23533d4648b0a3a69ede6bd4117e8301
SF:22876855c81a\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams21068\r\n\r\nBad\x20Request")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100133\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (90%), FreeBSD 6.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.1
Aggressive OS guesses: OpenBSD 4.0 (90%), FreeBSD 6.1-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ftping104.telhc.bbc.co.uk (212.58.244.9)
Host is up (0.0099s latency).
Not shown: 37299 filtered tcp ports (no-response), 28234 closed tcp ports (reset)
PORT    STATE SERVICE   VERSION
21/tcp  open  ftp       ProFTPD 1.3.5e
443/tcp open  ssl/https Apache/2.4.6 (Red Hat Enterprise Linux) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (94%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 3.10 - 3.12 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 3.13 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.9 (89%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Unix

Nmap scan report for server-13-227-219-122.ams54.r.cloudfront.net (13.227.219.122)
Host is up (0.0032s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Amazon CloudFront httpd
443/tcp open  ssl/https CloudFront
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bbc-vip144.lbh.bbc.co.uk (212.58.249.206)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE VERSION
80/tcp  open   http?
443/tcp closed https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B74C74%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (96%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (96%), Linux 4.0 (94%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 3.10 - 3.12 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.9 (89%), Linux 3.13 (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip051.lbh.bbc.co.uk (212.58.249.113)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (96%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (96%), Linux 4.0 (94%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (91%), Linux 3.10 - 3.12 (90%), Linux 2.6.32 - 2.6.35 (89%), Linux 2.6.32 - 2.6.39 (89%), Linux 4.9 (88%), Linux 3.13 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.97.146.120
Host is up (0.012s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (89%)
Aggressive OS guesses: Citrix NetScaler load balancer (89%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for 212.58.244.23
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B74C74%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.228.100
Host is up (0.0099s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   open   http?
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B74C74%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Device type: general purpose|storage-misc|firewall
Running (JUST GUESSING): Linux 2.6.X|4.X|3.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 4.4 (92%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.0 (89%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 2.6.18 (87%), Linux 2.6.32 - 3.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip145.lbh.bbc.co.uk (212.58.249.207)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE VERSION
80/tcp  open   http?
443/tcp closed https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B74C74%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X (96%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (96%), Linux 4.0 (94%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 3.10 - 3.12 (90%), Linux 2.6.32 - 2.6.35 (89%), Linux 2.6.32 - 2.6.39 (89%), Linux 4.9 (88%), Linux 3.13 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip102.telhc.bbc.co.uk (212.58.244.57)
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for jira.dev.bbc.co.uk (212.58.250.23)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Apache httpd 2.4.62 ((Red Hat Enterprise Linux) OpenSSL/3.2.2)
443/tcp open  ssl/https Apache/2.4.62 (Red Hat Enterprise Linux) OpenSSL/3.2.2
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|2.6.X|3.X (89%)
OS CPE: cpe:/o:linux:linux_kernel:4.0 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10
Aggressive OS guesses: Linux 4.0 (89%), Linux 2.6.32 (85%), Linux 2.6.32 or 3.10 (85%), Linux 4.4 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ec2-46-137-181-193.eu-west-1.compute.amazonaws.com (46.137.181.193)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Node.js Express framework
443/tcp open  ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B74C7A%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-
SF:Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max
SF:-Age=3600;\x20Path=/;\x20Expires=Thu,\x2020\x20Feb\x202025\x2016:38:33\
SF:x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.
SF:com/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x
SF:20charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Thu,\x2020\x20Feb\
SF:x202025\x2015:38:33\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20
SF:Redirect\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-re
SF:quired")%r(HTTPOptions,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r
SF:\nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\
SF:x20Max-Age=3600;\x20Path=/;\x20Expires=Thu,\x2020\x20Feb\x202025\x2016:
SF:38:33\x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\
SF:.bbc\.com/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Thu,\x2020\x
SF:20Feb\x202025\x2015:38:33\x20GMT\r\nConnection:\x20close\r\n\r\nTempora
SF:ry\x20Redirect\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/lo
SF:gin-required")%r(FourOhFourRequest,1E3,"HTTP/1\.1\x20307\x20Temporary\x
SF:20Redirect\r\nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%2
SF:2%2Fnice%2520ports%252C%2FTri%256Eity\.txt%252ebak%22%7D;\x20Max-Age=36
SF:00;\x20Path=/;\x20Expires=Thu,\x2020\x20Feb\x202025\x2016:38:33\x20GMT;
SF:\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.com/log
SF:in-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x20chars
SF:et=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Thu,\x2020\x20Feb\x202025
SF:\x2015:38:33\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20Redirec
SF:t\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-required"
SF:)%r(RTSPRequest,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-C
SF:ookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max-
SF:Age=3600;\x20Path=/;\x20Expires=Thu,\x2020\x20Feb\x202025\x2016:38:38\x
SF:20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.c
SF:om/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x2
SF:0charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Thu,\x2020\x20Feb\x
SF:202025\x2015:38:38\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20R
SF:edirect\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-req
SF:uired");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|2.6.X (89%)
OS CPE: cpe:/o:linux:linux_kernel:4.0 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.0 (89%), Linux 2.6.32 (85%), Linux 4.4 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ec2-54-77-244-106.eu-west-1.compute.amazonaws.com (54.77.244.106)
Host is up (0.019s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B74C73%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,7F5C,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Thu,\x2020
SF:\x20Feb\x202025\x2015:38:26\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e
SF:98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOC
SF:TYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x
SF:20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20
SF:\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x2
SF:0\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"C
SF:ontent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equi
SF:v=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,
SF:\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x
SF:20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Co
SF:mpatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\
SF:x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wi
SF:dth\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20
SF:best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sp
SF:ort\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20
SF:and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20O
SF:nline\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,
SF:147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Thu,\x2020\x20Feb\x
SF:202025\x2015:38:26\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Leng
SF:th:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agen
SF:t-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</
SF:title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cent
SF:er>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTS
SF:PRequest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Thu,\x2020
SF:\x20Feb\x202025\x2015:38:26\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r
SF:\n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>
SF:\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>open
SF:resty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B74C78%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,17D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Th
SF:u,\x2020\x20Feb\x202025\x2015:38:31\x20GMT\r\nContent-Type:\x20text/htm
SF:l\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nServer:\x20BBC-G
SF:TM\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x20SSL\x20certif
SF:icate\x20was\x20sent</title></head>\r\n<body>\r\n<center><h1>400\x20Bad
SF:\x20Request</h1></center>\r\n<center>No\x20required\x20SSL\x20certifica
SF:te\x20was\x20sent</center>\r\n<hr><center>openresty</center>\r\n</body>
SF:\r\n</html>\r\n")%r(HTTPOptions,17D,"HTTP/1\.1\x20400\x20Bad\x20Request
SF:\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2015:38:31\x20GMT\r\nContent-Ty
SF:pe:\x20text/html\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nS
SF:erver:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x
SF:20SSL\x20certificate\x20was\x20sent</title></head>\r\n<body>\r\n<center
SF:><h1>400\x20Bad\x20Request</h1></center>\r\n<center>No\x20required\x20S
SF:SL\x20certificate\x20was\x20sent</center>\r\n<hr><center>openresty</cen
SF:ter>\r\n</body>\r\n</html>\r\n")%r(FourOhFourRequest,17D,"HTTP/1\.1\x20
SF:400\x20Bad\x20Request\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2015:38:31
SF:\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20234\r\nConn
SF:ection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>40
SF:0\x20No\x20required\x20SSL\x20certificate\x20was\x20sent</title></head>
SF:\r\n<body>\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<cente
SF:r>No\x20required\x20SSL\x20certificate\x20was\x20sent</center>\r\n<hr><
SF:center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(tor-versions,12
SF:D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Thu,\x2020\x20Feb\x20
SF:2025\x2015:38:31\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length
SF::\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\
SF:n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\r\n<center
SF:><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>openresty</cent
SF:er>\r\n</body>\r\n</html>\r\n")%r(RTSPRequest,12D,"HTTP/1\.1\x20400\x20
SF:Bad\x20Request\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2015:38:36\x20GMT
SF:\r\nContent-Type:\x20text/html\r\nContent-Length:\x20154\r\nConnection:
SF:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20Ba
SF:d\x20Request</title></head>\r\n<body>\r\n<center><h1>400\x20Bad\x20Requ
SF:est</h1></center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</htm
SF:l>\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for ec2-52-16-246-43.eu-west-1.compute.amazonaws.com (52.16.246.43)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B74C73%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,7F5C,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Thu,\x2020
SF:\x20Feb\x202025\x2015:38:26\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e
SF:98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOC
SF:TYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x
SF:20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20
SF:\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x2
SF:0\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"C
SF:ontent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equi
SF:v=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,
SF:\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x
SF:20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Co
SF:mpatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\
SF:x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wi
SF:dth\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20
SF:best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sp
SF:ort\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20
SF:and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20O
SF:nline\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,
SF:147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Thu,\x2020\x20Feb\x
SF:202025\x2015:38:26\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Leng
SF:th:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agen
SF:t-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</
SF:title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cent
SF:er>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTS
SF:PRequest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Thu,\x2020
SF:\x20Feb\x202025\x2015:38:26\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r
SF:\n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>
SF:\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>open
SF:resty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B74C78%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,2000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Thu
SF:,\x2020\x20Feb\x202025\x2015:38:31\x20GMT\r\nContent-Type:\x20text/html
SF:\r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61de
SF:ec4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r
SF:\n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x2
SF:0\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\
SF:x20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n
SF:\x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-eq
SF:uiv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20ht
SF:tp-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device
SF:-width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\
SF:n\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"
SF:X-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofo
SF:llow\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=de
SF:vice-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"
SF:The\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20an
SF:d\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlig
SF:hts\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20B
SF:BC\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPO
SF:ptions,147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Thu,\x2020\x
SF:20Feb\x202025\x2015:38:31\x20GMT\r\nContent-Type:\x20text/html\r\nConte
SF:nt-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrig
SF:in-Agent-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Al
SF:lowed</title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1
SF:></center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n"
SF:)%r(FourOhFourRequest,2000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x
SF:20Thu,\x2020\x20Feb\x202025\x2015:38:31\x20GMT\r\nContent-Type:\x20text
SF:/html\r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\
SF:"61deec4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\
SF:r\n\r\n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x
SF:20\x20\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<titl
SF:e>\n\x20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</tit
SF:le>\n\x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20ht
SF:tp-equiv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\
SF:x20http-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=d
SF:evice-width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewpor
SF:t\">\n\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equ
SF:iv=\"X-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x2
SF:0nofollow\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"wid
SF:th=device-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20conte
SF:nt=\"The\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\
SF:x20and\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20hi
SF:ghlights\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of
SF:\x20BBC\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for svn.bbc.co.uk (212.58.242.133)
Host is up (0.011s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
443/tcp open  ssl/https Apache
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|2.6.X (87%)
OS CPE: cpe:/o:linux:linux_kernel:4.0 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.0 (87%), Linux 2.6.32 (85%), Linux 4.4 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip136.lbh.bbc.co.uk (212.58.249.198)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B74C74%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (96%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (96%), Linux 4.0 (91%), Linux 3.10 - 4.11 (90%), Linux 3.11 - 4.1 (90%), Linux 3.2 - 4.9 (90%), Linux 5.1 (90%), Linux 2.6.32 (90%), Linux 3.10 - 3.12 (89%), Linux 2.6.32 or 3.10 (88%), Linux 2.6.32 - 2.6.35 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.97.166.168
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (89%)
Aggressive OS guesses: Citrix NetScaler load balancer (89%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for bbc-vip118.telhc.bbc.co.uk (212.58.244.73)
Host is up (0.0094s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B74C74%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ec2-52-19-225-170.eu-west-1.compute.amazonaws.com (52.19.225.170)
Host is up (0.017s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B74C73%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,32F8,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Thu,\x2020
SF:\x20Feb\x202025\x2015:38:26\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e
SF:98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOC
SF:TYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x
SF:20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20
SF:\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x2
SF:0\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"C
SF:ontent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equi
SF:v=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,
SF:\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x
SF:20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Co
SF:mpatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\
SF:x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wi
SF:dth\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20
SF:best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sp
SF:ort\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20
SF:and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20O
SF:nline\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,
SF:147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Thu,\x2020\x20Feb\x
SF:202025\x2015:38:26\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Leng
SF:th:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agen
SF:t-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</
SF:title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cent
SF:er>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTS
SF:PRequest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Thu,\x2020
SF:\x20Feb\x202025\x2015:38:26\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r
SF:\n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>
SF:\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>open
SF:resty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B74C78%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,2000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Thu
SF:,\x2020\x20Feb\x202025\x2015:38:31\x20GMT\r\nContent-Type:\x20text/html
SF:\r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61de
SF:ec4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r
SF:\n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x2
SF:0\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\
SF:x20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n
SF:\x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-eq
SF:uiv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20ht
SF:tp-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device
SF:-width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\
SF:n\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"
SF:X-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofo
SF:llow\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=de
SF:vice-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"
SF:The\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20an
SF:d\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlig
SF:hts\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20B
SF:BC\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPO
SF:ptions,147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Thu,\x2020\x
SF:20Feb\x202025\x2015:38:31\x20GMT\r\nContent-Type:\x20text/html\r\nConte
SF:nt-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrig
SF:in-Agent-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Al
SF:lowed</title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1
SF:></center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n"
SF:)%r(FourOhFourRequest,3000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x
SF:20Thu,\x2020\x20Feb\x202025\x2015:38:31\x20GMT\r\nContent-Type:\x20text
SF:/html\r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\
SF:"61deec4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\
SF:r\n\r\n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x
SF:20\x20\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<titl
SF:e>\n\x20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</tit
SF:le>\n\x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20ht
SF:tp-equiv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\
SF:x20http-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=d
SF:evice-width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewpor
SF:t\">\n\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equ
SF:iv=\"X-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x2
SF:0nofollow\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"wid
SF:th=device-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20conte
SF:nt=\"The\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\
SF:x20and\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20hi
SF:ghlights\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of
SF:\x20BBC\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bbc-vip101.telhc.bbc.co.uk (212.58.244.56)
Host is up (0.0095s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ns3.bbcdns.net (148.163.199.65)
Host is up (0.0035s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|5.X|2.6.X|3.X (87%)
OS CPE: cpe:/o:linux:linux_kernel:4.0 cpe:/o:linux:linux_kernel:5 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10
Aggressive OS guesses: Linux 4.0 (87%), Linux 4.15 - 5.8 (85%), Linux 5.0 - 5.4 (85%), Linux 2.6.32 (85%), Linux 2.6.32 or 3.10 (85%), Linux 4.4 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for rt0-132.lh.bbc.co.uk (132.185.132.1)
Host is up (0.010s latency).
All 65535 scanned ports on rt0-132.lh.bbc.co.uk (132.185.132.1) are in ignored states.
Not shown: 65535 filtered tcp ports (no-response)
Too many fingerprints match this host to give specific OS details

Nmap scan report for gateh.lh.bbc.co.uk (132.185.132.17)
Host is up (0.0086s latency).
All 65535 scanned ports on gateh.lh.bbc.co.uk (132.185.132.17) are in ignored states.
Not shown: 65535 filtered tcp ports (no-response)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: printer|general purpose
Running: Lexmark embedded, Linux 2.4.X, Sun Solaris 8|9
OS CPE: cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:sun:sunos:5.8 cpe:/o:sun:sunos:5.9
OS details: Lexmark T522 or E332n printer, Lexmark T632 or C750 printer, Linux 2.4.2 (Red Hat 7.1), Sun Solaris 8, Sun Solaris 9 (SPARC)

Nmap scan report for bbc-vip174.telhc.bbc.co.uk (212.58.244.210)
Host is up (0.0094s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE VERSION
80/tcp  open  http?
443/tcp open  https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B74C74%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ec2-18-200-133-248.eu-west-1.compute.amazonaws.com (18.200.133.248)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B74C73%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,7F5C,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Thu,\x2020
SF:\x20Feb\x202025\x2015:38:26\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e
SF:98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOC
SF:TYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x
SF:20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20
SF:\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x2
SF:0\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"C
SF:ontent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equi
SF:v=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,
SF:\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x
SF:20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Co
SF:mpatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\
SF:x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wi
SF:dth\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20
SF:best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sp
SF:ort\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20
SF:and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20O
SF:nline\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,
SF:147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Thu,\x2020\x20Feb\x
SF:202025\x2015:38:26\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Leng
SF:th:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agen
SF:t-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</
SF:title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cent
SF:er>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTS
SF:PRequest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Thu,\x2020
SF:\x20Feb\x202025\x2015:38:26\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r
SF:\n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>
SF:\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>open
SF:resty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B74C78%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,2000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Thu
SF:,\x2020\x20Feb\x202025\x2015:38:31\x20GMT\r\nContent-Type:\x20text/html
SF:\r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61de
SF:ec4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r
SF:\n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x2
SF:0\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\
SF:x20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n
SF:\x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-eq
SF:uiv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20ht
SF:tp-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device
SF:-width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\
SF:n\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"
SF:X-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofo
SF:llow\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=de
SF:vice-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"
SF:The\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20an
SF:d\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlig
SF:hts\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20B
SF:BC\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPO
SF:ptions,147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Thu,\x2020\x
SF:20Feb\x202025\x2015:38:31\x20GMT\r\nContent-Type:\x20text/html\r\nConte
SF:nt-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrig
SF:in-Agent-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Al
SF:lowed</title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1
SF:></center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n"
SF:)%r(FourOhFourRequest,3000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x
SF:20Thu,\x2020\x20Feb\x202025\x2015:38:31\x20GMT\r\nContent-Type:\x20text
SF:/html\r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\
SF:"61deec4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\
SF:r\n\r\n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x
SF:20\x20\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<titl
SF:e>\n\x20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</tit
SF:le>\n\x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20ht
SF:tp-equiv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\
SF:x20http-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=d
SF:evice-width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewpor
SF:t\">\n\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equ
SF:iv=\"X-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x2
SF:0nofollow\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"wid
SF:th=device-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20conte
SF:nt=\"The\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\
SF:x20and\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20hi
SF:ghlights\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of
SF:\x20BBC\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for rt1-132.lh.bbc.co.uk (132.185.132.2)
Host is up (0.0096s latency).
Not shown: 65534 closed tcp ports (reset)
PORT   STATE    SERVICE VERSION
25/tcp filtered smtp
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: switch
Running: Cisco IOS 12.X
OS CPE: cpe:/h:cisco:catalyst_6509:e cpe:/o:cisco:ios:12.2
OS details: Cisco 6509 switch (IOS 12.2)

Nmap scan report for bbc-vip138.lbh.bbc.co.uk (212.58.249.200)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B74C74%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B74C82%P=x86_64-pc-linux-
SF:gnu%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-T
SF:ype:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h
SF:2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (88%), Linux 3.13 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.97.178.72
Host is up (0.012s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (89%)
Aggressive OS guesses: Citrix NetScaler load balancer (89%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for gatea.lh.bbc.co.uk (132.185.132.10)
Host is up (0.010s latency).
Not shown: 65531 filtered tcp ports (no-response)
PORT     STATE SERVICE  VERSION
53/tcp   open  domain   ISC BIND 9.11.19
465/tcp  open  ssl/smtp Postfix smtpd
993/tcp  open  ssl/imap Dovecot imapd
4190/tcp open  sieve?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port4190-TCP:V=7.94SVN%I=7%D=2/20%Time=67B74C74%P=x86_64-pc-linux-gnu%r
SF:(NULL,174,"\"IMPLEMENTATION\"\x20\"Dovecot\x20Pigeonhole\"\r\n\"SIEVE\"
SF:\x20\"fileinto\x20reject\x20envelope\x20encoded-character\x20vacation\x
SF:20subaddress\x20comparator-i;ascii-numeric\x20relational\x20regex\x20im
SF:ap4flags\x20copy\x20include\x20variables\x20body\x20enotify\x20environm
SF:ent\x20mailbox\x20date\x20index\x20ihave\x20duplicate\x20mime\x20foreve
SF:rypart\x20extracttext\"\r\n\"NOTIFY\"\x20\"mailto\"\r\n\"SASL\"\x20\"PL
SF:AIN\x20LOGIN\x20GSSAPI\"\r\n\"VERSION\"\x20\"1\.0\"\r\n\"STARTTLS\"\r\n
SF:OK\x20\"stunnel\"\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (87%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9
Aggressive OS guesses: Sun Solaris 10 (87%), Sun Solaris 10 (SPARC) (87%), Sun Solaris 9 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.98.198.248
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (89%)
Aggressive OS guesses: Citrix NetScaler load balancer (89%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for bbc-vip163.lbh.bbc.co.uk (212.58.249.225)
Host is up (0.011s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B74C74%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (96%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (96%), Linux 4.0 (92%), Linux 3.10 - 4.11 (90%), Linux 3.11 - 4.1 (90%), Linux 3.2 - 4.9 (90%), Linux 5.1 (90%), Linux 2.6.32 (90%), Linux 3.10 - 3.12 (89%), Linux 2.6.32 or 3.10 (88%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip139.telhc.bbc.co.uk (212.58.244.99)
Host is up (0.0098s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for server-13-227-219-18.ams54.r.cloudfront.net (13.227.219.18)
Host is up (0.0031s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Amazon CloudFront httpd
443/tcp open  ssl/https CloudFront
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bbc-vip079.lbh.bbc.co.uk (212.58.249.141)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (94%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 3.10 - 3.12 (92%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 3.13 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.9 (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 40.99.148.200
Host is up (0.012s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (89%)
Aggressive OS guesses: Citrix NetScaler load balancer (89%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for ec2-54-77-66-137.eu-west-1.compute.amazonaws.com (54.77.66.137)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      nginx 1.14.1
443/tcp open  ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B74C7A%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1B0,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-
SF:Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max
SF:-Age=3600;\x20Path=/;\x20Expires=Thu,\x2020\x20Feb\x202025\x2016:38:33\
SF:x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://picos\.tools\.bb
SF:c\.co\.uk/landing\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x2
SF:0charset=utf-8\r\nContent-Length:\x2072\r\nDate:\x20Thu,\x2020\x20Feb\x
SF:202025\x2015:38:33\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20R
SF:edirect\.\x20Redirecting\x20to\x20https://picos\.tools\.bbc\.co\.uk/lan
SF:ding")%r(HTTPOptions,1B0,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\n
SF:Set-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x2
SF:0Max-Age=3600;\x20Path=/;\x20Expires=Thu,\x2020\x20Feb\x202025\x2016:38
SF::33\x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://picos\.tools
SF:\.bbc\.co\.uk/landing\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain
SF:;\x20charset=utf-8\r\nContent-Length:\x2072\r\nDate:\x20Thu,\x2020\x20F
SF:eb\x202025\x2015:38:33\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\
SF:x20Redirect\.\x20Redirecting\x20to\x20https://picos\.tools\.bbc\.co\.uk
SF:/landing")%r(FourOhFourRequest,1DD,"HTTP/1\.1\x20307\x20Temporary\x20Re
SF:direct\r\nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F
SF:nice%2520ports%252C%2FTri%256Eity\.txt%252ebak%22%7D;\x20Max-Age=3600;\
SF:x20Path=/;\x20Expires=Thu,\x2020\x20Feb\x202025\x2016:38:33\x20GMT;\x20
SF:HttpOnly;\x20Secure\r\nLocation:\x20https://picos\.tools\.bbc\.co\.uk/l
SF:anding\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x20charset=ut
SF:f-8\r\nContent-Length:\x2072\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x201
SF:5:38:33\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20Redirect\.\x
SF:20Redirecting\x20to\x20https://picos\.tools\.bbc\.co\.uk/landing")%r(ms
SF:-sql-s,2F,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r
SF:\n\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for 212.58.228.29
Host is up (0.0097s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|storage-misc|firewall|WAP
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X|2.4.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (86%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8 cpe:/o:linux:linux_kernel:2.4
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 4.4 (92%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 2.6.32 - 3.0 (88%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 4.0 (87%), Linux 2.6.18 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.228.35
Host is up (0.0094s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|storage-misc|firewall|WAP|webcam
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X|2.4.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (86%), Tandberg embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8 cpe:/o:linux:linux_kernel:2.4 cpe:/h:tandberg:vcs
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 4.4 (92%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.0 (89%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 2.6.18 (87%), Linux 2.6.32 - 3.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.97.131.248
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (89%)
Aggressive OS guesses: Citrix NetScaler load balancer (89%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for 151.101.192.82
Host is up (0.0026s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B74C74%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100132-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2015:38:27\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100132-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOpt
SF:ions,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20
SF:close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x
SF:200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-c
SF:ache\r\nX-Served-By:\x20cache-ams21065-AMS\r\nAccept-Ranges:\x20bytes\r
SF:\nDate:\x20Thu,\x2020\x20Feb\x202025\x2015:38:27\x20GMT\r\nVia:\x201\.1
SF:\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown
SF:\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown
SF:\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x
SF:20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21
SF:065-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100142\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100114\r\n\r\nBad\x20Request")%r(FourOhFourRequest,205,"
SF:HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncon
SF:tent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-
SF:Served-By:\x20cache-ams2100098-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\
SF:x20Thu,\x2020\x20Feb\x202025\x2015:38:27\x20GMT\r\nVia:\x201\.1\x20varn
SF:ish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20doma
SF:in\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20doma
SF:in:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x
SF:20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100098-AM
SF:S\x20\(151\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B74C7A%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21063\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21068\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams2100139\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams21034\r\n\r\nBad\x20Request")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100119\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin1.cwwtf.bbc.co.uk (132.185.160.177)
Host is up (0.010s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.82
Host is up (0.0029s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B74C74%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,200,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21060-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2015:38:27\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21060-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOptions,
SF:204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close
SF:\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x200\r
SF:\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\
SF:r\nX-Served-By:\x20cache-ams2100101-AMS\r\nAccept-Ranges:\x20bytes\r\nD
SF:ate:\x20Thu,\x2020\x20Feb\x202025\x2015:38:27\x20GMT\r\nVia:\x201\.1\x2
SF:0varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x2
SF:0domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x2
SF:0domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20b
SF:een\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21001
SF:01-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,96,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100085\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\
SF:x20cache-ams21066\r\n\r\nBad\x20Request")%r(FourOhFourRequest,200,"HTTP
SF:/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent
SF:-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serv
SF:ed-By:\x20cache-ams21035-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Thu
SF:,\x2020\x20Feb\x202025\x2015:38:27\x20GMT\r\nVia:\x201\.1\x20varnish\r\
SF:n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20
SF:</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x2
SF:0\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20adde
SF:d\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21035-AMS\x20\(1
SF:51\.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B74C7A%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21051\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21060\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams2100125\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100106\r\n\r\nBad\x20Request")%r(RTSPRequest,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21040\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ns4.demysdns.co.uk (198.51.44.9)
Host is up (0.0039s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for lists1.telhc.bbc.co.uk (212.58.251.122)
Host is up (0.0100s latency).
Not shown: 65528 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
587/tcp   open     smtp       Sendmail 8.14.9+Sun/8.12.9
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (86%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (86%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Unix

Nmap scan report for dns2.p09.nsone.net (198.51.45.9)
Host is up (0.0037s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for 151.101.0.82
Host is up (0.0028s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B74C74%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100145-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2015:38:27\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100145-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOptio
SF:ns,1FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20cl
SF:ose\r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x20
SF:0\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cac
SF:he\r\nX-Served-By:\x20cache-ams21023-AMS\r\nAccept-Ranges:\x20bytes\r\n
SF:Date:\x20Thu,\x2020\x20Feb\x202025\x2015:38:27\x20GMT\r\nVia:\x201\.1\x
SF:20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x
SF:20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x
SF:20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20
SF:been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2102
SF:3-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,94,"HTTP
SF:/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21078\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1\x
SF:20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x201
SF:1\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20c
SF:ache-ams2100107\r\n\r\nBad\x20Request")%r(FourOhFourRequest,203,"HTTP/1
SF:\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent
SF:-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-t
SF:ype:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served
SF:-By:\x20cache-ams2100101-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Thu
SF:,\x2020\x20Feb\x202025\x2015:38:27\x20GMT\r\nVia:\x201\.1\x20varnish\r\
SF:n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20
SF:</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x2
SF:0\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20adde
SF:d\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100101-AMS\x20\
SF:(151\.101\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B74C7A%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21058\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21057\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams2100104\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100095\r\n\r\nBad\x20Request")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100133\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for cloud.virt.ch.bbc.co.uk (132.185.142.146)
Host is up (0.011s latency).
Not shown: 65430 filtered tcp ports (no-response), 101 closed tcp ports (reset)
PORT     STATE SERVICE   VERSION
21/tcp   open  ftp       vsftpd 3.0.3
80/tcp   open  http      Apache httpd 2.4.29
443/tcp  open  ssl/https Apache/2.4.29 (Ubuntu)
8443/tcp open  ssl/http  Apache httpd 2.4.29
Device type: general purpose|storage-misc|firewall|broadband router
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (86%), Synology DiskStation Manager 5.X (85%), WatchGuard Fireware 11.X (85%), Zhone embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Linux 2.6.32 (86%), Linux 2.6.32 or 3.10 (86%), Linux 4.4 (86%), Linux 3.4 (85%), Linux 3.5 (85%), Linux 4.2 (85%), Synology DiskStation Manager 5.1 (85%), WatchGuard Fireware 11.8 (85%), Linux 3.10 - 3.12 (85%), Zhone GPON home gateway (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Hosts: default, artifactory-noforge.virt.ch.bbc.co.uk; OS: Unix

Nmap scan report for bbc-vip169.telhc.bbc.co.uk (212.58.244.16)
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B74C74%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip197.telhc.bbc.co.uk (212.58.244.98)
Host is up (0.0099s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip082.lbh.bbc.co.uk (212.58.249.144)
Host is up (0.011s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (96%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (96%), Linux 4.0 (92%), Linux 3.10 - 4.11 (90%), Linux 3.11 - 4.1 (90%), Linux 3.2 - 4.9 (90%), Linux 5.1 (90%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (89%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin0.cwwtf.bbc.co.uk (132.185.160.176)
Host is up (0.010s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
OS fingerprint not ideal because: Didn't receive UDP response. Please try again with -sSU
No OS matches for host

Nmap scan report for mailin0.telhc.bbc.co.uk (132.185.161.176)
Host is up (0.0100s latency).
Not shown: 65284 closed tcp ports (reset), 246 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
OS fingerprint not ideal because: Didn't receive UDP response. Please try again with -sSU
No OS matches for host

Nmap scan report for 151.101.128.82
Host is up (0.0028s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B74C74%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100115-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2015:38:27\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100115-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOpt
SF:ions,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20
SF:close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x
SF:200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-c
SF:ache\r\nX-Served-By:\x20cache-ams21029-AMS\r\nAccept-Ranges:\x20bytes\r
SF:\nDate:\x20Thu,\x2020\x20Feb\x202025\x2015:38:27\x20GMT\r\nVia:\x201\.1
SF:\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown
SF:\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown
SF:\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x
SF:20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21
SF:029-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100133\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100139\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"
SF:HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncon
SF:tent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-
SF:Served-By:\x20cache-ams21037-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x2
SF:0Thu,\x2020\x20Feb\x202025\x2015:38:27\x20GMT\r\nVia:\x201\.1\x20varnis
SF:h\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain
SF:\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain
SF::\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20
SF:added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21037-AMS\x2
SF:0\(151\.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B74C7A%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21031\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21045\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21071\r\n\r\nRequested\x20host\x20does\x20not\x20match\x
SF:20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20ce
SF:rtificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631
SF:d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x2
SF:0https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdir
SF:ected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100130\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21027\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 6.X|8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.1 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 6.1-RELEASE (85%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip137.lbh.bbc.co.uk (212.58.249.199)
Host is up (0.0098s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B74C74%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (96%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (96%), Linux 4.0 (92%), Linux 3.10 - 4.11 (90%), Linux 3.11 - 4.1 (90%), Linux 3.2 - 4.9 (90%), Linux 5.1 (90%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (88%), Linux 3.10 - 3.12 (87%), Linux 3.13 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin1.telhc.bbc.co.uk (132.185.161.177)
Host is up (0.0097s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
OS fingerprint not ideal because: Didn't receive UDP response. Please try again with -sSU
No OS matches for host

Nmap scan report for bbc-vip168.telhc.bbc.co.uk (212.58.244.15)
Host is up (0.0098s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B74C74%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 40.160.90.34.bc.googleusercontent.com (34.90.160.40)
Host is up (0.0060s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http-proxy F5 BIG-IP load balancer http proxy
443/tcp open  ssl/https  Apache
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B74C7A%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,F2,"HTTP/1\.1\x20301\x20301\r\ndate:\x20Thu,\x2020\x20
SF:Feb\x202025\x2015:38:33\x20GMT\r\nserver:\x20Apache\r\nlocation:\x20htt
SF:ps://www\.sap\.com/products/recruiting-software\.html\r\nx-content-type
SF:-options:\x20nosniff\r\ncontent-length:\x200\r\nx-xss-protection:\x201;
SF:\x20mode=block\r\nconnection:\x20close\r\n\r\n")%r(FourOhFourRequest,11
SF:5,"HTTP/1\.1\x20301\x20301\r\ndate:\x20Thu,\x2020\x20Feb\x202025\x2015:
SF:38:33\x20GMT\r\nserver:\x20Apache\r\nlocation:\x20https://www\.sap\.com
SF:/products/recruiting-software\.html\r\nx-content-type-options:\x20nosni
SF:ff\r\ncontent-length:\x200\r\ncontent-type:\x20application/x-trash\r\nx
SF:-xss-protection:\x201;\x20mode=block\r\nconnection:\x20close\r\n\r\n")%
SF:r(tor-versions,CF,"HTTP/1\.1\x20400\x20Bad\x20request\r\ncontent-length
SF::\x2090\r\ncache-control:\x20no-cache\r\ncontent-type:\x20text/html\r\n
SF:connection:\x20close\r\n\r\n<html><body><h1>400\x20Bad\x20request</h1>\
SF:nYour\x20browser\x20sent\x20an\x20invalid\x20request\.\n</body></html>\
SF:n")%r(RTSPRequest,CF,"HTTP/1\.1\x20400\x20Bad\x20request\r\ncontent-len
SF:gth:\x2090\r\ncache-control:\x20no-cache\r\ncontent-type:\x20text/html\
SF:r\nconnection:\x20close\r\n\r\n<html><body><h1>400\x20Bad\x20request</h
SF:1>\nYour\x20browser\x20sent\x20an\x20invalid\x20request\.\n</body></htm
SF:l>\n")%r(RPCCheck,CF,"HTTP/1\.1\x20400\x20Bad\x20request\r\ncontent-len
SF:gth:\x2090\r\ncache-control:\x20no-cache\r\ncontent-type:\x20text/html\
SF:r\nconnection:\x20close\r\n\r\n<html><body><h1>400\x20Bad\x20request</h
SF:1>\nYour\x20browser\x20sent\x20an\x20invalid\x20request\.\n</body></htm
SF:l>\n")%r(DNSVersionBindReqTCP,CF,"HTTP/1\.1\x20400\x20Bad\x20request\r\
SF:ncontent-length:\x2090\r\ncache-control:\x20no-cache\r\ncontent-type:\x
SF:20text/html\r\nconnection:\x20close\r\n\r\n<html><body><h1>400\x20Bad\x
SF:20request</h1>\nYour\x20browser\x20sent\x20an\x20invalid\x20request\.\n
SF:</body></html>\n")%r(DNSStatusRequestTCP,CF,"HTTP/1\.1\x20400\x20Bad\x2
SF:0request\r\ncontent-length:\x2090\r\ncache-control:\x20no-cache\r\ncont
SF:ent-type:\x20text/html\r\nconnection:\x20close\r\n\r\n<html><body><h1>4
SF:00\x20Bad\x20request</h1>\nYour\x20browser\x20sent\x20an\x20invalid\x20
SF:request\.\n</body></html>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: Device: load balancer

Warning: 132.185.161.100 giving up on port because retransmission cap hit (6).
Warning: 132.185.161.176 giving up on port because retransmission cap hit (6).
Warning: 132.185.160.177 giving up on port because retransmission cap hit (6).
Warning: 132.185.161.177 giving up on port because retransmission cap hit (6).
Warning: 132.185.160.176 giving up on port because retransmission cap hit (6).
Nmap scan report for bbc-vip051.lbh.bbc.co.uk (212.58.249.113)
Host is up (0.011s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (93%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 3.10 - 3.12 (92%), Linux 2.6.32 - 2.6.35 (90%), Linux 4.9 (90%), Linux 3.13 (90%), Linux 2.6.32 - 2.6.39 (90%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip128.telhc.bbc.co.uk (212.58.244.83)
Host is up (0.0100s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip136.lbh.bbc.co.uk (212.58.249.198)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B75866%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (89%), Linux 3.10 - 3.12 (88%), Linux 3.13 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for a23-53-112-149.deploy.static.akamaitechnologies.com (23.53.112.149)
Host is up (0.0036s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE  VERSION
80/tcp  open  http     AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
443/tcp open  ssl/http AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|5.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5
Aggressive OS guesses: Linux 4.15 - 5.8 (85%), Linux 5.0 - 5.4 (85%), Linux 5.4 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip050.lbh.bbc.co.uk (212.58.249.112)
Host is up (0.0098s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (93%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 3.10 - 3.12 (91%), Linux 2.6.32 - 2.6.35 (89%), Linux 4.9 (89%), Linux 3.13 (89%), Linux 2.6.32 - 2.6.39 (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip101.telhc.bbc.co.uk (212.58.244.56)
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gatea.telhc.bbc.co.uk (132.185.161.100)
Host is up (0.0093s latency).
Not shown: 54021 closed tcp ports (reset), 11509 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
53/tcp    open  domain     ISC BIND 9.9.9-P8
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (87%), Oracle Solaris 10|11 (87%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10 cpe:/o:oracle:solaris:11
Aggressive OS guesses: Sun Solaris 10 (87%), Sun Solaris 10 (SPARC) (87%), Sun Solaris 9 or Oracle Solaris 10 (87%), Oracle Solaris 11 (86%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 15 hops

Nmap scan report for 151.101.192.82
Host is up (0.0052s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B75866%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21064-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2016:29:25\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21064-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOptions
SF:,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clos
SF:e\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\
SF:r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache
SF:\r\nX-Served-By:\x20cache-ams2100131-AMS\r\nAccept-Ranges:\x20bytes\r\n
SF:Date:\x20Thu,\x2020\x20Feb\x202025\x2016:29:25\x20GMT\r\nVia:\x201\.1\x
SF:20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x
SF:20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x
SF:20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20
SF:been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100
SF:131-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21036\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\
SF:x20cache-ams2100138\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"HT
SF:TP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconte
SF:nt-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Se
SF:rved-By:\x20cache-ams21080-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20T
SF:hu,\x2020\x20Feb\x202025\x2016:29:25\x20GMT\r\nVia:\x201\.1\x20varnish\
SF:r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x
SF:20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\
SF:x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20ad
SF:ded\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21080-AMS\x20\
SF:(151\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B7586C%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100113\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2106
SF:3\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21040\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100107\r\n\r\nBad\x20Request")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100117\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.82
Host is up (0.0033s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B75866%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,200,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21022-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2016:29:25\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21022-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOptions,
SF:204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close
SF:\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x200\r
SF:\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\
SF:r\nX-Served-By:\x20cache-ams2100087-AMS\r\nAccept-Ranges:\x20bytes\r\nD
SF:ate:\x20Thu,\x2020\x20Feb\x202025\x2016:29:25\x20GMT\r\nVia:\x201\.1\x2
SF:0varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x2
SF:0domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x2
SF:0domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20b
SF:een\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21000
SF:87-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,96,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100092\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\
SF:x20cache-ams2100129\r\n\r\nBad\x20Request")%r(FourOhFourRequest,204,"HT
SF:TP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconte
SF:nt-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Se
SF:rved-By:\x20cache-ams2100139-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x2
SF:0Thu,\x2020\x20Feb\x202025\x2016:29:25\x20GMT\r\nVia:\x201\.1\x20varnis
SF:h\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain
SF:\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain
SF::\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20
SF:added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100139-AMS\
SF:x20\(151\.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B7586C%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21079\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21030\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams2100134\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100089\r\n\r\nBad\x20Request")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100137\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for dns2.p09.nsone.net (198.51.45.9)
Host is up (0.0028s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for 151.101.0.82
Host is up (0.0022s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B75866%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100142-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2016:29:25\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100142-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOptio
SF:ns,1FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20cl
SF:ose\r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x20
SF:0\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cac
SF:he\r\nX-Served-By:\x20cache-ams21064-AMS\r\nAccept-Ranges:\x20bytes\r\n
SF:Date:\x20Thu,\x2020\x20Feb\x202025\x2016:29:25\x20GMT\r\nVia:\x201\.1\x
SF:20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x
SF:20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x
SF:20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20
SF:been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2106
SF:4-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,96,"HTTP
SF:/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams2100086\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1
SF:\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2
SF:011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x2
SF:0cache-ams2100137\r\n\r\nBad\x20Request")%r(FourOhFourRequest,203,"HTTP
SF:/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent
SF:-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serv
SF:ed-By:\x20cache-ams2100136-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20T
SF:hu,\x2020\x20Feb\x202025\x2016:29:25\x20GMT\r\nVia:\x201\.1\x20varnish\
SF:r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x
SF:20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\
SF:x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20ad
SF:ded\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100136-AMS\x2
SF:0\(151\.101\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B7586C%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100132\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100
SF:094\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\
SF:x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19
SF:179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\
SF:x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fa
SF:stly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20
SF:for\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1
SF:\x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100085\r\n\r\nRequested\x20host\x20does\x20not\x20m
SF:atch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS
SF:\x20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e552365
SF:53e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVi
SF:sit\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-
SF:misdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versi
SF:ons,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r
SF:\nx-served-by:\x20cache-ams21058\r\n\r\nBad\x20Request")%r(RTSPRequest,
SF:94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams21054\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.82
Host is up (0.0032s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B75866%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100142-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2016:29:25\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100142-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOpt
SF:ions,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20
SF:close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x
SF:200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-c
SF:ache\r\nX-Served-By:\x20cache-ams2100134-AMS\r\nAccept-Ranges:\x20bytes
SF:\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2016:29:25\x20GMT\r\nVia:\x201\
SF:.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unkno
SF:wn\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unkno
SF:wn\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has
SF:\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams
SF:2100134-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,
SF:94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams21036\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTT
SF:P/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams2100135\r\n\r\nBad\x20Request")%r(FourOhFourRequest,205
SF:,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\
SF:nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nc
SF:ontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\n
SF:X-Served-By:\x20cache-ams2100088-AMS\r\nAccept-Ranges:\x20bytes\r\nDate
SF::\x20Thu,\x2020\x20Feb\x202025\x2016:29:25\x20GMT\r\nVia:\x201\.1\x20va
SF:rnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20do
SF:main\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20do
SF:main:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been
SF:\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100088-
SF:AMS\x20\(151\.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B7586C%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21059\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21026\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21052\r\n\r\nRequested\x20host\x20does\x20not\x20match\x
SF:20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20ce
SF:rtificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631
SF:d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x2
SF:0https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdir
SF:ected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100102\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21052\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin1.cwwtf.bbc.co.uk (132.185.160.177)
Host is up (0.0095s latency).
Not shown: 65519 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
18654/tcp filtered unknown
20488/tcp filtered unknown
33373/tcp filtered unknown
45795/tcp filtered unknown
51572/tcp filtered unknown
52721/tcp filtered unknown
53914/tcp filtered unknown
56690/tcp filtered unknown
61564/tcp filtered unknown
63128/tcp filtered unknown
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ns4.demysdns.co.uk (198.51.44.9)
Host is up (0.0031s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for mailin1.telhc.bbc.co.uk (132.185.161.177)
Host is up (0.010s latency).
Not shown: 65508 closed tcp ports (reset)
PORT      STATE    SERVICE        VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
3816/tcp  filtered sunlps-http
4552/tcp  filtered menandmice-mon
6721/tcp  filtered unknown
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
14320/tcp filtered unknown
16218/tcp filtered unknown
19791/tcp filtered unknown
23338/tcp filtered unknown
25395/tcp filtered unknown
27151/tcp filtered unknown
27226/tcp filtered unknown
28487/tcp filtered unknown
29785/tcp filtered unknown
30700/tcp filtered unknown
46821/tcp filtered unknown
53120/tcp filtered unknown
56897/tcp filtered unknown
59189/tcp filtered unknown
61593/tcp filtered unknown
63046/tcp filtered unknown
63075/tcp filtered unknown
64765/tcp filtered unknown
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin0.telhc.bbc.co.uk (132.185.161.176)
Host is up (0.010s latency).
Not shown: 54048 closed tcp ports (reset), 11482 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin0.cwwtf.bbc.co.uk (132.185.160.176)
Host is up (0.010s latency).
Not shown: 65520 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
1570/tcp  filtered orbixd
7845/tcp  filtered apc-7845
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
12492/tcp filtered unknown
16069/tcp filtered unknown
17934/tcp filtered unknown
19716/tcp filtered unknown
47839/tcp filtered unknown
49773/tcp filtered unknown
64699/tcp filtered unknown
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.192.82
Host is up (0.0021s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B75A0E%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21062-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2016:36:30\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21062-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOptions
SF:,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clos
SF:e\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\
SF:r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache
SF:\r\nX-Served-By:\x20cache-ams2100106-AMS\r\nAccept-Ranges:\x20bytes\r\n
SF:Date:\x20Thu,\x2020\x20Feb\x202025\x2016:36:30\x20GMT\r\nVia:\x201\.1\x
SF:20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x
SF:20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x
SF:20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20
SF:been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100
SF:106-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100124\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams21029\r\n\r\nBad\x20Request")%r(FourOhFourRequest,205,"HT
SF:TP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconte
SF:nt-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Se
SF:rved-By:\x20cache-ams2100101-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x2
SF:0Thu,\x2020\x20Feb\x202025\x2016:36:30\x20GMT\r\nVia:\x201\.1\x20varnis
SF:h\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain
SF:\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain
SF::\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20
SF:added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100101-AMS\
SF:x20\(151\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B75A14%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100108\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2102
SF:6\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21042\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams21077\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21066\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.82
Host is up (0.0026s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B75A0E%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100119-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2016:36:30\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100119-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOpti
SF:ons,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20c
SF:lose\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x2
SF:00\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-ca
SF:che\r\nX-Served-By:\x20cache-ams2100084-AMS\r\nAccept-Ranges:\x20bytes\
SF:r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2016:36:30\x20GMT\r\nVia:\x201\.
SF:1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknow
SF:n\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknow
SF:n\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\
SF:x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2
SF:100084-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21035\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100141\r\n\r\nBad\x20Request")%r(FourOhFourRequest,200,"
SF:HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncon
SF:tent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-
SF:Served-By:\x20cache-ams21081-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x2
SF:0Thu,\x2020\x20Feb\x202025\x2016:36:30\x20GMT\r\nVia:\x201\.1\x20varnis
SF:h\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain
SF:\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain
SF::\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20
SF:added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21081-AMS\x2
SF:0\(151\.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B75A14%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100146\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2104
SF:6\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100097\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553
SF:e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams21057\r\n\r\nBad\x20Request")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100131\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (90%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (90%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.0.82
Host is up (0.0022s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B75A0E%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100139-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2016:36:30\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100139-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOptio
SF:ns,1FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20cl
SF:ose\r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x20
SF:0\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cac
SF:he\r\nX-Served-By:\x20cache-ams21052-AMS\r\nAccept-Ranges:\x20bytes\r\n
SF:Date:\x20Thu,\x2020\x20Feb\x202025\x2016:36:30\x20GMT\r\nVia:\x201\.1\x
SF:20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x
SF:20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x
SF:20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20
SF:been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2105
SF:2-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,96,"HTTP
SF:/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams2100104\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\.1
SF:\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2
SF:011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x2
SF:0cache-ams21026\r\n\r\nBad\x20Request")%r(FourOhFourRequest,203,"HTTP/1
SF:\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent
SF:-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-t
SF:ype:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served
SF:-By:\x20cache-ams2100097-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Thu
SF:,\x2020\x20Feb\x202025\x2016:36:30\x20GMT\r\nVia:\x201\.1\x20varnish\r\
SF:n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20
SF:</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x2
SF:0\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20adde
SF:d\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100097-AMS\x20\
SF:(151\.101\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B75A14%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100134\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100
SF:084\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\
SF:x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19
SF:179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\
SF:x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fa
SF:stly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20
SF:for\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1
SF:\x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21066\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553
SF:e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams2100134\r\n\r\nBad\x20Request")%r(RTSPRequest,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100142\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.82
Host is up (0.0023s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B75A0E%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100121-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2016:36:30\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100121-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOpt
SF:ions,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20
SF:close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x
SF:200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-c
SF:ache\r\nX-Served-By:\x20cache-ams21058-AMS\r\nAccept-Ranges:\x20bytes\r
SF:\nDate:\x20Thu,\x2020\x20Feb\x202025\x2016:36:30\x20GMT\r\nVia:\x201\.1
SF:\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown
SF:\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown
SF:\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x
SF:20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21
SF:058-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100097\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams21023\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"HT
SF:TP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconte
SF:nt-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Se
SF:rved-By:\x20cache-ams21036-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20T
SF:hu,\x2020\x20Feb\x202025\x2016:36:30\x20GMT\r\nVia:\x201\.1\x20varnish\
SF:r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x
SF:20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\
SF:x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20ad
SF:ded\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21036-AMS\x20\
SF:(151\.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B75A14%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21083\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21022\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21078\r\n\r\nRequested\x20host\x20does\x20not\x20match\x
SF:20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20ce
SF:rtificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631
SF:d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x2
SF:0https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdir
SF:ected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100117\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21040\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for dns2.p09.nsone.net (198.51.45.9)
Host is up (0.0028s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for 151.101.192.82
Host is up (0.0023s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B75ADD%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21028-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2016:39:56\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21028-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOptions
SF:,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clos
SF:e\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\
SF:r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache
SF:\r\nX-Served-By:\x20cache-ams2100096-AMS\r\nAccept-Ranges:\x20bytes\r\n
SF:Date:\x20Thu,\x2020\x20Feb\x202025\x2016:39:56\x20GMT\r\nVia:\x201\.1\x
SF:20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x
SF:20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x
SF:20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20
SF:been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100
SF:096-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100136\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100108\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"
SF:HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncon
SF:tent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-
SF:Served-By:\x20cache-ams21032-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x2
SF:0Thu,\x2020\x20Feb\x202025\x2016:39:56\x20GMT\r\nVia:\x201\.1\x20varnis
SF:h\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain
SF:\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain
SF::\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20
SF:added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21032-AMS\x2
SF:0\(151\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B75AE3%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21030\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams210008
SF:6\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100130\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553
SF:e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams21035\r\n\r\nBad\x20Request")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100136\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (90%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (90%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.82
Host is up (0.0025s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B75ADD%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100090-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2016:39:56\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100090-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOpti
SF:ons,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20c
SF:lose\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x2
SF:00\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-ca
SF:che\r\nX-Served-By:\x20cache-ams2100113-AMS\r\nAccept-Ranges:\x20bytes\
SF:r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2016:39:56\x20GMT\r\nVia:\x201\.
SF:1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknow
SF:n\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknow
SF:n\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\
SF:x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2
SF:100113-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21035\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100106\r\n\r\nBad\x20Request")%r(FourOhFourRequest,200,"
SF:HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncon
SF:tent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-
SF:Served-By:\x20cache-ams21029-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x2
SF:0Thu,\x2020\x20Feb\x202025\x2016:39:56\x20GMT\r\nVia:\x201\.1\x20varnis
SF:h\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain
SF:\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain
SF::\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20
SF:added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21029-AMS\x2
SF:0\(151\.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B75AE3%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21081\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams210013
SF:5\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21063\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100102\r\n\r\nBad\x20Request")%r(RTSPRequest,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21068\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.0.82
Host is up (0.0022s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B75ADD%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100111-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2016:39:56\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100111-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOptio
SF:ns,1FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20cl
SF:ose\r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x20
SF:0\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cac
SF:he\r\nX-Served-By:\x20cache-ams21023-AMS\r\nAccept-Ranges:\x20bytes\r\n
SF:Date:\x20Thu,\x2020\x20Feb\x202025\x2016:39:56\x20GMT\r\nVia:\x201\.1\x
SF:20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x
SF:20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x
SF:20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20
SF:been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2102
SF:3-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,94,"HTTP
SF:/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21045\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1\x
SF:20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x201
SF:1\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20c
SF:ache-ams2100118\r\n\r\nBad\x20Request")%r(FourOhFourRequest,203,"HTTP/1
SF:\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent
SF:-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-t
SF:ype:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served
SF:-By:\x20cache-ams2100147-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Thu
SF:,\x2020\x20Feb\x202025\x2016:39:56\x20GMT\r\nVia:\x201\.1\x20varnish\r\
SF:n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20
SF:</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x2
SF:0\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20adde
SF:d\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100147-AMS\x20\
SF:(151\.101\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B75AE3%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21023\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21046\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21071\r\n\r\nRequested\x20host\x20does\x20not\x20match\x
SF:20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20ce
SF:rtificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631
SF:d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x2
SF:0https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdir
SF:ected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21078\r\n\r\nBad\x20Request")%r(RTSPRequest,96,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100123\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.82
Host is up (0.0024s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B75ADD%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21076-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2016:39:56\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21076-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOptions
SF:,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clos
SF:e\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\
SF:r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache
SF:\r\nX-Served-By:\x20cache-ams2100139-AMS\r\nAccept-Ranges:\x20bytes\r\n
SF:Date:\x20Thu,\x2020\x20Feb\x202025\x2016:39:56\x20GMT\r\nVia:\x201\.1\x
SF:20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x
SF:20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x
SF:20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20
SF:been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100
SF:139-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100136\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100131\r\n\r\nBad\x20Request")%r(FourOhFourRequest,205,"
SF:HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncon
SF:tent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-
SF:Served-By:\x20cache-ams2100135-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\
SF:x20Thu,\x2020\x20Feb\x202025\x2016:39:56\x20GMT\r\nVia:\x201\.1\x20varn
SF:ish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20doma
SF:in\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20doma
SF:in:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x
SF:20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100135-AM
SF:S\x20\(151\.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B75AE3%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21028\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams210009
SF:6\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21058\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams21052\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21028\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.0.82
Host is up (0.0021s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B75BAB%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,1FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21033-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2016:43:22\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21033-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOptions,1
SF:FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\
SF:r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\
SF:ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r
SF:\nX-Served-By:\x20cache-ams21028-AMS\r\nAccept-Ranges:\x20bytes\r\nDate
SF::\x20Thu,\x2020\x20Feb\x202025\x2016:43:22\x20GMT\r\nVia:\x201\.1\x20va
SF:rnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20do
SF:main\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20do
SF:main:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been
SF:\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21028-AM
SF:S\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,94,"HTTP/1\.
SF:1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x
SF:2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x
SF:20cache-ams21073\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\.1\x2040
SF:0\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011\r\
SF:ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache
SF:-ams21045\r\n\r\nBad\x20Request")%r(FourOhFourRequest,203,"HTTP/1\.1\x2
SF:0500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-type:\x
SF:20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served-By:\x
SF:20cache-ams2100094-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Thu,\x202
SF:0\x20Feb\x202025\x2016:43:22\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\r\n\
SF:n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</titl
SF:e>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\.\x2
SF:0Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\x20t
SF:o\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100094-AMS\x20\(151\.
SF:101\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B75BB1%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100143\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2102
SF:7\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100121\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553
SF:e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams2100109\r\n\r\nBad\x20Request")%r(RTSPRequest,
SF:94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams21046\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.82
Host is up (0.0021s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B75BAB%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100105-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2016:43:22\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100105-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOpti
SF:ons,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20c
SF:lose\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x2
SF:00\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-ca
SF:che\r\nX-Served-By:\x20cache-ams2100142-AMS\r\nAccept-Ranges:\x20bytes\
SF:r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2016:43:22\x20GMT\r\nVia:\x201\.
SF:1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknow
SF:n\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknow
SF:n\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\
SF:x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2
SF:100142-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100086\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTT
SF:P/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams21072\r\n\r\nBad\x20Request")%r(FourOhFourRequest,200,"
SF:HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncon
SF:tent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-
SF:Served-By:\x20cache-ams21023-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x2
SF:0Thu,\x2020\x20Feb\x202025\x2016:43:22\x20GMT\r\nVia:\x201\.1\x20varnis
SF:h\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain
SF:\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain
SF::\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20
SF:added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21023-AMS\x2
SF:0\(151\.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B75BB1%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100122\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100
SF:135\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\
SF:x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19
SF:179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\
SF:x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fa
SF:stly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20
SF:for\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1
SF:\x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21071\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553
SF:e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams21041\r\n\r\nBad\x20Request")%r(RTSPRequest,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21076\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.192.82
Host is up (0.0021s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B75BAB%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100089-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2016:43:22\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100089-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOpt
SF:ions,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20
SF:close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x
SF:200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-c
SF:ache\r\nX-Served-By:\x20cache-ams2100142-AMS\r\nAccept-Ranges:\x20bytes
SF:\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2016:43:22\x20GMT\r\nVia:\x201\
SF:.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unkno
SF:wn\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unkno
SF:wn\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has
SF:\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams
SF:2100142-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100125\r\n\r\nBad\x20Request")%r(X11Probe,94,"H
SF:TTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams21035\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201
SF:,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\
SF:nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nc
SF:ontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\n
SF:X-Served-By:\x20cache-ams21081-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\
SF:x20Thu,\x2020\x20Feb\x202025\x2016:43:22\x20GMT\r\nVia:\x201\.1\x20varn
SF:ish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20doma
SF:in\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20doma
SF:in:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x
SF:20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21081-AMS\
SF:x20\(151\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B75BB1%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100139\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2104
SF:1\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21020\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100143\r\n\r\nBad\x20Request")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100096\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.82
Host is up (0.0020s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/20%Time=67B75BAB%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21050-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2020\x20Feb\x202025\x2016:43:22\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21050-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOptions
SF:,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clos
SF:e\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\
SF:r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache
SF:\r\nX-Served-By:\x20cache-ams21067-AMS\r\nAccept-Ranges:\x20bytes\r\nDa
SF:te:\x20Thu,\x2020\x20Feb\x202025\x2016:43:22\x20GMT\r\nVia:\x201\.1\x20
SF:varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20
SF:domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20
SF:domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20be
SF:en\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21067-
SF:AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,94,"HTTP
SF:/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21022\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1\x
SF:20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x201
SF:1\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20c
SF:ache-ams2100118\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"HTTP/1
SF:\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent
SF:-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-t
SF:ype:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served
SF:-By:\x20cache-ams21023-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Thu,\
SF:x2020\x20Feb\x202025\x2016:43:22\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\
SF:r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</
SF:title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\
SF:.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\
SF:x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21023-AMS\x20\(151
SF:\.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/20%Time=67B75BB1%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100110\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100
SF:119\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\
SF:x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19
SF:179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\
SF:x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fa
SF:stly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20
SF:for\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1
SF:\x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21057\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553
SF:e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams2100084\r\n\r\nBad\x20Request")%r(RTSPRequest,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100134\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Thu Feb 20 16:43:34 2025 -- 223 IP addresses (162 hosts up) scanned in 15206.00 seconds