# Nmap 7.94SVN scan initiated Tue Feb  4 15:41:01 2025 as: nmap --privileged -sV -p- -T4 -O --min-parallelism 100 --max-rtt-timeout 1s -oN /var/www/html/nmap/results/944da038-2bf4-4743-af35-730998151dca.txt 212.58.249.198 212.58.244.23 212.58.228.25 132.185.158.45 212.58.228.100 198.51.45.9 151.101.192.82 151.101.64.82 132.185.132.199 151.101.128.81 151.101.192.82 54.77.244.106 212.58.242.133 212.58.228.23 192.168.193.10 212.58.247.239 13.41.43.220 52.97.146.40 34.90.160.40 2.16.6.202 212.58.249.199 52.98.204.168 151.101.0.82 212.58.249.147 132.185.132.16 10.72.136.19 13.227.219.58 212.58.244.22 132.185.151.150 132.185.132.1 151.101.128.82 212.58.244.205 212.58.244.99 212.58.228.86 212.58.249.201 99.80.224.186 81.144.28.241 132.185.132.16 54.76.59.205 52.19.225.170 132.185.151.133 212.58.244.57 10.72.136.19 212.58.242.5 52.98.215.88 212.58.249.225 212.58.228.26 132.185.161.176 212.58.228.94 151.101.64.82 52.97.131.248 151.101.192.82 151.101.192.82 212.58.249.206 151.101.0.82 212.58.244.129 172.29.120.48 132.185.132.16 132.185.132.32 132.185.132.13 151.101.64.82 52.97.146.56 198.51.44.9 212.58.249.145 52.97.178.72 132.185.161.177 151.101.128.82 151.101.192.81 52.98.196.24 212.58.244.16 132.185.160.176 132.185.160.177 148.163.199.65 212.58.251.122 212.58.244.104 52.16.246.43 212.58.244.83 212.58.244.73 212.58.230.134 132.185.160.177 13.227.219.122 212.58.226.146 151.101.192.82 132.185.161.100 212.58.251.122 212.58.228.35 212.58.249.112 132.185.132.21 35.178.11.2 212.58.226.91 132.185.132.19 81.144.28.238 212.58.249.120 108.128.36.99 151.101.128.82 132.185.159.183 212.58.250.23 212.58.226.92 212.58.230.158 212.58.228.15 207.169.33.39 212.58.255.217 212.58.236.67 212.58.244.187 81.144.28.241 132.185.132.16 212.58.255.218 151.101.64.82 132.185.240.37 212.58.228.62 132.185.151.132 132.185.132.2 81.144.28.241 212.58.249.145 212.58.249.207 132.185.142.146 151.101.64.82 132.185.151.132 151.101.64.82 132.185.151.134 52.98.214.120 132.185.161.100 212.58.249.121 132.185.151.134 132.185.132.34 212.58.244.210 3.9.51.107 212.58.249.146 13.227.219.18 132.185.69.251 23.53.112.149 132.185.161.176 212.58.244.39 212.58.249.144 198.51.45.9 212.58.251.88 132.185.132.10 212.58.228.29 132.185.151.148 212.58.228.78 151.101.0.81 132.185.160.177 151.101.0.82 132.185.151.148 132.185.132.12 172.31.55.87 212.58.249.199 52.97.146.72 212.58.244.17 132.185.132.3 212.58.244.9 212.58.244.56 151.101.128.82 132.185.132.21 40.99.148.200 132.185.160.179 132.185.161.180 198.51.44.9 2.16.6.220 212.58.249.112 151.101.192.82 212.58.244.98 151.101.128.82 132.185.161.176 52.98.215.72 212.58.249.200 132.185.160.100 54.246.116.199 132.185.132.21 212.58.249.141 198.51.44.9 151.101.64.81 198.51.45.9 52.209.149.93 132.185.160.180 52.97.146.104 132.185.151.149 13.227.219.83 18.200.133.248 212.58.249.156 212.58.244.83 151.101.0.82 23.53.112.149 132.185.151.150 172.29.161.54 132.185.161.177 212.58.249.113 132.185.132.141 132.185.161.177 212.58.228.104 212.58.244.15 212.58.226.147 212.58.244.16 212.58.249.144 132.185.132.142 10.52.69.191 151.101.0.82 132.185.160.176 132.185.151.133 132.185.132.130 198.51.45.9 132.185.142.146 132.185.161.179 212.58.244.98 34.90.160.40 10.57.48.79 212.58.249.198 212.58.249.183 132.185.144.154 212.58.249.113 132.185.153.97 151.101.128.82 212.58.228.21 212.58.244.57 212.58.244.186 212.58.244.56 46.137.181.193 132.185.132.17 132.185.160.176 212.58.244.15 10.10.48.41 151.101.0.82 52.97.166.168 132.185.151.149
Nmap scan report for bbc-vip136.lbh.bbc.co.uk (212.58.249.198)
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A23682%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (90%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.244.23
Host is up (0.0093s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A23682%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.228.25
Host is up (0.0093s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|storage-misc|firewall
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (86%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 4.4 (92%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 2.6.32 - 3.0 (88%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 4.0 (87%), Linux 2.6.18 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 132.185.158.45
Host is up (0.0095s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
113/tcp closed ident
443/tcp open   ssl/https?
OS fingerprint not ideal because: Didn't receive UDP response. Please try again with -sSU
No OS matches for host

Nmap scan report for 212.58.228.100
Host is up (0.0093s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   open   http?
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A23682%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A23688%P=x86_64-pc-linux-g
SF:nu%r(tor-versions,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Typ
SF:e:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>
SF:\n");
Device type: general purpose|storage-misc|firewall
Running (JUST GUESSING): Linux 2.6.X|4.X|3.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (86%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 4.4 (92%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.0 (89%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 2.6.18 (87%), Linux 2.6.32 - 3.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for dns2.p09.nsone.net (198.51.45.9)
Host is up (0.0029s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for 151.101.192.82
Host is up (0.0023s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A23682%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams21032-AMS\r\nAccept-Ranges:\x20byt
SF:es\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2015:47:14\x20GMT\r\nVia:\x20
SF:1\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unk
SF:nown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unk
SF:nown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20h
SF:as\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-a
SF:ms21032-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOptions,
SF:205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close
SF:\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r
SF:\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\
SF:r\nX-Served-By:\x20cache-ams2100096-AMS\r\nAccept-Ranges:\x20bytes\r\nD
SF:ate:\x20Tue,\x2004\x20Feb\x202025\x2015:47:14\x20GMT\r\nVia:\x201\.1\x2
SF:0varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x2
SF:0domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x2
SF:0domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20b
SF:een\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21000
SF:96-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,96,"H
SF:TTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams2100135\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1
SF:\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:
SF:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:
SF:\x20cache-ams21073\r\n\r\nBad\x20Request")%r(FourOhFourRequest,205,"HTT
SF:P/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCont
SF:ent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconten
SF:t-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Ser
SF:ved-By:\x20cache-ams2100141-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20
SF:Tue,\x2004\x20Feb\x202025\x2015:47:14\x20GMT\r\nVia:\x201\.1\x20varnish
SF:\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\
SF:x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:
SF:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20a
SF:dded\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100141-AMS\x
SF:20\(151\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A23688%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21026\r\n\r\nRequested
SF:\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20Na
SF:mes\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418c
SF:5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20th
SF:is\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides/
SF:common-400-errors#error-421-misdirected-request\x20for\x20more\x20infor
SF:mation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20
SF:Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-ty
SF:pe:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21044\r
SF:\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Al
SF:ternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c8
SF:91fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20us
SF:e\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\
SF:.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\x
SF:20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x204
SF:21\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length:
SF:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams21050\r\n\r\nRequested\x20host\x20does\x20not\x20match\x2
SF:0any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20cer
SF:tificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d
SF:64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20
SF:https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdire
SF:cted-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,94,
SF:"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-
SF:Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-ser
SF:ved-by:\x20cache-ams21077\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"HTT
SF:P/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams21066\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (90%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (90%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.82
Host is up (0.0023s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A23682%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams2100114-AMS\r\nAccept-Ranges:\x20b
SF:ytes\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2015:47:14\x20GMT\r\nVia:\x
SF:201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20u
SF:nknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20u
SF:nknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x2
SF:0has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache
SF:-ams2100114-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOptio
SF:ns,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20cl
SF:ose\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x20
SF:0\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cac
SF:he\r\nX-Served-By:\x20cache-ams2100119-AMS\r\nAccept-Ranges:\x20bytes\r
SF:\nDate:\x20Tue,\x2004\x20Feb\x202025\x2015:47:14\x20GMT\r\nVia:\x201\.1
SF:\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown
SF:\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown
SF:\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x
SF:20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21
SF:00119-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,94,
SF:"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-
SF:Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-ser
SF:ved-by:\x20cache-ams21047\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1
SF:\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:
SF:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:
SF:\x20cache-ams21021\r\n\r\nBad\x20Request")%r(FourOhFourRequest,204,"HTT
SF:P/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCont
SF:ent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconten
SF:t-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Ser
SF:ved-By:\x20cache-ams2100109-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20
SF:Tue,\x2004\x20Feb\x202025\x2015:47:14\x20GMT\r\nVia:\x201\.1\x20varnish
SF:\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\
SF:x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:
SF:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20a
SF:dded\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100109-AMS\x
SF:20\(151\.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A23688%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100097\r\n\r\nRequest
SF:ed\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20
SF:Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d09341
SF:8c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20
SF:this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guide
SF:s/common-400-errors#error-421-misdirected-request\x20for\x20more\x20inf
SF:ormation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x
SF:20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-
SF:type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21025
SF:\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20
SF:Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179
SF:c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20
SF:use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastl
SF:y\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for
SF:\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x2
SF:0421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams2100105\r\n\r\nRequested\x20host\x20does\x20not\x20matc
SF:h\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x2
SF:0certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e
SF:631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit
SF:\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mis
SF:directed-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions
SF:,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCont
SF:ent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx
SF:-served-by:\x20cache-ams21027\r\n\r\nBad\x20Request")%r(RTSPRequest,96,
SF:"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-
SF:Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-ser
SF:ved-by:\x20cache-ams2100110\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).

Warning: 132.185.161.100 giving up on port because retransmission cap hit (6).
Warning: 132.185.161.176 giving up on port because retransmission cap hit (6).
Nmap scan report for 151.101.128.81
Host is up (0.0021s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A24783%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams21044-AMS\r\nAccept-Ranges:\x20byt
SF:es\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2016:59:47\x20GMT\r\nVia:\x20
SF:1\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unk
SF:nown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unk
SF:nown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20h
SF:as\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-a
SF:ms21044-AMS\x20\(151\.101\.128\.81\)</p></body></html>")%r(HTTPOptions,
SF:205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close
SF:\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r
SF:\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\
SF:r\nX-Served-By:\x20cache-ams2100091-AMS\r\nAccept-Ranges:\x20bytes\r\nD
SF:ate:\x20Tue,\x2004\x20Feb\x202025\x2016:59:47\x20GMT\r\nVia:\x201\.1\x2
SF:0varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x2
SF:0domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x2
SF:0domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20b
SF:een\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21000
SF:91-AMS\x20\(151\.101\.128\.81\)</p></body></html>")%r(RTSPRequest,96,"H
SF:TTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams2100088\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1
SF:\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:
SF:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:
SF:\x20cache-ams2100101\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"H
SF:TTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCo
SF:ntent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncont
SF:ent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-S
SF:erved-By:\x20cache-ams21068-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20
SF:Tue,\x2004\x20Feb\x202025\x2016:59:48\x20GMT\r\nVia:\x201\.1\x20varnish
SF:\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\
SF:x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:
SF:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20a
SF:dded\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21068-AMS\x20
SF:\(151\.101\.128\.81\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A2478A%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100145\r\n\r\nRequest
SF:ed\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20
SF:Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb348716e94e9f83ac
SF:23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x20use\x20with\x20
SF:this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guide
SF:s/common-400-errors#error-421-misdirected-request\x20for\x20more\x20inf
SF:ormation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x
SF:20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-
SF:type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21083
SF:\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20
SF:Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb3
SF:48716e94e9f83ac23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x20
SF:use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastl
SF:y\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for
SF:\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x2
SF:0421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams2100084\r\n\r\nRequested\x20host\x20does\x20not\x20matc
SF:h\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x2
SF:0certificate\x20\[7ccb348716e94e9f83ac23533d4648b0a3a69ede6bd4117e83012
SF:2876855c81a\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit
SF:\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mis
SF:directed-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions
SF:,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCont
SF:ent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx
SF:-served-by:\x20cache-ams2100129\r\n\r\nBad\x20Request")%r(RTSPRequest,9
SF:4,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConten
SF:t-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-s
SF:erved-by:\x20cache-ams21066\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ec2-54-77-244-106.eu-west-1.compute.amazonaws.com (54.77.244.106)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A24783%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,32F8,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Tue,\x2004\
SF:x20Feb\x202025\x2016:59:47\x20GMT\r\nContent-Type:\x20text/html\r\nCont
SF:ent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e9
SF:8\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOCT
SF:YPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x2
SF:0<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\
SF:x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20
SF:\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Co
SF:ntent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv
SF:=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\
SF:x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x2
SF:0\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Com
SF:patible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x
SF:20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wid
SF:th\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20b
SF:est\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20spo
SF:rt\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20a
SF:nd\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20On
SF:line\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,1
SF:47,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Tue,\x2004\x20Feb\x2
SF:02025\x2016:59:47\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Lengt
SF:h:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agent
SF:-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</t
SF:itle></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cente
SF:r>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTSP
SF:Request,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Tue,\x2004\
SF:x20Feb\x202025\x2016:59:47\x20GMT\r\nContent-Type:\x20text/html\r\nCont
SF:ent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\
SF:n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\
SF:r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>openr
SF:esty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A24788%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,17D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Tue
SF:,\x2004\x20Feb\x202025\x2016:59:52\x20GMT\r\nContent-Type:\x20text/html
SF:\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nServer:\x20BBC-GT
SF:M\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x20SSL\x20certifi
SF:cate\x20was\x20sent</title></head>\r\n<body>\r\n<center><h1>400\x20Bad\
SF:x20Request</h1></center>\r\n<center>No\x20required\x20SSL\x20certificat
SF:e\x20was\x20sent</center>\r\n<hr><center>openresty</center>\r\n</body>\
SF:r\n</html>\r\n")%r(HTTPOptions,17D,"HTTP/1\.1\x20400\x20Bad\x20Request\
SF:r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2016:59:52\x20GMT\r\nContent-Typ
SF:e:\x20text/html\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nSe
SF:rver:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x2
SF:0SSL\x20certificate\x20was\x20sent</title></head>\r\n<body>\r\n<center>
SF:<h1>400\x20Bad\x20Request</h1></center>\r\n<center>No\x20required\x20SS
SF:L\x20certificate\x20was\x20sent</center>\r\n<hr><center>openresty</cent
SF:er>\r\n</body>\r\n</html>\r\n")%r(FourOhFourRequest,17D,"HTTP/1\.1\x204
SF:00\x20Bad\x20Request\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2016:59:52\
SF:x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20234\r\nConne
SF:ction:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400
SF:\x20No\x20required\x20SSL\x20certificate\x20was\x20sent</title></head>\
SF:r\n<body>\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<center
SF:>No\x20required\x20SSL\x20certificate\x20was\x20sent</center>\r\n<hr><c
SF:enter>openresty</center>\r\n</body>\r\n</html>\r\n")%r(tor-versions,12D
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Tue,\x2004\x20Feb\x202
SF:025\x2016:59:52\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:
SF:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n
SF:<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\r\n<center>
SF:<h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>openresty</cente
SF:r>\r\n</body>\r\n</html>\r\n")%r(RTSPRequest,12D,"HTTP/1\.1\x20400\x20B
SF:ad\x20Request\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2016:59:57\x20GMT\
SF:r\nContent-Type:\x20text/html\r\nContent-Length:\x20154\r\nConnection:\
SF:x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20Bad
SF:\x20Request</title></head>\r\n<body>\r\n<center><h1>400\x20Bad\x20Reque
SF:st</h1></center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html
SF:>\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for svn.bbc.co.uk (212.58.242.133)
Host is up (0.011s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
443/tcp open  ssl/https Apache
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|2.6.X (89%)
OS CPE: cpe:/o:linux:linux_kernel:4.0 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.0 (89%), Linux 2.6.32 (85%), Linux 4.4 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.228.23
Host is up (0.0095s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  closed https
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: firewall|proxy server|WAP|general purpose|phone|telecom-misc
Running: Check Point embedded, Citrix embedded, Juniper IVE OS 7.X, Linksys embedded, Linux 2.4.X|2.6.X, ISS embedded, Avaya Communication Manager
OS CPE: cpe:/h:checkpoint:zonealarm_z100g cpe:/h:juniper:mag2600 cpe:/h:linksys:wap54g cpe:/o:linux:linux_kernel:2.4.18 cpe:/h:iss:proventia_gx3002c cpe:/o:linux:linux_kernel:2.6.24 cpe:/o:linux:linux_kernel:2.6.11 cpe:/a:avaya:communication_manager
Too many fingerprints match this host to give specific OS details

Nmap scan report for 52.97.146.40
Host is up (0.010s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for 40.160.90.34.bc.googleusercontent.com (34.90.160.40)
Host is up (0.0055s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http-proxy F5 BIG-IP load balancer http proxy
443/tcp open  ssl/https  Apache
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A2478A%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,F2,"HTTP/1\.1\x20301\x20301\r\ndate:\x20Tue,\x2004\x20F
SF:eb\x202025\x2016:59:54\x20GMT\r\nserver:\x20Apache\r\nlocation:\x20http
SF:s://www\.sap\.com/products/recruiting-software\.html\r\nx-content-type-
SF:options:\x20nosniff\r\ncontent-length:\x200\r\nx-xss-protection:\x201;\
SF:x20mode=block\r\nconnection:\x20close\r\n\r\n")%r(HTTPOptions,F2,"HTTP/
SF:1\.1\x20301\x20301\r\ndate:\x20Tue,\x2004\x20Feb\x202025\x2016:59:54\x2
SF:0GMT\r\nserver:\x20Apache\r\nlocation:\x20https://www\.sap\.com/product
SF:s/recruiting-software\.html\r\nx-content-type-options:\x20nosniff\r\nco
SF:ntent-length:\x200\r\nx-xss-protection:\x201;\x20mode=block\r\nconnecti
SF:on:\x20close\r\n\r\n")%r(FourOhFourRequest,115,"HTTP/1\.1\x20301\x20301
SF:\r\ndate:\x20Tue,\x2004\x20Feb\x202025\x2016:59:54\x20GMT\r\nserver:\x2
SF:0Apache\r\nlocation:\x20https://www\.sap\.com/products/recruiting-softw
SF:are\.html\r\nx-content-type-options:\x20nosniff\r\ncontent-length:\x200
SF:\r\ncontent-type:\x20application/x-trash\r\nx-xss-protection:\x201;\x20
SF:mode=block\r\nconnection:\x20close\r\n\r\n")%r(tor-versions,CF,"HTTP/1\
SF:.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\ncache-control:\
SF:x20no-cache\r\ncontent-type:\x20text/html\r\nconnection:\x20close\r\n\r
SF:\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20browser\x20sent\x
SF:20an\x20invalid\x20request\.\n</body></html>\n")%r(RTSPRequest,CF,"HTTP
SF:/1\.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\ncache-contro
SF:l:\x20no-cache\r\ncontent-type:\x20text/html\r\nconnection:\x20close\r\
SF:n\r\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20browser\x20sen
SF:t\x20an\x20invalid\x20request\.\n</body></html>\n")%r(RPCCheck,CF,"HTTP
SF:/1\.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\ncache-contro
SF:l:\x20no-cache\r\ncontent-type:\x20text/html\r\nconnection:\x20close\r\
SF:n\r\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20browser\x20sen
SF:t\x20an\x20invalid\x20request\.\n</body></html>\n")%r(DNSVersionBindReq
SF:TCP,CF,"HTTP/1\.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\n
SF:cache-control:\x20no-cache\r\ncontent-type:\x20text/html\r\nconnection:
SF:\x20close\r\n\r\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20br
SF:owser\x20sent\x20an\x20invalid\x20request\.\n</body></html>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: Device: load balancer

Nmap scan report for a2-16-6-202.deploy.static.akamaitechnologies.com (2.16.6.202)
Host is up (0.0023s latency).
Not shown: 65532 filtered tcp ports (no-response)
PORT     STATE SERVICE          VERSION
80/tcp   open  http             AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
443/tcp  open  ssl/https?
8883/tcp open  ssl/secure-mqtt?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|5.X|2.6.X|3.X (91%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10
Aggressive OS guesses: Linux 4.15 - 5.8 (91%), Linux 5.0 - 5.4 (91%), Linux 2.6.32 (90%), Linux 4.4 (90%), Linux 5.0 - 5.5 (89%), Linux 2.6.32 or 3.10 (89%), Linux 2.6.32 - 2.6.35 (87%), Linux 2.6.32 - 2.6.39 (87%), Linux 4.0 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip137.lbh.bbc.co.uk (212.58.249.199)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A24784%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 4.9 (88%), Linux 3.10 - 3.12 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.98.204.168
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for 151.101.0.82
Host is up (0.0024s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A24783%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,1FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams21067-AMS\r\nAccept-Ranges:\x20byt
SF:es\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2016:59:47\x20GMT\r\nVia:\x20
SF:1\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unk
SF:nown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unk
SF:nown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20h
SF:as\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-a
SF:ms21067-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOptions,20
SF:3,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r
SF:\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\n
SF:content-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\
SF:nX-Served-By:\x20cache-ams2100103-AMS\r\nAccept-Ranges:\x20bytes\r\nDat
SF:e:\x20Tue,\x2004\x20Feb\x202025\x2016:59:47\x20GMT\r\nVia:\x201\.1\x20v
SF:arnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20d
SF:omain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20d
SF:omain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20bee
SF:n\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100103
SF:-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,96,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100102\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1\
SF:x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x20
SF:11\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20
SF:cache-ams2100131\r\n\r\nBad\x20Request")%r(FourOhFourRequest,1FF,"HTTP/
SF:1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConten
SF:t-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-
SF:type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serve
SF:d-By:\x20cache-ams21052-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Tue,
SF:\x2004\x20Feb\x202025\x2016:59:48\x20GMT\r\nVia:\x201\.1\x20varnish\r\n
SF:\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20<
SF:/title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20
SF:\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added
SF:\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21052-AMS\x20\(15
SF:1\.101\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A2478A%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100139\r\n\r\nRequest
SF:ed\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20
SF:Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d09341
SF:8c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20
SF:this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guide
SF:s/common-400-errors#error-421-misdirected-request\x20for\x20more\x20inf
SF:ormation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x
SF:20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-
SF:type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21001
SF:34\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x
SF:20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[191
SF:79c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x
SF:20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fas
SF:tly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20f
SF:or\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\
SF:x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams21063\r\n\r\nRequested\x20host\x20does\x20not\x20matc
SF:h\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x2
SF:0certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e
SF:631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit
SF:\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mis
SF:directed-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions
SF:,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCont
SF:ent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx
SF:-served-by:\x20cache-ams2100097\r\n\r\nBad\x20Request")%r(RTSPRequest,9
SF:6,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConten
SF:t-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-s
SF:erved-by:\x20cache-ams2100086\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip085.lbh.bbc.co.uk (212.58.249.147)
Host is up (0.0092s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A24784%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 5.1 (89%), Linux 3.10 - 3.12 (88%), Linux 3.13 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for server-13-227-219-58.ams54.r.cloudfront.net (13.227.219.58)
Host is up (0.0024s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Amazon CloudFront httpd
443/tcp open  ssl/https CloudFront
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for 212.58.244.22
Host is up (0.0090s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A24784%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for rt0-132.lh.bbc.co.uk (132.185.132.1)
Host is up (0.011s latency).
All 65535 scanned ports on rt0-132.lh.bbc.co.uk (132.185.132.1) are in ignored states.
Not shown: 65535 filtered tcp ports (no-response)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS details: Cisco 1812, 3640, or 3700 router (IOS 12.4), Cisco 3925 router (IOS 12.4), Cisco DOCSIS cable modem termination server (IOS 12.1), Cisco 6509 switch (IOS 12.2), Cisco Catalyst 3560 or 6500-series switch (IOS 12.1 - 12.2), Cisco Catalyst 6509-E switch (IOS 12.2), Cisco Nexus 5548P switch (NX-OS 5.1), QEMU user mode network gateway

Nmap scan report for 151.101.128.82
Host is up (0.0023s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A24783%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams21037-AMS\r\nAccept-Ranges:\x20byt
SF:es\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2016:59:47\x20GMT\r\nVia:\x20
SF:1\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unk
SF:nown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unk
SF:nown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20h
SF:as\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-a
SF:ms21037-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOptions,
SF:201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close
SF:\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r
SF:\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\
SF:r\nX-Served-By:\x20cache-ams21061-AMS\r\nAccept-Ranges:\x20bytes\r\nDat
SF:e:\x20Tue,\x2004\x20Feb\x202025\x2016:59:47\x20GMT\r\nVia:\x201\.1\x20v
SF:arnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20d
SF:omain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20d
SF:omain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20bee
SF:n\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21061-A
SF:MS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,94,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams21045\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1\x2
SF:0400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011
SF:\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20ca
SF:che-ams2100118\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"HTTP/1\
SF:.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent-
SF:Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-ty
SF:pe:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served-
SF:By:\x20cache-ams21073-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Tue,\x
SF:2004\x20Feb\x202025\x2016:59:48\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\r
SF:\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</t
SF:itle>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\.
SF:\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\x
SF:20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21073-AMS\x20\(151\
SF:.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A2478A%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100126\r\n\r\nRequest
SF:ed\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20
SF:Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d09341
SF:8c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20
SF:this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guide
SF:s/common-400-errors#error-421-misdirected-request\x20for\x20more\x20inf
SF:ormation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x
SF:20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-
SF:type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21001
SF:11\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x
SF:20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[191
SF:79c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x
SF:20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fas
SF:tly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20f
SF:or\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\
SF:x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams21025\r\n\r\nRequested\x20host\x20does\x20not\x20matc
SF:h\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x2
SF:0certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e
SF:631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit
SF:\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mis
SF:directed-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions
SF:,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCont
SF:ent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx
SF:-served-by:\x20cache-ams2100143\r\n\r\nBad\x20Request")%r(RTSPRequest,9
SF:6,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConten
SF:t-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-s
SF:erved-by:\x20cache-ams2100146\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip194.telhc.bbc.co.uk (212.58.244.205)
Host is up (0.0094s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A24784%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type:\x20tex
SF:t/html\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2016:59:47\x20GMT\r\nConn
SF:ection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x20html>\
SF:n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--\x20VERS
SF:ION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BBC\x20-\x
SF:20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\x20<meta
SF:\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content-Type\">
SF:\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"encoding\"
SF:>\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20initial-sc
SF:ale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20\x20<met
SF:a\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatible\">\n\
SF:x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20name=\"robo
SF:ts\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\x20name=
SF:\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x20of\x20
SF:the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x20headlin
SF:es,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x20much\x2
SF:0more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\"\x20nam
SF:e=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www\.bbc\.c
SF:o\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\x20")%r(
SF:HTTPOptions,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type:\x20
SF:text/html\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2016:59:47\x20GMT\r\nC
SF:onnection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x20htm
SF:l>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--\x20V
SF:ERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BBC\x20
SF:-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\x20<m
SF:eta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content-Type
SF:\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"encodin
SF:g\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20initial
SF:-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20\x20<
SF:meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatible\">
SF:\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20name=\"r
SF:obots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\x20na
SF:me=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x20of\
SF:x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x20head
SF:lines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x20much
SF:\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\"\x20
SF:name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www\.bbc
SF:\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\x20");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A2478A%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type:
SF:\x20text/html\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2016:59:53\x20GMT\
SF:r\nConnection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x2
SF:0html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--\
SF:x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BBC
SF:\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\x
SF:20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content-
SF:Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"enc
SF:oding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20ini
SF:tial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20\
SF:x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatibl
SF:e\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20name
SF:=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\x
SF:20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x2
SF:0of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x20
SF:headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x20
SF:much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\"
SF:\x20name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www\
SF:.bbc\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\x
SF:20")%r(HTTPOptions,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Ty
SF:pe:\x20text/html\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2016:59:53\x20G
SF:MT\r\nConnection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE
SF:\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!
SF:--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20
SF:BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x2
SF:0\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Conte
SF:nt-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"
SF:encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20
SF:initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x
SF:20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compat
SF:ible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20n
SF:ame=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\
SF:"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best
SF:\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\
SF:x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\
SF:x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Onlin
SF:e\"\x20name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://w
SF:ww\.bbc\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x2
SF:0\x20");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip139.telhc.bbc.co.uk (212.58.244.99)
Host is up (0.0094s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.228.86
Host is up (0.0093s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  closed https
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: firewall|proxy server|WAP|general purpose|phone|telecom-misc
Running: Check Point embedded, Citrix embedded, Juniper IVE OS 7.X, Linksys embedded, Linux 2.4.X|2.6.X, ISS embedded, Avaya Communication Manager
OS CPE: cpe:/h:checkpoint:zonealarm_z100g cpe:/h:juniper:mag2600 cpe:/h:linksys:wap54g cpe:/o:linux:linux_kernel:2.4.18 cpe:/h:iss:proventia_gx3002c cpe:/o:linux:linux_kernel:2.6.24 cpe:/o:linux:linux_kernel:2.6.11 cpe:/a:avaya:communication_manager
Too many fingerprints match this host to give specific OS details

Nmap scan report for bbc-vip139.lbh.bbc.co.uk (212.58.249.201)
Host is up (0.0094s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A24784%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 3.10 - 3.12 (90%), Linux 2.6.32 or 3.10 (89%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ec2-99-80-224-186.eu-west-1.compute.amazonaws.com (99.80.224.186)
Host is up (0.019s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A24783%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,7F5C,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Tue,\x2004\
SF:x20Feb\x202025\x2016:59:47\x20GMT\r\nContent-Type:\x20text/html\r\nCont
SF:ent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e9
SF:8\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOCT
SF:YPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x2
SF:0<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\
SF:x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20
SF:\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Co
SF:ntent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv
SF:=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\
SF:x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x2
SF:0\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Com
SF:patible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x
SF:20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wid
SF:th\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20b
SF:est\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20spo
SF:rt\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20a
SF:nd\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20On
SF:line\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,1
SF:47,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Tue,\x2004\x20Feb\x2
SF:02025\x2016:59:47\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Lengt
SF:h:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agent
SF:-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</t
SF:itle></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cente
SF:r>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTSP
SF:Request,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Tue,\x2004\
SF:x20Feb\x202025\x2016:59:47\x20GMT\r\nContent-Type:\x20text/html\r\nCont
SF:ent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\
SF:n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\
SF:r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>openr
SF:esty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A24788%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,17D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Tue
SF:,\x2004\x20Feb\x202025\x2016:59:52\x20GMT\r\nContent-Type:\x20text/html
SF:\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nServer:\x20BBC-GT
SF:M\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x20SSL\x20certifi
SF:cate\x20was\x20sent</title></head>\r\n<body>\r\n<center><h1>400\x20Bad\
SF:x20Request</h1></center>\r\n<center>No\x20required\x20SSL\x20certificat
SF:e\x20was\x20sent</center>\r\n<hr><center>openresty</center>\r\n</body>\
SF:r\n</html>\r\n")%r(HTTPOptions,17D,"HTTP/1\.1\x20400\x20Bad\x20Request\
SF:r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2016:59:52\x20GMT\r\nContent-Typ
SF:e:\x20text/html\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nSe
SF:rver:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x2
SF:0SSL\x20certificate\x20was\x20sent</title></head>\r\n<body>\r\n<center>
SF:<h1>400\x20Bad\x20Request</h1></center>\r\n<center>No\x20required\x20SS
SF:L\x20certificate\x20was\x20sent</center>\r\n<hr><center>openresty</cent
SF:er>\r\n</body>\r\n</html>\r\n")%r(FourOhFourRequest,17D,"HTTP/1\.1\x204
SF:00\x20Bad\x20Request\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2016:59:52\
SF:x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20234\r\nConne
SF:ction:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400
SF:\x20No\x20required\x20SSL\x20certificate\x20was\x20sent</title></head>\
SF:r\n<body>\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<center
SF:>No\x20required\x20SSL\x20certificate\x20was\x20sent</center>\r\n<hr><c
SF:enter>openresty</center>\r\n</body>\r\n</html>\r\n")%r(tor-versions,12D
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Tue,\x2004\x20Feb\x202
SF:025\x2016:59:52\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:
SF:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n
SF:<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\r\n<center>
SF:<h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>openresty</cente
SF:r>\r\n</body>\r\n</html>\r\n")%r(RTSPRequest,12D,"HTTP/1\.1\x20400\x20B
SF:ad\x20Request\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2016:59:57\x20GMT\
SF:r\nContent-Type:\x20text/html\r\nContent-Length:\x20154\r\nConnection:\
SF:x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20Bad
SF:\x20Request</title></head>\r\n<body>\r\n<center><h1>400\x20Bad\x20Reque
SF:st</h1></center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html
SF:>\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for ec2-54-76-59-205.eu-west-1.compute.amazonaws.com (54.76.59.205)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      nginx 1.14.1
443/tcp open  ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A2478A%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1B0,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-C
SF:ookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max-
SF:Age=3600;\x20Path=/;\x20Expires=Tue,\x2004\x20Feb\x202025\x2017:59:54\x
SF:20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://picos\.tools\.bbc
SF:\.co\.uk/landing\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x20
SF:charset=utf-8\r\nContent-Length:\x2072\r\nDate:\x20Tue,\x2004\x20Feb\x2
SF:02025\x2016:59:54\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20Re
SF:direct\.\x20Redirecting\x20to\x20https://picos\.tools\.bbc\.co\.uk/land
SF:ing")%r(HTTPOptions,1B0,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nS
SF:et-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20
SF:Max-Age=3600;\x20Path=/;\x20Expires=Tue,\x2004\x20Feb\x202025\x2017:59:
SF:54\x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://picos\.tools\
SF:.bbc\.co\.uk/landing\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;
SF:\x20charset=utf-8\r\nContent-Length:\x2072\r\nDate:\x20Tue,\x2004\x20Fe
SF:b\x202025\x2016:59:54\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x
SF:20Redirect\.\x20Redirecting\x20to\x20https://picos\.tools\.bbc\.co\.uk/
SF:landing")%r(FourOhFourRequest,1DD,"HTTP/1\.1\x20307\x20Temporary\x20Red
SF:irect\r\nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2Fn
SF:ice%2520ports%252C%2FTri%256Eity\.txt%252ebak%22%7D;\x20Max-Age=3600;\x
SF:20Path=/;\x20Expires=Tue,\x2004\x20Feb\x202025\x2017:59:54\x20GMT;\x20H
SF:ttpOnly;\x20Secure\r\nLocation:\x20https://picos\.tools\.bbc\.co\.uk/la
SF:nding\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x20charset=utf
SF:-8\r\nContent-Length:\x2072\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2016
SF::59:54\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20Redirect\.\x2
SF:0Redirecting\x20to\x20https://picos\.tools\.bbc\.co\.uk/landing")%r(DNS
SF:VersionBindReqTCP,2F,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:
SF:\x20close\r\n\r\n")%r(DNSStatusRequestTCP,2F,"HTTP/1\.1\x20400\x20Bad\x
SF:20Request\r\nConnection:\x20close\r\n\r\n")%r(LDAPSearchReq,2F,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\n\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for ec2-52-19-225-170.eu-west-1.compute.amazonaws.com (52.19.225.170)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A24783%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,32F8,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Tue,\x2004\
SF:x20Feb\x202025\x2016:59:47\x20GMT\r\nContent-Type:\x20text/html\r\nCont
SF:ent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e9
SF:8\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOCT
SF:YPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x2
SF:0<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\
SF:x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20
SF:\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Co
SF:ntent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv
SF:=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\
SF:x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x2
SF:0\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Com
SF:patible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x
SF:20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wid
SF:th\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20b
SF:est\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20spo
SF:rt\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20a
SF:nd\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20On
SF:line\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,1
SF:47,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Tue,\x2004\x20Feb\x2
SF:02025\x2016:59:47\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Lengt
SF:h:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agent
SF:-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</t
SF:itle></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cente
SF:r>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTSP
SF:Request,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Tue,\x2004\
SF:x20Feb\x202025\x2016:59:47\x20GMT\r\nContent-Type:\x20text/html\r\nCont
SF:ent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\
SF:n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\
SF:r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>openr
SF:esty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A24788%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,2000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Tue,
SF:\x2004\x20Feb\x202025\x2016:59:52\x20GMT\r\nContent-Type:\x20text/html\
SF:r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61dee
SF:c4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\
SF:n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20
SF:\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x
SF:20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\
SF:x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equ
SF:iv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20htt
SF:p-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-
SF:width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n
SF:\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X
SF:-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofol
SF:low\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=dev
SF:ice-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"T
SF:he\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and
SF:\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highligh
SF:ts\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BB
SF:C\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOp
SF:tions,147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Tue,\x2004\x2
SF:0Feb\x202025\x2016:59:52\x20GMT\r\nContent-Type:\x20text/html\r\nConten
SF:t-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigi
SF:n-Agent-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20All
SF:owed</title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1>
SF:</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")
SF:%r(FourOhFourRequest,2000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x2
SF:0Tue,\x2004\x20Feb\x202025\x2016:59:52\x20GMT\r\nContent-Type:\x20text/
SF:html\r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"
SF:61deec4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r
SF:\n\r\n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x2
SF:0\x20\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title
SF:>\n\x20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</titl
SF:e>\n\x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20htt
SF:p-equiv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x
SF:20http-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=de
SF:vice-width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport
SF:\">\n\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equi
SF:v=\"X-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20
SF:nofollow\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"widt
SF:h=device-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20conten
SF:t=\"The\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x
SF:20and\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20hig
SF:hlights\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\
SF:x20BBC\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bbc-vip102.telhc.bbc.co.uk (212.58.244.57)
Host is up (0.0089s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ftping501.bc.bbc.co.uk (212.58.242.5)
Host is up (0.0099s latency).
Not shown: 65530 closed tcp ports (reset)
PORT    STATE    SERVICE   VERSION
21/tcp  open     ftp       ProFTPD 1.3.5b
25/tcp  filtered smtp
80/tcp  open     http      Apache httpd 2.4.6 ((Red Hat Enterprise Linux) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5)
123/tcp filtered ntp
443/tcp open     ssl/https Apache/2.4.6 (Red Hat Enterprise Linux) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (93%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 3.10 - 3.12 (92%), Linux 2.6.32 - 2.6.35 (90%), Linux 4.9 (90%), Linux 3.13 (90%), Linux 2.6.32 - 2.6.39 (90%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Unix

Nmap scan report for 52.98.215.88
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for bbc-vip163.lbh.bbc.co.uk (212.58.249.225)
Host is up (0.0099s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A24784%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (96%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (96%), Linux 4.0 (91%), Linux 3.10 - 4.11 (90%), Linux 3.11 - 4.1 (90%), Linux 3.2 - 4.9 (90%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (89%), Linux 5.1 (88%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ipsecure-maud.test.bbc.co.uk (212.58.228.26)
Host is up (0.0093s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|storage-misc|firewall|WAP
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X|2.4.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (86%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8 cpe:/o:linux:linux_kernel:2.4
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 4.4 (92%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 2.6.32 - 3.0 (88%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 4.0 (87%), Linux 2.6.18 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin0.telhc.bbc.co.uk (132.185.161.176)
Host is up (0.0093s latency).
Not shown: 64820 closed tcp ports (reset), 710 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.228.94
Host is up (0.0092s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  closed https
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: firewall|proxy server|WAP|general purpose|phone|telecom-misc
Running: Check Point embedded, Citrix embedded, Juniper IVE OS 7.X, Linksys embedded, Linux 2.4.X|2.6.X, ISS embedded, Avaya Communication Manager
OS CPE: cpe:/h:checkpoint:zonealarm_z100g cpe:/h:juniper:mag2600 cpe:/h:linksys:wap54g cpe:/o:linux:linux_kernel:2.4.18 cpe:/h:iss:proventia_gx3002c cpe:/o:linux:linux_kernel:2.6.24 cpe:/o:linux:linux_kernel:2.6.11 cpe:/a:avaya:communication_manager
Too many fingerprints match this host to give specific OS details

Nmap scan report for 52.97.131.248
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (89%)
Aggressive OS guesses: Citrix NetScaler load balancer (89%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for bbc-vip144.lbh.bbc.co.uk (212.58.249.206)
Host is up (0.0092s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE VERSION
80/tcp  open   http?
443/tcp closed https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A24784%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (93%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 3.10 - 3.12 (91%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 - 2.6.35 (89%), Linux 3.13 (89%), Linux 2.6.32 - 2.6.39 (89%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip152.telhc.bbc.co.uk (212.58.244.129)
Host is up (0.0089s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE VERSION
80/tcp  open  http?
443/tcp open  https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A24784%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gated.lh.bbc.co.uk (132.185.132.13)
Host is up (0.010s latency).
All 65535 scanned ports on gated.lh.bbc.co.uk (132.185.132.13) are in ignored states.
Not shown: 65535 filtered tcp ports (no-response)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Sun Solaris 8|9
OS CPE: cpe:/o:sun:sunos:5.8 cpe:/o:sun:sunos:5.9
OS details: Sun Solaris 8, Sun Solaris 9 (SPARC)

Nmap scan report for 52.97.146.56
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for dns1.p09.nsone.net (198.51.44.9)
Host is up (0.0028s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bbc-vip083.lbh.bbc.co.uk (212.58.249.145)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (90%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.97.178.72
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for mailin1.telhc.bbc.co.uk (132.185.161.177)
Host is up (0.0095s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.192.81
Host is up (0.0025s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A24783%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams2100119-AMS\r\nAccept-Ranges:\x20b
SF:ytes\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2016:59:47\x20GMT\r\nVia:\x
SF:201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20u
SF:nknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20u
SF:nknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x2
SF:0has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache
SF:-ams2100119-AMS\x20\(151\.101\.192\.81\)</p></body></html>")%r(HTTPOpti
SF:ons,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20c
SF:lose\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x2
SF:00\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-ca
SF:che\r\nX-Served-By:\x20cache-ams2100086-AMS\r\nAccept-Ranges:\x20bytes\
SF:r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2016:59:47\x20GMT\r\nVia:\x201\.
SF:1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknow
SF:n\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknow
SF:n\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\
SF:x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2
SF:100086-AMS\x20\(151\.101\.192\.81\)</p></body></html>")%r(RTSPRequest,9
SF:6,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConten
SF:t-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-s
SF:erved-by:\x20cache-ams2100139\r\n\r\nBad\x20Request")%r(X11Probe,96,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100089\r\n\r\nBad\x20Request")%r(FourOhFourRequest,20
SF:5,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r
SF:\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\n
SF:content-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\
SF:nX-Served-By:\x20cache-ams2100129-AMS\r\nAccept-Ranges:\x20bytes\r\nDat
SF:e:\x20Tue,\x2004\x20Feb\x202025\x2016:59:48\x20GMT\r\nVia:\x201\.1\x20v
SF:arnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20d
SF:omain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20d
SF:omain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20bee
SF:n\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100129
SF:-AMS\x20\(151\.101\.192\.81\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A2478A%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21063\r\n\r\nRequested
SF:\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20Na
SF:mes\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb348716e94e9f83ac23
SF:533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x20use\x20with\x20th
SF:is\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides/
SF:common-400-errors#error-421-misdirected-request\x20for\x20more\x20infor
SF:mation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20
SF:Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-ty
SF:pe:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21079\r
SF:\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Al
SF:ternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb348
SF:716e94e9f83ac23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x20us
SF:e\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\
SF:.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\x
SF:20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x204
SF:21\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length:
SF:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100137\r\n\r\nRequested\x20host\x20does\x20not\x20match\
SF:x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20c
SF:ertificate\x20\[7ccb348716e94e9f83ac23533d4648b0a3a69ede6bd4117e8301228
SF:76855c81a\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x
SF:20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdi
SF:rected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,9
SF:4,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConten
SF:t-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-s
SF:erved-by:\x20cache-ams21074\r\n\r\nBad\x20Request")%r(RTSPRequest,96,"H
SF:TTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams2100128\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.98.196.24
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for bbc-vip169.telhc.bbc.co.uk (212.58.244.16)
Host is up (0.0092s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A24784%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin0.cwwtf.bbc.co.uk (132.185.160.176)
Host is up (0.0096s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin1.cwwtf.bbc.co.uk (132.185.160.177)
Host is up (0.011s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ns3.bbcdns.net (148.163.199.65)
Host is up (0.0032s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|5.X|2.6.X|3.X (87%)
OS CPE: cpe:/o:linux:linux_kernel:4.0 cpe:/o:linux:linux_kernel:5 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10
Aggressive OS guesses: Linux 4.0 (87%), Linux 4.15 - 5.8 (85%), Linux 5.0 - 5.4 (85%), Linux 2.6.32 (85%), Linux 2.6.32 or 3.10 (85%), Linux 4.4 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for lists1.telhc.bbc.co.uk (212.58.251.122)
Host is up (0.0095s latency).
Not shown: 65528 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
587/tcp   open     smtp       Sendmail 8.14.9+Sun/8.12.9
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (86%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (86%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Unix

Nmap scan report for bbc-vip140.telhc.bbc.co.uk (212.58.244.104)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ec2-52-16-246-43.eu-west-1.compute.amazonaws.com (52.16.246.43)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A24783%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,7F5C,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Tue,\x2004\
SF:x20Feb\x202025\x2016:59:47\x20GMT\r\nContent-Type:\x20text/html\r\nCont
SF:ent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e9
SF:8\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOCT
SF:YPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x2
SF:0<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\
SF:x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20
SF:\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Co
SF:ntent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv
SF:=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\
SF:x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x2
SF:0\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Com
SF:patible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x
SF:20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wid
SF:th\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20b
SF:est\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20spo
SF:rt\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20a
SF:nd\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20On
SF:line\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,1
SF:47,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Tue,\x2004\x20Feb\x2
SF:02025\x2016:59:47\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Lengt
SF:h:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agent
SF:-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</t
SF:itle></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cente
SF:r>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTSP
SF:Request,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Tue,\x2004\
SF:x20Feb\x202025\x2016:59:47\x20GMT\r\nContent-Type:\x20text/html\r\nCont
SF:ent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\
SF:n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\
SF:r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>openr
SF:esty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A24788%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,2000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Tue,
SF:\x2004\x20Feb\x202025\x2016:59:52\x20GMT\r\nContent-Type:\x20text/html\
SF:r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61dee
SF:c4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\
SF:n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20
SF:\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x
SF:20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\
SF:x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equ
SF:iv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20htt
SF:p-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-
SF:width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n
SF:\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X
SF:-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofol
SF:low\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=dev
SF:ice-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"T
SF:he\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and
SF:\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highligh
SF:ts\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BB
SF:C\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOp
SF:tions,147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Tue,\x2004\x2
SF:0Feb\x202025\x2016:59:52\x20GMT\r\nContent-Type:\x20text/html\r\nConten
SF:t-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigi
SF:n-Agent-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20All
SF:owed</title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1>
SF:</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")
SF:%r(FourOhFourRequest,1000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x2
SF:0Tue,\x2004\x20Feb\x202025\x2016:59:52\x20GMT\r\nContent-Type:\x20text/
SF:html\r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"
SF:61deec4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r
SF:\n\r\n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x2
SF:0\x20\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title
SF:>\n\x20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</titl
SF:e>\n\x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20htt
SF:p-equiv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x
SF:20http-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=de
SF:vice-width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport
SF:\">\n\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equi
SF:v=\"X-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20
SF:nofollow\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"widt
SF:h=device-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20conten
SF:t=\"The\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x
SF:20and\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20hig
SF:hlights\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\
SF:x20BBC\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bbc-vip128.telhc.bbc.co.uk (212.58.244.83)
Host is up (0.0091s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip118.telhc.bbc.co.uk (212.58.244.73)
Host is up (0.0092s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A24784%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for server-13-227-219-122.ams54.r.cloudfront.net (13.227.219.122)
Host is up (0.0026s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Amazon CloudFront httpd
443/tcp open  ssl/https CloudFront
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for gatea.telhc.bbc.co.uk (132.185.161.100)
Host is up (0.0093s latency).
Not shown: 64800 closed tcp ports (reset), 730 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
53/tcp    open  domain     ISC BIND 9.9.9-P8
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.228.35
Host is up (0.0094s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|storage-misc|firewall
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (92%), Synology DiskStation Manager 5.X (85%), WatchGuard Fireware 11.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 4.4 (92%), Linux 2.6.32 - 2.6.35 (89%), Linux 2.6.32 - 2.6.39 (89%), Linux 2.6.32 - 3.0 (88%), Linux 4.0 (87%), Linux 3.11 - 4.1 (87%), Linux 3.2 - 3.8 (87%), Linux 2.6.18 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip050.lbh.bbc.co.uk (212.58.249.112)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (94%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 3.10 - 3.12 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 3.13 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.9 (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip058.lbh.bbc.co.uk (212.58.249.120)
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A24784%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (90%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ec2-108-128-36-99.eu-west-1.compute.amazonaws.com (108.128.36.99)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Node.js Express framework
443/tcp open  ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A2478A%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-C
SF:ookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max-
SF:Age=3600;\x20Path=/;\x20Expires=Tue,\x2004\x20Feb\x202025\x2017:59:54\x
SF:20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.c
SF:om/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x2
SF:0charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Tue,\x2004\x20Feb\x
SF:202025\x2016:59:54\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20R
SF:edirect\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-req
SF:uired")%r(HTTPOptions,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\
SF:nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x
SF:20Max-Age=3600;\x20Path=/;\x20Expires=Tue,\x2004\x20Feb\x202025\x2017:5
SF:9:54\x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.
SF:bbc\.com/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/pla
SF:in;\x20charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Tue,\x2004\x2
SF:0Feb\x202025\x2016:59:54\x20GMT\r\nConnection:\x20close\r\n\r\nTemporar
SF:y\x20Redirect\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/log
SF:in-required")%r(FourOhFourRequest,1E3,"HTTP/1\.1\x20307\x20Temporary\x2
SF:0Redirect\r\nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22
SF:%2Fnice%2520ports%252C%2FTri%256Eity\.txt%252ebak%22%7D;\x20Max-Age=360
SF:0;\x20Path=/;\x20Expires=Tue,\x2004\x20Feb\x202025\x2017:59:54\x20GMT;\
SF:x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.com/logi
SF:n-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x20charse
SF:t=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Tue,\x2004\x20Feb\x202025\
SF:x2016:59:54\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20Redirect
SF:\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-required")
SF:%r(RTSPRequest,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-Co
SF:okie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max-A
SF:ge=3600;\x20Path=/;\x20Expires=Tue,\x2004\x20Feb\x202025\x2017:59:59\x2
SF:0GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.co
SF:m/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x20
SF:charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Tue,\x2004\x20Feb\x2
SF:02025\x2016:59:59\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20Re
SF:direct\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-requ
SF:ired");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|2.6.X (89%)
OS CPE: cpe:/o:linux:linux_kernel:4.0 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.0 (89%), Linux 2.6.32 (85%), Linux 4.4 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 132.185.159.183
Host is up (0.0099s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE  VERSION
113/tcp closed ident
443/tcp open   ssl/http SAP Business Connector
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (85%)
No exact OS matches for host (test conditions non-ideal).

Warning: 132.185.161.100 giving up on port because retransmission cap hit (6).
Warning: 132.185.161.176 giving up on port because retransmission cap hit (6).
Warning: 132.185.161.179 giving up on port because retransmission cap hit (6).
Warning: 212.58.251.88 giving up on port because retransmission cap hit (6).
Warning: 212.58.251.122 giving up on port because retransmission cap hit (6).
Nmap scan report for jira.dev.bbc.co.uk (212.58.250.23)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Apache httpd 2.4.62 ((Red Hat Enterprise Linux) OpenSSL/3.2.2)
443/tcp open  ssl/https Apache/2.4.62 (Red Hat Enterprise Linux) OpenSSL/3.2.2
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|2.6.X|3.X (89%)
OS CPE: cpe:/o:linux:linux_kernel:4.0 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10
Aggressive OS guesses: Linux 4.0 (89%), Linux 2.6.32 (85%), Linux 2.6.32 or 3.10 (85%), Linux 4.4 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.228.15
Host is up (0.0092s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|storage-misc|firewall|WAP|webcam
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X|2.4.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (86%), Tandberg embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8 cpe:/o:linux:linux_kernel:2.4 cpe:/h:tandberg:vcs
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 4.4 (92%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.0 (89%), Linux 2.6.32 - 3.0 (88%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 2.6.18 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for fmt-vip47.telhc.bbc.co.uk (212.58.244.187)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A25E81%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for rt1-132.lh.bbc.co.uk (132.185.132.2)
Host is up (0.010s latency).
Not shown: 65534 closed tcp ports (reset)
PORT   STATE    SERVICE VERSION
25/tcp filtered smtp
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: switch
Running: Cisco IOS 12.X
OS CPE: cpe:/h:cisco:catalyst_6509:e cpe:/o:cisco:ios:12.2
OS details: Cisco 6509 switch (IOS 12.2)

Nmap scan report for bbc-vip145.lbh.bbc.co.uk (212.58.249.207)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE VERSION
80/tcp  open   http?
443/tcp closed https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A25E81%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (93%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 3.10 - 3.12 (92%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.9 (89%), Linux 3.13 (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for cloud.virt.ch.bbc.co.uk (132.185.142.146)
Host is up (0.010s latency).
Not shown: 65430 filtered tcp ports (no-response), 101 closed tcp ports (reset)
PORT     STATE SERVICE   VERSION
21/tcp   open  ftp       vsftpd 3.0.3
80/tcp   open  http      Apache httpd 2.4.29
443/tcp  open  ssl/https Apache/2.4.29 (Ubuntu)
8443/tcp open  ssl/http  Apache httpd 2.4.29
Device type: general purpose|storage-misc|firewall|broadband router|WAP
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X|2.4.X (87%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (86%), Zhone embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8 cpe:/o:linux:linux_kernel:2.4
Aggressive OS guesses: Linux 2.6.32 (87%), Linux 2.6.32 or 3.10 (87%), Linux 3.10 - 3.12 (87%), Linux 4.4 (87%), Linux 2.6.39 (86%), Linux 3.4 (86%), Linux 3.5 (86%), Linux 4.2 (86%), Synology DiskStation Manager 5.1 (86%), WatchGuard Fireware 11.8 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Hosts: default, artifactory-noforge.virt.ch.bbc.co.uk; OS: Unix

Nmap scan report for 52.98.214.120
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for bbc-vip059.lbh.bbc.co.uk (212.58.249.121)
Host is up (0.0093s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A25E81%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A25E90%P=x86_64-pc-linux-g
SF:nu%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (90%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip174.telhc.bbc.co.uk (212.58.244.210)
Host is up (0.0094s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE VERSION
80/tcp  open  http?
443/tcp open  https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A25E81%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip084.lbh.bbc.co.uk (212.58.249.146)
Host is up (0.0099s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A25E81%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (95%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (95%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (89%), Linux 2.6.32 - 2.6.35 (87%), Linux 2.6.32 - 2.6.39 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for server-13-227-219-18.ams54.r.cloudfront.net (13.227.219.18)
Host is up (0.0027s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Amazon CloudFront httpd
443/tcp open  ssl/https CloudFront
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for a23-53-112-149.deploy.static.akamaitechnologies.com (23.53.112.149)
Host is up (0.0031s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE  VERSION
80/tcp  open  http     AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
443/tcp open  ssl/http AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|5.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5
Aggressive OS guesses: Linux 4.15 - 5.8 (85%), Linux 5.0 - 5.4 (85%), Linux 5.4 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip171.telhc.bbc.co.uk (212.58.244.39)
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A25E81%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip082.lbh.bbc.co.uk (212.58.249.144)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 5.1 (89%), Linux 3.10 - 3.12 (88%), Linux 3.13 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for support0.telhc.bbc.co.uk (212.58.251.88)
Host is up (0.0097s latency).
Not shown: 65158 closed tcp ports (reset), 368 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
21/tcp    open  ftp?
22/tcp    open  ssh?
80/tcp    open  http       Apache httpd 2.2.34 ((Unix) mod_ssl/2.2.34 OpenSSL/1.0.1t)
443/tcp   open  ssl/http   Apache httpd 2.2.34 ((Unix) mod_ssl/2.2.34 OpenSSL/1.0.1t)
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
5000/tcp  open  upnp?
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port21-TCP:V=7.94SVN%I=7%D=2/4%Time=67A25E7B%P=x86_64-pc-linux-gnu%r(NU
SF:LL,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(GenericLines,
SF:1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(Help,1E,"421\x20
SF:for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(GetRequest,1E,"421\x20for\x
SF:20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(HTTPOptions,1E,"421\x20for\x20ft
SF:p\x20use\x20ftp\.bbc\.co\.uk\n")%r(RTSPRequest,1E,"421\x20for\x20ftp\x2
SF:0use\x20ftp\.bbc\.co\.uk\n")%r(RPCCheck,1E,"421\x20for\x20ftp\x20use\x2
SF:0ftp\.bbc\.co\.uk\n")%r(DNSVersionBindReqTCP,1E,"421\x20for\x20ftp\x20u
SF:se\x20ftp\.bbc\.co\.uk\n")%r(DNSStatusRequestTCP,1E,"421\x20for\x20ftp\
SF:x20use\x20ftp\.bbc\.co\.uk\n")%r(SSLSessionReq,1E,"421\x20for\x20ftp\x2
SF:0use\x20ftp\.bbc\.co\.uk\n")%r(TerminalServerCookie,1E,"421\x20for\x20f
SF:tp\x20use\x20ftp\.bbc\.co\.uk\n")%r(TLSSessionReq,1E,"421\x20for\x20ftp
SF:\x20use\x20ftp\.bbc\.co\.uk\n")%r(Kerberos,1E,"421\x20for\x20ftp\x20use
SF:\x20ftp\.bbc\.co\.uk\n")%r(SMBProgNeg,1E,"421\x20for\x20ftp\x20use\x20f
SF:tp\.bbc\.co\.uk\n")%r(X11Probe,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc
SF:\.co\.uk\n")%r(FourOhFourRequest,1E,"421\x20for\x20ftp\x20use\x20ftp\.b
SF:bc\.co\.uk\n")%r(LPDString,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co
SF:\.uk\n")%r(LDAPSearchReq,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.
SF:uk\n")%r(LDAPBindReq,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n
SF:")%r(SIPOptions,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(
SF:LANDesk-RC,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(Termi
SF:nalServer,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(NCP,1E
SF:,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(NotesRPC,1E,"421\x
SF:20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(JavaRMI,1E,"421\x20for\x2
SF:0ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(WMSRequest,1E,"421\x20for\x20ftp\
SF:x20use\x20ftp\.bbc\.co\.uk\n")%r(oracle-tns,1E,"421\x20for\x20ftp\x20us
SF:e\x20ftp\.bbc\.co\.uk\n")%r(ms-sql-s,1E,"421\x20for\x20ftp\x20use\x20ft
SF:p\.bbc\.co\.uk\n")%r(afp,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.
SF:uk\n")%r(giop,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port5000-TCP:V=7.94SVN%I=7%D=2/4%Time=67A25E81%P=x86_64-pc-linux-gnu%r(
SF:NULL,45E,"\+\+\+\x20\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\
SF:*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
SF:\*\*\*\*\*\*\*\*\*\r\n\+\+\+\x20\r\n\+\+\+\x20\x20\x20\x20\x20\x20\x20\
SF:x20Atos\x20-\x20BBC\x20Internet\x20Operations\x20-\x20Support\x20Chat\x
SF:20Area\r\n\+\+\+\x20\r\n\+\+\+\x20\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\
SF:*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
SF:\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\r\n\+\+\+\x20\r\n\+\+\+\x20This\x20cha
SF:t\x20area\x20is\x20for\x20the\x20use\x20of\x20employees\x20and\x20custo
SF:mers\x20of\x20Atos\x20Internet\r\n\+\+\+\x20Operations\x20\(BBC\)\x20fo
SF:r\x20business\x20communications\.\x20\x20Others\x20with\x20explicit\x20
SF:\r\n\+\+\+\x20permission\x20of\x20Internet\x20Operations\x20may\x20also
SF:\x20use\x20the\x20service\.\x20\x20If\x20you\x20do\x20\r\n\+\+\+\x20not
SF:\x20have\x20permission\x20to\x20use\x20this\x20talker\x20you\x20should\
SF:x20disconnect\x20now\.\r\n\+\+\+\x20\r\n\+\+\+\x20Please\x20remember\x2
SF:0that\x20this\x20is\x20a\x20semi-public\x20forum\x20and\x20as\x20such\x
SF:20you\x20should\x20\r\n\+\+\+\x20not\x20say\x20anything\x20on\x20the\x2
SF:0talker\x20that\x20you\x20would\x20not\x20say\x20in\x20public\.\x20\x20
SF:The\x20\r\n\+\+\+\x20use\x20of\x20lists\x20and\x20whispers\x20can\x20mi
SF:nimise\x20the\x20audience\x20of\x20your\x20comments\x20\r\n\+\+\+\x20bu
SF:t\x20should\x20not\x20be\x20considered\x20as\x20secure\.\r\n\+\+\+\x20\
SF:r\n\+\+\+\x20Use\x20of\x20the\x20talker\x20will\x20be\x20periodically\x
SF:20monitored\x20to\x20ensure\x20that\x20it\x20is\x20\r\n\+\+\+\x20")%r(G
SF:enericLines,45E,"\+\+\+\x20\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
SF:\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\
SF:*\*\*\*\*\*\*\*\*\*\*\*\*\r\n\+\+\+\x20\r\n\+\+\+\x20\x20\x20\x20\x20\x
SF:20\x20\x20Atos\x20-\x20BBC\x20Internet\x20Operations\x20-\x20Support\x2
SF:0Chat\x20Area\r\n\+\+\+\x20\r\n\+\+\+\x20\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
SF:\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\
SF:*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\r\n\+\+\+\x20\r\n\+\+\+\x20This
SF:\x20chat\x20area\x20is\x20for\x20the\x20use\x20of\x20employees\x20and\x
SF:20customers\x20of\x20Atos\x20Internet\r\n\+\+\+\x20Operations\x20\(BBC\
SF:)\x20for\x20business\x20communications\.\x20\x20Others\x20with\x20expli
SF:cit\x20\r\n\+\+\+\x20permission\x20of\x20Internet\x20Operations\x20may\
SF:x20also\x20use\x20the\x20service\.\x20\x20If\x20you\x20do\x20\r\n\+\+\+
SF:\x20not\x20have\x20permission\x20to\x20use\x20this\x20talker\x20you\x20
SF:should\x20disconnect\x20now\.\r\n\+\+\+\x20\r\n\+\+\+\x20Please\x20reme
SF:mber\x20that\x20this\x20is\x20a\x20semi-public\x20forum\x20and\x20as\x2
SF:0such\x20you\x20should\x20\r\n\+\+\+\x20not\x20say\x20anything\x20on\x2
SF:0the\x20talker\x20that\x20you\x20would\x20not\x20say\x20in\x20public\.\
SF:x20\x20The\x20\r\n\+\+\+\x20use\x20of\x20lists\x20and\x20whispers\x20ca
SF:n\x20minimise\x20the\x20audience\x20of\x20your\x20comments\x20\r\n\+\+\
SF:+\x20but\x20should\x20not\x20be\x20considered\x20as\x20secure\.\r\n\+\+
SF:\+\x20\r\n\+\+\+\x20Use\x20of\x20the\x20talker\x20will\x20be\x20periodi
SF:cally\x20monitored\x20to\x20ensure\x20that\x20it\x20is\x20\r\n\+\+\+\x2
SF:0");
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (87%), Oracle Solaris 10 (86%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (87%), Sun Solaris 9 or Oracle Solaris 10 (86%), Sun Solaris 10 (SPARC) (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gatea.lh.bbc.co.uk (132.185.132.10)
Host is up (0.011s latency).
Not shown: 65531 filtered tcp ports (no-response)
PORT     STATE SERVICE  VERSION
53/tcp   open  domain   ISC BIND 9.11.19
465/tcp  open  ssl/smtp Postfix smtpd
993/tcp  open  ssl/imap Dovecot imapd
4190/tcp open  sieve?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port4190-TCP:V=7.94SVN%I=7%D=2/4%Time=67A25E81%P=x86_64-pc-linux-gnu%r(
SF:NULL,174,"\"IMPLEMENTATION\"\x20\"Dovecot\x20Pigeonhole\"\r\n\"SIEVE\"\
SF:x20\"fileinto\x20reject\x20envelope\x20encoded-character\x20vacation\x2
SF:0subaddress\x20comparator-i;ascii-numeric\x20relational\x20regex\x20ima
SF:p4flags\x20copy\x20include\x20variables\x20body\x20enotify\x20environme
SF:nt\x20mailbox\x20date\x20index\x20ihave\x20duplicate\x20mime\x20forever
SF:ypart\x20extracttext\"\r\n\"NOTIFY\"\x20\"mailto\"\r\n\"SASL\"\x20\"PLA
SF:IN\x20LOGIN\x20GSSAPI\"\r\n\"VERSION\"\x20\"1\.0\"\r\n\"STARTTLS\"\r\nO
SF:K\x20\"stunnel\"\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (89%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9
Aggressive OS guesses: Sun Solaris 10 (89%), Sun Solaris 10 (SPARC) (89%), Sun Solaris 9 (89%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Host: mailbox.rd.bbc.co.uk

Nmap scan report for 212.58.228.29
Host is up (0.0099s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|storage-misc|firewall
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (91%), Linux 4.4 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.0 (89%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 2.6.18 (87%), Linux 2.6.32 - 3.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.0.81
Host is up (0.0028s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A25E81%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams2100114-AMS\r\nAccept-Ranges:\x20b
SF:ytes\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2018:37:53\x20GMT\r\nVia:\x
SF:201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20u
SF:nknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20u
SF:nknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x2
SF:0has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache
SF:-ams2100114-AMS\x20\(151\.101\.0\.81\)</p></body></html>")%r(HTTPOption
SF:s,1FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clo
SF:se\r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200
SF:\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cach
SF:e\r\nX-Served-By:\x20cache-ams21068-AMS\r\nAccept-Ranges:\x20bytes\r\nD
SF:ate:\x20Tue,\x2004\x20Feb\x202025\x2018:37:53\x20GMT\r\nVia:\x201\.1\x2
SF:0varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x2
SF:0domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x2
SF:0domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20b
SF:een\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21068
SF:-AMS\x20\(151\.101\.0\.81\)</p></body></html>")%r(RTSPRequest,96,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100111\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1\
SF:x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x20
SF:11\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20
SF:cache-ams2100118\r\n\r\nBad\x20Request")%r(FourOhFourRequest,1FF,"HTTP/
SF:1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConten
SF:t-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-
SF:type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serve
SF:d-By:\x20cache-ams21060-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Tue,
SF:\x2004\x20Feb\x202025\x2018:37:53\x20GMT\r\nVia:\x201\.1\x20varnish\r\n
SF:\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20<
SF:/title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20
SF:\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added
SF:\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21060-AMS\x20\(15
SF:1\.101\.0\.81\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A25E87%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21062\r\n\r\nRequested
SF:\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20Na
SF:mes\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb348716e94e9f83ac23
SF:533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x20use\x20with\x20th
SF:is\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides/
SF:common-400-errors#error-421-misdirected-request\x20for\x20more\x20infor
SF:mation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20
SF:Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-ty
SF:pe:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21037\r
SF:\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Al
SF:ternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb348
SF:716e94e9f83ac23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x20us
SF:e\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\
SF:.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\x
SF:20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x204
SF:21\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length:
SF:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100131\r\n\r\nRequested\x20host\x20does\x20not\x20match\
SF:x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20c
SF:ertificate\x20\[7ccb348716e94e9f83ac23533d4648b0a3a69ede6bd4117e8301228
SF:76855c81a\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x
SF:20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdi
SF:rected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,9
SF:6,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConten
SF:t-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-s
SF:erved-by:\x20cache-ams2100087\r\n\r\nBad\x20Request")%r(RTSPRequest,94,
SF:"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-
SF:Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-ser
SF:ved-by:\x20cache-ams21057\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gatec.lh.bbc.co.uk (132.185.132.12)
Host is up (0.0093s latency).
All 65535 scanned ports on gatec.lh.bbc.co.uk (132.185.132.12) are in ignored states.
Not shown: 65535 filtered tcp ports (no-response)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Sun Solaris 8|9
OS CPE: cpe:/o:sun:sunos:5.8 cpe:/o:sun:sunos:5.9
OS details: Sun Solaris 8, Sun Solaris 9 (SPARC)

Nmap scan report for 52.97.146.72
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for bbc-vip170.telhc.bbc.co.uk (212.58.244.17)
Host is up (0.0100s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A25E81%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ftping104.telhc.bbc.co.uk (212.58.244.9)
Host is up (0.0095s latency).
Not shown: 37299 filtered tcp ports (no-response), 28234 closed tcp ports (reset)
PORT    STATE SERVICE   VERSION
21/tcp  open  ftp       ProFTPD 1.3.5e
443/tcp open  ssl/https Apache/2.4.6 (Red Hat Enterprise Linux) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (94%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 3.10 - 3.12 (90%), Linux 2.6.32 - 2.6.35 (89%), Linux 2.6.32 - 2.6.39 (89%), Linux 4.9 (88%), Linux 3.13 (88%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Unix

Nmap scan report for bbc-vip101.telhc.bbc.co.uk (212.58.244.56)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 40.99.148.200
Host is up (0.012s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for mailout0.cwwtf.bbc.co.uk (132.185.160.179)
Host is up (0.0097s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailout1.telhc.bbc.co.uk (132.185.161.180)
Host is up (0.0095s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for a2-16-6-220.deploy.static.akamaitechnologies.com (2.16.6.220)
Host is up (0.0032s latency).
Not shown: 65531 filtered tcp ports (no-response)
PORT     STATE  SERVICE          VERSION
53/tcp   closed domain
80/tcp   open   http             AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
443/tcp  open   ssl/https?
8883/tcp open   ssl/secure-mqtt?
Device type: general purpose|storage-misc|firewall|WAP
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X|5.X|2.4.X (92%), Synology DiskStation Manager 5.X (85%), WatchGuard Fireware 11.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:5 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8 cpe:/o:linux:linux_kernel:2.4
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 4.4 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 4.0 (87%), Linux 2.6.32 - 3.0 (87%), Linux 5.0 - 5.4 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip197.telhc.bbc.co.uk (212.58.244.98)
Host is up (0.0099s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.98.215.72
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for bbc-vip138.lbh.bbc.co.uk (212.58.249.200)
Host is up (0.0095s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A25E81%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 3.10 - 3.12 (90%), Linux 2.6.32 or 3.10 (89%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gatea.cwwtf.bbc.co.uk (132.185.160.100)
Host is up (0.0098s latency).
Not shown: 65530 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (91%), Sun OpenSolaris (86%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:opensolaris cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (91%), Sun Solaris 10 (SPARC) (91%), Sun OpenSolaris 2009.06 (86%), Sun Solaris 9 (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ec2-54-246-116-199.eu-west-1.compute.amazonaws.com (54.246.116.199)
Host is up (0.017s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      nginx 1.14.1
443/tcp open  ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A25E88%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1B0,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-C
SF:ookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max-
SF:Age=3600;\x20Path=/;\x20Expires=Tue,\x2004\x20Feb\x202025\x2019:37:59\x
SF:20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://picos\.tools\.bbc
SF:\.co\.uk/landing\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x20
SF:charset=utf-8\r\nContent-Length:\x2072\r\nDate:\x20Tue,\x2004\x20Feb\x2
SF:02025\x2018:37:59\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20Re
SF:direct\.\x20Redirecting\x20to\x20https://picos\.tools\.bbc\.co\.uk/land
SF:ing")%r(HTTPOptions,1B0,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nS
SF:et-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20
SF:Max-Age=3600;\x20Path=/;\x20Expires=Tue,\x2004\x20Feb\x202025\x2019:38:
SF:00\x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://picos\.tools\
SF:.bbc\.co\.uk/landing\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;
SF:\x20charset=utf-8\r\nContent-Length:\x2072\r\nDate:\x20Tue,\x2004\x20Fe
SF:b\x202025\x2018:38:00\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x
SF:20Redirect\.\x20Redirecting\x20to\x20https://picos\.tools\.bbc\.co\.uk/
SF:landing")%r(FourOhFourRequest,1DD,"HTTP/1\.1\x20307\x20Temporary\x20Red
SF:irect\r\nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2Fn
SF:ice%2520ports%252C%2FTri%256Eity\.txt%252ebak%22%7D;\x20Max-Age=3600;\x
SF:20Path=/;\x20Expires=Tue,\x2004\x20Feb\x202025\x2019:38:00\x20GMT;\x20H
SF:ttpOnly;\x20Secure\r\nLocation:\x20https://picos\.tools\.bbc\.co\.uk/la
SF:nding\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x20charset=utf
SF:-8\r\nContent-Length:\x2072\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2018
SF::38:00\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20Redirect\.\x2
SF:0Redirecting\x20to\x20https://picos\.tools\.bbc\.co\.uk/landing");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bbc-vip079.lbh.bbc.co.uk (212.58.249.141)
Host is up (0.0095s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (94%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 3.10 - 3.12 (92%), Linux 2.6.32 - 2.6.35 (90%), Linux 4.9 (90%), Linux 3.13 (90%), Linux 2.6.32 - 2.6.39 (90%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.81
Host is up (0.0029s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A25E81%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams2100101-AMS\r\nAccept-Ranges:\x20b
SF:ytes\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2018:37:53\x20GMT\r\nVia:\x
SF:201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20u
SF:nknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20u
SF:nknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x2
SF:0has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache
SF:-ams2100101-AMS\x20\(151\.101\.64\.81\)</p></body></html>")%r(HTTPOptio
SF:ns,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20cl
SF:ose\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x20
SF:0\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cac
SF:he\r\nX-Served-By:\x20cache-ams2100090-AMS\r\nAccept-Ranges:\x20bytes\r
SF:\nDate:\x20Tue,\x2004\x20Feb\x202025\x2018:37:53\x20GMT\r\nVia:\x201\.1
SF:\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown
SF:\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown
SF:\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x
SF:20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21
SF:00090-AMS\x20\(151\.101\.64\.81\)</p></body></html>")%r(RTSPRequest,96,
SF:"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-
SF:Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-ser
SF:ved-by:\x20cache-ams2100091\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP
SF:/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams2100132\r\n\r\nBad\x20Request")%r(FourOhFourRequest,200,
SF:"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\n
SF:Content-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nco
SF:ntent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX
SF:-Served-By:\x20cache-ams21043-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x
SF:20Tue,\x2004\x20Feb\x202025\x2018:37:53\x20GMT\r\nVia:\x201\.1\x20varni
SF:sh\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domai
SF:n\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domai
SF:n:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x2
SF:0added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21043-AMS\x
SF:20\(151\.101\.64\.81\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A25E87%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21043\r\n\r\nRequested
SF:\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20Na
SF:mes\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb348716e94e9f83ac23
SF:533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x20use\x20with\x20th
SF:is\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides/
SF:common-400-errors#error-421-misdirected-request\x20for\x20more\x20infor
SF:mation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20
SF:Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-ty
SF:pe:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100092
SF:\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20
SF:Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb3
SF:48716e94e9f83ac23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x20
SF:use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastl
SF:y\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for
SF:\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x2
SF:0421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams2100137\r\n\r\nRequested\x20host\x20does\x20not\x20matc
SF:h\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x2
SF:0certificate\x20\[7ccb348716e94e9f83ac23533d4648b0a3a69ede6bd4117e83012
SF:2876855c81a\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit
SF:\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mis
SF:directed-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions
SF:,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCont
SF:ent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx
SF:-served-by:\x20cache-ams21064\r\n\r\nBad\x20Request")%r(RTSPRequest,96,
SF:"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-
SF:Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-ser
SF:ved-by:\x20cache-ams2100095\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ec2-52-209-149-93.eu-west-1.compute.amazonaws.com (52.209.149.93)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A25E80%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,32F8,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Tue,\x2004\
SF:x20Feb\x202025\x2018:37:52\x20GMT\r\nContent-Type:\x20text/html\r\nCont
SF:ent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e9
SF:8\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOCT
SF:YPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x2
SF:0<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\
SF:x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20
SF:\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Co
SF:ntent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv
SF:=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\
SF:x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x2
SF:0\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Com
SF:patible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x
SF:20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wid
SF:th\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20b
SF:est\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20spo
SF:rt\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20a
SF:nd\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20On
SF:line\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,1
SF:47,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Tue,\x2004\x20Feb\x2
SF:02025\x2018:37:52\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Lengt
SF:h:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agent
SF:-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</t
SF:itle></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cente
SF:r>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTSP
SF:Request,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Tue,\x2004\
SF:x20Feb\x202025\x2018:37:52\x20GMT\r\nContent-Type:\x20text/html\r\nCont
SF:ent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\
SF:n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\
SF:r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>openr
SF:esty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A25E85%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,17D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Tue
SF:,\x2004\x20Feb\x202025\x2018:37:57\x20GMT\r\nContent-Type:\x20text/html
SF:\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nServer:\x20BBC-GT
SF:M\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x20SSL\x20certifi
SF:cate\x20was\x20sent</title></head>\r\n<body>\r\n<center><h1>400\x20Bad\
SF:x20Request</h1></center>\r\n<center>No\x20required\x20SSL\x20certificat
SF:e\x20was\x20sent</center>\r\n<hr><center>openresty</center>\r\n</body>\
SF:r\n</html>\r\n")%r(HTTPOptions,17D,"HTTP/1\.1\x20400\x20Bad\x20Request\
SF:r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2018:37:57\x20GMT\r\nContent-Typ
SF:e:\x20text/html\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nSe
SF:rver:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x2
SF:0SSL\x20certificate\x20was\x20sent</title></head>\r\n<body>\r\n<center>
SF:<h1>400\x20Bad\x20Request</h1></center>\r\n<center>No\x20required\x20SS
SF:L\x20certificate\x20was\x20sent</center>\r\n<hr><center>openresty</cent
SF:er>\r\n</body>\r\n</html>\r\n")%r(FourOhFourRequest,17D,"HTTP/1\.1\x204
SF:00\x20Bad\x20Request\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2018:37:57\
SF:x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20234\r\nConne
SF:ction:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400
SF:\x20No\x20required\x20SSL\x20certificate\x20was\x20sent</title></head>\
SF:r\n<body>\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<center
SF:>No\x20required\x20SSL\x20certificate\x20was\x20sent</center>\r\n<hr><c
SF:enter>openresty</center>\r\n</body>\r\n</html>\r\n")%r(tor-versions,12D
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Tue,\x2004\x20Feb\x202
SF:025\x2018:37:58\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:
SF:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n
SF:<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\r\n<center>
SF:<h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>openresty</cente
SF:r>\r\n</body>\r\n</html>\r\n")%r(RTSPRequest,12D,"HTTP/1\.1\x20400\x20B
SF:ad\x20Request\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2018:38:03\x20GMT\
SF:r\nContent-Type:\x20text/html\r\nContent-Length:\x20154\r\nConnection:\
SF:x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20Bad
SF:\x20Request</title></head>\r\n<body>\r\n<center><h1>400\x20Bad\x20Reque
SF:st</h1></center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html
SF:>\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for mailout1.cwwtf.bbc.co.uk (132.185.160.180)
Host is up (0.0100s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.97.146.104
Host is up (0.012s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for server-13-227-219-83.ams54.r.cloudfront.net (13.227.219.83)
Host is up (0.0031s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Amazon CloudFront httpd
443/tcp open  ssl/https CloudFront
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for ec2-18-200-133-248.eu-west-1.compute.amazonaws.com (18.200.133.248)
Host is up (0.019s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A25E80%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,7F5C,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Tue,\x2004\
SF:x20Feb\x202025\x2018:37:52\x20GMT\r\nContent-Type:\x20text/html\r\nCont
SF:ent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e9
SF:8\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOCT
SF:YPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x2
SF:0<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\
SF:x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20
SF:\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Co
SF:ntent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv
SF:=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\
SF:x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x2
SF:0\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Com
SF:patible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x
SF:20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wid
SF:th\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20b
SF:est\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20spo
SF:rt\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20a
SF:nd\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20On
SF:line\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,1
SF:47,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Tue,\x2004\x20Feb\x2
SF:02025\x2018:37:52\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Lengt
SF:h:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agent
SF:-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</t
SF:itle></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cente
SF:r>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTSP
SF:Request,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Tue,\x2004\
SF:x20Feb\x202025\x2018:37:52\x20GMT\r\nContent-Type:\x20text/html\r\nCont
SF:ent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\
SF:n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\
SF:r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>openr
SF:esty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A25E85%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,2000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Tue,
SF:\x2004\x20Feb\x202025\x2018:37:57\x20GMT\r\nContent-Type:\x20text/html\
SF:r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61dee
SF:c4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\
SF:n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20
SF:\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x
SF:20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\
SF:x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equ
SF:iv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20htt
SF:p-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-
SF:width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n
SF:\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X
SF:-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofol
SF:low\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=dev
SF:ice-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"T
SF:he\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and
SF:\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highligh
SF:ts\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BB
SF:C\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOp
SF:tions,147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Tue,\x2004\x2
SF:0Feb\x202025\x2018:37:57\x20GMT\r\nContent-Type:\x20text/html\r\nConten
SF:t-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigi
SF:n-Agent-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20All
SF:owed</title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1>
SF:</center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")
SF:%r(FourOhFourRequest,2000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x2
SF:0Tue,\x2004\x20Feb\x202025\x2018:37:57\x20GMT\r\nContent-Type:\x20text/
SF:html\r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"
SF:61deec4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r
SF:\n\r\n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x2
SF:0\x20\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title
SF:>\n\x20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</titl
SF:e>\n\x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20htt
SF:p-equiv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x
SF:20http-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=de
SF:vice-width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport
SF:\">\n\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equi
SF:v=\"X-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20
SF:nofollow\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"widt
SF:h=device-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20conten
SF:t=\"The\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x
SF:20and\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20hig
SF:hlights\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\
SF:x20BBC\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bbc-vip094.lbh.bbc.co.uk (212.58.249.156)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A25E81%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type:\x20tex
SF:t/html\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2018:37:53\x20GMT\r\nConn
SF:ection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x20html>\
SF:n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--\x20VERS
SF:ION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BBC\x20-\x
SF:20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\x20<meta
SF:\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content-Type\">
SF:\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"encoding\"
SF:>\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20initial-sc
SF:ale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20\x20<met
SF:a\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatible\">\n\
SF:x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20name=\"robo
SF:ts\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\x20name=
SF:\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x20of\x20
SF:the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x20headlin
SF:es,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x20much\x2
SF:0more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\"\x20nam
SF:e=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www\.bbc\.c
SF:o\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\x20")%r(
SF:HTTPOptions,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type:\x20
SF:text/html\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2018:37:53\x20GMT\r\nC
SF:onnection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x20htm
SF:l>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--\x20V
SF:ERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BBC\x20
SF:-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\x20<m
SF:eta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content-Type
SF:\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"encodin
SF:g\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20initial
SF:-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20\x20<
SF:meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatible\">
SF:\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20name=\"r
SF:obots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\x20na
SF:me=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x20of\
SF:x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x20head
SF:lines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x20much
SF:\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\"\x20
SF:name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www\.bbc
SF:\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\x20");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A25E87%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type:
SF:\x20text/html\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2018:37:59\x20GMT\
SF:r\nConnection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x2
SF:0html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--\
SF:x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BBC
SF:\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\x
SF:20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content-
SF:Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"enc
SF:oding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20ini
SF:tial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20\
SF:x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatibl
SF:e\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20name
SF:=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\x
SF:20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x2
SF:0of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x20
SF:headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x20
SF:much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\"
SF:\x20name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www\
SF:.bbc\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\x
SF:20")%r(HTTPOptions,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Ty
SF:pe:\x20text/html\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2018:37:59\x20G
SF:MT\r\nConnection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE
SF:\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!
SF:--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20
SF:BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x2
SF:0\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Conte
SF:nt-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"
SF:encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20
SF:initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x
SF:20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compat
SF:ible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20n
SF:ame=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\
SF:"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best
SF:\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\
SF:x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\
SF:x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Onlin
SF:e\"\x20name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://w
SF:ww\.bbc\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x2
SF:0\x20");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (90%), Linux 5.1 (89%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip051.lbh.bbc.co.uk (212.58.249.113)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (96%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (96%), Linux 4.0 (94%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 3.10 - 3.12 (89%), Linux 3.13 (89%), Linux 3.10 - 4.11 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip168.telhc.bbc.co.uk (212.58.244.15)
Host is up (0.0100s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A25E81%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailout0.telhc.bbc.co.uk (132.185.161.179)
Host is up (0.0092s latency).
Not shown: 65344 closed tcp ports (reset), 186 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip121.lbh.bbc.co.uk (212.58.249.183)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (93%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 3.10 - 3.12 (92%), Linux 2.6.32 - 2.6.35 (90%), Linux 4.9 (90%), Linux 3.13 (90%), Linux 2.6.32 - 2.6.39 (90%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.228.21
Host is up (0.0098s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|storage-misc|firewall|WAP|webcam
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X|2.4.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (86%), Tandberg embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8 cpe:/o:linux:linux_kernel:2.4 cpe:/h:tandberg:vcs
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 4.4 (92%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.0 (89%), Linux 2.6.32 - 3.0 (88%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 2.6.18 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for fmt-vip46.telhc.bbc.co.uk (212.58.244.186)
Host is up (0.0094s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A25E81%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ec2-46-137-181-193.eu-west-1.compute.amazonaws.com (46.137.181.193)
Host is up (0.019s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Node.js Express framework
443/tcp open  ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A25E88%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-C
SF:ookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max-
SF:Age=3600;\x20Path=/;\x20Expires=Tue,\x2004\x20Feb\x202025\x2019:37:59\x
SF:20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.c
SF:om/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x2
SF:0charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Tue,\x2004\x20Feb\x
SF:202025\x2018:37:59\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20R
SF:edirect\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-req
SF:uired")%r(HTTPOptions,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\
SF:nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x
SF:20Max-Age=3600;\x20Path=/;\x20Expires=Tue,\x2004\x20Feb\x202025\x2019:3
SF:8:00\x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.
SF:bbc\.com/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/pla
SF:in;\x20charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Tue,\x2004\x2
SF:0Feb\x202025\x2018:38:00\x20GMT\r\nConnection:\x20close\r\n\r\nTemporar
SF:y\x20Redirect\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/log
SF:in-required")%r(FourOhFourRequest,1E3,"HTTP/1\.1\x20307\x20Temporary\x2
SF:0Redirect\r\nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22
SF:%2Fnice%2520ports%252C%2FTri%256Eity\.txt%252ebak%22%7D;\x20Max-Age=360
SF:0;\x20Path=/;\x20Expires=Tue,\x2004\x20Feb\x202025\x2019:38:00\x20GMT;\
SF:x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.com/logi
SF:n-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x20charse
SF:t=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Tue,\x2004\x20Feb\x202025\
SF:x2018:38:00\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20Redirect
SF:\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-required")
SF:%r(RTSPRequest,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-Co
SF:okie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max-A
SF:ge=3600;\x20Path=/;\x20Expires=Tue,\x2004\x20Feb\x202025\x2019:38:05\x2
SF:0GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.co
SF:m/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x20
SF:charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Tue,\x2004\x20Feb\x2
SF:02025\x2018:38:05\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20Re
SF:direct\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-requ
SF:ired");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|2.6.X (87%)
OS CPE: cpe:/o:linux:linux_kernel:4.0 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.0 (87%), Linux 2.6.32 (85%), Linux 4.4 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gateh.lh.bbc.co.uk (132.185.132.17)
Host is up (0.0086s latency).
All 65535 scanned ports on gateh.lh.bbc.co.uk (132.185.132.17) are in ignored states.
Not shown: 65535 filtered tcp ports (no-response)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Aggressive OS guesses: Cisco Adaptive Security Appliance (ASA 8.4) (88%), Cisco Adaptive Security Appliance 5510 or 5540 firewall (ASA 8.0) (88%), Cisco 1812, 3640, or 3700 router (IOS 12.4) (88%), Cisco 3925 router (IOS 12.4) (88%), Cisco DOCSIS cable modem termination server (IOS 12.1) (88%), Cisco 6509 switch (IOS 12.2) (88%), Cisco Catalyst 3560 or 6500-series switch (IOS 12.1 - 12.2) (88%), Cisco Catalyst 6509-E switch (IOS 12.2) (88%), Cisco Nexus 5548P switch (NX-OS 5.1) (88%), Cisco ASA 5510 firewall (PIX OS 8.2) (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.97.166.168
Host is up (0.012s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for 151.101.192.82
Host is up (0.0030s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A25E81%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams21056-AMS\r\nAccept-Ranges:\x20byt
SF:es\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2018:37:53\x20GMT\r\nVia:\x20
SF:1\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unk
SF:nown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unk
SF:nown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20h
SF:as\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-a
SF:ms21056-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOptions,
SF:205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close
SF:\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r
SF:\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\
SF:r\nX-Served-By:\x20cache-ams2100096-AMS\r\nAccept-Ranges:\x20bytes\r\nD
SF:ate:\x20Tue,\x2004\x20Feb\x202025\x2018:37:53\x20GMT\r\nVia:\x201\.1\x2
SF:0varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x2
SF:0domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x2
SF:0domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20b
SF:een\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21000
SF:96-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,96,"H
SF:TTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams2100084\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1
SF:\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:
SF:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:
SF:\x20cache-ams21030\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"HTT
SF:P/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCont
SF:ent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconten
SF:t-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Ser
SF:ved-By:\x20cache-ams21042-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Tu
SF:e,\x2004\x20Feb\x202025\x2018:37:53\x20GMT\r\nVia:\x201\.1\x20varnish\r
SF:\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x2
SF:0</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x
SF:20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20add
SF:ed\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21042-AMS\x20\(
SF:151\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A25E87%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100109\r\n\r\nRequest
SF:ed\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20
SF:Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d09341
SF:8c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20
SF:this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guide
SF:s/common-400-errors#error-421-misdirected-request\x20for\x20more\x20inf
SF:ormation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x
SF:20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-
SF:type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21001
SF:32\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x
SF:20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[191
SF:79c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x
SF:20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fas
SF:tly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20f
SF:or\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\
SF:x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams2100125\r\n\r\nRequested\x20host\x20does\x20not\x20ma
SF:tch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\
SF:x20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e5523655
SF:3e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVis
SF:it\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-m
SF:isdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versio
SF:ns,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCo
SF:ntent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\
SF:nx-served-by:\x20cache-ams21042\r\n\r\nBad\x20Request")%r(RTSPRequest,9
SF:6,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConten
SF:t-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-s
SF:erved-by:\x20cache-ams2100114\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.82
Host is up (0.0030s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A25E81%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,200,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams21057-AMS\r\nAccept-Ranges:\x20byt
SF:es\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2018:37:53\x20GMT\r\nVia:\x20
SF:1\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unk
SF:nown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unk
SF:nown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20h
SF:as\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-a
SF:ms21057-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOptions,2
SF:00,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\
SF:r\nContent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\
SF:ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r
SF:\nX-Served-By:\x20cache-ams21066-AMS\r\nAccept-Ranges:\x20bytes\r\nDate
SF::\x20Tue,\x2004\x20Feb\x202025\x2018:37:53\x20GMT\r\nVia:\x201\.1\x20va
SF:rnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20do
SF:main\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20do
SF:main:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been
SF:\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21066-AM
SF:S\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,94,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\
SF:x20cache-ams21048\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\.1\x204
SF:00\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011\r
SF:\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cach
SF:e-ams21076\r\n\r\nBad\x20Request")%r(FourOhFourRequest,204,"HTTP/1\.1\x
SF:20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-type:\
SF:x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served-By:\
SF:x20cache-ams2100109-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Tue,\x20
SF:04\x20Feb\x202025\x2018:37:53\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\r\n
SF:\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</tit
SF:le>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\.\x
SF:20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\x20
SF:to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100109-AMS\x20\(151\
SF:.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A25E87%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21070\r\n\r\nRequested
SF:\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20Na
SF:mes\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418c
SF:5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20th
SF:is\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides/
SF:common-400-errors#error-421-misdirected-request\x20for\x20more\x20infor
SF:mation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20
SF:Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-ty
SF:pe:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21033\r
SF:\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Al
SF:ternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c8
SF:91fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20us
SF:e\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\
SF:.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\x
SF:20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x204
SF:21\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length:
SF:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams21073\r\n\r\nRequested\x20host\x20does\x20not\x20match\x2
SF:0any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20cer
SF:tificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d
SF:64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20
SF:https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdire
SF:cted-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,94,
SF:"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-
SF:Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-ser
SF:ved-by:\x20cache-ams21033\r\n\r\nBad\x20Request")%r(RTSPRequest,96,"HTT
SF:P/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams2100084\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.0.82
Host is up (0.0026s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A25E81%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams2100132-AMS\r\nAccept-Ranges:\x20b
SF:ytes\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2018:37:53\x20GMT\r\nVia:\x
SF:201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20u
SF:nknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20u
SF:nknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x2
SF:0has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache
SF:-ams2100132-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOption
SF:s,1FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clo
SF:se\r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200
SF:\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cach
SF:e\r\nX-Served-By:\x20cache-ams21037-AMS\r\nAccept-Ranges:\x20bytes\r\nD
SF:ate:\x20Tue,\x2004\x20Feb\x202025\x2018:37:53\x20GMT\r\nVia:\x201\.1\x2
SF:0varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x2
SF:0domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x2
SF:0domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20b
SF:een\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21037
SF:-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,94,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams21020\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\.1\x2
SF:0400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011
SF:\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20ca
SF:che-ams21042\r\n\r\nBad\x20Request")%r(FourOhFourRequest,1FF,"HTTP/1\.1
SF:\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-type
SF::\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served-By
SF::\x20cache-ams21025-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Tue,\x20
SF:04\x20Feb\x202025\x2018:37:53\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\r\n
SF:\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</tit
SF:le>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\.\x
SF:20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\x20
SF:to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21025-AMS\x20\(151\.1
SF:01\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A25E87%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100121\r\n\r\nRequest
SF:ed\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20
SF:Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d09341
SF:8c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20
SF:this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guide
SF:s/common-400-errors#error-421-misdirected-request\x20for\x20more\x20inf
SF:ormation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x
SF:20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-
SF:type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21001
SF:21\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x
SF:20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[191
SF:79c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x
SF:20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fas
SF:tly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20f
SF:or\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\
SF:x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams21076\r\n\r\nRequested\x20host\x20does\x20not\x20matc
SF:h\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x2
SF:0certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e
SF:631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit
SF:\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mis
SF:directed-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions
SF:,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCont
SF:ent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx
SF:-served-by:\x20cache-ams21063\r\n\r\nBad\x20Request")%r(RTSPRequest,96,
SF:"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-
SF:Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-ser
SF:ved-by:\x20cache-ams2100109\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (90%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (90%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.82
Host is up (0.0025s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A25E81%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams2100146-AMS\r\nAccept-Ranges:\x20b
SF:ytes\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2018:37:53\x20GMT\r\nVia:\x
SF:201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20u
SF:nknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20u
SF:nknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x2
SF:0has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache
SF:-ams2100146-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOpti
SF:ons,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20c
SF:lose\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x2
SF:00\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-ca
SF:che\r\nX-Served-By:\x20cache-ams21082-AMS\r\nAccept-Ranges:\x20bytes\r\
SF:nDate:\x20Tue,\x2004\x20Feb\x202025\x2018:37:53\x20GMT\r\nVia:\x201\.1\
SF:x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\
SF:x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\
SF:x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x2
SF:0been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams210
SF:82-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,94,"H
SF:TTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams21036\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\.
SF:1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x
SF:2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x
SF:20cache-ams21063\r\n\r\nBad\x20Request")%r(FourOhFourRequest,205,"HTTP/
SF:1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConten
SF:t-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-
SF:type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serve
SF:d-By:\x20cache-ams2100092-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Tu
SF:e,\x2004\x20Feb\x202025\x2018:37:53\x20GMT\r\nVia:\x201\.1\x20varnish\r
SF:\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x2
SF:0</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x
SF:20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20add
SF:ed\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100092-AMS\x20
SF:\(151\.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A25E87%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21037\r\n\r\nRequested
SF:\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20Na
SF:mes\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418c
SF:5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20th
SF:is\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides/
SF:common-400-errors#error-421-misdirected-request\x20for\x20more\x20infor
SF:mation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20
SF:Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-ty
SF:pe:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100097
SF:\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20
SF:Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179
SF:c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20
SF:use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastl
SF:y\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for
SF:\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x2
SF:0421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams2100134\r\n\r\nRequested\x20host\x20does\x20not\x20matc
SF:h\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x2
SF:0certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e
SF:631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit
SF:\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mis
SF:directed-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions
SF:,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCont
SF:ent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx
SF:-served-by:\x20cache-ams21038\r\n\r\nBad\x20Request")%r(RTSPRequest,96,
SF:"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-
SF:Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-ser
SF:ved-by:\x20cache-ams2100089\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin1.cwwtf.bbc.co.uk (132.185.160.177)
Host is up (0.0097s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for lists1.telhc.bbc.co.uk (212.58.251.122)
Host is up (0.0095s latency).
Not shown: 65169 closed tcp ports (reset), 360 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
587/tcp   open  smtp       Sendmail 8.14.9+Sun/8.12.9
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (87%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (87%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Unix

Nmap scan report for bbc-vip083.lbh.bbc.co.uk (212.58.249.145)
Host is up (0.0098s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (95%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (95%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (89%), Linux 3.10 - 3.12 (88%), Linux 2.6.32 - 2.6.35 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gatea.telhc.bbc.co.uk (132.185.161.100)
Host is up (0.0095s latency).
Not shown: 65255 closed tcp ports (reset), 275 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
53/tcp    open  domain     ISC BIND 9.9.9-P8
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin0.telhc.bbc.co.uk (132.185.161.176)
Host is up (0.0093s latency).
Not shown: 65345 closed tcp ports (reset), 185 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for dns2.p09.nsone.net (198.51.45.9)
Host is up (0.0029s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bbc-vip137.lbh.bbc.co.uk (212.58.249.199)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A25E82%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 3.10 - 3.12 (90%), Linux 2.6.32 or 3.10 (89%), Linux 3.13 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for dns1.p09.nsone.net (198.51.44.9)
Host is up (0.0030s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bbc-vip050.lbh.bbc.co.uk (212.58.249.112)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (94%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 3.10 - 3.12 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 3.13 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.9 (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip128.telhc.bbc.co.uk (212.58.244.83)
Host is up (0.0093s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Warning: 132.185.160.176 giving up on port because retransmission cap hit (6).
Warning: 132.185.160.177 giving up on port because retransmission cap hit (6).
Warning: 132.185.161.176 giving up on port because retransmission cap hit (6).
Warning: 132.185.161.177 giving up on port because retransmission cap hit (6).
Nmap scan report for a23-53-112-149.deploy.static.akamaitechnologies.com (23.53.112.149)
Host is up (0.0025s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE  VERSION
80/tcp  open  http     AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
443/tcp open  ssl/http AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|5.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5
Aggressive OS guesses: Linux 4.15 - 5.8 (85%), Linux 5.0 - 5.4 (85%), Linux 5.4 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin1.telhc.bbc.co.uk (132.185.161.177)
Host is up (0.0090s latency).
Not shown: 65514 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
4547/tcp  filtered lanner-lm
7759/tcp  filtered unknown
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
11454/tcp filtered unknown
12911/tcp filtered unknown
17270/tcp filtered unknown
28974/tcp filtered unknown
33218/tcp filtered unknown
36302/tcp filtered unknown
44214/tcp open     tcpwrapped
48694/tcp filtered unknown
51441/tcp filtered unknown
53739/tcp filtered unknown
58089/tcp filtered unknown
58960/tcp filtered unknown
59401/tcp filtered unknown
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip169.telhc.bbc.co.uk (212.58.244.16)
Host is up (0.0090s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A2676C%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip082.lbh.bbc.co.uk (212.58.249.144)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (89%), Linux 3.10 - 3.12 (88%), Linux 3.13 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin0.cwwtf.bbc.co.uk (132.185.160.176)
Host is up (0.0096s latency).
Not shown: 65507 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
2935/tcp  filtered qtp
6467/tcp  filtered unknown
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
12920/tcp filtered unknown
14549/tcp filtered unknown
23065/tcp filtered unknown
25335/tcp filtered unknown
26845/tcp filtered unknown
28881/tcp filtered unknown
29948/tcp filtered unknown
30471/tcp filtered unknown
37497/tcp filtered unknown
42775/tcp filtered unknown
44580/tcp filtered unknown
50129/tcp filtered unknown
50366/tcp filtered unknown
52370/tcp filtered unknown
53793/tcp filtered unknown
53815/tcp filtered unknown
55478/tcp filtered unknown
59168/tcp filtered unknown
61362/tcp filtered unknown
64164/tcp filtered unknown
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for cloud.virt.ch.bbc.co.uk (132.185.142.146)
Host is up (0.0098s latency).
Not shown: 65430 filtered tcp ports (no-response), 101 closed tcp ports (reset)
PORT     STATE SERVICE   VERSION
21/tcp   open  ftp       vsftpd 3.0.3
80/tcp   open  http      Apache httpd 2.4.29
443/tcp  open  ssl/https Apache/2.4.29 (Ubuntu)
8443/tcp open  ssl/http  Apache httpd 2.4.29
Device type: general purpose|storage-misc|firewall|broadband router|WAP|webcam
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X|2.4.X (87%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (86%), Zhone embedded (85%), Tandberg embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8 cpe:/o:linux:linux_kernel:2.4 cpe:/h:tandberg:vcs
Aggressive OS guesses: Linux 2.6.32 (87%), Linux 2.6.32 or 3.10 (87%), Linux 4.4 (87%), Linux 3.5 (86%), Linux 4.2 (86%), Synology DiskStation Manager 5.1 (86%), WatchGuard Fireware 11.8 (86%), Linux 3.10 - 3.12 (86%), Zhone GPON home gateway (85%), Linux 2.6.35 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Hosts: default, artifactory-noforge.virt.ch.bbc.co.uk; OS: Unix

Nmap scan report for bbc-vip197.telhc.bbc.co.uk (212.58.244.98)
Host is up (0.0092s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for 40.160.90.34.bc.googleusercontent.com (34.90.160.40)
Host is up (0.0058s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http-proxy F5 BIG-IP load balancer http proxy
443/tcp open  ssl/https  Apache
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A26772%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,F2,"HTTP/1\.1\x20301\x20301\r\ndate:\x20Tue,\x2004\x20F
SF:eb\x202025\x2019:16:02\x20GMT\r\nserver:\x20Apache\r\nlocation:\x20http
SF:s://www\.sap\.com/products/recruiting-software\.html\r\nx-content-type-
SF:options:\x20nosniff\r\ncontent-length:\x200\r\nx-xss-protection:\x201;\
SF:x20mode=block\r\nconnection:\x20close\r\n\r\n")%r(HTTPOptions,F2,"HTTP/
SF:1\.1\x20301\x20301\r\ndate:\x20Tue,\x2004\x20Feb\x202025\x2019:16:02\x2
SF:0GMT\r\nserver:\x20Apache\r\nlocation:\x20https://www\.sap\.com/product
SF:s/recruiting-software\.html\r\nx-content-type-options:\x20nosniff\r\nco
SF:ntent-length:\x200\r\nx-xss-protection:\x201;\x20mode=block\r\nconnecti
SF:on:\x20close\r\n\r\n")%r(FourOhFourRequest,115,"HTTP/1\.1\x20301\x20301
SF:\r\ndate:\x20Tue,\x2004\x20Feb\x202025\x2019:16:02\x20GMT\r\nserver:\x2
SF:0Apache\r\nlocation:\x20https://www\.sap\.com/products/recruiting-softw
SF:are\.html\r\nx-content-type-options:\x20nosniff\r\ncontent-length:\x200
SF:\r\ncontent-type:\x20application/x-trash\r\nx-xss-protection:\x201;\x20
SF:mode=block\r\nconnection:\x20close\r\n\r\n")%r(tor-versions,CF,"HTTP/1\
SF:.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\ncache-control:\
SF:x20no-cache\r\ncontent-type:\x20text/html\r\nconnection:\x20close\r\n\r
SF:\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20browser\x20sent\x
SF:20an\x20invalid\x20request\.\n</body></html>\n")%r(RTSPRequest,CF,"HTTP
SF:/1\.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\ncache-contro
SF:l:\x20no-cache\r\ncontent-type:\x20text/html\r\nconnection:\x20close\r\
SF:n\r\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20browser\x20sen
SF:t\x20an\x20invalid\x20request\.\n</body></html>\n")%r(RPCCheck,CF,"HTTP
SF:/1\.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\ncache-contro
SF:l:\x20no-cache\r\ncontent-type:\x20text/html\r\nconnection:\x20close\r\
SF:n\r\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20browser\x20sen
SF:t\x20an\x20invalid\x20request\.\n</body></html>\n")%r(DNSVersionBindReq
SF:TCP,CF,"HTTP/1\.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\n
SF:cache-control:\x20no-cache\r\ncontent-type:\x20text/html\r\nconnection:
SF:\x20close\r\n\r\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20br
SF:owser\x20sent\x20an\x20invalid\x20request\.\n</body></html>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: Device: load balancer

Nmap scan report for bbc-vip136.lbh.bbc.co.uk (212.58.249.198)
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A2676C%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 3.10 - 3.12 (90%), Linux 2.6.32 or 3.10 (89%), Linux 3.13 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip051.lbh.bbc.co.uk (212.58.249.113)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (94%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (91%), Linux 3.10 - 3.12 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 3.13 (89%), Linux 3.10 - 4.11 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip102.telhc.bbc.co.uk (212.58.244.57)
Host is up (0.0089s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip101.telhc.bbc.co.uk (212.58.244.56)
Host is up (0.0092s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip168.telhc.bbc.co.uk (212.58.244.15)
Host is up (0.0090s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A2676C%P=x86_64-pc-linux-gnu%r(X1
SF:1Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/
SF:html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPCC
SF:heck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/ht
SF:ml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVer
SF:sionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:)%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nConte
SF:nt-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\
SF:.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCo
SF:ntent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20reque
SF:st\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20req
SF:uest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20ba
SF:d\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x20
SF:request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x2
SF:0bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20Ba
SF:d\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x2
SF:0a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad\
SF:x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a
SF:\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.192.82
Host is up (0.0024s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A2676C%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams21053-AMS\r\nAccept-Ranges:\x20byt
SF:es\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2019:15:56\x20GMT\r\nVia:\x20
SF:1\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unk
SF:nown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unk
SF:nown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20h
SF:as\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-a
SF:ms21053-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOptions,
SF:201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close
SF:\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r
SF:\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\
SF:r\nX-Served-By:\x20cache-ams21046-AMS\r\nAccept-Ranges:\x20bytes\r\nDat
SF:e:\x20Tue,\x2004\x20Feb\x202025\x2019:15:56\x20GMT\r\nVia:\x201\.1\x20v
SF:arnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20d
SF:omain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20d
SF:omain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20bee
SF:n\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21046-A
SF:MS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,94,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams21077\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1\x2
SF:0400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011
SF:\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20ca
SF:che-ams2100108\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"HTTP/1\
SF:.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent-
SF:Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-ty
SF:pe:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served-
SF:By:\x20cache-ams21020-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Tue,\x
SF:2004\x20Feb\x202025\x2019:15:56\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\r
SF:\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</t
SF:itle>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\.
SF:\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\x
SF:20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21020-AMS\x20\(151\
SF:.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A26772%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21070\r\n\r\nRequested
SF:\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20Na
SF:mes\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418c
SF:5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20th
SF:is\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides/
SF:common-400-errors#error-421-misdirected-request\x20for\x20more\x20infor
SF:mation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20
SF:Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-ty
SF:pe:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100113
SF:\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20
SF:Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179
SF:c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20
SF:use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastl
SF:y\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for
SF:\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x2
SF:0421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams21071\r\n\r\nRequested\x20host\x20does\x20not\x20match\
SF:x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20c
SF:ertificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e63
SF:1d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x
SF:20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdi
SF:rected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,9
SF:4,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConten
SF:t-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-s
SF:erved-by:\x20cache-ams21027\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"H
SF:TTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams21066\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.82
Host is up (0.0027s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A2676C%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,200,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams21036-AMS\r\nAccept-Ranges:\x20byt
SF:es\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2019:15:56\x20GMT\r\nVia:\x20
SF:1\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unk
SF:nown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unk
SF:nown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20h
SF:as\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-a
SF:ms21036-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOptions,2
SF:00,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\
SF:r\nContent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\
SF:ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r
SF:\nX-Served-By:\x20cache-ams21028-AMS\r\nAccept-Ranges:\x20bytes\r\nDate
SF::\x20Tue,\x2004\x20Feb\x202025\x2019:15:56\x20GMT\r\nVia:\x201\.1\x20va
SF:rnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20do
SF:main\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20do
SF:main:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been
SF:\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21028-AM
SF:S\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,96,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\
SF:x20cache-ams2100118\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1\x2
SF:0400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011
SF:\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20ca
SF:che-ams2100109\r\n\r\nBad\x20Request")%r(FourOhFourRequest,200,"HTTP/1\
SF:.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent-
SF:Length:\x20237\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-ty
SF:pe:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served-
SF:By:\x20cache-ams21070-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Tue,\x
SF:2004\x20Feb\x202025\x2019:15:56\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\r
SF:\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</t
SF:itle>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\.
SF:\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\x
SF:20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21070-AMS\x20\(151\
SF:.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A26772%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21081\r\n\r\nRequested
SF:\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20Na
SF:mes\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418c
SF:5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20th
SF:is\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides/
SF:common-400-errors#error-421-misdirected-request\x20for\x20more\x20infor
SF:mation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20
SF:Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-ty
SF:pe:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100086
SF:\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20
SF:Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179
SF:c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20
SF:use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastl
SF:y\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for
SF:\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x2
SF:0421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams21075\r\n\r\nRequested\x20host\x20does\x20not\x20match\
SF:x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20c
SF:ertificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e63
SF:1d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x
SF:20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdi
SF:rected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,9
SF:4,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConten
SF:t-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-s
SF:erved-by:\x20cache-ams21076\r\n\r\nBad\x20Request")%r(RTSPRequest,96,"H
SF:TTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams2100145\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.82
Host is up (0.0024s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A2676C%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams2100147-AMS\r\nAccept-Ranges:\x20b
SF:ytes\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2019:15:56\x20GMT\r\nVia:\x
SF:201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20u
SF:nknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20u
SF:nknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x2
SF:0has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache
SF:-ams2100147-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOpti
SF:ons,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20c
SF:lose\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x2
SF:00\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-ca
SF:che\r\nX-Served-By:\x20cache-ams21048-AMS\r\nAccept-Ranges:\x20bytes\r\
SF:nDate:\x20Tue,\x2004\x20Feb\x202025\x2019:15:56\x20GMT\r\nVia:\x201\.1\
SF:x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\
SF:x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\
SF:x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x2
SF:0been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams210
SF:48-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,96,"H
SF:TTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams2100126\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1
SF:\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:
SF:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:
SF:\x20cache-ams21049\r\n\r\nBad\x20Request")%r(FourOhFourRequest,205,"HTT
SF:P/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCont
SF:ent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconten
SF:t-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Ser
SF:ved-By:\x20cache-ams2100131-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20
SF:Tue,\x2004\x20Feb\x202025\x2019:15:56\x20GMT\r\nVia:\x201\.1\x20varnish
SF:\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\
SF:x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:
SF:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20a
SF:dded\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100131-AMS\x
SF:20\(151\.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A26772%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100126\r\n\r\nRequest
SF:ed\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20
SF:Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d09341
SF:8c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20
SF:this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guide
SF:s/common-400-errors#error-421-misdirected-request\x20for\x20more\x20inf
SF:ormation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x
SF:20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-
SF:type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21043
SF:\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20
SF:Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179
SF:c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20
SF:use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastl
SF:y\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for
SF:\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x2
SF:0421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams2100087\r\n\r\nRequested\x20host\x20does\x20not\x20matc
SF:h\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x2
SF:0certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e
SF:631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit
SF:\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mis
SF:directed-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions
SF:,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCont
SF:ent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx
SF:-served-by:\x20cache-ams2100097\r\n\r\nBad\x20Request")%r(RTSPRequest,9
SF:4,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConten
SF:t-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-s
SF:erved-by:\x20cache-ams21068\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin1.cwwtf.bbc.co.uk (132.185.160.177)
Host is up (0.0096s latency).
Not shown: 65516 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
500/tcp   filtered isakmp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
4736/tcp  filtered unknown
7044/tcp  filtered unknown
9195/tcp  filtered unknown
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
18751/tcp filtered unknown
25027/tcp filtered unknown
25477/tcp filtered unknown
40284/tcp filtered unknown
42130/tcp filtered unknown
46195/tcp filtered unknown
54632/tcp filtered unknown
57307/tcp filtered unknown
60300/tcp filtered unknown
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.0.82
Host is up (0.0023s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A2676C%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,1FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams21065-AMS\r\nAccept-Ranges:\x20byt
SF:es\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2019:15:56\x20GMT\r\nVia:\x20
SF:1\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unk
SF:nown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unk
SF:nown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20h
SF:as\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-a
SF:ms21065-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOptions,20
SF:3,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r
SF:\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\n
SF:content-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\
SF:nX-Served-By:\x20cache-ams2100115-AMS\r\nAccept-Ranges:\x20bytes\r\nDat
SF:e:\x20Tue,\x2004\x20Feb\x202025\x2019:15:56\x20GMT\r\nVia:\x201\.1\x20v
SF:arnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20d
SF:omain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20d
SF:omain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20bee
SF:n\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100115
SF:-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,94,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams21040\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\.1\x2
SF:0400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011
SF:\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20ca
SF:che-ams21035\r\n\r\nBad\x20Request")%r(FourOhFourRequest,1FF,"HTTP/1\.1
SF:\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-type
SF::\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served-By
SF::\x20cache-ams21048-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Tue,\x20
SF:04\x20Feb\x202025\x2019:15:56\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\r\n
SF:\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</tit
SF:le>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\.\x
SF:20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\x20
SF:to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21048-AMS\x20\(151\.1
SF:01\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A26772%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21031\r\n\r\nRequested
SF:\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20Na
SF:mes\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418c
SF:5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20th
SF:is\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides/
SF:common-400-errors#error-421-misdirected-request\x20for\x20more\x20infor
SF:mation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20
SF:Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-ty
SF:pe:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21072\r
SF:\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Al
SF:ternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c8
SF:91fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20us
SF:e\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\
SF:.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\x
SF:20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x204
SF:21\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length:
SF:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100132\r\n\r\nRequested\x20host\x20does\x20not\x20match\
SF:x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20c
SF:ertificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e63
SF:1d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x
SF:20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdi
SF:rected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,9
SF:4,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConten
SF:t-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-s
SF:erved-by:\x20cache-ams21041\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"H
SF:TTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams21032\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin0.telhc.bbc.co.uk (132.185.161.176)
Host is up (0.0094s latency).
Not shown: 65527 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
19481/tcp filtered unknown
19490/tcp filtered unknown
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for dns1.p09.nsone.net (198.51.44.9)
Host is up (0.0026s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for dns2.p09.nsone.net (198.51.45.9)
Host is up (0.0025s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Warning: 132.185.161.177 giving up on port because retransmission cap hit (6).
Warning: 132.185.160.176 giving up on port because retransmission cap hit (6).
Nmap scan report for mailin1.telhc.bbc.co.uk (132.185.161.177)
Host is up (0.0090s latency).
Not shown: 65261 closed tcp ports (reset), 269 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin0.cwwtf.bbc.co.uk (132.185.160.176)
Host is up (0.0092s latency).
Not shown: 65312 closed tcp ports (reset), 218 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.192.82
Host is up (0.0022s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A26F01%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams2100121-AMS\r\nAccept-Ranges:\x20b
SF:ytes\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2019:48:17\x20GMT\r\nVia:\x
SF:201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20u
SF:nknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20u
SF:nknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x2
SF:0has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache
SF:-ams2100121-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOpti
SF:ons,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20c
SF:lose\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x2
SF:00\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-ca
SF:che\r\nX-Served-By:\x20cache-ams2100139-AMS\r\nAccept-Ranges:\x20bytes\
SF:r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2019:48:17\x20GMT\r\nVia:\x201\.
SF:1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknow
SF:n\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknow
SF:n\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\
SF:x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2
SF:100139-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,9
SF:4,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConten
SF:t-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-s
SF:erved-by:\x20cache-ams21034\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP
SF:/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams2100122\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,
SF:"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\n
SF:Content-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nco
SF:ntent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX
SF:-Served-By:\x20cache-ams21080-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x
SF:20Tue,\x2004\x20Feb\x202025\x2019:48:17\x20GMT\r\nVia:\x201\.1\x20varni
SF:sh\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domai
SF:n\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domai
SF:n:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x2
SF:0added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21080-AMS\x
SF:20\(151\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A26F07%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100108\r\n\r\nRequest
SF:ed\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20
SF:Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d09341
SF:8c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20
SF:this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guide
SF:s/common-400-errors#error-421-misdirected-request\x20for\x20more\x20inf
SF:ormation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x
SF:20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-
SF:type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21034
SF:\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20
SF:Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179
SF:c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20
SF:use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastl
SF:y\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for
SF:\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x2
SF:0421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams2100117\r\n\r\nRequested\x20host\x20does\x20not\x20matc
SF:h\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x2
SF:0certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e
SF:631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit
SF:\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mis
SF:directed-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions
SF:,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCont
SF:ent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx
SF:-served-by:\x20cache-ams2100120\r\n\r\nBad\x20Request")%r(RTSPRequest,9
SF:6,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConten
SF:t-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-s
SF:erved-by:\x20cache-ams2100127\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.82
Host is up (0.0022s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A26F01%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,200,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams21052-AMS\r\nAccept-Ranges:\x20byt
SF:es\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2019:48:17\x20GMT\r\nVia:\x20
SF:1\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unk
SF:nown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unk
SF:nown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20h
SF:as\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-a
SF:ms21052-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOptions,2
SF:04,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\
SF:r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\
SF:ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r
SF:\nX-Served-By:\x20cache-ams2100124-AMS\r\nAccept-Ranges:\x20bytes\r\nDa
SF:te:\x20Tue,\x2004\x20Feb\x202025\x2019:48:17\x20GMT\r\nVia:\x201\.1\x20
SF:varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20
SF:domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20
SF:domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20be
SF:en\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams210012
SF:4-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,96,"HTT
SF:P/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams2100129\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\.
SF:1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x
SF:2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x
SF:20cache-ams21051\r\n\r\nBad\x20Request")%r(FourOhFourRequest,204,"HTTP/
SF:1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConten
SF:t-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-
SF:type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serve
SF:d-By:\x20cache-ams2100105-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Tu
SF:e,\x2004\x20Feb\x202025\x2019:48:17\x20GMT\r\nVia:\x201\.1\x20varnish\r
SF:\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x2
SF:0</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x
SF:20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20add
SF:ed\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100105-AMS\x20
SF:\(151\.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A26F07%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100137\r\n\r\nRequest
SF:ed\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20
SF:Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d09341
SF:8c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20
SF:this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guide
SF:s/common-400-errors#error-421-misdirected-request\x20for\x20more\x20inf
SF:ormation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x
SF:20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-
SF:type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21000
SF:92\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x
SF:20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[191
SF:79c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x
SF:20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fas
SF:tly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20f
SF:or\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\
SF:x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams2100109\r\n\r\nRequested\x20host\x20does\x20not\x20ma
SF:tch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\
SF:x20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e5523655
SF:3e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVis
SF:it\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-m
SF:isdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versio
SF:ns,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCo
SF:ntent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\
SF:nx-served-by:\x20cache-ams2100087\r\n\r\nBad\x20Request")%r(RTSPRequest
SF:,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCont
SF:ent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx
SF:-served-by:\x20cache-ams2100084\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (87%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.82
Host is up (0.0023s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A26F01%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams21025-AMS\r\nAccept-Ranges:\x20byt
SF:es\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2019:48:17\x20GMT\r\nVia:\x20
SF:1\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unk
SF:nown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unk
SF:nown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20h
SF:as\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-a
SF:ms21025-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOptions,
SF:201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close
SF:\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r
SF:\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\
SF:r\nX-Served-By:\x20cache-ams21068-AMS\r\nAccept-Ranges:\x20bytes\r\nDat
SF:e:\x20Tue,\x2004\x20Feb\x202025\x2019:48:17\x20GMT\r\nVia:\x201\.1\x20v
SF:arnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20d
SF:omain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20d
SF:omain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20bee
SF:n\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21068-A
SF:MS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,94,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams21030\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1\x2
SF:0400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011
SF:\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20ca
SF:che-ams2100130\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"HTTP/1\
SF:.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent-
SF:Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-ty
SF:pe:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served-
SF:By:\x20cache-ams21068-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Tue,\x
SF:2004\x20Feb\x202025\x2019:48:17\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\r
SF:\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</t
SF:itle>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\.
SF:\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\x
SF:20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21068-AMS\x20\(151\
SF:.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A26F07%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100145\r\n\r\nRequest
SF:ed\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20
SF:Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d09341
SF:8c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20
SF:this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guide
SF:s/common-400-errors#error-421-misdirected-request\x20for\x20more\x20inf
SF:ormation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x
SF:20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-
SF:type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21001
SF:38\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x
SF:20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[191
SF:79c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x
SF:20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fas
SF:tly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20f
SF:or\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\
SF:x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams2100129\r\n\r\nRequested\x20host\x20does\x20not\x20ma
SF:tch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\
SF:x20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e5523655
SF:3e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVis
SF:it\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-m
SF:isdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versio
SF:ns,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCo
SF:ntent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\
SF:nx-served-by:\x20cache-ams21031\r\n\r\nBad\x20Request")%r(RTSPRequest,9
SF:6,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConten
SF:t-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-s
SF:erved-by:\x20cache-ams2100137\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.0.82
Host is up (0.0023s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A26F01%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams2100146-AMS\r\nAccept-Ranges:\x20b
SF:ytes\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2019:48:17\x20GMT\r\nVia:\x
SF:201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20u
SF:nknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20u
SF:nknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x2
SF:0has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache
SF:-ams2100146-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOption
SF:s,1FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clo
SF:se\r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200
SF:\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cach
SF:e\r\nX-Served-By:\x20cache-ams21027-AMS\r\nAccept-Ranges:\x20bytes\r\nD
SF:ate:\x20Tue,\x2004\x20Feb\x202025\x2019:48:17\x20GMT\r\nVia:\x201\.1\x2
SF:0varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x2
SF:0domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x2
SF:0domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20b
SF:een\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21027
SF:-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,94,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams21041\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1\x2
SF:0400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011
SF:\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20ca
SF:che-ams2100111\r\n\r\nBad\x20Request")%r(FourOhFourRequest,1FF,"HTTP/1\
SF:.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent-
SF:Length:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-ty
SF:pe:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served-
SF:By:\x20cache-ams21038-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Tue,\x
SF:2004\x20Feb\x202025\x2019:48:17\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\r
SF:\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</t
SF:itle>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\.
SF:\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\x
SF:20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21038-AMS\x20\(151\
SF:.101\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A26F07%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100102\r\n\r\nRequest
SF:ed\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20
SF:Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d09341
SF:8c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20
SF:this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guide
SF:s/common-400-errors#error-421-misdirected-request\x20for\x20more\x20inf
SF:ormation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x
SF:20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-
SF:type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21075
SF:\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20
SF:Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179
SF:c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20
SF:use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastl
SF:y\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for
SF:\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x2
SF:0421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams2100137\r\n\r\nRequested\x20host\x20does\x20not\x20matc
SF:h\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x2
SF:0certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e
SF:631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit
SF:\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mis
SF:directed-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions
SF:,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCont
SF:ent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx
SF:-served-by:\x20cache-ams2100124\r\n\r\nBad\x20Request")%r(RTSPRequest,9
SF:6,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConten
SF:t-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-s
SF:erved-by:\x20cache-ams2100140\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for dns2.p09.nsone.net (198.51.45.9)
Host is up (0.0027s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for 151.101.192.82
Host is up (0.0023s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A2705B%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams21056-AMS\r\nAccept-Ranges:\x20byt
SF:es\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2019:54:03\x20GMT\r\nVia:\x20
SF:1\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unk
SF:nown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unk
SF:nown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20h
SF:as\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-a
SF:ms21056-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOptions,
SF:205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close
SF:\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r
SF:\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\
SF:r\nX-Served-By:\x20cache-ams2100114-AMS\r\nAccept-Ranges:\x20bytes\r\nD
SF:ate:\x20Tue,\x2004\x20Feb\x202025\x2019:54:03\x20GMT\r\nVia:\x201\.1\x2
SF:0varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x2
SF:0domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x2
SF:0domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20b
SF:een\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21001
SF:14-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,96,"H
SF:TTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams2100120\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1
SF:\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:
SF:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:
SF:\x20cache-ams21020\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"HTT
SF:P/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCont
SF:ent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconten
SF:t-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Ser
SF:ved-By:\x20cache-ams21042-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Tu
SF:e,\x2004\x20Feb\x202025\x2019:54:03\x20GMT\r\nVia:\x201\.1\x20varnish\r
SF:\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x2
SF:0</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x
SF:20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20add
SF:ed\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21042-AMS\x20\(
SF:151\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A27061%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21035\r\n\r\nRequested
SF:\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20Na
SF:mes\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418c
SF:5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20th
SF:is\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides/
SF:common-400-errors#error-421-misdirected-request\x20for\x20more\x20infor
SF:mation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20
SF:Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-ty
SF:pe:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21034\r
SF:\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Al
SF:ternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c8
SF:91fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20us
SF:e\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\
SF:.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\x
SF:20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x204
SF:21\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length:
SF:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams21069\r\n\r\nRequested\x20host\x20does\x20not\x20match\x2
SF:0any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20cer
SF:tificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d
SF:64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20
SF:https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdire
SF:cted-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,94,
SF:"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-
SF:Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-ser
SF:ved-by:\x20cache-ams21043\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"HTT
SF:P/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams21029\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.82
Host is up (0.0021s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A2705B%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,200,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams21044-AMS\r\nAccept-Ranges:\x20byt
SF:es\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2019:54:03\x20GMT\r\nVia:\x20
SF:1\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unk
SF:nown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unk
SF:nown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20h
SF:as\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-a
SF:ms21044-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOptions,2
SF:00,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\
SF:r\nContent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\
SF:ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r
SF:\nX-Served-By:\x20cache-ams21024-AMS\r\nAccept-Ranges:\x20bytes\r\nDate
SF::\x20Tue,\x2004\x20Feb\x202025\x2019:54:03\x20GMT\r\nVia:\x201\.1\x20va
SF:rnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20do
SF:main\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20do
SF:main:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been
SF:\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21024-AM
SF:S\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,96,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\
SF:x20cache-ams2100096\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\.1\x2
SF:0400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011
SF:\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20ca
SF:che-ams21047\r\n\r\nBad\x20Request")%r(FourOhFourRequest,204,"HTTP/1\.1
SF:\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-type
SF::\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served-By
SF::\x20cache-ams2100119-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Tue,\x
SF:2004\x20Feb\x202025\x2019:54:03\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\r
SF:\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</t
SF:itle>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\.
SF:\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\x
SF:20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100119-AMS\x20\(15
SF:1\.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A27061%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21030\r\n\r\nRequested
SF:\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20Na
SF:mes\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418c
SF:5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20th
SF:is\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides/
SF:common-400-errors#error-421-misdirected-request\x20for\x20more\x20infor
SF:mation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20
SF:Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-ty
SF:pe:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21034\r
SF:\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Al
SF:ternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c8
SF:91fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20us
SF:e\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\
SF:.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\x
SF:20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x204
SF:21\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length:
SF:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100109\r\n\r\nRequested\x20host\x20does\x20not\x20match\
SF:x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20c
SF:ertificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e63
SF:1d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x
SF:20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdi
SF:rected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,9
SF:4,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConten
SF:t-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-s
SF:erved-by:\x20cache-ams21043\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"H
SF:TTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams21076\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.82
Host is up (0.0022s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A2705B%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams2100134-AMS\r\nAccept-Ranges:\x20b
SF:ytes\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2019:54:03\x20GMT\r\nVia:\x
SF:201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20u
SF:nknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20u
SF:nknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x2
SF:0has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache
SF:-ams2100134-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOpti
SF:ons,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20c
SF:lose\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x2
SF:00\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-ca
SF:che\r\nX-Served-By:\x20cache-ams21064-AMS\r\nAccept-Ranges:\x20bytes\r\
SF:nDate:\x20Tue,\x2004\x20Feb\x202025\x2019:54:03\x20GMT\r\nVia:\x201\.1\
SF:x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\
SF:x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\
SF:x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x2
SF:0been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams210
SF:64-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,94,"H
SF:TTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams21020\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\.
SF:1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x
SF:2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x
SF:20cache-ams21076\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"HTTP/
SF:1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConten
SF:t-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-
SF:type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serve
SF:d-By:\x20cache-ams21036-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Tue,
SF:\x2004\x20Feb\x202025\x2019:54:03\x20GMT\r\nVia:\x201\.1\x20varnish\r\n
SF:\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20<
SF:/title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20
SF:\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added
SF:\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21036-AMS\x20\(15
SF:1\.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A27061%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21053\r\n\r\nRequested
SF:\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20Na
SF:mes\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418c
SF:5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20th
SF:is\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides/
SF:common-400-errors#error-421-misdirected-request\x20for\x20more\x20infor
SF:mation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20
SF:Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-ty
SF:pe:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100122
SF:\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20
SF:Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179
SF:c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20
SF:use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastl
SF:y\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for
SF:\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x2
SF:0421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams2100125\r\n\r\nRequested\x20host\x20does\x20not\x20matc
SF:h\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x2
SF:0certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e
SF:631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit
SF:\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mis
SF:directed-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions
SF:,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCont
SF:ent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx
SF:-served-by:\x20cache-ams21056\r\n\r\nBad\x20Request")%r(RTSPRequest,94,
SF:"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-
SF:Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-ser
SF:ved-by:\x20cache-ams21051\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.0.82
Host is up (0.0024s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A2705B%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams2100122-AMS\r\nAccept-Ranges:\x20b
SF:ytes\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2019:54:03\x20GMT\r\nVia:\x
SF:201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20u
SF:nknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20u
SF:nknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x2
SF:0has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache
SF:-ams2100122-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOption
SF:s,1FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clo
SF:se\r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200
SF:\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cach
SF:e\r\nX-Served-By:\x20cache-ams21065-AMS\r\nAccept-Ranges:\x20bytes\r\nD
SF:ate:\x20Tue,\x2004\x20Feb\x202025\x2019:54:03\x20GMT\r\nVia:\x201\.1\x2
SF:0varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x2
SF:0domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x2
SF:0domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20b
SF:een\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21065
SF:-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,96,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100121\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\.1\
SF:x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x20
SF:11\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20
SF:cache-ams21052\r\n\r\nBad\x20Request")%r(FourOhFourRequest,203,"HTTP/1\
SF:.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent-
SF:Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-ty
SF:pe:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served-
SF:By:\x20cache-ams2100113-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Tue,
SF:\x2004\x20Feb\x202025\x2019:54:03\x20GMT\r\nVia:\x201\.1\x20varnish\r\n
SF:\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20<
SF:/title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20
SF:\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added
SF:\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100113-AMS\x20\(
SF:151\.101\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A27061%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21036\r\n\r\nRequested
SF:\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20Na
SF:mes\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418c
SF:5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20th
SF:is\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides/
SF:common-400-errors#error-421-misdirected-request\x20for\x20more\x20infor
SF:mation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20
SF:Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-ty
SF:pe:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21044\r
SF:\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Al
SF:ternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c8
SF:91fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20us
SF:e\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\
SF:.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\x
SF:20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x204
SF:21\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length:
SF:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100094\r\n\r\nRequested\x20host\x20does\x20not\x20match\
SF:x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20c
SF:ertificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e63
SF:1d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x
SF:20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdi
SF:rected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,9
SF:6,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConten
SF:t-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-s
SF:erved-by:\x20cache-ams2100141\r\n\r\nBad\x20Request")%r(RTSPRequest,94,
SF:"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-
SF:Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-ser
SF:ved-by:\x20cache-ams21043\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 6.X|8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.1 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 6.1-RELEASE (85%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.82
Host is up (0.0023s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A2712D%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,200,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams21078-AMS\r\nAccept-Ranges:\x20byt
SF:es\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2019:57:33\x20GMT\r\nVia:\x20
SF:1\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unk
SF:nown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unk
SF:nown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20h
SF:as\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-a
SF:ms21078-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOptions,2
SF:04,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\
SF:r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\
SF:ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r
SF:\nX-Served-By:\x20cache-ams2100144-AMS\r\nAccept-Ranges:\x20bytes\r\nDa
SF:te:\x20Tue,\x2004\x20Feb\x202025\x2019:57:33\x20GMT\r\nVia:\x201\.1\x20
SF:varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20
SF:domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20
SF:domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20be
SF:en\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams210014
SF:4-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,96,"HTT
SF:P/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams2100118\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\.
SF:1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x
SF:2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x
SF:20cache-ams21036\r\n\r\nBad\x20Request")%r(FourOhFourRequest,200,"HTTP/
SF:1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConten
SF:t-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-
SF:type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serve
SF:d-By:\x20cache-ams21042-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Tue,
SF:\x2004\x20Feb\x202025\x2019:57:33\x20GMT\r\nVia:\x201\.1\x20varnish\r\n
SF:\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20<
SF:/title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20
SF:\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added
SF:\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21042-AMS\x20\(15
SF:1\.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A27132%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100141\r\n\r\nRequest
SF:ed\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20
SF:Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d09341
SF:8c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20
SF:this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guide
SF:s/common-400-errors#error-421-misdirected-request\x20for\x20more\x20inf
SF:ormation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x
SF:20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-
SF:type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21074
SF:\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20
SF:Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179
SF:c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20
SF:use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastl
SF:y\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for
SF:\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x2
SF:0421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams2100105\r\n\r\nRequested\x20host\x20does\x20not\x20matc
SF:h\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x2
SF:0certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e
SF:631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit
SF:\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mis
SF:directed-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions
SF:,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCont
SF:ent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx
SF:-served-by:\x20cache-ams2100101\r\n\r\nBad\x20Request")%r(RTSPRequest,9
SF:4,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConten
SF:t-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-s
SF:erved-by:\x20cache-ams21025\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 6.X|8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.1 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 6.1-RELEASE (85%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.192.82
Host is up (0.0022s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A2712C%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams21039-AMS\r\nAccept-Ranges:\x20byt
SF:es\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2019:57:32\x20GMT\r\nVia:\x20
SF:1\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unk
SF:nown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unk
SF:nown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20h
SF:as\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-a
SF:ms21039-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOptions,
SF:205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close
SF:\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r
SF:\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\
SF:r\nX-Served-By:\x20cache-ams2100129-AMS\r\nAccept-Ranges:\x20bytes\r\nD
SF:ate:\x20Tue,\x2004\x20Feb\x202025\x2019:57:32\x20GMT\r\nVia:\x201\.1\x2
SF:0varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x2
SF:0domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x2
SF:0domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20b
SF:een\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21001
SF:29-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,96,"H
SF:TTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams2100105\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1
SF:\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:
SF:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:
SF:\x20cache-ams21032\r\n\r\nBad\x20Request")%r(FourOhFourRequest,205,"HTT
SF:P/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCont
SF:ent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconten
SF:t-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Ser
SF:ved-By:\x20cache-ams2100146-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20
SF:Tue,\x2004\x20Feb\x202025\x2019:57:32\x20GMT\r\nVia:\x201\.1\x20varnish
SF:\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\
SF:x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:
SF:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20a
SF:dded\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100146-AMS\x
SF:20\(151\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A27132%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21050\r\n\r\nRequested
SF:\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20Na
SF:mes\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418c
SF:5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20th
SF:is\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides/
SF:common-400-errors#error-421-misdirected-request\x20for\x20more\x20infor
SF:mation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20
SF:Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-ty
SF:pe:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100139
SF:\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20
SF:Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179
SF:c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20
SF:use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastl
SF:y\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for
SF:\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x2
SF:0421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams21045\r\n\r\nRequested\x20host\x20does\x20not\x20match\
SF:x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20c
SF:ertificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e63
SF:1d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x
SF:20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdi
SF:rected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,9
SF:6,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConten
SF:t-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-s
SF:erved-by:\x20cache-ams2100130\r\n\r\nBad\x20Request")%r(RTSPRequest,96,
SF:"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-
SF:Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-ser
SF:ved-by:\x20cache-ams2100091\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.82
Host is up (0.0022s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A2712C%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams21077-AMS\r\nAccept-Ranges:\x20byt
SF:es\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2019:57:32\x20GMT\r\nVia:\x20
SF:1\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unk
SF:nown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unk
SF:nown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20h
SF:as\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-a
SF:ms21077-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOptions,
SF:201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close
SF:\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r
SF:\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\
SF:r\nX-Served-By:\x20cache-ams21083-AMS\r\nAccept-Ranges:\x20bytes\r\nDat
SF:e:\x20Tue,\x2004\x20Feb\x202025\x2019:57:32\x20GMT\r\nVia:\x201\.1\x20v
SF:arnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20d
SF:omain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20d
SF:omain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20bee
SF:n\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21083-A
SF:MS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,94,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams21073\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\.1\x2
SF:0400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011
SF:\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20ca
SF:che-ams21060\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"HTTP/1\.1
SF:\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-type
SF::\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served-By
SF::\x20cache-ams21039-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Tue,\x20
SF:04\x20Feb\x202025\x2019:57:32\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\r\n
SF:\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</tit
SF:le>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\.\x
SF:20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\x20
SF:to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21039-AMS\x20\(151\.1
SF:01\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A27132%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21044\r\n\r\nRequested
SF:\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20Na
SF:mes\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418c
SF:5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20th
SF:is\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides/
SF:common-400-errors#error-421-misdirected-request\x20for\x20more\x20infor
SF:mation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20
SF:Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-ty
SF:pe:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100099
SF:\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20
SF:Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179
SF:c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20
SF:use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastl
SF:y\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for
SF:\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x2
SF:0421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams2100125\r\n\r\nRequested\x20host\x20does\x20not\x20matc
SF:h\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x2
SF:0certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e
SF:631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit
SF:\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mis
SF:directed-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions
SF:,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCont
SF:ent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx
SF:-served-by:\x20cache-ams2100130\r\n\r\nBad\x20Request")%r(RTSPRequest,9
SF:6,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConten
SF:t-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-s
SF:erved-by:\x20cache-ams2100095\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (89%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.0.82
Host is up (0.0022s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/4%Time=67A2712C%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:
SF:\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Afte
SF:r:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20
SF:no-cache\r\nX-Served-By:\x20cache-ams2100137-AMS\r\nAccept-Ranges:\x20b
SF:ytes\r\nDate:\x20Tue,\x2004\x20Feb\x202025\x2019:57:32\x20GMT\r\nVia:\x
SF:201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20u
SF:nknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20u
SF:nknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x2
SF:0has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache
SF:-ams2100137-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOption
SF:s,1FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clo
SF:se\r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200
SF:\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cach
SF:e\r\nX-Served-By:\x20cache-ams21081-AMS\r\nAccept-Ranges:\x20bytes\r\nD
SF:ate:\x20Tue,\x2004\x20Feb\x202025\x2019:57:32\x20GMT\r\nVia:\x201\.1\x2
SF:0varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x2
SF:0domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x2
SF:0domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20b
SF:een\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21081
SF:-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,94,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams21033\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\.1\x2
SF:0400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011
SF:\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20ca
SF:che-ams21020\r\n\r\nBad\x20Request")%r(FourOhFourRequest,1FF,"HTTP/1\.1
SF:\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-type
SF::\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served-By
SF::\x20cache-ams21028-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Tue,\x20
SF:04\x20Feb\x202025\x2019:57:32\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\r\n
SF:\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</tit
SF:le>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\.\x
SF:20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\x20
SF:to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21028-AMS\x20\(151\.1
SF:01\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/4%Time=67A27132%P=x86_64-pc-linux-g
SF:nu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nConn
SF:ection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pla
SF:in;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21053\r\n\r\nRequested
SF:\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20Na
SF:mes\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418c
SF:5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20th
SF:is\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides/
SF:common-400-errors#error-421-misdirected-request\x20for\x20more\x20infor
SF:mation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20
SF:Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-ty
SF:pe:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21035\r
SF:\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Al
SF:ternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c8
SF:91fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20us
SF:e\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\
SF:.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\x
SF:20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x204
SF:21\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length:
SF:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100138\r\n\r\nRequested\x20host\x20does\x20not\x20match\
SF:x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20c
SF:ertificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e63
SF:1d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x
SF:20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdi
SF:rected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,9
SF:6,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConten
SF:t-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-s
SF:erved-by:\x20cache-ams2100085\r\n\r\nBad\x20Request")%r(RTSPRequest,96,
SF:"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-
SF:Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-ser
SF:ved-by:\x20cache-ams2100094\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Tue Feb  4 19:57:43 2025 -- 224 IP addresses (163 hosts up) scanned in 15401.76 seconds