# Nmap 7.94SVN scan initiated Mon Feb 17 15:36:51 2025 as: nmap --privileged -sV -p- -T4 -O --min-parallelism 100 --max-rtt-timeout 1s -oN /var/www/html/nmap/results/ce3d836c-0ed2-46a5-a601-bddd06c417cf.txt 212.58.244.73 212.58.244.9 212.58.244.72 132.185.151.134 132.185.160.176 212.58.244.98 212.58.244.16 23.53.112.149 18.200.133.248 151.101.64.82 132.185.151.132 10.52.69.191 212.58.242.133 35.178.11.2 151.101.64.82 212.58.249.156 132.185.132.10 212.58.249.120 212.58.228.23 212.58.228.78 132.185.160.180 212.58.249.199 52.97.146.88 151.101.128.81 212.58.228.104 151.101.0.82 151.101.128.82 52.97.146.40 132.185.142.146 212.58.242.5 52.97.178.72 132.185.159.183 151.101.64.82 212.58.249.225 212.58.244.186 212.58.244.57 212.58.226.146 172.29.120.48 52.97.131.248 151.101.128.82 2.16.6.202 198.51.45.9 151.101.192.82 132.185.160.177 13.227.219.122 13.227.219.83 132.185.132.21 212.58.228.86 132.185.132.141 212.58.244.15 132.185.132.199 212.58.226.91 132.185.132.32 151.101.128.82 212.58.228.15 132.185.161.100 132.185.132.16 151.101.64.82 212.58.244.39 132.185.160.176 212.58.251.88 151.101.192.82 212.58.228.26 52.98.196.8 212.58.249.207 151.101.192.81 132.185.132.17 34.241.214.120 132.185.132.19 23.53.112.149 212.58.244.15 13.41.43.220 212.58.228.25 151.101.192.82 52.19.225.170 151.101.0.82 132.185.151.132 132.185.151.150 207.169.33.39 198.51.44.9 13.227.219.58 132.185.240.37 132.185.132.130 151.101.128.82 3.9.51.107 132.185.132.142 132.185.132.12 132.185.132.21 212.58.249.141 151.101.0.82 212.58.244.16 132.185.132.16 151.101.128.82 132.185.161.179 198.51.44.9 212.58.244.22 132.185.151.148 151.101.192.82 212.58.244.57 212.58.226.92 63.33.109.90 52.16.246.43 132.185.132.16 132.185.161.177 132.185.161.177 192.168.193.10 52.97.146.72 212.58.228.21 212.58.249.113 132.185.161.180 132.185.161.176 212.58.244.104 132.185.161.177 212.58.228.94 212.58.249.145 13.227.219.18 212.58.230.158 212.58.226.147 212.58.249.147 132.185.160.179 81.144.28.238 81.144.28.241 132.185.142.146 151.101.64.81 212.58.249.201 212.58.228.29 151.101.64.82 52.98.198.232 212.58.249.144 151.101.0.82 212.58.244.56 132.185.160.177 132.185.151.150 132.185.151.148 212.58.228.62 81.144.28.241 212.58.249.183 10.57.48.79 132.185.151.149 212.58.244.83 132.185.158.45 52.209.149.93 212.58.244.83 52.98.205.72 132.185.144.154 52.98.215.88 198.51.45.9 212.58.249.144 212.58.244.23 212.58.249.198 52.97.146.24 2.16.6.220 212.58.244.56 198.51.44.9 212.58.251.122 212.58.228.35 212.58.255.217 132.185.132.21 10.10.48.41 132.185.132.2 52.98.196.40 148.163.199.65 132.185.132.13 212.58.247.239 151.101.128.82 132.185.151.133 212.58.255.218 172.29.161.54 46.137.181.193 212.58.228.100 151.101.192.82 132.185.151.133 212.58.250.23 132.185.160.100 212.58.244.205 198.51.45.9 81.144.28.241 212.58.249.146 52.97.146.56 54.155.236.209 151.101.0.82 132.185.132.3 212.58.249.145 132.185.161.100 212.58.251.122 151.101.0.82 172.31.55.87 132.185.161.176 212.58.230.134 212.58.249.199 132.185.161.176 212.58.249.112 54.77.244.106 10.72.136.19 132.185.160.177 151.101.64.82 198.51.45.9 34.90.160.40 212.58.244.210 132.185.160.176 132.185.132.1 212.58.249.112 212.58.249.198 132.185.69.251 132.185.132.34 10.72.136.19 151.101.192.82 212.58.244.98 132.185.151.134 151.101.0.81 52.98.214.120 132.185.132.16 212.58.249.224 99.80.224.186 212.58.244.99 212.58.236.67 132.185.153.97 132.185.151.149 212.58.249.113
Warning: 132.185.160.176 giving up on port because retransmission cap hit (6).
Nmap scan report for bbc-vip118.telhc.bbc.co.uk (212.58.244.73)
Host is up (0.0095s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B36004%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ftping104.telhc.bbc.co.uk (212.58.244.9)
Host is up (0.0092s latency).
Not shown: 37299 filtered tcp ports (no-response), 28234 closed tcp ports (reset)
PORT    STATE SERVICE   VERSION
21/tcp  open  ftp       ProFTPD 1.3.5e
443/tcp open  ssl/https Apache/2.4.6 (Red Hat Enterprise Linux) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (94%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (91%), Linux 3.10 - 3.12 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 3.13 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.9 (89%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Unix

Nmap scan report for bbc-vip117.telhc.bbc.co.uk (212.58.244.72)
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B36004%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin0.cwwtf.bbc.co.uk (132.185.160.176)
Host is up (0.0096s latency).
Not shown: 53130 closed tcp ports (reset), 12400 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip197.telhc.bbc.co.uk (212.58.244.98)
Host is up (0.0092s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip169.telhc.bbc.co.uk (212.58.244.16)
Host is up (0.0090s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B36004%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for a23-53-112-149.deploy.static.akamaitechnologies.com (23.53.112.149)
Host is up (0.0027s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE  VERSION
80/tcp  open  http     AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
443/tcp open  ssl/http AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|5.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5
Aggressive OS guesses: Linux 4.15 - 5.8 (85%), Linux 5.0 - 5.4 (85%), Linux 5.4 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ec2-18-200-133-248.eu-west-1.compute.amazonaws.com (18.200.133.248)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B36003%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,7F5C,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Mon,\x2017
SF:\x20Feb\x202025\x2016:12:51\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e
SF:98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOC
SF:TYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x
SF:20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20
SF:\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x2
SF:0\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"C
SF:ontent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equi
SF:v=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,
SF:\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x
SF:20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Co
SF:mpatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\
SF:x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wi
SF:dth\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20
SF:best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sp
SF:ort\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20
SF:and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20O
SF:nline\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,
SF:147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Mon,\x2017\x20Feb\x
SF:202025\x2016:12:51\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Leng
SF:th:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agen
SF:t-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</
SF:title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cent
SF:er>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTS
SF:PRequest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Mon,\x2017
SF:\x20Feb\x202025\x2016:12:51\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r
SF:\n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>
SF:\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>open
SF:resty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B36008%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,3000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Mon
SF:,\x2017\x20Feb\x202025\x2016:12:56\x20GMT\r\nContent-Type:\x20text/html
SF:\r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61de
SF:ec4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r
SF:\n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x2
SF:0\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\
SF:x20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n
SF:\x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-eq
SF:uiv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20ht
SF:tp-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device
SF:-width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\
SF:n\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"
SF:X-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofo
SF:llow\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=de
SF:vice-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"
SF:The\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20an
SF:d\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlig
SF:hts\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20B
SF:BC\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPO
SF:ptions,147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Mon,\x2017\x
SF:20Feb\x202025\x2016:12:56\x20GMT\r\nContent-Type:\x20text/html\r\nConte
SF:nt-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrig
SF:in-Agent-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Al
SF:lowed</title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1
SF:></center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n"
SF:)%r(FourOhFourRequest,2000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x
SF:20Mon,\x2017\x20Feb\x202025\x2016:12:56\x20GMT\r\nContent-Type:\x20text
SF:/html\r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\
SF:"61deec4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\
SF:r\n\r\n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x
SF:20\x20\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<titl
SF:e>\n\x20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</tit
SF:le>\n\x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20ht
SF:tp-equiv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\
SF:x20http-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=d
SF:evice-width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewpor
SF:t\">\n\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equ
SF:iv=\"X-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x2
SF:0nofollow\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"wid
SF:th=device-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20conte
SF:nt=\"The\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\
SF:x20and\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20hi
SF:ghlights\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of
SF:\x20BBC\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Warning: 132.185.161.176 giving up on port because retransmission cap hit (6).
Warning: 132.185.161.100 giving up on port because retransmission cap hit (6).
Warning: 132.185.161.179 giving up on port because retransmission cap hit (6).
Warning: 132.185.161.180 giving up on port because retransmission cap hit (6).
Warning: 132.185.161.177 giving up on port because retransmission cap hit (6).
Warning: 132.185.160.180 giving up on port because retransmission cap hit (6).
Warning: 132.185.160.177 giving up on port because retransmission cap hit (6).
Warning: 132.185.160.179 giving up on port because retransmission cap hit (6).
Warning: 212.58.251.88 giving up on port because retransmission cap hit (6).
Nmap scan report for 151.101.64.82
Host is up (0.0035s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37E7B%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100087-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2018:22:50\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100087-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOpti
SF:ons,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20c
SF:lose\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x2
SF:00\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-ca
SF:che\r\nX-Served-By:\x20cache-ams2100102-AMS\r\nAccept-Ranges:\x20bytes\
SF:r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2018:22:50\x20GMT\r\nVia:\x201\.
SF:1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknow
SF:n\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknow
SF:n\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\
SF:x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2
SF:100102-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21063\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100092\r\n\r\nBad\x20Request")%r(FourOhFourRequest,204,"
SF:HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncon
SF:tent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-
SF:Served-By:\x20cache-ams2100127-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\
SF:x20Mon,\x2017\x20Feb\x202025\x2018:22:51\x20GMT\r\nVia:\x201\.1\x20varn
SF:ish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20doma
SF:in\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20doma
SF:in:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x
SF:20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100127-AM
SF:S\x20\(151\.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B37E81%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100110\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2105
SF:2\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100121\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553
SF:e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams21053\r\n\r\nBad\x20Request")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100123\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 6.X|8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.1 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 6.1-RELEASE (85%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for svn.bbc.co.uk (212.58.242.133)
Host is up (0.012s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
443/tcp open  ssl/https Apache
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|2.6.X (89%)
OS CPE: cpe:/o:linux:linux_kernel:4.0 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.0 (89%), Linux 2.6.32 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip094.lbh.bbc.co.uk (212.58.249.156)
Host is up (0.011s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37E7B%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type:\x20te
SF:xt/html\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2018:22:50\x20GMT\r\nCon
SF:nection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x20html>
SF:\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--\x20VER
SF:SION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BBC\x20-\
SF:x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\x20<met
SF:a\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content-Type\"
SF:>\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"encoding\
SF:">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20initial-s
SF:cale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20\x20<me
SF:ta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatible\">\n
SF:\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20name=\"rob
SF:ots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\x20name
SF:=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x20of\x2
SF:0the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x20headli
SF:nes,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x20much\x
SF:20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\"\x20na
SF:me=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www\.bbc\.
SF:co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\x20")%r
SF:(HTTPOptions,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type:\x2
SF:0text/html\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2018:22:50\x20GMT\r\n
SF:Connection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x20ht
SF:ml>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--\x20
SF:VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BBC\x2
SF:0-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\x20<
SF:meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content-Typ
SF:e\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"encodi
SF:ng\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20initia
SF:l-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20\x20
SF:<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatible\"
SF:>\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20name=\"
SF:robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\x20n
SF:ame=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x20of
SF:\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x20hea
SF:dlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x20muc
SF:h\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\"\x2
SF:0name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www\.bb
SF:c\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\x20"
SF:);
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B37E81%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type
SF::\x20text/html\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2018:22:56\x20GMT
SF:\r\nConnection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x
SF:20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--
SF:\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BB
SF:C\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\
SF:x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content
SF:-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"en
SF:coding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20in
SF:itial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20
SF:\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatib
SF:le\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20nam
SF:e=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\
SF:x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x
SF:20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x2
SF:0headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x2
SF:0much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\
SF:"\x20name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www
SF:\.bbc\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\
SF:x20")%r(HTTPOptions,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-T
SF:ype:\x20text/html\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2018:22:56\x20
SF:GMT\r\nConnection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYP
SF:E\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<
SF:!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x2
SF:0BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x
SF:20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Cont
SF:ent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\
SF:"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x2
SF:0initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\
SF:x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compa
SF:tible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20
SF:name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width
SF:\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20bes
SF:t\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport
SF:\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and
SF:\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Onli
SF:ne\"\x20name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://
SF:www\.bbc\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x
SF:20\x20");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (95%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (95%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 5.1 (89%), Linux 3.10 - 3.12 (88%), Linux 2.6.32 - 2.6.35 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gatea.lh.bbc.co.uk (132.185.132.10)
Host is up (0.011s latency).
Not shown: 65531 filtered tcp ports (no-response)
PORT     STATE SERVICE  VERSION
53/tcp   open  domain   ISC BIND 9.11.19
465/tcp  open  ssl/smtp Postfix smtpd
993/tcp  open  ssl/imap Dovecot imapd
4190/tcp open  sieve?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port4190-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37E7B%P=x86_64-pc-linux-gnu%r
SF:(NULL,174,"\"IMPLEMENTATION\"\x20\"Dovecot\x20Pigeonhole\"\r\n\"SIEVE\"
SF:\x20\"fileinto\x20reject\x20envelope\x20encoded-character\x20vacation\x
SF:20subaddress\x20comparator-i;ascii-numeric\x20relational\x20regex\x20im
SF:ap4flags\x20copy\x20include\x20variables\x20body\x20enotify\x20environm
SF:ent\x20mailbox\x20date\x20index\x20ihave\x20duplicate\x20mime\x20foreve
SF:rypart\x20extracttext\"\r\n\"NOTIFY\"\x20\"mailto\"\r\n\"SASL\"\x20\"PL
SF:AIN\x20LOGIN\x20GSSAPI\"\r\n\"VERSION\"\x20\"1\.0\"\r\n\"STARTTLS\"\r\n
SF:OK\x20\"stunnel\"\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (89%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9
Aggressive OS guesses: Sun Solaris 10 (89%), Sun Solaris 10 (SPARC) (89%), Sun Solaris 9 (89%), Sun Solaris 9 or 10 (SPARC) (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Host: mailbox.rd.bbc.co.uk

Nmap scan report for bbc-vip058.lbh.bbc.co.uk (212.58.249.120)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37E7B%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (90%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.228.23
Host is up (0.0093s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  closed https
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: firewall|proxy server|WAP|general purpose|phone|telecom-misc
Running: Check Point embedded, Citrix embedded, Juniper IVE OS 7.X, Linksys embedded, Linux 2.4.X|2.6.X, ISS embedded, Avaya Communication Manager
OS CPE: cpe:/h:checkpoint:zonealarm_z100g cpe:/h:juniper:mag2600 cpe:/h:linksys:wap54g cpe:/o:linux:linux_kernel:2.4.18 cpe:/h:iss:proventia_gx3002c cpe:/o:linux:linux_kernel:2.6.24 cpe:/o:linux:linux_kernel:2.6.11 cpe:/a:avaya:communication_manager
Too many fingerprints match this host to give specific OS details

Nmap scan report for mailout1.cwwtf.bbc.co.uk (132.185.160.180)
Host is up (0.010s latency).
Not shown: 64487 closed tcp ports (reset), 1043 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip137.lbh.bbc.co.uk (212.58.249.199)
Host is up (0.011s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37E7B%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (89%), Linux 3.10 - 3.12 (88%), Linux 2.6.32 - 2.6.35 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.97.146.88
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for 151.101.128.81
Host is up (0.0034s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37E7B%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100102-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2018:22:50\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100102-AMS\x20\(151\.101\.128\.81\)</p></body></html>")%r(HTTPOpt
SF:ions,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20
SF:close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x
SF:200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-c
SF:ache\r\nX-Served-By:\x20cache-ams2100145-AMS\r\nAccept-Ranges:\x20bytes
SF:\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2018:22:50\x20GMT\r\nVia:\x201\
SF:.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unkno
SF:wn\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unkno
SF:wn\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has
SF:\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams
SF:2100145-AMS\x20\(151\.101\.128\.81\)</p></body></html>")%r(RTSPRequest,
SF:94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams21038\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTT
SF:P/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams21081\r\n\r\nBad\x20Request")%r(FourOhFourRequest,205,"
SF:HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncon
SF:tent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-
SF:Served-By:\x20cache-ams2100121-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\
SF:x20Mon,\x2017\x20Feb\x202025\x2018:22:51\x20GMT\r\nVia:\x201\.1\x20varn
SF:ish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20doma
SF:in\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20doma
SF:in:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x
SF:20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100121-AM
SF:S\x20\(151\.101\.128\.81\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B37E81%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100134\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb348716e94e9f83a
SF:c23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2107
SF:8\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb
SF:348716e94e9f83ac23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21079\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[7ccb348716e94e9f83ac23533d4648b0a3a69ede6bd4117e830122
SF:876855c81a\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams21076\r\n\r\nBad\x20Request")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100146\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.0.82
Host is up (0.0026s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37E7B%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100135-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2018:22:50\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100135-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOptio
SF:ns,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20cl
SF:ose\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x20
SF:0\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cac
SF:he\r\nX-Served-By:\x20cache-ams2100140-AMS\r\nAccept-Ranges:\x20bytes\r
SF:\nDate:\x20Mon,\x2017\x20Feb\x202025\x2018:22:50\x20GMT\r\nVia:\x201\.1
SF:\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown
SF:\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown
SF:\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x
SF:20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21
SF:00140-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100091\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100138\r\n\r\nBad\x20Request")%r(FourOhFourRequest,203,"
SF:HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncon
SF:tent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-
SF:Served-By:\x20cache-ams2100133-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\
SF:x20Mon,\x2017\x20Feb\x202025\x2018:22:51\x20GMT\r\nVia:\x201\.1\x20varn
SF:ish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20doma
SF:in\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20doma
SF:in:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x
SF:20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100133-AM
SF:S\x20\(151\.101\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B37E81%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100100\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2104
SF:4\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21069\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100087\r\n\r\nBad\x20Request")%r(RTSPRequest,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21075\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (89%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.82
Host is up (0.0033s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37E7B%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100131-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2018:22:50\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100131-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOpt
SF:ions,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20
SF:close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x
SF:200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-c
SF:ache\r\nX-Served-By:\x20cache-ams21053-AMS\r\nAccept-Ranges:\x20bytes\r
SF:\nDate:\x20Mon,\x2017\x20Feb\x202025\x2018:22:50\x20GMT\r\nVia:\x201\.1
SF:\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown
SF:\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown
SF:\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x
SF:20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21
SF:053-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21067\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\
SF:x20cache-ams21033\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"HTTP
SF:/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent
SF:-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serv
SF:ed-By:\x20cache-ams21045-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Mon
SF:,\x2017\x20Feb\x202025\x2018:22:51\x20GMT\r\nVia:\x201\.1\x20varnish\r\
SF:n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20
SF:</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x2
SF:0\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20adde
SF:d\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21045-AMS\x20\(1
SF:51\.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B37E81%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100092\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100
SF:139\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\
SF:x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19
SF:179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\
SF:x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fa
SF:stly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20
SF:for\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1
SF:\x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100144\r\n\r\nRequested\x20host\x20does\x20not\x20m
SF:atch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS
SF:\x20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e552365
SF:53e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVi
SF:sit\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-
SF:misdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versi
SF:ons,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r
SF:\nx-served-by:\x20cache-ams2100101\r\n\r\nBad\x20Request")%r(RTSPReques
SF:t,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams2100140\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (87%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.97.146.40
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for cloud.virt.ch.bbc.co.uk (132.185.142.146)
Host is up (0.011s latency).
Not shown: 65430 filtered tcp ports (no-response), 101 closed tcp ports (reset)
PORT     STATE SERVICE   VERSION
21/tcp   open  ftp       vsftpd 3.0.3
80/tcp   open  http      Apache httpd 2.4.29
443/tcp  open  ssl/https Apache/2.4.29 (Ubuntu)
8443/tcp open  ssl/http  Apache httpd 2.4.29
Device type: general purpose|storage-misc|firewall|broadband router|webcam
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (87%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (86%), Zhone embedded (85%), Tandberg embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8 cpe:/h:tandberg:vcs
Aggressive OS guesses: Linux 2.6.32 (87%), Linux 2.6.32 or 3.10 (87%), Linux 4.4 (87%), Linux 3.5 (86%), Linux 4.2 (86%), Synology DiskStation Manager 5.1 (86%), WatchGuard Fireware 11.8 (86%), Linux 3.10 - 3.12 (86%), Zhone GPON home gateway (85%), Linux 2.6.35 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Hosts: default, artifactory-noforge.virt.ch.bbc.co.uk; OS: Unix

Nmap scan report for ftping501.bc.bbc.co.uk (212.58.242.5)
Host is up (0.011s latency).
Not shown: 65530 closed tcp ports (reset)
PORT    STATE    SERVICE   VERSION
21/tcp  open     ftp       ProFTPD 1.3.5b
25/tcp  filtered smtp
80/tcp  open     http      Apache httpd 2.4.6 ((Red Hat Enterprise Linux) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5)
123/tcp filtered ntp
443/tcp open     ssl/https Apache/2.4.6 (Red Hat Enterprise Linux) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (96%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (96%), Linux 4.0 (94%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (91%), Linux 3.10 - 3.12 (90%), Linux 2.6.32 - 2.6.35 (89%), Linux 2.6.32 - 2.6.39 (89%), Linux 4.9 (88%), Linux 3.13 (88%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Unix

Nmap scan report for 52.97.178.72
Host is up (0.012s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for 132.185.159.183
Host is up (0.0099s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE  VERSION
113/tcp closed ident
443/tcp open   ssl/http SAP Business Connector
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip163.lbh.bbc.co.uk (212.58.249.225)
Host is up (0.011s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37E7B%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 3.10 - 3.12 (90%), Linux 2.6.32 or 3.10 (89%), Linux 3.13 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for fmt-vip46.telhc.bbc.co.uk (212.58.244.186)
Host is up (0.0094s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37E7B%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip102.telhc.bbc.co.uk (212.58.244.57)
Host is up (0.011s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.97.131.248
Host is up (0.012s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (85%)
Aggressive OS guesses: Citrix NetScaler load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for a2-16-6-202.deploy.static.akamaitechnologies.com (2.16.6.202)
Host is up (0.0037s latency).
Not shown: 65532 filtered tcp ports (no-response)
PORT     STATE SERVICE          VERSION
80/tcp   open  http             AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
443/tcp  open  ssl/https?
8883/tcp open  ssl/secure-mqtt?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|5.X|2.6.X|3.X (91%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10
Aggressive OS guesses: Linux 4.15 - 5.8 (91%), Linux 5.0 - 5.4 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (89%), Linux 5.0 - 5.5 (88%), Linux 2.6.32 - 2.6.35 (87%), Linux 4.4 (87%), Linux 2.6.32 - 2.6.39 (87%), Linux 4.0 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ns5.demysdns.co.uk (198.51.45.9)
Host is up (0.0039s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for 151.101.192.82
Host is up (0.0036s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37E7B%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21033-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2018:22:50\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21033-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOptions
SF:,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clos
SF:e\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\
SF:r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache
SF:\r\nX-Served-By:\x20cache-ams2100118-AMS\r\nAccept-Ranges:\x20bytes\r\n
SF:Date:\x20Mon,\x2017\x20Feb\x202025\x2018:22:50\x20GMT\r\nVia:\x201\.1\x
SF:20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x
SF:20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x
SF:20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20
SF:been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100
SF:118-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21045\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\
SF:x20cache-ams2100124\r\n\r\nBad\x20Request")%r(FourOhFourRequest,205,"HT
SF:TP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconte
SF:nt-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Se
SF:rved-By:\x20cache-ams2100123-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x2
SF:0Mon,\x2017\x20Feb\x202025\x2018:22:51\x20GMT\r\nVia:\x201\.1\x20varnis
SF:h\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain
SF:\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain
SF::\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20
SF:added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100123-AMS\
SF:x20\(151\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B37E81%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100129\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100
SF:086\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\
SF:x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19
SF:179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\
SF:x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fa
SF:stly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20
SF:for\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1
SF:\x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100144\r\n\r\nRequested\x20host\x20does\x20not\x20m
SF:atch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS
SF:\x20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e552365
SF:53e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVi
SF:sit\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-
SF:misdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versi
SF:ons,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r
SF:\nx-served-by:\x20cache-ams2100118\r\n\r\nBad\x20Request")%r(RTSPReques
SF:t,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams21042\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (87%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin1.cwwtf.bbc.co.uk (132.185.160.177)
Host is up (0.011s latency).
Not shown: 64501 closed tcp ports (reset), 1029 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for server-13-227-219-122.ams54.r.cloudfront.net (13.227.219.122)
Host is up (0.0036s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Amazon CloudFront httpd
443/tcp open  ssl/https CloudFront
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for server-13-227-219-83.ams54.r.cloudfront.net (13.227.219.83)
Host is up (0.0027s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Amazon CloudFront httpd
443/tcp open  ssl/https CloudFront
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for 212.58.228.86
Host is up (0.0089s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  closed https
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: firewall|proxy server|WAP|general purpose|phone|telecom-misc
Running: Check Point embedded, Citrix embedded, Juniper IVE OS 7.X, Linksys embedded, Linux 2.4.X|2.6.X, ISS embedded, Avaya Communication Manager
OS CPE: cpe:/h:checkpoint:zonealarm_z100g cpe:/h:juniper:mag2600 cpe:/h:linksys:wap54g cpe:/o:linux:linux_kernel:2.4.18 cpe:/h:iss:proventia_gx3002c cpe:/o:linux:linux_kernel:2.6.24 cpe:/o:linux:linux_kernel:2.6.11 cpe:/a:avaya:communication_manager
Too many fingerprints match this host to give specific OS details

Nmap scan report for bbc-vip168.telhc.bbc.co.uk (212.58.244.15)
Host is up (0.011s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37E7B%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.228.15
Host is up (0.0099s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|storage-misc|firewall|WAP
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X|2.4.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (86%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8 cpe:/o:linux:linux_kernel:2.4
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 4.4 (92%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 2.6.32 - 3.0 (88%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 4.0 (87%), Linux 2.6.18 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gatea.telhc.bbc.co.uk (132.185.161.100)
Host is up (0.0096s latency).
Not shown: 57387 closed tcp ports (reset), 8143 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
53/tcp    open  domain     ISC BIND 9.9.9-P8
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (87%), Oracle Solaris 10|11 (87%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10 cpe:/o:oracle:solaris:11
Aggressive OS guesses: Sun Solaris 10 (87%), Sun Solaris 10 (SPARC) (87%), Sun Solaris 9 or Oracle Solaris 10 (87%), Oracle Solaris 11 (86%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 15 hops

Nmap scan report for bbc-vip171.telhc.bbc.co.uk (212.58.244.39)
Host is up (0.011s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37E7B%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for support0.telhc.bbc.co.uk (212.58.251.88)
Host is up (0.011s latency).
Not shown: 65379 closed tcp ports (reset), 147 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
21/tcp    open  ftp?
22/tcp    open  ssh?
80/tcp    open  http       Apache httpd 2.2.34 ((Unix) mod_ssl/2.2.34 OpenSSL/1.0.1t)
443/tcp   open  ssl/http   Apache httpd 2.2.34 ((Unix) mod_ssl/2.2.34 OpenSSL/1.0.1t)
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
5000/tcp  open  upnp?
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port21-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37E75%P=x86_64-pc-linux-gnu%r(N
SF:ULL,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(GenericLines
SF:,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(Help,1E,"421\x2
SF:0for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(GetRequest,1E,"421\x20for\
SF:x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(HTTPOptions,1E,"421\x20for\x20f
SF:tp\x20use\x20ftp\.bbc\.co\.uk\n")%r(RTSPRequest,1E,"421\x20for\x20ftp\x
SF:20use\x20ftp\.bbc\.co\.uk\n")%r(RPCCheck,1E,"421\x20for\x20ftp\x20use\x
SF:20ftp\.bbc\.co\.uk\n")%r(DNSVersionBindReqTCP,1E,"421\x20for\x20ftp\x20
SF:use\x20ftp\.bbc\.co\.uk\n")%r(DNSStatusRequestTCP,1E,"421\x20for\x20ftp
SF:\x20use\x20ftp\.bbc\.co\.uk\n")%r(SSLSessionReq,1E,"421\x20for\x20ftp\x
SF:20use\x20ftp\.bbc\.co\.uk\n")%r(TerminalServerCookie,1E,"421\x20for\x20
SF:ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(TLSSessionReq,1E,"421\x20for\x20ft
SF:p\x20use\x20ftp\.bbc\.co\.uk\n")%r(Kerberos,1E,"421\x20for\x20ftp\x20us
SF:e\x20ftp\.bbc\.co\.uk\n")%r(SMBProgNeg,1E,"421\x20for\x20ftp\x20use\x20
SF:ftp\.bbc\.co\.uk\n")%r(X11Probe,1E,"421\x20for\x20ftp\x20use\x20ftp\.bb
SF:c\.co\.uk\n")%r(FourOhFourRequest,1E,"421\x20for\x20ftp\x20use\x20ftp\.
SF:bbc\.co\.uk\n")%r(LPDString,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.c
SF:o\.uk\n")%r(LDAPSearchReq,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\
SF:.uk\n")%r(LDAPBindReq,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\
SF:n")%r(SIPOptions,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r
SF:(LANDesk-RC,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(Term
SF:inalServer,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(NCP,1
SF:E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(NotesRPC,1E,"421\
SF:x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(JavaRMI,1E,"421\x20for\x
SF:20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(WMSRequest,1E,"421\x20for\x20ftp
SF:\x20use\x20ftp\.bbc\.co\.uk\n")%r(oracle-tns,1E,"421\x20for\x20ftp\x20u
SF:se\x20ftp\.bbc\.co\.uk\n")%r(ms-sql-s,1E,"421\x20for\x20ftp\x20use\x20f
SF:tp\.bbc\.co\.uk\n")%r(afp,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\
SF:.uk\n")%r(giop,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port5000-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37E7B%P=x86_64-pc-linux-gnu%r
SF:(NULL,45E,"\+\+\+\x20\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
SF:\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\
SF:*\*\*\*\*\*\*\*\*\*\r\n\+\+\+\x20\r\n\+\+\+\x20\x20\x20\x20\x20\x20\x20
SF:\x20Atos\x20-\x20BBC\x20Internet\x20Operations\x20-\x20Support\x20Chat\
SF:x20Area\r\n\+\+\+\x20\r\n\+\+\+\x20\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
SF:\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\
SF:*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\r\n\+\+\+\x20\r\n\+\+\+\x20This\x20ch
SF:at\x20area\x20is\x20for\x20the\x20use\x20of\x20employees\x20and\x20cust
SF:omers\x20of\x20Atos\x20Internet\r\n\+\+\+\x20Operations\x20\(BBC\)\x20f
SF:or\x20business\x20communications\.\x20\x20Others\x20with\x20explicit\x2
SF:0\r\n\+\+\+\x20permission\x20of\x20Internet\x20Operations\x20may\x20als
SF:o\x20use\x20the\x20service\.\x20\x20If\x20you\x20do\x20\r\n\+\+\+\x20no
SF:t\x20have\x20permission\x20to\x20use\x20this\x20talker\x20you\x20should
SF:\x20disconnect\x20now\.\r\n\+\+\+\x20\r\n\+\+\+\x20Please\x20remember\x
SF:20that\x20this\x20is\x20a\x20semi-public\x20forum\x20and\x20as\x20such\
SF:x20you\x20should\x20\r\n\+\+\+\x20not\x20say\x20anything\x20on\x20the\x
SF:20talker\x20that\x20you\x20would\x20not\x20say\x20in\x20public\.\x20\x2
SF:0The\x20\r\n\+\+\+\x20use\x20of\x20lists\x20and\x20whispers\x20can\x20m
SF:inimise\x20the\x20audience\x20of\x20your\x20comments\x20\r\n\+\+\+\x20b
SF:ut\x20should\x20not\x20be\x20considered\x20as\x20secure\.\r\n\+\+\+\x20
SF:\r\n\+\+\+\x20Use\x20of\x20the\x20talker\x20will\x20be\x20periodically\
SF:x20monitored\x20to\x20ensure\x20that\x20it\x20is\x20\r\n\+\+\+\x20")%r(
SF:GenericLines,45E,"\+\+\+\x20\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\
SF:*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
SF:\*\*\*\*\*\*\*\*\*\*\*\*\*\r\n\+\+\+\x20\r\n\+\+\+\x20\x20\x20\x20\x20\
SF:x20\x20\x20Atos\x20-\x20BBC\x20Internet\x20Operations\x20-\x20Support\x
SF:20Chat\x20Area\r\n\+\+\+\x20\r\n\+\+\+\x20\*\*\*\*\*\*\*\*\*\*\*\*\*\*\
SF:*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
SF:\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\r\n\+\+\+\x20\r\n\+\+\+\x20Thi
SF:s\x20chat\x20area\x20is\x20for\x20the\x20use\x20of\x20employees\x20and\
SF:x20customers\x20of\x20Atos\x20Internet\r\n\+\+\+\x20Operations\x20\(BBC
SF:\)\x20for\x20business\x20communications\.\x20\x20Others\x20with\x20expl
SF:icit\x20\r\n\+\+\+\x20permission\x20of\x20Internet\x20Operations\x20may
SF:\x20also\x20use\x20the\x20service\.\x20\x20If\x20you\x20do\x20\r\n\+\+\
SF:+\x20not\x20have\x20permission\x20to\x20use\x20this\x20talker\x20you\x2
SF:0should\x20disconnect\x20now\.\r\n\+\+\+\x20\r\n\+\+\+\x20Please\x20rem
SF:ember\x20that\x20this\x20is\x20a\x20semi-public\x20forum\x20and\x20as\x
SF:20such\x20you\x20should\x20\r\n\+\+\+\x20not\x20say\x20anything\x20on\x
SF:20the\x20talker\x20that\x20you\x20would\x20not\x20say\x20in\x20public\.
SF:\x20\x20The\x20\r\n\+\+\+\x20use\x20of\x20lists\x20and\x20whispers\x20c
SF:an\x20minimise\x20the\x20audience\x20of\x20your\x20comments\x20\r\n\+\+
SF:\+\x20but\x20should\x20not\x20be\x20considered\x20as\x20secure\.\r\n\+\
SF:+\+\x20\r\n\+\+\+\x20Use\x20of\x20the\x20talker\x20will\x20be\x20period
SF:ically\x20monitored\x20to\x20ensure\x20that\x20it\x20is\x20\r\n\+\+\+\x
SF:20");
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (87%), Oracle Solaris 10|11 (86%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10 cpe:/o:oracle:solaris:11
Aggressive OS guesses: Sun Solaris 10 (87%), Sun Solaris 10 (SPARC) (86%), Sun Solaris 9 or Oracle Solaris 10 (86%), Oracle Solaris 11 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ipsecure-maud.test.bbc.co.uk (212.58.228.26)
Host is up (0.011s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|storage-misc
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (92%), Synology DiskStation Manager 5.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (91%), Linux 4.4 (91%), Linux 2.6.32 - 2.6.35 (89%), Linux 2.6.32 - 2.6.39 (89%), Linux 4.0 (89%), Linux 3.11 - 4.1 (87%), Linux 3.2 - 3.8 (87%), Linux 2.6.18 (87%), Linux 2.6.32 - 3.0 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.98.196.8
Host is up (0.012s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for bbc-vip145.lbh.bbc.co.uk (212.58.249.207)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE VERSION
80/tcp  open   http?
443/tcp closed https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37E7B%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (94%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (91%), Linux 3.10 - 3.12 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 3.13 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.9 (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.192.81
Host is up (0.0035s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37E7B%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21062-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2018:22:50\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21062-AMS\x20\(151\.101\.192\.81\)</p></body></html>")%r(HTTPOptions
SF:,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clos
SF:e\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\
SF:r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache
SF:\r\nX-Served-By:\x20cache-ams21041-AMS\r\nAccept-Ranges:\x20bytes\r\nDa
SF:te:\x20Mon,\x2017\x20Feb\x202025\x2018:22:50\x20GMT\r\nVia:\x201\.1\x20
SF:varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20
SF:domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20
SF:domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20be
SF:en\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21041-
SF:AMS\x20\(151\.101\.192\.81\)</p></body></html>")%r(RTSPRequest,94,"HTTP
SF:/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21027\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\.1\x
SF:20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x201
SF:1\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20c
SF:ache-ams21020\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"HTTP/1\.
SF:1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent-L
SF:ength:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-typ
SF:e:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served-B
SF:y:\x20cache-ams21032-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Mon,\x2
SF:017\x20Feb\x202025\x2018:22:51\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\r\
SF:n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</ti
SF:tle>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\.\
SF:x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\x2
SF:0to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21032-AMS\x20\(151\.
SF:101\.192\.81\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B37E81%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100084\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb348716e94e9f83a
SF:c23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100
SF:127\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\
SF:x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7c
SF:cb348716e94e9f83ac23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\
SF:x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fa
SF:stly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20
SF:for\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1
SF:\x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21042\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[7ccb348716e94e9f83ac23533d4648b0a3a69ede6bd4117e8301
SF:22876855c81a\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams21042\r\n\r\nBad\x20Request")%r(RTSPRequest,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21021\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gateh.lh.bbc.co.uk (132.185.132.17)
Host is up (0.0085s latency).
All 65535 scanned ports on gateh.lh.bbc.co.uk (132.185.132.17) are in ignored states.
Not shown: 65535 filtered tcp ports (no-response)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: printer|general purpose
Running: Lexmark embedded, Linux 2.4.X, Sun Solaris 8|9
OS CPE: cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:sun:sunos:5.8 cpe:/o:sun:sunos:5.9
OS details: Lexmark T522 or E332n printer, Lexmark T632 or C750 printer, Linux 2.4.2 (Red Hat 7.1), Sun Solaris 8, Sun Solaris 9 (SPARC)

Nmap scan report for ec2-34-241-214-120.eu-west-1.compute.amazonaws.com (34.241.214.120)
Host is up (0.019s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      nginx 1.14.1
443/tcp open  ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B37E81%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1B0,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-
SF:Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max
SF:-Age=3600;\x20Path=/;\x20Expires=Mon,\x2017\x20Feb\x202025\x2019:22:57\
SF:x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://picos\.tools\.bb
SF:c\.co\.uk/landing\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x2
SF:0charset=utf-8\r\nContent-Length:\x2072\r\nDate:\x20Mon,\x2017\x20Feb\x
SF:202025\x2018:22:57\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20R
SF:edirect\.\x20Redirecting\x20to\x20https://picos\.tools\.bbc\.co\.uk/lan
SF:ding")%r(FourOhFourRequest,1DD,"HTTP/1\.1\x20307\x20Temporary\x20Redire
SF:ct\r\nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2Fnice
SF:%2520ports%252C%2FTri%256Eity\.txt%252ebak%22%7D;\x20Max-Age=3600;\x20P
SF:ath=/;\x20Expires=Mon,\x2017\x20Feb\x202025\x2019:22:57\x20GMT;\x20Http
SF:Only;\x20Secure\r\nLocation:\x20https://picos\.tools\.bbc\.co\.uk/landi
SF:ng\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x20charset=utf-8\
SF:r\nContent-Length:\x2072\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2018:22
SF::57\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20Redirect\.\x20Re
SF:directing\x20to\x20https://picos\.tools\.bbc\.co\.uk/landing")%r(ms-sql
SF:-s,2F,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\n\r
SF:\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for 212.58.228.25
Host is up (0.0090s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|storage-misc|firewall
Running (JUST GUESSING): Linux 2.6.X|4.X|3.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 4.4 (92%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.0 (89%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 2.6.18 (87%), Linux 2.6.32 - 3.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ec2-52-19-225-170.eu-west-1.compute.amazonaws.com (52.19.225.170)
Host is up (0.019s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37E7A%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,32F8,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Mon,\x2017
SF:\x20Feb\x202025\x2018:22:49\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e
SF:98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOC
SF:TYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x
SF:20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20
SF:\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x2
SF:0\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"C
SF:ontent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equi
SF:v=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,
SF:\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x
SF:20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Co
SF:mpatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\
SF:x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wi
SF:dth\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20
SF:best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sp
SF:ort\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20
SF:and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20O
SF:nline\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,
SF:147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Mon,\x2017\x20Feb\x
SF:202025\x2018:22:49\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Leng
SF:th:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agen
SF:t-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</
SF:title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cent
SF:er>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTS
SF:PRequest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Mon,\x2017
SF:\x20Feb\x202025\x2018:22:49\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r
SF:\n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>
SF:\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>open
SF:resty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B37E7F%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,2000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Mon
SF:,\x2017\x20Feb\x202025\x2018:22:54\x20GMT\r\nContent-Type:\x20text/html
SF:\r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61de
SF:ec4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r
SF:\n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x2
SF:0\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\
SF:x20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n
SF:\x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-eq
SF:uiv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20ht
SF:tp-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device
SF:-width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\
SF:n\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"
SF:X-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofo
SF:llow\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=de
SF:vice-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"
SF:The\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20an
SF:d\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlig
SF:hts\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20B
SF:BC\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPO
SF:ptions,147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Mon,\x2017\x
SF:20Feb\x202025\x2018:22:55\x20GMT\r\nContent-Type:\x20text/html\r\nConte
SF:nt-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrig
SF:in-Agent-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Al
SF:lowed</title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1
SF:></center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n"
SF:)%r(FourOhFourRequest,2000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x
SF:20Mon,\x2017\x20Feb\x202025\x2018:22:55\x20GMT\r\nContent-Type:\x20text
SF:/html\r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\
SF:"61deec4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\
SF:r\n\r\n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x
SF:20\x20\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<titl
SF:e>\n\x20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</tit
SF:le>\n\x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20ht
SF:tp-equiv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\
SF:x20http-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=d
SF:evice-width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewpor
SF:t\">\n\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equ
SF:iv=\"X-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x2
SF:0nofollow\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"wid
SF:th=device-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20conte
SF:nt=\"The\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\
SF:x20and\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20hi
SF:ghlights\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of
SF:\x20BBC\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for dns1.p09.nsone.net (198.51.44.9)
Host is up (0.0041s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for server-13-227-219-58.ams54.r.cloudfront.net (13.227.219.58)
Host is up (0.0032s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Amazon CloudFront httpd
443/tcp open  ssl/https CloudFront
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for gatec.lh.bbc.co.uk (132.185.132.12)
Host is up (0.0096s latency).
All 65535 scanned ports on gatec.lh.bbc.co.uk (132.185.132.12) are in ignored states.
Not shown: 65535 filtered tcp ports (no-response)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Sun Solaris 8|9
OS CPE: cpe:/o:sun:sunos:5.8 cpe:/o:sun:sunos:5.9
OS details: Sun Solaris 8, Sun Solaris 9 (SPARC)

Nmap scan report for bbc-vip079.lbh.bbc.co.uk (212.58.249.141)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (93%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 3.10 - 3.12 (91%), Linux 2.6.32 - 2.6.35 (89%), Linux 4.9 (89%), Linux 3.13 (89%), Linux 2.6.32 - 2.6.39 (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailout0.telhc.bbc.co.uk (132.185.161.179)
Host is up (0.010s latency).
Not shown: 57541 closed tcp ports (reset), 7989 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.244.22
Host is up (0.0089s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37E7B%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ec2-63-33-109-90.eu-west-1.compute.amazonaws.com (63.33.109.90)
Host is up (0.019s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      nginx 1.14.1
443/tcp open  ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B37E81%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1B0,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-
SF:Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max
SF:-Age=3600;\x20Path=/;\x20Expires=Mon,\x2017\x20Feb\x202025\x2019:22:57\
SF:x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://picos\.tools\.bb
SF:c\.co\.uk/landing\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x2
SF:0charset=utf-8\r\nContent-Length:\x2072\r\nDate:\x20Mon,\x2017\x20Feb\x
SF:202025\x2018:22:57\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20R
SF:edirect\.\x20Redirecting\x20to\x20https://picos\.tools\.bbc\.co\.uk/lan
SF:ding")%r(HTTPOptions,1B0,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\n
SF:Set-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x2
SF:0Max-Age=3600;\x20Path=/;\x20Expires=Mon,\x2017\x20Feb\x202025\x2019:22
SF::57\x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://picos\.tools
SF:\.bbc\.co\.uk/landing\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain
SF:;\x20charset=utf-8\r\nContent-Length:\x2072\r\nDate:\x20Mon,\x2017\x20F
SF:eb\x202025\x2018:22:57\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\
SF:x20Redirect\.\x20Redirecting\x20to\x20https://picos\.tools\.bbc\.co\.uk
SF:/landing")%r(FourOhFourRequest,1DD,"HTTP/1\.1\x20307\x20Temporary\x20Re
SF:direct\r\nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F
SF:nice%2520ports%252C%2FTri%256Eity\.txt%252ebak%22%7D;\x20Max-Age=3600;\
SF:x20Path=/;\x20Expires=Mon,\x2017\x20Feb\x202025\x2019:22:57\x20GMT;\x20
SF:HttpOnly;\x20Secure\r\nLocation:\x20https://picos\.tools\.bbc\.co\.uk/l
SF:anding\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x20charset=ut
SF:f-8\r\nContent-Length:\x2072\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x201
SF:8:22:57\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20Redirect\.\x
SF:20Redirecting\x20to\x20https://picos\.tools\.bbc\.co\.uk/landing");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for ec2-52-16-246-43.eu-west-1.compute.amazonaws.com (52.16.246.43)
Host is up (0.019s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37E7A%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,32F8,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Mon,\x2017
SF:\x20Feb\x202025\x2018:22:49\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e
SF:98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOC
SF:TYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x
SF:20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20
SF:\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x2
SF:0\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"C
SF:ontent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equi
SF:v=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,
SF:\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x
SF:20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Co
SF:mpatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\
SF:x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wi
SF:dth\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20
SF:best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sp
SF:ort\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20
SF:and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20O
SF:nline\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,
SF:147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Mon,\x2017\x20Feb\x
SF:202025\x2018:22:49\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Leng
SF:th:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agen
SF:t-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</
SF:title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cent
SF:er>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTS
SF:PRequest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Mon,\x2017
SF:\x20Feb\x202025\x2018:22:49\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r
SF:\n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>
SF:\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>open
SF:resty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B37E7F%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,2000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Mon
SF:,\x2017\x20Feb\x202025\x2018:22:54\x20GMT\r\nContent-Type:\x20text/html
SF:\r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61de
SF:ec4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r
SF:\n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x2
SF:0\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\
SF:x20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n
SF:\x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-eq
SF:uiv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20ht
SF:tp-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device
SF:-width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\
SF:n\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"
SF:X-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofo
SF:llow\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=de
SF:vice-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"
SF:The\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20an
SF:d\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlig
SF:hts\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20B
SF:BC\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPO
SF:ptions,147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Mon,\x2017\x
SF:20Feb\x202025\x2018:22:55\x20GMT\r\nContent-Type:\x20text/html\r\nConte
SF:nt-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrig
SF:in-Agent-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Al
SF:lowed</title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1
SF:></center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n"
SF:)%r(FourOhFourRequest,3000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x
SF:20Mon,\x2017\x20Feb\x202025\x2018:22:55\x20GMT\r\nContent-Type:\x20text
SF:/html\r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\
SF:"61deec4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\
SF:r\n\r\n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x
SF:20\x20\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<titl
SF:e>\n\x20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</tit
SF:le>\n\x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20ht
SF:tp-equiv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\
SF:x20http-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=d
SF:evice-width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewpor
SF:t\">\n\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equ
SF:iv=\"X-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x2
SF:0nofollow\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"wid
SF:th=device-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20conte
SF:nt=\"The\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\
SF:x20and\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20hi
SF:ghlights\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of
SF:\x20BBC\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for mailin1.telhc.bbc.co.uk (132.185.161.177)
Host is up (0.010s latency).
Not shown: 63555 closed tcp ports (reset), 1975 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.97.146.72
Host is up (0.012s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for 212.58.228.21
Host is up (0.0096s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|storage-misc|firewall|WAP
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X|2.4.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (86%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8 cpe:/o:linux:linux_kernel:2.4
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 4.4 (92%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 2.6.32 - 3.0 (88%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 4.0 (87%), Linux 2.6.18 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip051.lbh.bbc.co.uk (212.58.249.113)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (94%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 3.10 - 3.12 (92%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.9 (89%), Linux 3.13 (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailout1.telhc.bbc.co.uk (132.185.161.180)
Host is up (0.010s latency).
Not shown: 63620 closed tcp ports (reset), 1910 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin0.telhc.bbc.co.uk (132.185.161.176)
Host is up (0.010s latency).
Not shown: 57340 closed tcp ports (reset), 8190 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip140.telhc.bbc.co.uk (212.58.244.104)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.228.94
Host is up (0.0090s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  closed https
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: firewall|proxy server|WAP|general purpose|phone|telecom-misc
Running: Check Point embedded, Citrix embedded, Juniper IVE OS 7.X, Linksys embedded, Linux 2.4.X|2.6.X, ISS embedded, Avaya Communication Manager
OS CPE: cpe:/h:checkpoint:zonealarm_z100g cpe:/h:juniper:mag2600 cpe:/h:linksys:wap54g cpe:/o:linux:linux_kernel:2.4.18 cpe:/h:iss:proventia_gx3002c cpe:/o:linux:linux_kernel:2.6.24 cpe:/o:linux:linux_kernel:2.6.11 cpe:/a:avaya:communication_manager
Too many fingerprints match this host to give specific OS details

Nmap scan report for bbc-vip083.lbh.bbc.co.uk (212.58.249.145)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (90%), Linux 5.1 (89%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for server-13-227-219-18.ams54.r.cloudfront.net (13.227.219.18)
Host is up (0.0035s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Amazon CloudFront httpd
443/tcp open  ssl/https CloudFront
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bbc-vip085.lbh.bbc.co.uk (212.58.249.147)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37E7B%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (96%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (96%), Linux 4.0 (91%), Linux 3.10 - 4.11 (90%), Linux 3.11 - 4.1 (90%), Linux 3.2 - 4.9 (90%), Linux 5.1 (90%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (89%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailout0.cwwtf.bbc.co.uk (132.185.160.179)
Host is up (0.0098s latency).
Not shown: 64874 closed tcp ports (reset), 656 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.81
Host is up (0.0033s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37E7B%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100134-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2018:22:51\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100134-AMS\x20\(151\.101\.64\.81\)</p></body></html>")%r(HTTPOpti
SF:ons,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20c
SF:lose\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x2
SF:00\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-ca
SF:che\r\nX-Served-By:\x20cache-ams2100090-AMS\r\nAccept-Ranges:\x20bytes\
SF:r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2018:22:51\x20GMT\r\nVia:\x201\.
SF:1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknow
SF:n\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknow
SF:n\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\
SF:x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2
SF:100090-AMS\x20\(151\.101\.64\.81\)</p></body></html>")%r(RTSPRequest,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21064\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100097\r\n\r\nBad\x20Request")%r(FourOhFourRequest,204,"
SF:HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncon
SF:tent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-
SF:Served-By:\x20cache-ams2100127-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\
SF:x20Mon,\x2017\x20Feb\x202025\x2018:22:51\x20GMT\r\nVia:\x201\.1\x20varn
SF:ish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20doma
SF:in\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20doma
SF:in:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x
SF:20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100127-AM
SF:S\x20\(151\.101\.64\.81\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B37E81%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100127\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb348716e94e9f83a
SF:c23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100
SF:130\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\
SF:x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7c
SF:cb348716e94e9f83ac23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\
SF:x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fa
SF:stly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20
SF:for\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1
SF:\x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21029\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[7ccb348716e94e9f83ac23533d4648b0a3a69ede6bd4117e8301
SF:22876855c81a\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams21020\r\n\r\nBad\x20Request")%r(RTSPRequest,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21024\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip139.lbh.bbc.co.uk (212.58.249.201)
Host is up (0.0098s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37E7B%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (95%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (95%), Linux 3.2 - 4.9 (90%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 4.0 (89%), Linux 3.10 - 4.11 (88%), Linux 3.11 - 4.1 (88%), Linux 5.1 (88%), Linux 3.10 - 3.12 (87%), Linux 2.6.32 - 2.6.35 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.228.29
Host is up (0.0097s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|storage-misc|firewall
Running (JUST GUESSING): Linux 2.6.X|4.X|3.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 4.4 (92%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 4.0 (87%), Linux 2.6.18 (87%), Linux 2.6.32 - 3.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Warning: 132.185.160.100 giving up on port because retransmission cap hit (6).
Warning: 132.185.160.176 giving up on port because retransmission cap hit (6).
Nmap scan report for 52.98.198.232
Host is up (0.010s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for bbc-vip082.lbh.bbc.co.uk (212.58.249.144)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (95%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (95%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (89%), Linux 2.6.32 - 2.6.35 (87%), Linux 2.6.32 - 2.6.39 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip101.telhc.bbc.co.uk (212.58.244.56)
Host is up (0.0092s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip121.lbh.bbc.co.uk (212.58.249.183)
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (93%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 3.10 - 3.12 (92%), Linux 2.6.32 - 2.6.35 (90%), Linux 4.9 (90%), Linux 3.13 (90%), Linux 2.6.32 - 2.6.39 (90%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip128.telhc.bbc.co.uk (212.58.244.83)
Host is up (0.0093s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 132.185.158.45
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
113/tcp closed ident
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (89%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ec2-52-209-149-93.eu-west-1.compute.amazonaws.com (52.209.149.93)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B38EA2%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,1714,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Mon,\x2017
SF:\x20Feb\x202025\x2019:31:46\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e
SF:98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOC
SF:TYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x
SF:20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20
SF:\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x2
SF:0\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"C
SF:ontent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equi
SF:v=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,
SF:\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x
SF:20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Co
SF:mpatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\
SF:x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wi
SF:dth\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20
SF:best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sp
SF:ort\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20
SF:and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20O
SF:nline\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,
SF:147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Mon,\x2017\x20Feb\x
SF:202025\x2019:31:46\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Leng
SF:th:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agen
SF:t-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</
SF:title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cent
SF:er>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTS
SF:PRequest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Mon,\x2017
SF:\x20Feb\x202025\x2019:31:46\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r
SF:\n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>
SF:\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>open
SF:resty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B38EA8%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,17D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Mo
SF:n,\x2017\x20Feb\x202025\x2019:31:51\x20GMT\r\nContent-Type:\x20text/htm
SF:l\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nServer:\x20BBC-G
SF:TM\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x20SSL\x20certif
SF:icate\x20was\x20sent</title></head>\r\n<body>\r\n<center><h1>400\x20Bad
SF:\x20Request</h1></center>\r\n<center>No\x20required\x20SSL\x20certifica
SF:te\x20was\x20sent</center>\r\n<hr><center>openresty</center>\r\n</body>
SF:\r\n</html>\r\n")%r(HTTPOptions,17D,"HTTP/1\.1\x20400\x20Bad\x20Request
SF:\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2019:31:51\x20GMT\r\nContent-Ty
SF:pe:\x20text/html\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nS
SF:erver:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x
SF:20SSL\x20certificate\x20was\x20sent</title></head>\r\n<body>\r\n<center
SF:><h1>400\x20Bad\x20Request</h1></center>\r\n<center>No\x20required\x20S
SF:SL\x20certificate\x20was\x20sent</center>\r\n<hr><center>openresty</cen
SF:ter>\r\n</body>\r\n</html>\r\n")%r(FourOhFourRequest,17D,"HTTP/1\.1\x20
SF:400\x20Bad\x20Request\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2019:31:51
SF:\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20234\r\nConn
SF:ection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>40
SF:0\x20No\x20required\x20SSL\x20certificate\x20was\x20sent</title></head>
SF:\r\n<body>\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<cente
SF:r>No\x20required\x20SSL\x20certificate\x20was\x20sent</center>\r\n<hr><
SF:center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(tor-versions,12
SF:D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Mon,\x2017\x20Feb\x20
SF:2025\x2019:31:51\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length
SF::\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\
SF:n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\r\n<center
SF:><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>openresty</cent
SF:er>\r\n</body>\r\n</html>\r\n")%r(RTSPRequest,12D,"HTTP/1\.1\x20400\x20
SF:Bad\x20Request\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2019:31:56\x20GMT
SF:\r\nContent-Type:\x20text/html\r\nContent-Length:\x20154\r\nConnection:
SF:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20Ba
SF:d\x20Request</title></head>\r\n<body>\r\n<center><h1>400\x20Bad\x20Requ
SF:est</h1></center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</htm
SF:l>\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for 52.98.205.72
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for 52.98.215.88
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for 212.58.244.23
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B38EA4%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bbc-vip136.lbh.bbc.co.uk (212.58.249.198)
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B38EA4%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (90%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.97.146.24
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for a2-16-6-220.deploy.static.akamaitechnologies.com (2.16.6.220)
Host is up (0.0027s latency).
Not shown: 65531 filtered tcp ports (no-response)
PORT     STATE  SERVICE          VERSION
53/tcp   closed domain
80/tcp   open   http             AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
443/tcp  open   ssl/https?
8883/tcp open   ssl/secure-mqtt?
Device type: general purpose|storage-misc|firewall
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X|5.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:5 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (91%), Linux 4.4 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 5.0 - 5.4 (88%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 4.0 (87%), Linux 2.6.18 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for lists1.telhc.bbc.co.uk (212.58.251.122)
Host is up (0.0095s latency).
Not shown: 65528 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
587/tcp   open     smtp       Sendmail 8.14.9+Sun/8.12.9
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (87%), Oracle Solaris 10|11 (86%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10 cpe:/o:oracle:solaris:11
Aggressive OS guesses: Sun Solaris 10 (87%), Sun Solaris 10 (SPARC) (86%), Sun Solaris 9 or Oracle Solaris 10 (86%), Oracle Solaris 11 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Unix

Nmap scan report for 212.58.228.35
Host is up (0.0091s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|firewall|storage-misc|WAP|webcam
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X|2.4.X (92%), WatchGuard Fireware 11.X (86%), Synology DiskStation Manager 5.X (85%), Tandberg embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:watchguard:fireware:11.8 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:linux:linux_kernel:2.4 cpe:/h:tandberg:vcs
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 4.4 (92%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 4.0 (87%), Linux 2.6.18 (87%), Linux 2.6.32 - 3.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for rt1-132.lh.bbc.co.uk (132.185.132.2)
Host is up (0.0097s latency).
Not shown: 65534 closed tcp ports (reset)
PORT   STATE    SERVICE VERSION
25/tcp filtered smtp
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: switch
Running: Cisco IOS 12.X
OS CPE: cpe:/h:cisco:catalyst_6509:e cpe:/o:cisco:ios:12.2
OS details: Cisco 6509 switch (IOS 12.2)

Nmap scan report for 52.98.196.40
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for ns3.bbcdns.net (148.163.199.65)
Host is up (0.0031s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|5.X|2.6.X|3.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10
Aggressive OS guesses: Linux 4.15 - 5.8 (85%), Linux 5.0 - 5.5 (85%), Linux 5.0 - 5.4 (85%), Linux 2.6.32 or 3.10 (85%), Linux 4.0 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gated.lh.bbc.co.uk (132.185.132.13)
Host is up (0.0099s latency).
All 65535 scanned ports on gated.lh.bbc.co.uk (132.185.132.13) are in ignored states.
Not shown: 65535 filtered tcp ports (no-response)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Sun Solaris 8|9
OS CPE: cpe:/o:sun:sunos:5.8 cpe:/o:sun:sunos:5.9
OS details: Sun Solaris 8, Sun Solaris 9 (SPARC)

Nmap scan report for ec2-46-137-181-193.eu-west-1.compute.amazonaws.com (46.137.181.193)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Node.js Express framework
443/tcp open  ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B38EAA%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-
SF:Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max
SF:-Age=3600;\x20Path=/;\x20Expires=Mon,\x2017\x20Feb\x202025\x2020:31:53\
SF:x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.
SF:com/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x
SF:20charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Mon,\x2017\x20Feb\
SF:x202025\x2019:31:53\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20
SF:Redirect\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-re
SF:quired")%r(HTTPOptions,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r
SF:\nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\
SF:x20Max-Age=3600;\x20Path=/;\x20Expires=Mon,\x2017\x20Feb\x202025\x2020:
SF:31:53\x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\
SF:.bbc\.com/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Mon,\x2017\x
SF:20Feb\x202025\x2019:31:53\x20GMT\r\nConnection:\x20close\r\n\r\nTempora
SF:ry\x20Redirect\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/lo
SF:gin-required")%r(FourOhFourRequest,1E3,"HTTP/1\.1\x20307\x20Temporary\x
SF:20Redirect\r\nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%2
SF:2%2Fnice%2520ports%252C%2FTri%256Eity\.txt%252ebak%22%7D;\x20Max-Age=36
SF:00;\x20Path=/;\x20Expires=Mon,\x2017\x20Feb\x202025\x2020:31:53\x20GMT;
SF:\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.com/log
SF:in-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x20chars
SF:et=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Mon,\x2017\x20Feb\x202025
SF:\x2019:31:53\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20Redirec
SF:t\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-required"
SF:)%r(RTSPRequest,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-C
SF:ookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max-
SF:Age=3600;\x20Path=/;\x20Expires=Mon,\x2017\x20Feb\x202025\x2020:31:59\x
SF:20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.c
SF:om/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x2
SF:0charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Mon,\x2017\x20Feb\x
SF:202025\x2019:31:59\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20R
SF:edirect\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-req
SF:uired");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|2.6.X (87%)
OS CPE: cpe:/o:linux:linux_kernel:4.0 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.0 (87%), Linux 2.6.32 (85%), Linux 4.4 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.228.100
Host is up (0.0094s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   open   http?
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B38EA4%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Device type: general purpose|storage-misc|firewall|WAP|webcam
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X|2.4.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (86%), Tandberg embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8 cpe:/o:linux:linux_kernel:2.4 cpe:/h:tandberg:vcs
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 4.4 (92%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.0 (89%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 2.6.18 (87%), Linux 2.6.32 - 3.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for jira.dev.bbc.co.uk (212.58.250.23)
Host is up (0.0099s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Apache httpd 2.4.62 ((Red Hat Enterprise Linux) OpenSSL/3.2.2)
443/tcp open  ssl/https Apache/2.4.62 (Red Hat Enterprise Linux) OpenSSL/3.2.2
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.0
Aggressive OS guesses: Linux 2.6.32 (85%), Linux 2.6.32 or 3.10 (85%), Linux 4.0 (85%), Linux 4.4 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gatea.cwwtf.bbc.co.uk (132.185.160.100)
Host is up (0.0098s latency).
Not shown: 64796 closed tcp ports (reset), 735 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (91%), Sun OpenSolaris (86%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:opensolaris cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (91%), Sun Solaris 10 (SPARC) (91%), Sun OpenSolaris 2009.06 (86%), Sun Solaris 9 (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip194.telhc.bbc.co.uk (212.58.244.205)
Host is up (0.0095s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B38EA3%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type:\x20te
SF:xt/html\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2019:31:47\x20GMT\r\nCon
SF:nection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x20html>
SF:\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--\x20VER
SF:SION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BBC\x20-\
SF:x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\x20<met
SF:a\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content-Type\"
SF:>\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"encoding\
SF:">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20initial-s
SF:cale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20\x20<me
SF:ta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatible\">\n
SF:\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20name=\"rob
SF:ots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\x20name
SF:=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x20of\x2
SF:0the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x20headli
SF:nes,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x20much\x
SF:20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\"\x20na
SF:me=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www\.bbc\.
SF:co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\x20")%r
SF:(HTTPOptions,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type:\x2
SF:0text/html\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2019:31:47\x20GMT\r\n
SF:Connection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x20ht
SF:ml>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--\x20
SF:VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BBC\x2
SF:0-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\x20<
SF:meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content-Typ
SF:e\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"encodi
SF:ng\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20initia
SF:l-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20\x20
SF:<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatible\"
SF:>\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20name=\"
SF:robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\x20n
SF:ame=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x20of
SF:\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x20hea
SF:dlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x20muc
SF:h\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\"\x2
SF:0name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www\.bb
SF:c\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\x20"
SF:);
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B38EAA%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type
SF::\x20text/html\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2019:31:53\x20GMT
SF:\r\nConnection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x
SF:20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--
SF:\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BB
SF:C\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\
SF:x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content
SF:-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"en
SF:coding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20in
SF:itial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20
SF:\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatib
SF:le\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20nam
SF:e=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\
SF:x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x
SF:20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x2
SF:0headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x2
SF:0much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\
SF:"\x20name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www
SF:\.bbc\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\
SF:x20")%r(HTTPOptions,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-T
SF:ype:\x20text/html\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2019:31:53\x20
SF:GMT\r\nConnection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYP
SF:E\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<
SF:!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x2
SF:0BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x
SF:20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Cont
SF:ent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\
SF:"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x2
SF:0initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\
SF:x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compa
SF:tible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20
SF:name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width
SF:\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20bes
SF:t\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport
SF:\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and
SF:\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Onli
SF:ne\"\x20name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://
SF:www\.bbc\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x
SF:20\x20");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip084.lbh.bbc.co.uk (212.58.249.146)
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B38EA4%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (89%), Linux 4.9 (88%), Linux 3.10 - 3.12 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.97.146.56
Host is up (0.012s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for ec2-54-155-236-209.eu-west-1.compute.amazonaws.com (54.155.236.209)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Node.js Express framework
443/tcp open  ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B38EAA%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-
SF:Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max
SF:-Age=3600;\x20Path=/;\x20Expires=Mon,\x2017\x20Feb\x202025\x2020:31:53\
SF:x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.
SF:com/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x
SF:20charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Mon,\x2017\x20Feb\
SF:x202025\x2019:31:53\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20
SF:Redirect\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-re
SF:quired")%r(HTTPOptions,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r
SF:\nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\
SF:x20Max-Age=3600;\x20Path=/;\x20Expires=Mon,\x2017\x20Feb\x202025\x2020:
SF:31:53\x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\
SF:.bbc\.com/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Mon,\x2017\x
SF:20Feb\x202025\x2019:31:53\x20GMT\r\nConnection:\x20close\r\n\r\nTempora
SF:ry\x20Redirect\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/lo
SF:gin-required")%r(FourOhFourRequest,1E3,"HTTP/1\.1\x20307\x20Temporary\x
SF:20Redirect\r\nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%2
SF:2%2Fnice%2520ports%252C%2FTri%256Eity\.txt%252ebak%22%7D;\x20Max-Age=36
SF:00;\x20Path=/;\x20Expires=Mon,\x2017\x20Feb\x202025\x2020:31:53\x20GMT;
SF:\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.com/log
SF:in-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x20chars
SF:et=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Mon,\x2017\x20Feb\x202025
SF:\x2019:31:53\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20Redirec
SF:t\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-required"
SF:)%r(RTSPRequest,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-C
SF:ookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max-
SF:Age=3600;\x20Path=/;\x20Expires=Mon,\x2017\x20Feb\x202025\x2020:31:59\x
SF:20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.c
SF:om/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x2
SF:0charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Mon,\x2017\x20Feb\x
SF:202025\x2019:31:59\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20R
SF:edirect\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-req
SF:uired");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|2.6.X|3.X (89%)
OS CPE: cpe:/o:linux:linux_kernel:4.0 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10
Aggressive OS guesses: Linux 4.0 (89%), Linux 2.6.32 or 3.10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip050.lbh.bbc.co.uk (212.58.249.112)
Host is up (0.0100s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (94%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 3.10 - 3.12 (92%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.9 (89%), Linux 3.13 (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ec2-54-77-244-106.eu-west-1.compute.amazonaws.com (54.77.244.106)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B38EA2%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,32F8,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Mon,\x2017
SF:\x20Feb\x202025\x2019:31:46\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e
SF:98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOC
SF:TYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x
SF:20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20
SF:\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x2
SF:0\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"C
SF:ontent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equi
SF:v=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,
SF:\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x
SF:20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Co
SF:mpatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\
SF:x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wi
SF:dth\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20
SF:best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sp
SF:ort\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20
SF:and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20O
SF:nline\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,
SF:147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Mon,\x2017\x20Feb\x
SF:202025\x2019:31:46\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Leng
SF:th:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agen
SF:t-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</
SF:title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cent
SF:er>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTS
SF:PRequest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Mon,\x2017
SF:\x20Feb\x202025\x2019:31:46\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r
SF:\n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>
SF:\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>open
SF:resty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B38EA8%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,17D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Mo
SF:n,\x2017\x20Feb\x202025\x2019:31:51\x20GMT\r\nContent-Type:\x20text/htm
SF:l\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nServer:\x20BBC-G
SF:TM\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x20SSL\x20certif
SF:icate\x20was\x20sent</title></head>\r\n<body>\r\n<center><h1>400\x20Bad
SF:\x20Request</h1></center>\r\n<center>No\x20required\x20SSL\x20certifica
SF:te\x20was\x20sent</center>\r\n<hr><center>openresty</center>\r\n</body>
SF:\r\n</html>\r\n")%r(HTTPOptions,17D,"HTTP/1\.1\x20400\x20Bad\x20Request
SF:\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2019:31:51\x20GMT\r\nContent-Ty
SF:pe:\x20text/html\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nS
SF:erver:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x
SF:20SSL\x20certificate\x20was\x20sent</title></head>\r\n<body>\r\n<center
SF:><h1>400\x20Bad\x20Request</h1></center>\r\n<center>No\x20required\x20S
SF:SL\x20certificate\x20was\x20sent</center>\r\n<hr><center>openresty</cen
SF:ter>\r\n</body>\r\n</html>\r\n")%r(FourOhFourRequest,17D,"HTTP/1\.1\x20
SF:400\x20Bad\x20Request\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2019:31:51
SF:\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20234\r\nConn
SF:ection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>40
SF:0\x20No\x20required\x20SSL\x20certificate\x20was\x20sent</title></head>
SF:\r\n<body>\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<cente
SF:r>No\x20required\x20SSL\x20certificate\x20was\x20sent</center>\r\n<hr><
SF:center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(tor-versions,12
SF:D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Mon,\x2017\x20Feb\x20
SF:2025\x2019:31:51\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length
SF::\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\
SF:n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\r\n<center
SF:><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>openresty</cent
SF:er>\r\n</body>\r\n</html>\r\n")%r(RTSPRequest,12D,"HTTP/1\.1\x20400\x20
SF:Bad\x20Request\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2019:31:56\x20GMT
SF:\r\nContent-Type:\x20text/html\r\nContent-Length:\x20154\r\nConnection:
SF:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20Ba
SF:d\x20Request</title></head>\r\n<body>\r\n<center><h1>400\x20Bad\x20Requ
SF:est</h1></center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</htm
SF:l>\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for 40.160.90.34.bc.googleusercontent.com (34.90.160.40)
Host is up (0.0058s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http-proxy F5 BIG-IP load balancer http proxy
443/tcp open  ssl/https  Apache
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B38EA9%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,F2,"HTTP/1\.1\x20301\x20301\r\ndate:\x20Mon,\x2017\x20
SF:Feb\x202025\x2019:31:53\x20GMT\r\nserver:\x20Apache\r\nlocation:\x20htt
SF:ps://www\.sap\.com/products/recruiting-software\.html\r\nx-content-type
SF:-options:\x20nosniff\r\ncontent-length:\x200\r\nx-xss-protection:\x201;
SF:\x20mode=block\r\nconnection:\x20close\r\n\r\n")%r(HTTPOptions,F2,"HTTP
SF:/1\.1\x20301\x20301\r\ndate:\x20Mon,\x2017\x20Feb\x202025\x2019:31:53\x
SF:20GMT\r\nserver:\x20Apache\r\nlocation:\x20https://www\.sap\.com/produc
SF:ts/recruiting-software\.html\r\nx-content-type-options:\x20nosniff\r\nc
SF:ontent-length:\x200\r\nx-xss-protection:\x201;\x20mode=block\r\nconnect
SF:ion:\x20close\r\n\r\n")%r(FourOhFourRequest,115,"HTTP/1\.1\x20301\x2030
SF:1\r\ndate:\x20Mon,\x2017\x20Feb\x202025\x2019:31:53\x20GMT\r\nserver:\x
SF:20Apache\r\nlocation:\x20https://www\.sap\.com/products/recruiting-soft
SF:ware\.html\r\nx-content-type-options:\x20nosniff\r\ncontent-length:\x20
SF:0\r\ncontent-type:\x20application/x-trash\r\nx-xss-protection:\x201;\x2
SF:0mode=block\r\nconnection:\x20close\r\n\r\n")%r(tor-versions,CF,"HTTP/1
SF:\.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\ncache-control:
SF:\x20no-cache\r\ncontent-type:\x20text/html\r\nconnection:\x20close\r\n\
SF:r\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20browser\x20sent\
SF:x20an\x20invalid\x20request\.\n</body></html>\n")%r(RTSPRequest,CF,"HTT
SF:P/1\.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\ncache-contr
SF:ol:\x20no-cache\r\ncontent-type:\x20text/html\r\nconnection:\x20close\r
SF:\n\r\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20browser\x20se
SF:nt\x20an\x20invalid\x20request\.\n</body></html>\n")%r(RPCCheck,CF,"HTT
SF:P/1\.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\ncache-contr
SF:ol:\x20no-cache\r\ncontent-type:\x20text/html\r\nconnection:\x20close\r
SF:\n\r\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20browser\x20se
SF:nt\x20an\x20invalid\x20request\.\n</body></html>\n")%r(DNSVersionBindRe
SF:qTCP,CF,"HTTP/1\.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\
SF:ncache-control:\x20no-cache\r\ncontent-type:\x20text/html\r\nconnection
SF::\x20close\r\n\r\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20b
SF:rowser\x20sent\x20an\x20invalid\x20request\.\n</body></html>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: Device: load balancer

Nmap scan report for bbc-vip174.telhc.bbc.co.uk (212.58.244.210)
Host is up (0.0099s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE VERSION
80/tcp  open  http?
443/tcp open  https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B38EA4%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for rt0-132.lh.bbc.co.uk (132.185.132.1)
Host is up (0.010s latency).
All 65535 scanned ports on rt0-132.lh.bbc.co.uk (132.185.132.1) are in ignored states.
Not shown: 65535 filtered tcp ports (no-response)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS details: Cisco 1812, 3640, or 3700 router (IOS 12.4), Cisco 3925 router (IOS 12.4), Cisco DOCSIS cable modem termination server (IOS 12.1), Cisco 6509 switch (IOS 12.2), Cisco Catalyst 3560 or 6500-series switch (IOS 12.1 - 12.2), Cisco Catalyst 6509-E switch (IOS 12.2), Cisco Nexus 5548P switch (NX-OS 5.1), QEMU user mode network gateway

Nmap scan report for 151.101.0.81
Host is up (0.0025s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B38EA3%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,1FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21060-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2019:31:47\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21060-AMS\x20\(151\.101\.0\.81\)</p></body></html>")%r(HTTPOptions,1
SF:FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\
SF:r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\
SF:ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r
SF:\nX-Served-By:\x20cache-ams21022-AMS\r\nAccept-Ranges:\x20bytes\r\nDate
SF::\x20Mon,\x2017\x20Feb\x202025\x2019:31:47\x20GMT\r\nVia:\x201\.1\x20va
SF:rnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20do
SF:main\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20do
SF:main:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been
SF:\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21022-AM
SF:S\x20\(151\.101\.0\.81\)</p></body></html>")%r(RTSPRequest,94,"HTTP/1\.
SF:1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x
SF:2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x
SF:20cache-ams21070\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1\x2040
SF:0\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011\r\
SF:ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache
SF:-ams2100108\r\n\r\nBad\x20Request")%r(FourOhFourRequest,203,"HTTP/1\.1\
SF:x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-type:
SF:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served-By:
SF:\x20cache-ams2100109-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Mon,\x2
SF:017\x20Feb\x202025\x2019:31:47\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\r\
SF:n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</ti
SF:tle>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\.\
SF:x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\x2
SF:0to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100109-AMS\x20\(151
SF:\.101\.0\.81\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B38EA9%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21044\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb348716e94e9f83ac2
SF:3533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21051\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb34
SF:8716e94e9f83ac23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams2100130\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[7ccb348716e94e9f83ac23533d4648b0a3a69ede6bd4117e830122
SF:876855c81a\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100104\r\n\r\nBad\x20Request")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100099\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (90%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (90%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.98.214.120
Host is up (0.010s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for bbc-vip162.lbh.bbc.co.uk (212.58.249.224)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B38EA4%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (90%), Linux 5.1 (89%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ec2-99-80-224-186.eu-west-1.compute.amazonaws.com (99.80.224.186)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B38EA2%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,7F5C,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Mon,\x2017
SF:\x20Feb\x202025\x2019:31:46\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e
SF:98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOC
SF:TYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x
SF:20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20
SF:\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x2
SF:0\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"C
SF:ontent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equi
SF:v=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,
SF:\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x
SF:20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Co
SF:mpatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\
SF:x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wi
SF:dth\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20
SF:best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sp
SF:ort\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20
SF:and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20O
SF:nline\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,
SF:147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Mon,\x2017\x20Feb\x
SF:202025\x2019:31:46\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Leng
SF:th:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agen
SF:t-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</
SF:title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cent
SF:er>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTS
SF:PRequest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Mon,\x2017
SF:\x20Feb\x202025\x2019:31:46\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r
SF:\n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>
SF:\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>open
SF:resty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B38EA8%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,17D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Mo
SF:n,\x2017\x20Feb\x202025\x2019:31:51\x20GMT\r\nContent-Type:\x20text/htm
SF:l\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nServer:\x20BBC-G
SF:TM\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x20SSL\x20certif
SF:icate\x20was\x20sent</title></head>\r\n<body>\r\n<center><h1>400\x20Bad
SF:\x20Request</h1></center>\r\n<center>No\x20required\x20SSL\x20certifica
SF:te\x20was\x20sent</center>\r\n<hr><center>openresty</center>\r\n</body>
SF:\r\n</html>\r\n")%r(HTTPOptions,17D,"HTTP/1\.1\x20400\x20Bad\x20Request
SF:\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2019:31:51\x20GMT\r\nContent-Ty
SF:pe:\x20text/html\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nS
SF:erver:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x
SF:20SSL\x20certificate\x20was\x20sent</title></head>\r\n<body>\r\n<center
SF:><h1>400\x20Bad\x20Request</h1></center>\r\n<center>No\x20required\x20S
SF:SL\x20certificate\x20was\x20sent</center>\r\n<hr><center>openresty</cen
SF:ter>\r\n</body>\r\n</html>\r\n")%r(FourOhFourRequest,17D,"HTTP/1\.1\x20
SF:400\x20Bad\x20Request\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2019:31:51
SF:\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20234\r\nConn
SF:ection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>40
SF:0\x20No\x20required\x20SSL\x20certificate\x20was\x20sent</title></head>
SF:\r\n<body>\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<cente
SF:r>No\x20required\x20SSL\x20certificate\x20was\x20sent</center>\r\n<hr><
SF:center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(tor-versions,12
SF:D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Mon,\x2017\x20Feb\x20
SF:2025\x2019:31:51\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length
SF::\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\
SF:n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\r\n<center
SF:><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>openresty</cent
SF:er>\r\n</body>\r\n</html>\r\n")%r(RTSPRequest,12D,"HTTP/1\.1\x20400\x20
SF:Bad\x20Request\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2019:31:56\x20GMT
SF:\r\nContent-Type:\x20text/html\r\nContent-Length:\x20154\r\nConnection:
SF:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20Ba
SF:d\x20Request</title></head>\r\n<body>\r\n<center><h1>400\x20Bad\x20Requ
SF:est</h1></center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</htm
SF:l>\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bbc-vip139.telhc.bbc.co.uk (212.58.244.99)
Host is up (0.0094s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.82
Host is up (0.0031s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B38EA3%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100103-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2019:31:47\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100103-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOpti
SF:ons,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20c
SF:lose\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x2
SF:00\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-ca
SF:che\r\nX-Served-By:\x20cache-ams2100096-AMS\r\nAccept-Ranges:\x20bytes\
SF:r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2019:31:47\x20GMT\r\nVia:\x201\.
SF:1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknow
SF:n\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknow
SF:n\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\
SF:x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2
SF:100096-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21035\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100136\r\n\r\nBad\x20Request")%r(FourOhFourRequest,204,"
SF:HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncon
SF:tent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-
SF:Served-By:\x20cache-ams2100138-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\
SF:x20Mon,\x2017\x20Feb\x202025\x2019:31:47\x20GMT\r\nVia:\x201\.1\x20varn
SF:ish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20doma
SF:in\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20doma
SF:in:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x
SF:20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100138-AM
SF:S\x20\(151\.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B38EA9%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100142\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2103
SF:5\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100120\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553
SF:e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams2100103\r\n\r\nBad\x20Request")%r(RTSPRequest,
SF:94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams21050\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.82
Host is up (0.0025s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B38EA3%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100104-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2019:31:47\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100104-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOpt
SF:ions,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20
SF:close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x
SF:200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-c
SF:ache\r\nX-Served-By:\x20cache-ams2100132-AMS\r\nAccept-Ranges:\x20bytes
SF:\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2019:31:47\x20GMT\r\nVia:\x201\
SF:.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unkno
SF:wn\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unkno
SF:wn\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has
SF:\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams
SF:2100132-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100094\r\n\r\nBad\x20Request")%r(X11Probe,94,"H
SF:TTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams21066\r\n\r\nBad\x20Request")%r(FourOhFourRequest,205
SF:,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\
SF:nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nc
SF:ontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\n
SF:X-Served-By:\x20cache-ams2100099-AMS\r\nAccept-Ranges:\x20bytes\r\nDate
SF::\x20Mon,\x2017\x20Feb\x202025\x2019:31:47\x20GMT\r\nVia:\x201\.1\x20va
SF:rnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20do
SF:main\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20do
SF:main:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been
SF:\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100099-
SF:AMS\x20\(151\.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B38EA9%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21068\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21036\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams2100101\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams21046\r\n\r\nBad\x20Request")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100105\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin0.cwwtf.bbc.co.uk (132.185.160.176)
Host is up (0.0094s latency).
Not shown: 64793 closed tcp ports (reset), 737 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.192.82
Host is up (0.0031s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B38EA3%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21049-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2019:31:47\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21049-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOptions
SF:,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clos
SF:e\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\
SF:r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache
SF:\r\nX-Served-By:\x20cache-ams2100123-AMS\r\nAccept-Ranges:\x20bytes\r\n
SF:Date:\x20Mon,\x2017\x20Feb\x202025\x2019:31:47\x20GMT\r\nVia:\x201\.1\x
SF:20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x
SF:20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x
SF:20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20
SF:been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100
SF:123-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100124\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100129\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"
SF:HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncon
SF:tent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-
SF:Served-By:\x20cache-ams21022-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x2
SF:0Mon,\x2017\x20Feb\x202025\x2019:31:47\x20GMT\r\nVia:\x201\.1\x20varnis
SF:h\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain
SF:\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain
SF::\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20
SF:added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21022-AMS\x2
SF:0\(151\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B38EA9%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21029\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams210014
SF:4\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100084\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553
SF:e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams21035\r\n\r\nBad\x20Request")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100137\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 6.X|8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.1 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 6.1-RELEASE (85%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for a23-53-112-149.deploy.static.akamaitechnologies.com (23.53.112.149)
Host is up (0.0028s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE  VERSION
80/tcp  open  http     AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
443/tcp open  ssl/http AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|5.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5
Aggressive OS guesses: Linux 4.15 - 5.8 (85%), Linux 5.0 - 5.4 (85%), Linux 5.4 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip168.telhc.bbc.co.uk (212.58.244.15)
Host is up (0.0093s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B38EA4%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.0.82
Host is up (0.0025s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B38EA3%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100146-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2019:31:47\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100146-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOptio
SF:ns,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20cl
SF:ose\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x20
SF:0\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cac
SF:he\r\nX-Served-By:\x20cache-ams2100114-AMS\r\nAccept-Ranges:\x20bytes\r
SF:\nDate:\x20Mon,\x2017\x20Feb\x202025\x2019:31:47\x20GMT\r\nVia:\x201\.1
SF:\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown
SF:\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown
SF:\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x
SF:20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21
SF:00114-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21065\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\
SF:x20cache-ams21049\r\n\r\nBad\x20Request")%r(FourOhFourRequest,1FF,"HTTP
SF:/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent
SF:-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serv
SF:ed-By:\x20cache-ams21020-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Mon
SF:,\x2017\x20Feb\x202025\x2019:31:47\x20GMT\r\nVia:\x201\.1\x20varnish\r\
SF:n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20
SF:</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x2
SF:0\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20adde
SF:d\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21020-AMS\x20\(1
SF:51\.101\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B38EA9%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21042\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21075\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21051\r\n\r\nRequested\x20host\x20does\x20not\x20match\x
SF:20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20ce
SF:rtificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631
SF:d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x2
SF:0https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdir
SF:ected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21062\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21060\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (90%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (90%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip169.telhc.bbc.co.uk (212.58.244.16)
Host is up (0.0090s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B38EA4%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for dns1.p09.nsone.net (198.51.44.9)
Host is up (0.0028s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bbc-vip102.telhc.bbc.co.uk (212.58.244.57)
Host is up (0.0093s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin1.telhc.bbc.co.uk (132.185.161.177)
Host is up (0.0093s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for cloud.virt.ch.bbc.co.uk (132.185.142.146)
Host is up (0.0100s latency).
Not shown: 65430 filtered tcp ports (no-response), 101 closed tcp ports (reset)
PORT     STATE SERVICE   VERSION
21/tcp   open  ftp       vsftpd 3.0.3
80/tcp   open  http      Apache httpd 2.4.29
443/tcp  open  ssl/https Apache/2.4.29 (Ubuntu)
8443/tcp open  ssl/http  Apache httpd 2.4.29
Device type: general purpose|storage-misc|firewall|broadband router
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (87%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (86%), Zhone embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Linux 2.6.32 (87%), Linux 3.10 - 3.12 (87%), Linux 4.4 (87%), Linux 2.6.39 (86%), Linux 3.4 (86%), Linux 3.5 (86%), Synology DiskStation Manager 5.1 (86%), WatchGuard Fireware 11.8 (86%), Linux 2.6.32 or 3.10 (86%), Zhone GPON home gateway (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Hosts: default, artifactory-noforge.virt.ch.bbc.co.uk; OS: Unix

Nmap scan report for mailin1.cwwtf.bbc.co.uk (132.185.160.177)
Host is up (0.0098s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Warning: 132.185.161.100 giving up on port because retransmission cap hit (6).
Warning: 132.185.161.176 giving up on port because retransmission cap hit (6).
Warning: 212.58.251.122 giving up on port because retransmission cap hit (6).
Nmap scan report for bbc-vip128.telhc.bbc.co.uk (212.58.244.83)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ns5.demysdns.co.uk (198.51.45.9)
Host is up (0.0027s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bbc-vip082.lbh.bbc.co.uk (212.58.249.144)
Host is up (0.0095s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 3.10 - 3.12 (90%), Linux 2.6.32 or 3.10 (89%), Linux 3.13 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip101.telhc.bbc.co.uk (212.58.244.56)
Host is up (0.0091s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip083.lbh.bbc.co.uk (212.58.249.145)
Host is up (0.0099s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (89%), Linux 3.10 - 3.12 (88%), Linux 3.13 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gatea.telhc.bbc.co.uk (132.185.161.100)
Host is up (0.0094s latency).
Not shown: 56122 closed tcp ports (reset), 9408 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
53/tcp    open  domain     ISC BIND 9.9.9-P8
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for lists1.telhc.bbc.co.uk (212.58.251.122)
Host is up (0.0096s latency).
Not shown: 65527 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
587/tcp   open     smtp       Sendmail 8.14.9+Sun/8.12.9
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
9324/tcp  filtered unknown
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (87%), Oracle Solaris 10|11 (87%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10 cpe:/o:oracle:solaris:11
Aggressive OS guesses: Sun Solaris 10 (87%), Sun Solaris 10 (SPARC) (87%), Sun Solaris 9 or Oracle Solaris 10 (87%), Oracle Solaris 11 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Unix

Nmap scan report for mailin0.telhc.bbc.co.uk (132.185.161.176)
Host is up (0.0092s latency).
Not shown: 56121 closed tcp ports (reset), 9409 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip137.lbh.bbc.co.uk (212.58.249.199)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B39AE8%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (89%), Linux 3.10 - 3.12 (88%), Linux 3.13 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip050.lbh.bbc.co.uk (212.58.249.112)
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (93%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 3.10 - 3.12 (92%), Linux 2.6.32 - 2.6.35 (90%), Linux 4.9 (90%), Linux 3.13 (90%), Linux 2.6.32 - 2.6.39 (90%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip136.lbh.bbc.co.uk (212.58.249.198)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B39AE8%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (95%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (95%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 3.10 - 4.11 (89%), Linux 4.0 (89%), Linux 2.6.32 or 3.10 (89%), Linux 3.10 - 3.12 (88%), Linux 2.6.32 - 2.6.35 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip197.telhc.bbc.co.uk (212.58.244.98)
Host is up (0.0098s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip051.lbh.bbc.co.uk (212.58.249.113)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (94%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 3.10 - 3.12 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 3.13 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.9 (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.82
Host is up (0.0030s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B39AE8%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100143-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2020:24:07\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100143-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOpti
SF:ons,200,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20c
SF:lose\r\nContent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-After:\x2
SF:00\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-ca
SF:che\r\nX-Served-By:\x20cache-ams21030-AMS\r\nAccept-Ranges:\x20bytes\r\
SF:nDate:\x20Mon,\x2017\x20Feb\x202025\x2020:24:07\x20GMT\r\nVia:\x201\.1\
SF:x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\
SF:x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\
SF:x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x2
SF:0been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams210
SF:30-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,94,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21061\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\.1
SF:\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2
SF:011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x2
SF:0cache-ams21046\r\n\r\nBad\x20Request")%r(FourOhFourRequest,204,"HTTP/1
SF:\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent
SF:-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-t
SF:ype:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served
SF:-By:\x20cache-ams2100117-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Mon
SF:,\x2017\x20Feb\x202025\x2020:24:07\x20GMT\r\nVia:\x201\.1\x20varnish\r\
SF:n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20
SF:</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x2
SF:0\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20adde
SF:d\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100117-AMS\x20\
SF:(151\.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B39AEE%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100123\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2106
SF:3\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21059\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100109\r\n\r\nBad\x20Request")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100129\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.82
Host is up (0.0029s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B39AE8%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100106-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2020:24:07\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100106-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOpt
SF:ions,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20
SF:close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x
SF:200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-c
SF:ache\r\nX-Served-By:\x20cache-ams2100103-AMS\r\nAccept-Ranges:\x20bytes
SF:\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2020:24:07\x20GMT\r\nVia:\x201\
SF:.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unkno
SF:wn\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unkno
SF:wn\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has
SF:\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams
SF:2100103-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,
SF:94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams21065\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTT
SF:P/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams21041\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"
SF:HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncon
SF:tent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-
SF:Served-By:\x20cache-ams21035-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x2
SF:0Mon,\x2017\x20Feb\x202025\x2020:24:07\x20GMT\r\nVia:\x201\.1\x20varnis
SF:h\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain
SF:\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain
SF::\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20
SF:added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21035-AMS\x2
SF:0\(151\.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B39AEE%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21068\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams210012
SF:1\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100089\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553
SF:e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams2100134\r\n\r\nBad\x20Request")%r(RTSPRequest,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100134\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.192.82
Host is up (0.0024s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B39AE8%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100122-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2020:24:07\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100122-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOpt
SF:ions,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20
SF:close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x
SF:200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-c
SF:ache\r\nX-Served-By:\x20cache-ams2100111-AMS\r\nAccept-Ranges:\x20bytes
SF:\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2020:24:07\x20GMT\r\nVia:\x201\
SF:.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unkno
SF:wn\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unkno
SF:wn\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has
SF:\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams
SF:2100111-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,
SF:94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams21047\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTT
SF:P/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams21028\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"
SF:HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncon
SF:tent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-
SF:Served-By:\x20cache-ams21052-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x2
SF:0Mon,\x2017\x20Feb\x202025\x2020:24:07\x20GMT\r\nVia:\x201\.1\x20varnis
SF:h\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain
SF:\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain
SF::\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20
SF:added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21052-AMS\x2
SF:0\(151\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B39AEE%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100115\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2107
SF:8\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21035\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100099\r\n\r\nBad\x20Request")%r(RTSPRequest,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21082\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 6.X|8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.1 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 6.1-RELEASE (85%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.0.82
Host is up (0.0024s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B39AE8%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100096-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2020:24:07\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100096-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOptio
SF:ns,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20cl
SF:ose\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x20
SF:0\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cac
SF:he\r\nX-Served-By:\x20cache-ams2100130-AMS\r\nAccept-Ranges:\x20bytes\r
SF:\nDate:\x20Mon,\x2017\x20Feb\x202025\x2020:24:07\x20GMT\r\nVia:\x201\.1
SF:\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown
SF:\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown
SF:\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x
SF:20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21
SF:00130-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100104\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams21052\r\n\r\nBad\x20Request")%r(FourOhFourRequest,203,"HT
SF:TP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconte
SF:nt-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Se
SF:rved-By:\x20cache-ams2100146-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x2
SF:0Mon,\x2017\x20Feb\x202025\x2020:24:07\x20GMT\r\nVia:\x201\.1\x20varnis
SF:h\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain
SF:\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain
SF::\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20
SF:added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100146-AMS\
SF:x20\(151\.101\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B39AEE%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100127\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100
SF:101\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\
SF:x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19
SF:179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\
SF:x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fa
SF:stly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20
SF:for\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1
SF:\x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21028\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553
SF:e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams2100107\r\n\r\nBad\x20Request")%r(RTSPRequest,
SF:94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams21061\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin1.telhc.bbc.co.uk (132.185.161.177)
Host is up (0.0098s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for dns1.p09.nsone.net (198.51.44.9)
Host is up (0.0028s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Warning: 132.185.161.176 giving up on port because retransmission cap hit (6).
Warning: 132.185.160.177 giving up on port because retransmission cap hit (6).
Warning: 132.185.160.176 giving up on port because retransmission cap hit (6).
Nmap scan report for ns5.demysdns.co.uk (198.51.45.9)
Host is up (0.0025s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for mailin0.telhc.bbc.co.uk (132.185.161.176)
Host is up (0.0095s latency).
Not shown: 65471 closed tcp ports (reset), 59 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin1.cwwtf.bbc.co.uk (132.185.160.177)
Host is up (0.0093s latency).
Not shown: 65475 closed tcp ports (reset), 55 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin0.cwwtf.bbc.co.uk (132.185.160.176)
Host is up (0.0095s latency).
Not shown: 65496 closed tcp ports (reset), 34 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.82
Host is up (0.0023s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B3A264%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100141-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2020:56:04\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100141-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOpti
SF:ons,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20c
SF:lose\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x2
SF:00\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-ca
SF:che\r\nX-Served-By:\x20cache-ams2100105-AMS\r\nAccept-Ranges:\x20bytes\
SF:r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2020:56:04\x20GMT\r\nVia:\x201\.
SF:1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknow
SF:n\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknow
SF:n\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\
SF:x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2
SF:100105-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100119\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTT
SF:P/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams2100132\r\n\r\nBad\x20Request")%r(FourOhFourRequest,204
SF:,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\
SF:nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nc
SF:ontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\n
SF:X-Served-By:\x20cache-ams2100135-AMS\r\nAccept-Ranges:\x20bytes\r\nDate
SF::\x20Mon,\x2017\x20Feb\x202025\x2020:56:04\x20GMT\r\nVia:\x201\.1\x20va
SF:rnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20do
SF:main\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20do
SF:main:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been
SF:\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100135-
SF:AMS\x20\(151\.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B3A26A%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100117\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2106
SF:1\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21023\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100124\r\n\r\nBad\x20Request")%r(RTSPRequest,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21054\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.82
Host is up (0.0023s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B3A264%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21050-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2020:56:04\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21050-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOptions
SF:,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clos
SF:e\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\
SF:r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache
SF:\r\nX-Served-By:\x20cache-ams2100128-AMS\r\nAccept-Ranges:\x20bytes\r\n
SF:Date:\x20Mon,\x2017\x20Feb\x202025\x2020:56:04\x20GMT\r\nVia:\x201\.1\x
SF:20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x
SF:20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x
SF:20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20
SF:been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100
SF:128-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100145\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100084\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"
SF:HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncon
SF:tent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-
SF:Served-By:\x20cache-ams21082-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x2
SF:0Mon,\x2017\x20Feb\x202025\x2020:56:04\x20GMT\r\nVia:\x201\.1\x20varnis
SF:h\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain
SF:\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain
SF::\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20
SF:added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21082-AMS\x2
SF:0\(151\.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B3A26A%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100127\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2107
SF:4\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100087\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553
SF:e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams21032\r\n\r\nBad\x20Request")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100096\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.192.82
Host is up (0.0023s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B3A264%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21030-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2020:56:04\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21030-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOptions
SF:,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clos
SF:e\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\
SF:r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache
SF:\r\nX-Served-By:\x20cache-ams2100141-AMS\r\nAccept-Ranges:\x20bytes\r\n
SF:Date:\x20Mon,\x2017\x20Feb\x202025\x2020:56:04\x20GMT\r\nVia:\x201\.1\x
SF:20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x
SF:20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x
SF:20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20
SF:been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100
SF:141-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100137\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100084\r\n\r\nBad\x20Request")%r(FourOhFourRequest,205,"
SF:HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncon
SF:tent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-
SF:Served-By:\x20cache-ams2100142-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\
SF:x20Mon,\x2017\x20Feb\x202025\x2020:56:04\x20GMT\r\nVia:\x201\.1\x20varn
SF:ish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20doma
SF:in\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20doma
SF:in:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x
SF:20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100142-AM
SF:S\x20\(151\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B3A26A%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21042\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21070\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams2100128\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100139\r\n\r\nBad\x20Request")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100126\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 6.X|8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.1 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 6.1-RELEASE (85%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.0.82
Host is up (0.0029s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B3A264%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100088-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2020:56:04\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100088-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOptio
SF:ns,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20cl
SF:ose\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x20
SF:0\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cac
SF:he\r\nX-Served-By:\x20cache-ams2100126-AMS\r\nAccept-Ranges:\x20bytes\r
SF:\nDate:\x20Mon,\x2017\x20Feb\x202025\x2020:56:04\x20GMT\r\nVia:\x201\.1
SF:\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown
SF:\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown
SF:\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x
SF:20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21
SF:00126-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21041\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\
SF:x20cache-ams2100129\r\n\r\nBad\x20Request")%r(FourOhFourRequest,1FF,"HT
SF:TP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconte
SF:nt-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Se
SF:rved-By:\x20cache-ams21073-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20M
SF:on,\x2017\x20Feb\x202025\x2020:56:04\x20GMT\r\nVia:\x201\.1\x20varnish\
SF:r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x
SF:20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\
SF:x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20ad
SF:ded\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21073-AMS\x20\
SF:(151\.101\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B3A26A%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21027\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21071\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21042\r\n\r\nRequested\x20host\x20does\x20not\x20match\x
SF:20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20ce
SF:rtificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631
SF:d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x2
SF:0https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdir
SF:ected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21064\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21065\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (87%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ns5.demysdns.co.uk (198.51.45.9)
Host is up (0.0025s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for 151.101.128.82
Host is up (0.0022s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B3A3E8%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100127-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2021:02:32\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100127-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOpt
SF:ions,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20
SF:close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x
SF:200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-c
SF:ache\r\nX-Served-By:\x20cache-ams2100089-AMS\r\nAccept-Ranges:\x20bytes
SF:\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2021:02:32\x20GMT\r\nVia:\x201\
SF:.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unkno
SF:wn\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unkno
SF:wn\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has
SF:\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams
SF:2100089-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100084\r\n\r\nBad\x20Request")%r(X11Probe,96,"H
SF:TTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams2100133\r\n\r\nBad\x20Request")%r(FourOhFourRequest,2
SF:01,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\
SF:r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\
SF:ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r
SF:\nX-Served-By:\x20cache-ams21039-AMS\r\nAccept-Ranges:\x20bytes\r\nDate
SF::\x20Mon,\x2017\x20Feb\x202025\x2021:02:32\x20GMT\r\nVia:\x201\.1\x20va
SF:rnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20do
SF:main\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20do
SF:main:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been
SF:\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21039-AM
SF:S\x20\(151\.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B3A3EE%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21064\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21033\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21040\r\n\r\nRequested\x20host\x20does\x20not\x20match\x
SF:20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20ce
SF:rtificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631
SF:d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x2
SF:0https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdir
SF:ected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21024\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21048\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.82
Host is up (0.0021s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B3A3E8%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100106-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2021:02:32\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100106-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOpti
SF:ons,200,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20c
SF:lose\r\nContent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-After:\x2
SF:00\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-ca
SF:che\r\nX-Served-By:\x20cache-ams21061-AMS\r\nAccept-Ranges:\x20bytes\r\
SF:nDate:\x20Mon,\x2017\x20Feb\x202025\x2021:02:32\x20GMT\r\nVia:\x201\.1\
SF:x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\
SF:x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\
SF:x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x2
SF:0been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams210
SF:61-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,94,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21035\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1
SF:\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2
SF:011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x2
SF:0cache-ams2100098\r\n\r\nBad\x20Request")%r(FourOhFourRequest,204,"HTTP
SF:/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent
SF:-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serv
SF:ed-By:\x20cache-ams2100093-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20M
SF:on,\x2017\x20Feb\x202025\x2021:02:32\x20GMT\r\nVia:\x201\.1\x20varnish\
SF:r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x
SF:20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\
SF:x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20ad
SF:ded\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100093-AMS\x2
SF:0\(151\.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B3A3EE%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21023\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams210014
SF:7\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100126\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553
SF:e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams21037\r\n\r\nBad\x20Request")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100132\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 6.X|8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.1 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 6.1-RELEASE (85%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.192.82
Host is up (0.0021s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B3A3E8%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21058-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2021:02:32\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21058-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOptions
SF:,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clos
SF:e\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\
SF:r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache
SF:\r\nX-Served-By:\x20cache-ams2100088-AMS\r\nAccept-Ranges:\x20bytes\r\n
SF:Date:\x20Mon,\x2017\x20Feb\x202025\x2021:02:32\x20GMT\r\nVia:\x201\.1\x
SF:20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x
SF:20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x
SF:20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20
SF:been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100
SF:088-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100135\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams21066\r\n\r\nBad\x20Request")%r(FourOhFourRequest,205,"HT
SF:TP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconte
SF:nt-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Se
SF:rved-By:\x20cache-ams2100138-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x2
SF:0Mon,\x2017\x20Feb\x202025\x2021:02:32\x20GMT\r\nVia:\x201\.1\x20varnis
SF:h\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain
SF:\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain
SF::\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20
SF:added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100138-AMS\
SF:x20\(151\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B3A3EE%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21036\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams210010
SF:7\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100113\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553
SF:e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams21049\r\n\r\nBad\x20Request")%r(RTSPRequest,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21047\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (89%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.0.82
Host is up (0.0023s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B3A3E8%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,1FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21068-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2021:02:32\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21068-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOptions,1
SF:FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\
SF:r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\
SF:ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r
SF:\nX-Served-By:\x20cache-ams21057-AMS\r\nAccept-Ranges:\x20bytes\r\nDate
SF::\x20Mon,\x2017\x20Feb\x202025\x2021:02:32\x20GMT\r\nVia:\x201\.1\x20va
SF:rnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20do
SF:main\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20do
SF:main:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been
SF:\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21057-AM
SF:S\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,96,"HTTP/1\.
SF:1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x
SF:2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x
SF:20cache-ams2100119\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1\x20
SF:400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011\
SF:r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cac
SF:he-ams2100101\r\n\r\nBad\x20Request")%r(FourOhFourRequest,203,"HTTP/1\.
SF:1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent-L
SF:ength:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-typ
SF:e:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served-B
SF:y:\x20cache-ams2100130-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Mon,\
SF:x2017\x20Feb\x202025\x2021:02:32\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\
SF:r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</
SF:title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\
SF:.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\
SF:x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100130-AMS\x20\(1
SF:51\.101\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B3A3EE%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21049\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21047\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams2100128\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams21059\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21068\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (87%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.82
Host is up (0.0022s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B3A4B7%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21048-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2021:05:58\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21048-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOptions
SF:,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clos
SF:e\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\
SF:r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache
SF:\r\nX-Served-By:\x20cache-ams21036-AMS\r\nAccept-Ranges:\x20bytes\r\nDa
SF:te:\x20Mon,\x2017\x20Feb\x202025\x2021:05:58\x20GMT\r\nVia:\x201\.1\x20
SF:varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20
SF:domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20
SF:domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20be
SF:en\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21036-
SF:AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,96,"HTTP
SF:/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams2100127\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1
SF:\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2
SF:011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x2
SF:0cache-ams2100120\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"HTTP
SF:/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent
SF:-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serv
SF:ed-By:\x20cache-ams21082-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Mon
SF:,\x2017\x20Feb\x202025\x2021:05:58\x20GMT\r\nVia:\x201\.1\x20varnish\r\
SF:n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20
SF:</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x2
SF:0\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20adde
SF:d\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21082-AMS\x20\(1
SF:51\.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B3A4BD%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100108\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100
SF:135\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\
SF:x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19
SF:179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\
SF:x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fa
SF:stly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20
SF:for\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1
SF:\x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21035\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553
SF:e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams2100098\r\n\r\nBad\x20Request")%r(RTSPRequest,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100087\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.0.82
Host is up (0.0022s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B3A4B7%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100144-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2021:05:58\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100144-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOptio
SF:ns,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20cl
SF:ose\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x20
SF:0\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cac
SF:he\r\nX-Served-By:\x20cache-ams2100084-AMS\r\nAccept-Ranges:\x20bytes\r
SF:\nDate:\x20Mon,\x2017\x20Feb\x202025\x2021:05:58\x20GMT\r\nVia:\x201\.1
SF:\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown
SF:\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown
SF:\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x
SF:20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21
SF:00084-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21023\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\
SF:x20cache-ams21067\r\n\r\nBad\x20Request")%r(FourOhFourRequest,1FF,"HTTP
SF:/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent
SF:-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serv
SF:ed-By:\x20cache-ams21039-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Mon
SF:,\x2017\x20Feb\x202025\x2021:05:58\x20GMT\r\nVia:\x201\.1\x20varnish\r\
SF:n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20
SF:</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x2
SF:0\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20adde
SF:d\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21039-AMS\x20\(1
SF:51\.101\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B3A4BD%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100133\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100
SF:141\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\
SF:x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19
SF:179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\
SF:x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fa
SF:stly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20
SF:for\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1
SF:\x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100145\r\n\r\nRequested\x20host\x20does\x20not\x20m
SF:atch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS
SF:\x20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e552365
SF:53e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVi
SF:sit\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-
SF:misdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versi
SF:ons,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r
SF:\nx-served-by:\x20cache-ams2100102\r\n\r\nBad\x20Request")%r(RTSPReques
SF:t,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams21033\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.82
Host is up (0.0022s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B3A4B7%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100095-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2021:05:58\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100095-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOpti
SF:ons,200,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20c
SF:lose\r\nContent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-After:\x2
SF:00\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-ca
SF:che\r\nX-Served-By:\x20cache-ams21033-AMS\r\nAccept-Ranges:\x20bytes\r\
SF:nDate:\x20Mon,\x2017\x20Feb\x202025\x2021:05:58\x20GMT\r\nVia:\x201\.1\
SF:x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\
SF:x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\
SF:x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x2
SF:0been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams210
SF:33-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,96,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100123\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\
SF:x20cache-ams21024\r\n\r\nBad\x20Request")%r(FourOhFourRequest,200,"HTTP
SF:/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent
SF:-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serv
SF:ed-By:\x20cache-ams21028-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Mon
SF:,\x2017\x20Feb\x202025\x2021:05:58\x20GMT\r\nVia:\x201\.1\x20varnish\r\
SF:n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20
SF:</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x2
SF:0\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20adde
SF:d\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21028-AMS\x20\(1
SF:51\.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B3A4BD%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21022\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21058\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams2100124\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams21039\r\n\r\nBad\x20Request")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100138\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (87%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.192.82
Host is up (0.0022s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B3A4B7%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100119-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2021:05:58\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100119-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOpt
SF:ions,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20
SF:close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x
SF:200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-c
SF:ache\r\nX-Served-By:\x20cache-ams2100131-AMS\r\nAccept-Ranges:\x20bytes
SF:\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2021:05:58\x20GMT\r\nVia:\x201\
SF:.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unkno
SF:wn\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unkno
SF:wn\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has
SF:\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams
SF:2100131-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,
SF:94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams21057\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTT
SF:P/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-
SF:by:\x20cache-ams2100105\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201
SF:,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\
SF:nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nc
SF:ontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\n
SF:X-Served-By:\x20cache-ams21030-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\
SF:x20Mon,\x2017\x20Feb\x202025\x2021:05:58\x20GMT\r\nVia:\x201\.1\x20varn
SF:ish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20doma
SF:in\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20doma
SF:in:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x
SF:20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21030-AMS\
SF:x20\(151\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B3A4BD%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100087\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2106
SF:3\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21076\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100120\r\n\r\nBad\x20Request")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100137\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Mon Feb 17 21:06:09 2025 -- 219 IP addresses (158 hosts up) scanned in 19757.95 seconds
or:\x20unknown\x20domain:\
SF:x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20ad
SF:ded\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100117-AMS\x2
SF:0\(151\.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B37DEF%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21022\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21064\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams2100114\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams21037\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21060\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.82
Host is up (0.0021s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37DE9%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100129-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2018:20:25\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100129-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOpt
SF:ions,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20
SF:close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x
SF:200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-c
SF:ache\r\nX-Served-By:\x20cache-ams21080-AMS\r\nAccept-Ranges:\x20bytes\r
SF:\nDate:\x20Mon,\x2017\x20Feb\x202025\x2018:20:25\x20GMT\r\nVia:\x201\.1
SF:\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown
SF:\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown
SF:\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x
SF:20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21
SF:080-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100139\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams21020\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"HT
SF:TP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconte
SF:nt-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Se
SF:rved-By:\x20cache-ams21021-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20M
SF:on,\x2017\x20Feb\x202025\x2018:20:25\x20GMT\r\nVia:\x201\.1\x20varnish\
SF:r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x
SF:20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\
SF:x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20ad
SF:ded\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21021-AMS\x20\
SF:(151\.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B37DEF%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21058\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams210009
SF:7\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100119\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553
SF:e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams21058\r\n\r\nBad\x20Request")%r(RTSPRequest,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21072\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.192.82
Host is up (0.0026s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37DE9%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100109-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2018:20:25\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100109-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOpt
SF:ions,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20
SF:close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x
SF:200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-c
SF:ache\r\nX-Served-By:\x20cache-ams2100093-AMS\r\nAccept-Ranges:\x20bytes
SF:\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2018:20:25\x20GMT\r\nVia:\x201\
SF:.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unkno
SF:wn\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unkno
SF:wn\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has
SF:\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams
SF:2100093-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100132\r\n\r\nBad\x20Request")%r(X11Probe,96,"H
SF:TTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams2100100\r\n\r\nBad\x20Request")%r(FourOhFourRequest,2
SF:01,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\
SF:r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\
SF:ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r
SF:\nX-Served-By:\x20cache-ams21030-AMS\r\nAccept-Ranges:\x20bytes\r\nDate
SF::\x20Mon,\x2017\x20Feb\x202025\x2018:20:25\x20GMT\r\nVia:\x201\.1\x20va
SF:rnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20do
SF:main\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20do
SF:main:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been
SF:\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21030-AM
SF:S\x20\(151\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B37DEF%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100099\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100
SF:138\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\
SF:x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19
SF:179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\
SF:x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fa
SF:stly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20
SF:for\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1
SF:\x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21064\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553
SF:e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams2100091\r\n\r\nBad\x20Request")%r(RTSPRequest,
SF:94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams21056\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (90%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (90%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.0.82
Host is up (0.0026s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/17%Time=67B37DE9%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100110-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Mon,\x2017\x20Feb\x202025\x2018:20:25\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100110-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOptio
SF:ns,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20cl
SF:ose\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x20
SF:0\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cac
SF:he\r\nX-Served-By:\x20cache-ams2100124-AMS\r\nAccept-Ranges:\x20bytes\r
SF:\nDate:\x20Mon,\x2017\x20Feb\x202025\x2018:20:25\x20GMT\r\nVia:\x201\.1
SF:\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown
SF:\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown
SF:\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x
SF:20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21
SF:00124-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100107\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams21074\r\n\r\nBad\x20Request")%r(FourOhFourRequest,1FF,"HT
SF:TP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconte
SF:nt-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Se
SF:rved-By:\x20cache-ams21045-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20M
SF:on,\x2017\x20Feb\x202025\x2018:20:25\x20GMT\r\nVia:\x201\.1\x20varnish\
SF:r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x
SF:20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\
SF:x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20ad
SF:ded\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21045-AMS\x20\
SF:(151\.101\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/17%Time=67B37DEF%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21026\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams210012
SF:7\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100139\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553
SF:e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams21044\r\n\r\nBad\x20Request")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100101\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Mon Feb 17 18:20:36 2025 -- 223 IP addresses (162 hosts up) scanned in 17710.47 seconds