# Nmap 7.94SVN scan initiated Thu Feb 27 14:06:03 2025 as: nmap --privileged -sV -p- -T4 -O --min-parallelism 100 --max-rtt-timeout 1s -oN /var/www/html/nmap/results/dfc07c55-7e95-4815-9ac5-387c0610ced3.txt 81.144.28.238 132.185.161.176 212.58.244.98 212.58.249.141 52.16.246.43 212.58.244.187 132.185.142.146 34.90.160.40 198.51.45.9 13.227.219.83 132.185.132.21 212.58.249.200 132.185.132.1 99.80.224.186 54.77.244.106 212.58.249.224 212.58.249.201 132.185.160.177 132.185.132.10 212.58.244.99 212.58.244.56 23.53.112.149 212.58.249.112 212.58.244.210 151.101.0.82 212.58.249.145 151.101.128.82 132.185.153.97 212.58.228.100 198.51.44.9 212.58.228.62 132.185.160.176 198.51.45.9 81.144.28.241 132.185.132.142 212.58.228.35 151.101.192.82 132.185.132.141 40.99.148.200 212.58.244.104 151.101.0.82 151.101.128.82 212.58.244.83 212.58.226.146 212.58.244.17 212.58.244.57 132.185.132.17 13.41.43.220 212.58.244.15 52.98.196.24 151.101.64.82 212.58.244.186 151.101.0.82 10.10.48.41 132.185.161.176 212.58.228.26 151.101.128.82 132.185.161.180 54.77.66.137 212.58.226.147 212.58.228.15 132.185.161.177 132.185.160.179 151.101.0.82 212.58.249.201 198.51.45.9 132.185.160.177 212.58.230.158 212.58.249.145 212.58.249.199 172.31.55.87 132.185.132.13 212.58.249.183 212.58.236.67 10.72.136.19 10.72.136.19 151.101.128.82 212.58.244.22 212.58.244.57 132.185.161.177 192.168.193.10 52.97.131.248 212.58.249.144 212.58.244.205 52.98.204.168 34.90.160.40 132.185.240.37 151.101.192.82 132.185.151.148 18.200.133.248 132.185.151.148 212.58.244.39 132.185.132.12 132.185.151.132 212.58.230.134 132.185.132.21 132.185.161.100 198.51.44.9 212.58.249.207 151.101.192.82 35.178.11.2 207.169.33.39 212.58.228.21 212.58.249.112 151.101.192.82 132.185.144.154 3.9.51.107 132.185.151.132 132.185.132.16 198.51.44.9 151.101.0.82 212.58.249.200 132.185.132.199 151.101.128.82 212.58.249.113 132.185.132.34 212.58.249.225 132.185.132.21 132.185.151.134 52.98.205.72 212.58.226.91 10.52.69.191 151.101.0.81 212.58.249.156 212.58.244.98 63.33.109.90 132.185.151.150 2.16.6.220 81.144.28.241 151.101.192.82 132.185.160.180 212.58.244.39 212.58.244.72 132.185.158.45 132.185.132.16 212.58.244.56 212.58.249.120 151.101.128.82 151.101.64.82 52.98.205.88 212.58.244.16 151.101.192.82 132.185.151.149 52.97.178.72 52.97.146.104 132.185.161.176 212.58.226.92 212.58.244.129 212.58.250.23 198.51.45.9 212.58.244.17 212.58.228.23 132.185.142.146 151.101.64.82 52.97.166.168 212.58.244.83 212.58.242.133 13.227.219.122 81.144.28.241 212.58.249.146 13.227.219.58 46.137.181.193 132.185.132.32 132.185.151.150 148.163.199.65 212.58.244.9 132.185.161.179 132.185.151.133 212.58.228.104 132.185.159.183 212.58.244.23 172.29.120.48 10.57.48.79 151.101.0.82 212.58.249.198 13.227.219.18 132.185.151.134 151.101.64.82 212.58.247.239 212.58.251.88 52.98.219.40 132.185.151.149 212.58.228.94 212.58.249.144 52.97.146.120 212.58.244.15 132.185.161.177 52.19.225.170 132.185.132.130 151.101.192.81 212.58.228.29 212.58.255.217 212.58.228.86 212.58.251.122 212.58.249.198 212.58.251.122 2.16.6.202 132.185.132.2 212.58.242.5 212.58.249.113 23.53.112.149 151.101.64.82 172.29.161.54 132.185.161.100 132.185.69.251 132.185.132.3 212.58.228.25 132.185.132.16 132.185.151.133 151.101.64.82 151.101.64.81 52.97.131.232 54.155.236.209 132.185.160.176 132.185.160.100 151.101.128.81 132.185.160.176 132.185.132.16 212.58.244.73 52.209.149.93 212.58.228.78 212.58.249.206 132.185.160.177 212.58.249.147 212.58.255.218 132.185.132.19 212.58.249.121
Warning: 132.185.161.176 giving up on port because retransmission cap hit (6).
Nmap scan report for mailin0.telhc.bbc.co.uk (132.185.161.176)
Host is up (0.011s latency).
Not shown: 65250 closed tcp ports (reset), 280 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip197.telhc.bbc.co.uk (212.58.244.98)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip079.lbh.bbc.co.uk (212.58.249.141)
Host is up (0.011s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (93%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 3.10 - 3.12 (92%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 4.9 (90%), Linux 3.13 (90%), Linux 2.6.32 - 2.6.39 (90%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ec2-52-16-246-43.eu-west-1.compute.amazonaws.com (52.16.246.43)
Host is up (0.019s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C07842%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,1714,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Thu,\x2027
SF:\x20Feb\x202025\x2014:35:45\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e
SF:98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOC
SF:TYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x
SF:20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20
SF:\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x2
SF:0\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"C
SF:ontent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equi
SF:v=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,
SF:\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x
SF:20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Co
SF:mpatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\
SF:x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wi
SF:dth\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20
SF:best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sp
SF:ort\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20
SF:and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20O
SF:nline\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,
SF:147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Thu,\x2027\x20Feb\x
SF:202025\x2014:35:45\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Leng
SF:th:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agen
SF:t-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</
SF:title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cent
SF:er>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTS
SF:PRequest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Thu,\x2027
SF:\x20Feb\x202025\x2014:35:45\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r
SF:\n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>
SF:\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>open
SF:resty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C07847%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,3000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Thu
SF:,\x2027\x20Feb\x202025\x2014:35:50\x20GMT\r\nContent-Type:\x20text/html
SF:\r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61de
SF:ec4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r
SF:\n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x2
SF:0\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\
SF:x20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n
SF:\x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-eq
SF:uiv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20ht
SF:tp-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device
SF:-width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\
SF:n\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"
SF:X-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofo
SF:llow\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=de
SF:vice-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"
SF:The\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20an
SF:d\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlig
SF:hts\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20B
SF:BC\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPO
SF:ptions,147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Thu,\x2027\x
SF:20Feb\x202025\x2014:35:50\x20GMT\r\nContent-Type:\x20text/html\r\nConte
SF:nt-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrig
SF:in-Agent-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Al
SF:lowed</title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1
SF:></center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n"
SF:)%r(FourOhFourRequest,2000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x
SF:20Thu,\x2027\x20Feb\x202025\x2014:35:50\x20GMT\r\nContent-Type:\x20text
SF:/html\r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\
SF:"61deec4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\
SF:r\n\r\n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x
SF:20\x20\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<titl
SF:e>\n\x20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</tit
SF:le>\n\x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20ht
SF:tp-equiv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\
SF:x20http-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=d
SF:evice-width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewpor
SF:t\">\n\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equ
SF:iv=\"X-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x2
SF:0nofollow\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"wid
SF:th=device-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20conte
SF:nt=\"The\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\
SF:x20and\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20hi
SF:ghlights\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of
SF:\x20BBC\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for fmt-vip47.telhc.bbc.co.uk (212.58.244.187)
Host is up (0.011s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C07843%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for cloud.virt.ch.bbc.co.uk (132.185.142.146)
Host is up (0.011s latency).
Not shown: 65430 filtered tcp ports (no-response), 101 closed tcp ports (reset)
PORT     STATE SERVICE   VERSION
21/tcp   open  ftp       vsftpd 3.0.3
80/tcp   open  http      Apache httpd 2.4.29
443/tcp  open  ssl/https Apache/2.4.29 (Ubuntu)
8443/tcp open  ssl/http  Apache httpd 2.4.29
Device type: general purpose|storage-misc|broadband router|firewall
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (87%), Synology DiskStation Manager 5.X (86%), Zhone embedded (85%), WatchGuard Fireware 11.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.4 cpe:/o:linux:linux_kernel:4.2 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Linux 2.6.32 (87%), Linux 3.4 (86%), Linux 3.5 (86%), Linux 4.2 (86%), Synology DiskStation Manager 5.1 (86%), Linux 2.6.32 or 3.10 (86%), Linux 4.4 (86%), Zhone GPON home gateway (85%), Linux 3.10 (85%), WatchGuard Fireware 11.8 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Hosts: default, artifactory-noforge.virt.ch.bbc.co.uk; OS: Unix

Nmap scan report for 40.160.90.34.bc.googleusercontent.com (34.90.160.40)
Host is up (0.0083s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http-proxy F5 BIG-IP load balancer http proxy
443/tcp open  ssl/https  Apache
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C07849%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,F2,"HTTP/1\.1\x20301\x20301\r\ndate:\x20Thu,\x2027\x20
SF:Feb\x202025\x2014:35:52\x20GMT\r\nserver:\x20Apache\r\nlocation:\x20htt
SF:ps://www\.sap\.com/products/recruiting-software\.html\r\nx-content-type
SF:-options:\x20nosniff\r\ncontent-length:\x200\r\nx-xss-protection:\x201;
SF:\x20mode=block\r\nconnection:\x20close\r\n\r\n")%r(HTTPOptions,F2,"HTTP
SF:/1\.1\x20301\x20301\r\ndate:\x20Thu,\x2027\x20Feb\x202025\x2014:35:52\x
SF:20GMT\r\nserver:\x20Apache\r\nlocation:\x20https://www\.sap\.com/produc
SF:ts/recruiting-software\.html\r\nx-content-type-options:\x20nosniff\r\nc
SF:ontent-length:\x200\r\nx-xss-protection:\x201;\x20mode=block\r\nconnect
SF:ion:\x20close\r\n\r\n")%r(FourOhFourRequest,115,"HTTP/1\.1\x20301\x2030
SF:1\r\ndate:\x20Thu,\x2027\x20Feb\x202025\x2014:35:52\x20GMT\r\nserver:\x
SF:20Apache\r\nlocation:\x20https://www\.sap\.com/products/recruiting-soft
SF:ware\.html\r\nx-content-type-options:\x20nosniff\r\ncontent-length:\x20
SF:0\r\ncontent-type:\x20application/x-trash\r\nx-xss-protection:\x201;\x2
SF:0mode=block\r\nconnection:\x20close\r\n\r\n")%r(tor-versions,CF,"HTTP/1
SF:\.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\ncache-control:
SF:\x20no-cache\r\ncontent-type:\x20text/html\r\nconnection:\x20close\r\n\
SF:r\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20browser\x20sent\
SF:x20an\x20invalid\x20request\.\n</body></html>\n")%r(RTSPRequest,CF,"HTT
SF:P/1\.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\ncache-contr
SF:ol:\x20no-cache\r\ncontent-type:\x20text/html\r\nconnection:\x20close\r
SF:\n\r\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20browser\x20se
SF:nt\x20an\x20invalid\x20request\.\n</body></html>\n")%r(RPCCheck,CF,"HTT
SF:P/1\.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\ncache-contr
SF:ol:\x20no-cache\r\ncontent-type:\x20text/html\r\nconnection:\x20close\r
SF:\n\r\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20browser\x20se
SF:nt\x20an\x20invalid\x20request\.\n</body></html>\n")%r(DNSVersionBindRe
SF:qTCP,CF,"HTTP/1\.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\
SF:ncache-control:\x20no-cache\r\ncontent-type:\x20text/html\r\nconnection
SF::\x20close\r\n\r\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20b
SF:rowser\x20sent\x20an\x20invalid\x20request\.\n</body></html>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: Device: load balancer

Nmap scan report for dns2.p09.nsone.net (198.51.45.9)
Host is up (0.0037s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Warning: 132.185.161.180 giving up on port because retransmission cap hit (6).
Warning: 132.185.161.177 giving up on port because retransmission cap hit (6).
Warning: 132.185.160.177 giving up on port because retransmission cap hit (6).
Warning: 132.185.160.180 giving up on port because retransmission cap hit (6).
Warning: 132.185.160.179 giving up on port because retransmission cap hit (6).
Warning: 132.185.160.176 giving up on port because retransmission cap hit (6).
Nmap scan report for server-13-227-219-83.ams54.r.cloudfront.net (13.227.219.83)
Host is up (0.0023s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Amazon CloudFront httpd
443/tcp open  ssl/https CloudFront
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bbc-vip138.lbh.bbc.co.uk (212.58.249.200)
Host is up (0.0092s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAC%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (96%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (96%), Linux 4.0 (91%), Linux 3.10 - 4.11 (90%), Linux 3.11 - 4.1 (90%), Linux 3.2 - 4.9 (90%), Linux 5.1 (90%), Linux 2.6.32 (90%), Linux 3.10 - 3.12 (89%), Linux 2.6.32 or 3.10 (88%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for rt0-132.lh.bbc.co.uk (132.185.132.1)
Host is up (0.010s latency).
All 65535 scanned ports on rt0-132.lh.bbc.co.uk (132.185.132.1) are in ignored states.
Not shown: 65535 filtered tcp ports (no-response)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS details: Cisco 1812, 3640, or 3700 router (IOS 12.4), Cisco 3925 router (IOS 12.4), Cisco DOCSIS cable modem termination server (IOS 12.1), Cisco 6509 switch (IOS 12.2), Cisco Catalyst 3560 or 6500-series switch (IOS 12.1 - 12.2), Cisco Catalyst 6509-E switch (IOS 12.2), Cisco Nexus 5548P switch (NX-OS 5.1), QEMU user mode network gateway

Nmap scan report for ec2-99-80-224-186.eu-west-1.compute.amazonaws.com (99.80.224.186)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAB%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,7F5C,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Thu,\x2027
SF:\x20Feb\x202025\x2015:58:34\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e
SF:98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOC
SF:TYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x
SF:20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20
SF:\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x2
SF:0\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"C
SF:ontent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equi
SF:v=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,
SF:\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x
SF:20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Co
SF:mpatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\
SF:x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wi
SF:dth\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20
SF:best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sp
SF:ort\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20
SF:and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20O
SF:nline\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,
SF:147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Thu,\x2027\x20Feb\x
SF:202025\x2015:58:34\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Leng
SF:th:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agen
SF:t-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</
SF:title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cent
SF:er>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTS
SF:PRequest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Thu,\x2027
SF:\x20Feb\x202025\x2015:58:34\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r
SF:\n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>
SF:\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>open
SF:resty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C08BB0%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,17D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Th
SF:u,\x2027\x20Feb\x202025\x2015:58:39\x20GMT\r\nContent-Type:\x20text/htm
SF:l\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nServer:\x20BBC-G
SF:TM\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x20SSL\x20certif
SF:icate\x20was\x20sent</title></head>\r\n<body>\r\n<center><h1>400\x20Bad
SF:\x20Request</h1></center>\r\n<center>No\x20required\x20SSL\x20certifica
SF:te\x20was\x20sent</center>\r\n<hr><center>openresty</center>\r\n</body>
SF:\r\n</html>\r\n")%r(HTTPOptions,17D,"HTTP/1\.1\x20400\x20Bad\x20Request
SF:\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2015:58:39\x20GMT\r\nContent-Ty
SF:pe:\x20text/html\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nS
SF:erver:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x
SF:20SSL\x20certificate\x20was\x20sent</title></head>\r\n<body>\r\n<center
SF:><h1>400\x20Bad\x20Request</h1></center>\r\n<center>No\x20required\x20S
SF:SL\x20certificate\x20was\x20sent</center>\r\n<hr><center>openresty</cen
SF:ter>\r\n</body>\r\n</html>\r\n")%r(FourOhFourRequest,17D,"HTTP/1\.1\x20
SF:400\x20Bad\x20Request\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2015:58:39
SF:\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20234\r\nConn
SF:ection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>40
SF:0\x20No\x20required\x20SSL\x20certificate\x20was\x20sent</title></head>
SF:\r\n<body>\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<cente
SF:r>No\x20required\x20SSL\x20certificate\x20was\x20sent</center>\r\n<hr><
SF:center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(tor-versions,12
SF:D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Thu,\x2027\x20Feb\x20
SF:2025\x2015:58:39\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length
SF::\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\
SF:n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\r\n<center
SF:><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>openresty</cent
SF:er>\r\n</body>\r\n</html>\r\n")%r(RTSPRequest,12D,"HTTP/1\.1\x20400\x20
SF:Bad\x20Request\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2015:58:44\x20GMT
SF:\r\nContent-Type:\x20text/html\r\nContent-Length:\x20154\r\nConnection:
SF:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20Ba
SF:d\x20Request</title></head>\r\n<body>\r\n<center><h1>400\x20Bad\x20Requ
SF:est</h1></center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</htm
SF:l>\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for ec2-54-77-244-106.eu-west-1.compute.amazonaws.com (54.77.244.106)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAB%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,7F5C,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Thu,\x2027
SF:\x20Feb\x202025\x2015:58:34\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e
SF:98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOC
SF:TYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x
SF:20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20
SF:\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x2
SF:0\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"C
SF:ontent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equi
SF:v=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,
SF:\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x
SF:20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Co
SF:mpatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\
SF:x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wi
SF:dth\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20
SF:best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sp
SF:ort\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20
SF:and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20O
SF:nline\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,
SF:147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Thu,\x2027\x20Feb\x
SF:202025\x2015:58:34\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Leng
SF:th:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agen
SF:t-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</
SF:title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cent
SF:er>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTS
SF:PRequest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Thu,\x2027
SF:\x20Feb\x202025\x2015:58:34\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r
SF:\n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>
SF:\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>open
SF:resty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C08BB0%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,17D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Th
SF:u,\x2027\x20Feb\x202025\x2015:58:39\x20GMT\r\nContent-Type:\x20text/htm
SF:l\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nServer:\x20BBC-G
SF:TM\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x20SSL\x20certif
SF:icate\x20was\x20sent</title></head>\r\n<body>\r\n<center><h1>400\x20Bad
SF:\x20Request</h1></center>\r\n<center>No\x20required\x20SSL\x20certifica
SF:te\x20was\x20sent</center>\r\n<hr><center>openresty</center>\r\n</body>
SF:\r\n</html>\r\n")%r(HTTPOptions,17D,"HTTP/1\.1\x20400\x20Bad\x20Request
SF:\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2015:58:39\x20GMT\r\nContent-Ty
SF:pe:\x20text/html\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nS
SF:erver:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x
SF:20SSL\x20certificate\x20was\x20sent</title></head>\r\n<body>\r\n<center
SF:><h1>400\x20Bad\x20Request</h1></center>\r\n<center>No\x20required\x20S
SF:SL\x20certificate\x20was\x20sent</center>\r\n<hr><center>openresty</cen
SF:ter>\r\n</body>\r\n</html>\r\n")%r(FourOhFourRequest,17D,"HTTP/1\.1\x20
SF:400\x20Bad\x20Request\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2015:58:39
SF:\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20234\r\nConn
SF:ection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>40
SF:0\x20No\x20required\x20SSL\x20certificate\x20was\x20sent</title></head>
SF:\r\n<body>\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<cente
SF:r>No\x20required\x20SSL\x20certificate\x20was\x20sent</center>\r\n<hr><
SF:center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(tor-versions,12
SF:D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Thu,\x2027\x20Feb\x20
SF:2025\x2015:58:39\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length
SF::\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\
SF:n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\r\n<center
SF:><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>openresty</cent
SF:er>\r\n</body>\r\n</html>\r\n")%r(RTSPRequest,12D,"HTTP/1\.1\x20400\x20
SF:Bad\x20Request\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2015:58:44\x20GMT
SF:\r\nContent-Type:\x20text/html\r\nContent-Length:\x20154\r\nConnection:
SF:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20Ba
SF:d\x20Request</title></head>\r\n<body>\r\n<center><h1>400\x20Bad\x20Requ
SF:est</h1></center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</htm
SF:l>\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bbc-vip162.lbh.bbc.co.uk (212.58.249.224)
Host is up (0.0098s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAC%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 3.10 - 3.12 (90%), Linux 2.6.32 or 3.10 (89%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip139.lbh.bbc.co.uk (212.58.249.201)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAC%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 3.10 - 3.12 (90%), Linux 2.6.32 or 3.10 (89%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin1.cwwtf.bbc.co.uk (132.185.160.177)
Host is up (0.0097s latency).
Not shown: 65284 closed tcp ports (reset), 246 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gatea.lh.bbc.co.uk (132.185.132.10)
Host is up (0.0095s latency).
Not shown: 65531 filtered tcp ports (no-response)
PORT     STATE SERVICE  VERSION
53/tcp   open  domain   ISC BIND 9.11.19
465/tcp  open  ssl/smtp Postfix smtpd
993/tcp  open  ssl/imap Dovecot imapd
4190/tcp open  sieve?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port4190-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAC%P=x86_64-pc-linux-gnu%r
SF:(NULL,174,"\"IMPLEMENTATION\"\x20\"Dovecot\x20Pigeonhole\"\r\n\"SIEVE\"
SF:\x20\"fileinto\x20reject\x20envelope\x20encoded-character\x20vacation\x
SF:20subaddress\x20comparator-i;ascii-numeric\x20relational\x20regex\x20im
SF:ap4flags\x20copy\x20include\x20variables\x20body\x20enotify\x20environm
SF:ent\x20mailbox\x20date\x20index\x20ihave\x20duplicate\x20mime\x20foreve
SF:rypart\x20extracttext\"\r\n\"NOTIFY\"\x20\"mailto\"\r\n\"SASL\"\x20\"PL
SF:AIN\x20LOGIN\x20GSSAPI\"\r\n\"VERSION\"\x20\"1\.0\"\r\n\"STARTTLS\"\r\n
SF:OK\x20\"stunnel\"\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (89%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9
Aggressive OS guesses: Sun Solaris 10 (89%), Sun Solaris 10 (SPARC) (89%), Sun Solaris 9 (89%), Sun Solaris 9 or 10 (SPARC) (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Host: mailbox.rd.bbc.co.uk

Nmap scan report for bbc-vip139.telhc.bbc.co.uk (212.58.244.99)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip101.telhc.bbc.co.uk (212.58.244.56)
Host is up (0.0099s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for a23-53-112-149.deploy.static.akamaitechnologies.com (23.53.112.149)
Host is up (0.0032s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE  VERSION
80/tcp  open  http     AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
443/tcp open  ssl/http AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|5.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5
Aggressive OS guesses: Linux 4.15 - 5.8 (85%), Linux 5.0 - 5.4 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip050.lbh.bbc.co.uk (212.58.249.112)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (93%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 3.10 - 3.12 (92%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.9 (89%), Linux 3.13 (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip174.telhc.bbc.co.uk (212.58.244.210)
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE VERSION
80/tcp  open  http?
443/tcp open  https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAC%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.0.82
Host is up (0.0025s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAC%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100104-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2015:58:35\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100104-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOptio
SF:ns,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20cl
SF:ose\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x20
SF:0\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cac
SF:he\r\nX-Served-By:\x20cache-ams2100125-AMS\r\nAccept-Ranges:\x20bytes\r
SF:\nDate:\x20Thu,\x2027\x20Feb\x202025\x2015:58:35\x20GMT\r\nVia:\x201\.1
SF:\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown
SF:\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown
SF:\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x
SF:20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21
SF:00125-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100099\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100142\r\n\r\nBad\x20Request")%r(FourOhFourRequest,203,"
SF:HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncon
SF:tent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-
SF:Served-By:\x20cache-ams2100090-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\
SF:x20Thu,\x2027\x20Feb\x202025\x2015:58:35\x20GMT\r\nVia:\x201\.1\x20varn
SF:ish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20doma
SF:in\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20doma
SF:in:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x
SF:20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100090-AM
SF:S\x20\(151\.101\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C08BB2%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100097\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100
SF:135\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\
SF:x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19
SF:179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\
SF:x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fa
SF:stly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20
SF:for\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1B7,"HTTP/1\.1
SF:\x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20291\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100138\r\n\r\nRequested\x20host\x20does\x20not\x20m
SF:atch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS
SF:\x20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e552365
SF:53e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVi
SF:sit\x20https://www\.fastly\.com/documentation/guides/concepts/errors/#r
SF:outing-errors\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100091\r\n\r\nBad\x20Request")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100126\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip083.lbh.bbc.co.uk (212.58.249.145)
Host is up (0.0098s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (90%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.82
Host is up (0.0026s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAC%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21072-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2015:58:35\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21072-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOptions
SF:,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clos
SF:e\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\
SF:r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache
SF:\r\nX-Served-By:\x20cache-ams2100142-AMS\r\nAccept-Ranges:\x20bytes\r\n
SF:Date:\x20Thu,\x2027\x20Feb\x202025\x2015:58:35\x20GMT\r\nVia:\x201\.1\x
SF:20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x
SF:20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x
SF:20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20
SF:been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100
SF:142-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21072\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\
SF:x20cache-ams21050\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"HTTP
SF:/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent
SF:-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serv
SF:ed-By:\x20cache-ams21035-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Thu
SF:,\x2027\x20Feb\x202025\x2015:58:35\x20GMT\r\nVia:\x201\.1\x20varnish\r\
SF:n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20
SF:</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x2
SF:0\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20adde
SF:d\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21035-AMS\x20\(1
SF:51\.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C08BB2%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21029\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1B5,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20291\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21066\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://www\.fastly\
SF:.com/documentation/guides/concepts/errors/#routing-errors\x20for\x20mor
SF:e\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x20421\x2
SF:0Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length:\x202
SF:97\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20
SF:cache-ams2100118\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20an
SF:y\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certif
SF:icate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a
SF:04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20htt
SF:ps://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdirecte
SF:d-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,94,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21045\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"HTTP/1
SF:\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:
SF:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:
SF:\x20cache-ams21056\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 6.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.1
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 6.1-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.228.100
Host is up (0.0094s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   open   http?
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAC%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Device type: general purpose|storage-misc|firewall|WAP|webcam
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X|2.4.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (86%), Tandberg embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8 cpe:/o:linux:linux_kernel:2.4 cpe:/h:tandberg:vcs
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 4.4 (92%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.0 (89%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 2.6.18 (87%), Linux 2.6.32 - 3.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ns4.demysdns.co.uk (198.51.44.9)
Host is up (0.0030s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for mailin0.cwwtf.bbc.co.uk (132.185.160.176)
Host is up (0.0095s latency).
Not shown: 65259 closed tcp ports (reset), 271 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.228.35
Host is up (0.0097s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|storage-misc|firewall|webcam
Running (JUST GUESSING): Linux 2.6.X|4.X|3.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (86%), Tandberg embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8 cpe:/h:tandberg:vcs
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 4.4 (92%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.0 (89%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 2.6.18 (87%), Linux 2.6.34 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.192.82
Host is up (0.0030s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAC%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100088-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2015:58:35\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100088-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOpt
SF:ions,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20
SF:close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x
SF:200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-c
SF:ache\r\nX-Served-By:\x20cache-ams21034-AMS\r\nAccept-Ranges:\x20bytes\r
SF:\nDate:\x20Thu,\x2027\x20Feb\x202025\x2015:58:35\x20GMT\r\nVia:\x201\.1
SF:\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown
SF:\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown
SF:\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x
SF:20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21
SF:034-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21049\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\
SF:x20cache-ams21069\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"HTTP
SF:/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent
SF:-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serv
SF:ed-By:\x20cache-ams21056-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Thu
SF:,\x2027\x20Feb\x202025\x2015:58:35\x20GMT\r\nVia:\x201\.1\x20varnish\r\
SF:n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20
SF:</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x2
SF:0\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20adde
SF:d\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21056-AMS\x20\(1
SF:51\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C08BB2%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21069\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21023\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams2100107\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100117\r\n\r\nBad\x20Request")%r(RTSPRequest,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21039\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 40.99.148.200
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for bbc-vip140.telhc.bbc.co.uk (212.58.244.104)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip128.telhc.bbc.co.uk (212.58.244.83)
Host is up (0.0094s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip170.telhc.bbc.co.uk (212.58.244.17)
Host is up (0.0093s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAC%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip102.telhc.bbc.co.uk (212.58.244.57)
Host is up (0.0094s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gateh.lh.bbc.co.uk (132.185.132.17)
Host is up (0.0083s latency).
All 65535 scanned ports on gateh.lh.bbc.co.uk (132.185.132.17) are in ignored states.
Not shown: 65535 filtered tcp ports (no-response)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Aggressive OS guesses: Cisco Adaptive Security Appliance (ASA 8.4) (88%), Cisco Adaptive Security Appliance 5510 or 5540 firewall (ASA 8.0) (88%), Cisco 1812, 3640, or 3700 router (IOS 12.4) (88%), Cisco 3925 router (IOS 12.4) (88%), Cisco DOCSIS cable modem termination server (IOS 12.1) (88%), Cisco 6509 switch (IOS 12.2) (88%), Cisco Catalyst 3560 or 6500-series switch (IOS 12.1 - 12.2) (88%), Cisco Catalyst 6509-E switch (IOS 12.2) (88%), Cisco Nexus 5548P switch (NX-OS 5.1) (88%), Cisco ASA 5510 firewall (PIX OS 8.2) (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip168.telhc.bbc.co.uk (212.58.244.15)
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAC%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.98.196.24
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for 151.101.64.82
Host is up (0.0026s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAC%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100118-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2015:58:35\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100118-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOpti
SF:ons,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20c
SF:lose\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x2
SF:00\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-ca
SF:che\r\nX-Served-By:\x20cache-ams2100119-AMS\r\nAccept-Ranges:\x20bytes\
SF:r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2015:58:35\x20GMT\r\nVia:\x201\.
SF:1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknow
SF:n\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknow
SF:n\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\
SF:x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2
SF:100119-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21050\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams21062\r\n\r\nBad\x20Request")%r(FourOhFourRequest,204,"HT
SF:TP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconte
SF:nt-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Se
SF:rved-By:\x20cache-ams2100123-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x2
SF:0Thu,\x2027\x20Feb\x202025\x2015:58:35\x20GMT\r\nVia:\x201\.1\x20varnis
SF:h\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain
SF:\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain
SF::\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20
SF:added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100123-AMS\
SF:x20\(151\.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C08BB2%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1B5,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20291\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21074\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://www\.fastly\.com/documentat
SF:ion/guides/concepts/errors/#routing-errors\x20for\x20more\x20informatio
SF:n\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Reque
SF:st\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x
SF:20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21048\r\n\r\
SF:nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alterna
SF:tive\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd0
SF:28d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20
SF:with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/
SF:en/guides/common-400-errors#error-421-misdirected-request\x20for\x20mor
SF:e\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x20421\x2
SF:0Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length:\x202
SF:97\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20
SF:cache-ams21061\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\
SF:x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certific
SF:ate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04
SF:ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https
SF:://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdirected-
SF:request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,96,"HTTP
SF:/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams2100100\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"HTTP/1
SF:\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:
SF:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:
SF:\x20cache-ams21046\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for fmt-vip46.telhc.bbc.co.uk (212.58.244.186)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAC%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ipsecure-maud.test.bbc.co.uk (212.58.228.26)
Host is up (0.0097s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|storage-misc|firewall|webcam
Running (JUST GUESSING): Linux 2.6.X|4.X|3.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (86%), Tandberg embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8 cpe:/h:tandberg:vcs
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 4.4 (92%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.0 (89%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 2.6.18 (87%), Linux 2.6.32 - 3.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailout1.telhc.bbc.co.uk (132.185.161.180)
Host is up (0.0094s latency).
Not shown: 65297 closed tcp ports (reset), 233 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ec2-54-77-66-137.eu-west-1.compute.amazonaws.com (54.77.66.137)
Host is up (0.017s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      nginx 1.14.1
443/tcp open  ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C08BB2%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1B0,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-
SF:Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max
SF:-Age=3600;\x20Path=/;\x20Expires=Thu,\x2027\x20Feb\x202025\x2016:58:41\
SF:x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://picos\.tools\.bb
SF:c\.co\.uk/landing\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x2
SF:0charset=utf-8\r\nContent-Length:\x2072\r\nDate:\x20Thu,\x2027\x20Feb\x
SF:202025\x2015:58:41\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20R
SF:edirect\.\x20Redirecting\x20to\x20https://picos\.tools\.bbc\.co\.uk/lan
SF:ding")%r(HTTPOptions,1B0,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\n
SF:Set-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x2
SF:0Max-Age=3600;\x20Path=/;\x20Expires=Thu,\x2027\x20Feb\x202025\x2016:58
SF::41\x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://picos\.tools
SF:\.bbc\.co\.uk/landing\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain
SF:;\x20charset=utf-8\r\nContent-Length:\x2072\r\nDate:\x20Thu,\x2027\x20F
SF:eb\x202025\x2015:58:41\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\
SF:x20Redirect\.\x20Redirecting\x20to\x20https://picos\.tools\.bbc\.co\.uk
SF:/landing")%r(FourOhFourRequest,1DD,"HTTP/1\.1\x20307\x20Temporary\x20Re
SF:direct\r\nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F
SF:nice%2520ports%252C%2FTri%256Eity\.txt%252ebak%22%7D;\x20Max-Age=3600;\
SF:x20Path=/;\x20Expires=Thu,\x2027\x20Feb\x202025\x2016:58:41\x20GMT;\x20
SF:HttpOnly;\x20Secure\r\nLocation:\x20https://picos\.tools\.bbc\.co\.uk/l
SF:anding\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x20charset=ut
SF:f-8\r\nContent-Length:\x2072\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x201
SF:5:58:41\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20Redirect\.\x
SF:20Redirecting\x20to\x20https://picos\.tools\.bbc\.co\.uk/landing");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for 212.58.228.15
Host is up (0.0094s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|storage-misc|firewall
Running (JUST GUESSING): Linux 2.6.X|4.X|3.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (86%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 4.4 (92%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 4.0 (87%), Linux 2.6.18 (87%), Linux 2.6.32 - 3.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin1.telhc.bbc.co.uk (132.185.161.177)
Host is up (0.0097s latency).
Not shown: 65290 closed tcp ports (reset), 240 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailout0.cwwtf.bbc.co.uk (132.185.160.179)
Host is up (0.0099s latency).
Not shown: 65263 closed tcp ports (reset), 267 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip137.lbh.bbc.co.uk (212.58.249.199)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAC%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 5.1 (89%), Linux 3.10 - 3.12 (88%), Linux 2.6.32 - 2.6.35 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gated.lh.bbc.co.uk (132.185.132.13)
Host is up (0.010s latency).
All 65535 scanned ports on gated.lh.bbc.co.uk (132.185.132.13) are in ignored states.
Not shown: 65535 filtered tcp ports (no-response)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Sun Solaris 8|9
OS CPE: cpe:/o:sun:sunos:5.8 cpe:/o:sun:sunos:5.9
OS details: Sun Solaris 8, Sun Solaris 9 (SPARC)

Nmap scan report for bbc-vip121.lbh.bbc.co.uk (212.58.249.183)
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (93%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 3.10 - 3.12 (92%), Linux 2.6.32 - 2.6.35 (90%), Linux 4.9 (90%), Linux 3.13 (90%), Linux 2.6.32 - 2.6.39 (90%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.244.22
Host is up (0.0093s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAC%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.97.131.248
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for bbc-vip082.lbh.bbc.co.uk (212.58.249.144)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (90%), Linux 5.1 (89%), Linux 2.6.32 (89%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip194.telhc.bbc.co.uk (212.58.244.205)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAC%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type:\x20te
SF:xt/html\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2015:58:34\x20GMT\r\nCon
SF:nection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x20html>
SF:\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--\x20VER
SF:SION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BBC\x20-\
SF:x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\x20<met
SF:a\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content-Type\"
SF:>\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"encoding\
SF:">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20initial-s
SF:cale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20\x20<me
SF:ta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatible\">\n
SF:\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20name=\"rob
SF:ots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\x20name
SF:=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x20of\x2
SF:0the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x20headli
SF:nes,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x20much\x
SF:20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\"\x20na
SF:me=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www\.bbc\.
SF:co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\x20")%r
SF:(HTTPOptions,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type:\x2
SF:0text/html\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2015:58:34\x20GMT\r\n
SF:Connection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x20ht
SF:ml>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--\x20
SF:VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BBC\x2
SF:0-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\x20<
SF:meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content-Typ
SF:e\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"encodi
SF:ng\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20initia
SF:l-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20\x20
SF:<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatible\"
SF:>\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20name=\"
SF:robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\x20n
SF:ame=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x20of
SF:\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x20hea
SF:dlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x20muc
SF:h\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\"\x2
SF:0name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www\.bb
SF:c\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\x20"
SF:);
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C08BB2%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type
SF::\x20text/html\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2015:58:40\x20GMT
SF:\r\nConnection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x
SF:20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--
SF:\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BB
SF:C\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\
SF:x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content
SF:-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"en
SF:coding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20in
SF:itial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20
SF:\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatib
SF:le\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20nam
SF:e=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\
SF:x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x
SF:20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x2
SF:0headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x2
SF:0much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\
SF:"\x20name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www
SF:\.bbc\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\
SF:x20")%r(HTTPOptions,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-T
SF:ype:\x20text/html\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2015:58:40\x20
SF:GMT\r\nConnection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYP
SF:E\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<
SF:!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x2
SF:0BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x
SF:20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Cont
SF:ent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\
SF:"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x2
SF:0initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\
SF:x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compa
SF:tible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20
SF:name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width
SF:\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20bes
SF:t\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport
SF:\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and
SF:\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Onli
SF:ne\"\x20name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://
SF:www\.bbc\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x
SF:20\x20");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.98.204.168
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for ec2-18-200-133-248.eu-west-1.compute.amazonaws.com (18.200.133.248)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAB%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,32F8,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Thu,\x2027
SF:\x20Feb\x202025\x2015:58:34\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e
SF:98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOC
SF:TYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x
SF:20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20
SF:\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x2
SF:0\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"C
SF:ontent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equi
SF:v=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,
SF:\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x
SF:20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Co
SF:mpatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\
SF:x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wi
SF:dth\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20
SF:best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sp
SF:ort\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20
SF:and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20O
SF:nline\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,
SF:147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Thu,\x2027\x20Feb\x
SF:202025\x2015:58:34\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Leng
SF:th:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agen
SF:t-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</
SF:title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cent
SF:er>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTS
SF:PRequest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Thu,\x2027
SF:\x20Feb\x202025\x2015:58:34\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r
SF:\n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>
SF:\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>open
SF:resty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C08BB0%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,2000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Thu
SF:,\x2027\x20Feb\x202025\x2015:58:39\x20GMT\r\nContent-Type:\x20text/html
SF:\r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61de
SF:ec4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r
SF:\n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x2
SF:0\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\
SF:x20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n
SF:\x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-eq
SF:uiv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20ht
SF:tp-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device
SF:-width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\
SF:n\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"
SF:X-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofo
SF:llow\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=de
SF:vice-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"
SF:The\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20an
SF:d\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlig
SF:hts\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20B
SF:BC\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPO
SF:ptions,147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Thu,\x2027\x
SF:20Feb\x202025\x2015:58:39\x20GMT\r\nContent-Type:\x20text/html\r\nConte
SF:nt-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrig
SF:in-Agent-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Al
SF:lowed</title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1
SF:></center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n"
SF:)%r(FourOhFourRequest,2000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x
SF:20Thu,\x2027\x20Feb\x202025\x2015:58:39\x20GMT\r\nContent-Type:\x20text
SF:/html\r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\
SF:"61deec4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\
SF:r\n\r\n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x
SF:20\x20\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<titl
SF:e>\n\x20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</tit
SF:le>\n\x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20ht
SF:tp-equiv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\
SF:x20http-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=d
SF:evice-width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewpor
SF:t\">\n\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equ
SF:iv=\"X-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x2
SF:0nofollow\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"wid
SF:th=device-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20conte
SF:nt=\"The\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\
SF:x20and\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20hi
SF:ghlights\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of
SF:\x20BBC\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bbc-vip171.telhc.bbc.co.uk (212.58.244.39)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAC%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gatec.lh.bbc.co.uk (132.185.132.12)
Host is up (0.0099s latency).
All 65535 scanned ports on gatec.lh.bbc.co.uk (132.185.132.12) are in ignored states.
Not shown: 65535 filtered tcp ports (no-response)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Sun Solaris 8|9
OS CPE: cpe:/o:sun:sunos:5.8 cpe:/o:sun:sunos:5.9
OS details: Sun Solaris 8, Sun Solaris 9 (SPARC)

Nmap scan report for gatea.telhc.bbc.co.uk (132.185.161.100)
Host is up (0.0095s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
53/tcp    open     domain     ISC BIND 9.9.9-P8
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip145.lbh.bbc.co.uk (212.58.249.207)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE VERSION
80/tcp  open   http?
443/tcp closed https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAC%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (94%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 3.10 - 3.12 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 3.13 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.9 (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.228.21
Host is up (0.0096s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|storage-misc|firewall
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (91%), Linux 4.4 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 4.0 (87%), Linux 2.6.18 (87%), Linux 2.6.32 - 3.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip051.lbh.bbc.co.uk (212.58.249.113)
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (93%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 3.10 - 3.12 (92%), Linux 2.6.32 - 2.6.35 (90%), Linux 4.9 (90%), Linux 3.13 (90%), Linux 2.6.32 - 2.6.39 (90%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip163.lbh.bbc.co.uk (212.58.249.225)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAC%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (90%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.98.205.72
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for 151.101.0.81
Host is up (0.0026s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAC%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100125-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2015:58:35\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100125-AMS\x20\(151\.101\.0\.81\)</p></body></html>")%r(HTTPOptio
SF:ns,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20cl
SF:ose\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x20
SF:0\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cac
SF:he\r\nX-Served-By:\x20cache-ams2100103-AMS\r\nAccept-Ranges:\x20bytes\r
SF:\nDate:\x20Thu,\x2027\x20Feb\x202025\x2015:58:35\x20GMT\r\nVia:\x201\.1
SF:\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown
SF:\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown
SF:\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x
SF:20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21
SF:00103-AMS\x20\(151\.101\.0\.81\)</p></body></html>")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100121\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams21026\r\n\r\nBad\x20Request")%r(FourOhFourRequest,203,"HT
SF:TP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconte
SF:nt-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Se
SF:rved-By:\x20cache-ams2100127-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x2
SF:0Thu,\x2027\x20Feb\x202025\x2015:58:35\x20GMT\r\nVia:\x201\.1\x20varnis
SF:h\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain
SF:\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain
SF::\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20
SF:added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100127-AMS\
SF:x20\(151\.101\.0\.81\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C08BB2%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1B7,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20291\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100094\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb348716e94e9f83a
SF:c23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://www\.fastly\.com/document
SF:ation/guides/concepts/errors/#routing-errors\x20for\x20more\x20informat
SF:ion\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Req
SF:uest\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:
SF:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100129\r\
SF:n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alt
SF:ernative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb3487
SF:16e94e9f83ac23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x20use
SF:\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.
SF:com/en/guides/common-400-errors#error-421-misdirected-request\x20for\x2
SF:0more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x2042
SF:1\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:
SF:\x20cache-ams2100091\r\n\r\nRequested\x20host\x20does\x20not\x20match\x
SF:20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20ce
SF:rtificate\x20\[7ccb348716e94e9f83ac23533d4648b0a3a69ede6bd4117e83012287
SF:6855c81a\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x2
SF:0https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdir
SF:ected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100132\r\n\r\nBad\x20Request")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100139\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip094.lbh.bbc.co.uk (212.58.249.156)
Host is up (0.0099s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAC%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type:\x20te
SF:xt/html\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2015:58:34\x20GMT\r\nCon
SF:nection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x20html>
SF:\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--\x20VER
SF:SION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BBC\x20-\
SF:x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\x20<met
SF:a\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content-Type\"
SF:>\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"encoding\
SF:">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20initial-s
SF:cale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20\x20<me
SF:ta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatible\">\n
SF:\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20name=\"rob
SF:ots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\x20name
SF:=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x20of\x2
SF:0the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x20headli
SF:nes,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x20much\x
SF:20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\"\x20na
SF:me=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www\.bbc\.
SF:co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\x20")%r
SF:(HTTPOptions,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type:\x2
SF:0text/html\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2015:58:35\x20GMT\r\n
SF:Connection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x20ht
SF:ml>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--\x20
SF:VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BBC\x2
SF:0-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\x20<
SF:meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content-Typ
SF:e\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"encodi
SF:ng\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20initia
SF:l-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20\x20
SF:<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatible\"
SF:>\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20name=\"
SF:robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\x20n
SF:ame=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x20of
SF:\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x20hea
SF:dlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x20muc
SF:h\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\"\x2
SF:0name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www\.bb
SF:c\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\x20"
SF:);
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C08BB2%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-Type
SF::\x20text/html\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2015:58:41\x20GMT
SF:\r\nConnection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYPE\x
SF:20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<!--
SF:\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x20BB
SF:C\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x20\
SF:x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Content
SF:-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\"en
SF:coding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x20in
SF:itial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\x20
SF:\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compatib
SF:le\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20nam
SF:e=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width\"\
SF:x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20best\x
SF:20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport\x2
SF:0headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and\x2
SF:0much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Online\
SF:"\x20name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://www
SF:\.bbc\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x20\
SF:x20")%r(HTTPOptions,7F1A,"HTTP/1\.1\x20404\x20Not\x20Found\r\nContent-T
SF:ype:\x20text/html\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2015:58:41\x20
SF:GMT\r\nConnection:\x20close\r\nContent-Length:\x2032408\r\n\r\n<!DOCTYP
SF:E\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x20<
SF:!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20\x2
SF:0BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x20\x
SF:20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"Cont
SF:ent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equiv=\
SF:"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,\x2
SF:0initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x20\
SF:x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Compa
SF:tible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\x20
SF:name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width
SF:\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20bes
SF:t\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sport
SF:\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20and
SF:\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20Onli
SF:ne\"\x20name=\"description\">\n\x20\x20\x20\x20<link\x20href=\"https://
SF:www\.bbc\.co\.uk/a-z/\"\x20rel=\"index\"\x20title=\"A\x20to\x20Z\">\n\x
SF:20\x20");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 5.1 (89%), Linux 3.10 - 3.12 (88%), Linux 3.13 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ec2-63-33-109-90.eu-west-1.compute.amazonaws.com (63.33.109.90)
Host is up (0.017s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      nginx 1.14.1
443/tcp open  ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C08BB2%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1B0,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-
SF:Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max
SF:-Age=3600;\x20Path=/;\x20Expires=Thu,\x2027\x20Feb\x202025\x2016:58:41\
SF:x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://picos\.tools\.bb
SF:c\.co\.uk/landing\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x2
SF:0charset=utf-8\r\nContent-Length:\x2072\r\nDate:\x20Thu,\x2027\x20Feb\x
SF:202025\x2015:58:41\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20R
SF:edirect\.\x20Redirecting\x20to\x20https://picos\.tools\.bbc\.co\.uk/lan
SF:ding")%r(HTTPOptions,1B0,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\n
SF:Set-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x2
SF:0Max-Age=3600;\x20Path=/;\x20Expires=Thu,\x2027\x20Feb\x202025\x2016:58
SF::41\x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://picos\.tools
SF:\.bbc\.co\.uk/landing\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain
SF:;\x20charset=utf-8\r\nContent-Length:\x2072\r\nDate:\x20Thu,\x2027\x20F
SF:eb\x202025\x2015:58:41\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\
SF:x20Redirect\.\x20Redirecting\x20to\x20https://picos\.tools\.bbc\.co\.uk
SF:/landing")%r(FourOhFourRequest,1DD,"HTTP/1\.1\x20307\x20Temporary\x20Re
SF:direct\r\nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F
SF:nice%2520ports%252C%2FTri%256Eity\.txt%252ebak%22%7D;\x20Max-Age=3600;\
SF:x20Path=/;\x20Expires=Thu,\x2027\x20Feb\x202025\x2016:58:41\x20GMT;\x20
SF:HttpOnly;\x20Secure\r\nLocation:\x20https://picos\.tools\.bbc\.co\.uk/l
SF:anding\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x20charset=ut
SF:f-8\r\nContent-Length:\x2072\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x201
SF:5:58:41\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20Redirect\.\x
SF:20Redirecting\x20to\x20https://picos\.tools\.bbc\.co\.uk/landing")%r(RP
SF:CCheck,2F,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r
SF:\n\r\n")%r(DNSStatusRequestTCP,2F,"HTTP/1\.1\x20400\x20Bad\x20Request\r
SF:\nConnection:\x20close\r\n\r\n")%r(LDAPBindReq,2F,"HTTP/1\.1\x20400\x20
SF:Bad\x20Request\r\nConnection:\x20close\r\n\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for a2-16-6-220.deploy.static.akamaitechnologies.com (2.16.6.220)
Host is up (0.0027s latency).
Not shown: 65531 filtered tcp ports (no-response)
PORT     STATE  SERVICE          VERSION
53/tcp   closed domain
80/tcp   open   http             AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
443/tcp  open   ssl/https?
8883/tcp open   ssl/secure-mqtt?
Device type: general purpose|storage-misc|WAP
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X|5.X|2.4.X (92%), Synology DiskStation Manager 5.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:5 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:linux:linux_kernel:2.4
Aggressive OS guesses: Linux 2.6.32 or 3.10 (92%), Linux 2.6.32 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 4.4 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 2.6.32 - 3.0 (88%), Linux 5.0 - 5.4 (88%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 2.6.18 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailout1.cwwtf.bbc.co.uk (132.185.160.180)
Host is up (0.0093s latency).
Not shown: 65288 closed tcp ports (reset), 242 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip117.telhc.bbc.co.uk (212.58.244.72)
Host is up (0.0086s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAC%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 132.185.158.45
Host is up (0.0094s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
113/tcp closed ident
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (89%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip058.lbh.bbc.co.uk (212.58.249.120)
Host is up (0.0095s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C08BAC%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (90%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.98.205.88
Host is up (0.010s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Warning: 132.185.161.176 giving up on port because retransmission cap hit (6).
Warning: 212.58.251.88 giving up on port because retransmission cap hit (6).
Warning: 212.58.251.122 giving up on port because retransmission cap hit (6).
Warning: 132.185.160.100 giving up on port because retransmission cap hit (6).
Nmap scan report for bbc-vip169.telhc.bbc.co.uk (212.58.244.16)
Host is up (0.0094s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C09DB4%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.97.178.72
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for 52.97.146.104
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for bbc-vip152.telhc.bbc.co.uk (212.58.244.129)
Host is up (0.0093s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE VERSION
80/tcp  open  http?
443/tcp open  https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C09DB4%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for jira.dev.bbc.co.uk (212.58.250.23)
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Apache httpd 2.4.62 ((Red Hat Enterprise Linux) OpenSSL/3.2.2)
443/tcp open  ssl/https Apache/2.4.62 (Red Hat Enterprise Linux) OpenSSL/3.2.2
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|2.6.X (87%)
OS CPE: cpe:/o:linux:linux_kernel:4.0 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.0 (87%), Linux 2.6.32 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.228.23
Host is up (0.0093s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  closed https
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: firewall|proxy server|WAP|general purpose|phone|telecom-misc
Running: Check Point embedded, Citrix embedded, Juniper IVE OS 7.X, Linksys embedded, Linux 2.4.X|2.6.X, ISS embedded, Avaya Communication Manager
OS CPE: cpe:/h:checkpoint:zonealarm_z100g cpe:/h:juniper:mag2600 cpe:/h:linksys:wap54g cpe:/o:linux:linux_kernel:2.4.18 cpe:/h:iss:proventia_gx3002c cpe:/o:linux:linux_kernel:2.6.24 cpe:/o:linux:linux_kernel:2.6.11 cpe:/a:avaya:communication_manager
Too many fingerprints match this host to give specific OS details

Nmap scan report for 52.97.166.168
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for svn.bbc.co.uk (212.58.242.133)
Host is up (0.011s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
443/tcp open  ssl/https Apache
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|2.6.X|3.X (89%)
OS CPE: cpe:/o:linux:linux_kernel:4.0 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10
Aggressive OS guesses: Linux 4.0 (89%), Linux 2.6.32 (85%), Linux 2.6.32 or 3.10 (85%), Linux 4.4 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for server-13-227-219-122.ams54.r.cloudfront.net (13.227.219.122)
Host is up (0.0028s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Amazon CloudFront httpd
443/tcp open  ssl/https CloudFront
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bbc-vip084.lbh.bbc.co.uk (212.58.249.146)
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C09DB4%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 3.10 - 3.12 (90%), Linux 2.6.32 or 3.10 (89%), Linux 3.13 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for server-13-227-219-58.ams54.r.cloudfront.net (13.227.219.58)
Host is up (0.0032s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Amazon CloudFront httpd
443/tcp open  ssl/https CloudFront
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for ec2-46-137-181-193.eu-west-1.compute.amazonaws.com (46.137.181.193)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Node.js Express framework
443/tcp open  ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C09DBA%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-
SF:Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max
SF:-Age=3600;\x20Path=/;\x20Expires=Thu,\x2027\x20Feb\x202025\x2018:15:38\
SF:x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.
SF:com/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x
SF:20charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Thu,\x2027\x20Feb\
SF:x202025\x2017:15:38\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20
SF:Redirect\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-re
SF:quired")%r(HTTPOptions,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r
SF:\nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\
SF:x20Max-Age=3600;\x20Path=/;\x20Expires=Thu,\x2027\x20Feb\x202025\x2018:
SF:15:38\x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\
SF:.bbc\.com/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Thu,\x2027\x
SF:20Feb\x202025\x2017:15:38\x20GMT\r\nConnection:\x20close\r\n\r\nTempora
SF:ry\x20Redirect\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/lo
SF:gin-required")%r(FourOhFourRequest,1E3,"HTTP/1\.1\x20307\x20Temporary\x
SF:20Redirect\r\nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%2
SF:2%2Fnice%2520ports%252C%2FTri%256Eity\.txt%252ebak%22%7D;\x20Max-Age=36
SF:00;\x20Path=/;\x20Expires=Thu,\x2027\x20Feb\x202025\x2018:15:38\x20GMT;
SF:\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.com/log
SF:in-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x20chars
SF:et=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Thu,\x2027\x20Feb\x202025
SF:\x2017:15:38\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20Redirec
SF:t\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-required"
SF:)%r(RTSPRequest,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-C
SF:ookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max-
SF:Age=3600;\x20Path=/;\x20Expires=Thu,\x2027\x20Feb\x202025\x2018:15:43\x
SF:20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.c
SF:om/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x2
SF:0charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Thu,\x2027\x20Feb\x
SF:202025\x2017:15:43\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20R
SF:edirect\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-req
SF:uired");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|2.6.X (87%)
OS CPE: cpe:/o:linux:linux_kernel:4.0 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.0 (87%), Linux 2.6.32 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ns3.bbcdns.net (148.163.199.65)
Host is up (0.0034s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|5.X|2.6.X (87%)
OS CPE: cpe:/o:linux:linux_kernel:4.0 cpe:/o:linux:linux_kernel:5 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.0 (87%), Linux 4.15 - 5.8 (85%), Linux 5.0 - 5.4 (85%), Linux 2.6.32 (85%), Linux 4.4 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ftping104.telhc.bbc.co.uk (212.58.244.9)
Host is up (0.0096s latency).
Not shown: 37299 filtered tcp ports (no-response), 28234 closed tcp ports (reset)
PORT    STATE SERVICE   VERSION
21/tcp  open  ftp       ProFTPD 1.3.5e
443/tcp open  ssl/https Apache/2.4.6 (Red Hat Enterprise Linux) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (93%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 3.10 - 3.12 (92%), Linux 2.6.32 - 2.6.35 (90%), Linux 4.9 (90%), Linux 3.13 (90%), Linux 2.6.32 - 2.6.39 (90%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Unix

Nmap scan report for mailout0.telhc.bbc.co.uk (132.185.161.179)
Host is up (0.0096s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 132.185.159.183
Host is up (0.0100s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE  VERSION
113/tcp closed ident
443/tcp open   ssl/http SAP Business Connector
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (87%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.244.23
Host is up (0.0098s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C09DB4%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bbc-vip136.lbh.bbc.co.uk (212.58.249.198)
Host is up (0.0099s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C09DB4%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (90%), Linux 5.1 (89%), Linux 2.6.32 (89%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for server-13-227-219-18.ams54.r.cloudfront.net (13.227.219.18)
Host is up (0.0031s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Amazon CloudFront httpd
443/tcp open  ssl/https CloudFront
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for support0.telhc.bbc.co.uk (212.58.251.88)
Host is up (0.0099s latency).
Not shown: 65507 closed tcp ports (reset)
PORT      STATE    SERVICE        VERSION
21/tcp    open     ftp?
22/tcp    open     ssh?
25/tcp    filtered smtp
80/tcp    open     http           Apache httpd 2.2.34 ((Unix) mod_ssl/2.2.34 OpenSSL/1.0.1t)
443/tcp   open     ssl/http       Apache httpd 2.2.34 ((Unix) mod_ssl/2.2.34 OpenSSL/1.0.1t)
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
1219/tcp  filtered aeroflight-ret
4209/tcp  filtered vrml-multi-use
5000/tcp  open     upnp?
7371/tcp  filtered unknown
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
11450/tcp filtered unknown
14307/tcp filtered unknown
14880/tcp filtered unknown
17910/tcp filtered unknown
18966/tcp filtered unknown
20850/tcp filtered unknown
34070/tcp filtered unknown
43761/tcp filtered unknown
46190/tcp filtered unknown
52995/tcp filtered unknown
56763/tcp filtered unknown
57495/tcp filtered unknown
60805/tcp filtered unknown
61744/tcp filtered unknown
65057/tcp filtered unknown
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port21-TCP:V=7.94SVN%I=7%D=2/27%Time=67C09DAF%P=x86_64-pc-linux-gnu%r(N
SF:ULL,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(GenericLines
SF:,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(Help,1E,"421\x2
SF:0for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(GetRequest,1E,"421\x20for\
SF:x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(HTTPOptions,1E,"421\x20for\x20f
SF:tp\x20use\x20ftp\.bbc\.co\.uk\n")%r(RTSPRequest,1E,"421\x20for\x20ftp\x
SF:20use\x20ftp\.bbc\.co\.uk\n")%r(RPCCheck,1E,"421\x20for\x20ftp\x20use\x
SF:20ftp\.bbc\.co\.uk\n")%r(DNSVersionBindReqTCP,1E,"421\x20for\x20ftp\x20
SF:use\x20ftp\.bbc\.co\.uk\n")%r(DNSStatusRequestTCP,1E,"421\x20for\x20ftp
SF:\x20use\x20ftp\.bbc\.co\.uk\n")%r(SSLSessionReq,1E,"421\x20for\x20ftp\x
SF:20use\x20ftp\.bbc\.co\.uk\n")%r(TerminalServerCookie,1E,"421\x20for\x20
SF:ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(TLSSessionReq,1E,"421\x20for\x20ft
SF:p\x20use\x20ftp\.bbc\.co\.uk\n")%r(Kerberos,1E,"421\x20for\x20ftp\x20us
SF:e\x20ftp\.bbc\.co\.uk\n")%r(SMBProgNeg,1E,"421\x20for\x20ftp\x20use\x20
SF:ftp\.bbc\.co\.uk\n")%r(X11Probe,1E,"421\x20for\x20ftp\x20use\x20ftp\.bb
SF:c\.co\.uk\n")%r(FourOhFourRequest,1E,"421\x20for\x20ftp\x20use\x20ftp\.
SF:bbc\.co\.uk\n")%r(LPDString,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.c
SF:o\.uk\n")%r(LDAPSearchReq,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\
SF:.uk\n")%r(LDAPBindReq,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\
SF:n")%r(SIPOptions,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r
SF:(LANDesk-RC,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(Term
SF:inalServer,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(NCP,1
SF:E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(NotesRPC,1E,"421\
SF:x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(JavaRMI,1E,"421\x20for\x
SF:20ftp\x20use\x20ftp\.bbc\.co\.uk\n")%r(WMSRequest,1E,"421\x20for\x20ftp
SF:\x20use\x20ftp\.bbc\.co\.uk\n")%r(oracle-tns,1E,"421\x20for\x20ftp\x20u
SF:se\x20ftp\.bbc\.co\.uk\n")%r(ms-sql-s,1E,"421\x20for\x20ftp\x20use\x20f
SF:tp\.bbc\.co\.uk\n")%r(afp,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\
SF:.uk\n")%r(giop,1E,"421\x20for\x20ftp\x20use\x20ftp\.bbc\.co\.uk\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port5000-TCP:V=7.94SVN%I=7%D=2/27%Time=67C09DB4%P=x86_64-pc-linux-gnu%r
SF:(NULL,45E,"\+\+\+\x20\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
SF:\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\
SF:*\*\*\*\*\*\*\*\*\*\r\n\+\+\+\x20\r\n\+\+\+\x20\x20\x20\x20\x20\x20\x20
SF:\x20Atos\x20-\x20BBC\x20Internet\x20Operations\x20-\x20Support\x20Chat\
SF:x20Area\r\n\+\+\+\x20\r\n\+\+\+\x20\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
SF:\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\
SF:*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\r\n\+\+\+\x20\r\n\+\+\+\x20This\x20ch
SF:at\x20area\x20is\x20for\x20the\x20use\x20of\x20employees\x20and\x20cust
SF:omers\x20of\x20Atos\x20Internet\r\n\+\+\+\x20Operations\x20\(BBC\)\x20f
SF:or\x20business\x20communications\.\x20\x20Others\x20with\x20explicit\x2
SF:0\r\n\+\+\+\x20permission\x20of\x20Internet\x20Operations\x20may\x20als
SF:o\x20use\x20the\x20service\.\x20\x20If\x20you\x20do\x20\r\n\+\+\+\x20no
SF:t\x20have\x20permission\x20to\x20use\x20this\x20talker\x20you\x20should
SF:\x20disconnect\x20now\.\r\n\+\+\+\x20\r\n\+\+\+\x20Please\x20remember\x
SF:20that\x20this\x20is\x20a\x20semi-public\x20forum\x20and\x20as\x20such\
SF:x20you\x20should\x20\r\n\+\+\+\x20not\x20say\x20anything\x20on\x20the\x
SF:20talker\x20that\x20you\x20would\x20not\x20say\x20in\x20public\.\x20\x2
SF:0The\x20\r\n\+\+\+\x20use\x20of\x20lists\x20and\x20whispers\x20can\x20m
SF:inimise\x20the\x20audience\x20of\x20your\x20comments\x20\r\n\+\+\+\x20b
SF:ut\x20should\x20not\x20be\x20considered\x20as\x20secure\.\r\n\+\+\+\x20
SF:\r\n\+\+\+\x20Use\x20of\x20the\x20talker\x20will\x20be\x20periodically\
SF:x20monitored\x20to\x20ensure\x20that\x20it\x20is\x20\r\n\+\+\+\x20")%r(
SF:GenericLines,45E,"\+\+\+\x20\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\
SF:*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
SF:\*\*\*\*\*\*\*\*\*\*\*\*\*\r\n\+\+\+\x20\r\n\+\+\+\x20\x20\x20\x20\x20\
SF:x20\x20\x20Atos\x20-\x20BBC\x20Internet\x20Operations\x20-\x20Support\x
SF:20Chat\x20Area\r\n\+\+\+\x20\r\n\+\+\+\x20\*\*\*\*\*\*\*\*\*\*\*\*\*\*\
SF:*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
SF:\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\r\n\+\+\+\x20\r\n\+\+\+\x20Thi
SF:s\x20chat\x20area\x20is\x20for\x20the\x20use\x20of\x20employees\x20and\
SF:x20customers\x20of\x20Atos\x20Internet\r\n\+\+\+\x20Operations\x20\(BBC
SF:\)\x20for\x20business\x20communications\.\x20\x20Others\x20with\x20expl
SF:icit\x20\r\n\+\+\+\x20permission\x20of\x20Internet\x20Operations\x20may
SF:\x20also\x20use\x20the\x20service\.\x20\x20If\x20you\x20do\x20\r\n\+\+\
SF:+\x20not\x20have\x20permission\x20to\x20use\x20this\x20talker\x20you\x2
SF:0should\x20disconnect\x20now\.\r\n\+\+\+\x20\r\n\+\+\+\x20Please\x20rem
SF:ember\x20that\x20this\x20is\x20a\x20semi-public\x20forum\x20and\x20as\x
SF:20such\x20you\x20should\x20\r\n\+\+\+\x20not\x20say\x20anything\x20on\x
SF:20the\x20talker\x20that\x20you\x20would\x20not\x20say\x20in\x20public\.
SF:\x20\x20The\x20\r\n\+\+\+\x20use\x20of\x20lists\x20and\x20whispers\x20c
SF:an\x20minimise\x20the\x20audience\x20of\x20your\x20comments\x20\r\n\+\+
SF:\+\x20but\x20should\x20not\x20be\x20considered\x20as\x20secure\.\r\n\+\
SF:+\+\x20\r\n\+\+\+\x20Use\x20of\x20the\x20talker\x20will\x20be\x20period
SF:ically\x20monitored\x20to\x20ensure\x20that\x20it\x20is\x20\r\n\+\+\+\x
SF:20");
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (87%), Oracle Solaris 11|10 (86%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:oracle:solaris:11 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (87%), Oracle Solaris 11 (86%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.98.219.40
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for 212.58.228.94
Host is up (0.0091s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  closed https
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: firewall|proxy server|WAP|general purpose|phone|telecom-misc
Running: Check Point embedded, Citrix embedded, Juniper IVE OS 7.X, Linksys embedded, Linux 2.4.X|2.6.X, ISS embedded, Avaya Communication Manager
OS CPE: cpe:/h:checkpoint:zonealarm_z100g cpe:/h:juniper:mag2600 cpe:/h:linksys:wap54g cpe:/o:linux:linux_kernel:2.4.18 cpe:/h:iss:proventia_gx3002c cpe:/o:linux:linux_kernel:2.6.24 cpe:/o:linux:linux_kernel:2.6.11 cpe:/a:avaya:communication_manager
Too many fingerprints match this host to give specific OS details

Nmap scan report for 52.97.146.120
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for ec2-52-19-225-170.eu-west-1.compute.amazonaws.com (52.19.225.170)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C09DB3%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,223C,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Thu,\x2027
SF:\x20Feb\x202025\x2017:15:30\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e
SF:98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOC
SF:TYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x
SF:20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20
SF:\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x2
SF:0\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"C
SF:ontent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equi
SF:v=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,
SF:\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x
SF:20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Co
SF:mpatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\
SF:x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wi
SF:dth\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20
SF:best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sp
SF:ort\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20
SF:and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20O
SF:nline\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,
SF:147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Thu,\x2027\x20Feb\x
SF:202025\x2017:15:30\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Leng
SF:th:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agen
SF:t-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</
SF:title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cent
SF:er>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTS
SF:PRequest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Thu,\x2027
SF:\x20Feb\x202025\x2017:15:30\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r
SF:\n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>
SF:\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>open
SF:resty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C09DB8%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,3000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Thu
SF:,\x2027\x20Feb\x202025\x2017:15:35\x20GMT\r\nContent-Type:\x20text/html
SF:\r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61de
SF:ec4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r
SF:\n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x2
SF:0\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\
SF:x20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n
SF:\x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-eq
SF:uiv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20ht
SF:tp-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device
SF:-width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\
SF:n\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"
SF:X-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofo
SF:llow\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=de
SF:vice-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"
SF:The\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20an
SF:d\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlig
SF:hts\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20B
SF:BC\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPO
SF:ptions,147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Thu,\x2027\x
SF:20Feb\x202025\x2017:15:36\x20GMT\r\nContent-Type:\x20text/html\r\nConte
SF:nt-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrig
SF:in-Agent-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Al
SF:lowed</title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1
SF:></center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n"
SF:)%r(FourOhFourRequest,3000,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x
SF:20Thu,\x2027\x20Feb\x202025\x2017:15:36\x20GMT\r\nContent-Type:\x20text
SF:/html\r\nContent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\
SF:"61deec4b-7e98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\
SF:r\n\r\n<!DOCTYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x
SF:20\x20\x20\x20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<titl
SF:e>\n\x20\x20\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</tit
SF:le>\n\x20\x20\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20ht
SF:tp-equiv=\"Content-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\
SF:x20http-equiv=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=d
SF:evice-width,\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewpor
SF:t\">\n\x20\x20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equ
SF:iv=\"X-UA-Compatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x2
SF:0nofollow\"\x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"wid
SF:th=device-width\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20conte
SF:nt=\"The\x20best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\
SF:x20and\x20sport\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20hi
SF:ghlights\x20and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of
SF:\x20BBC\x20Online\"\x20name=\"description\">\n\x20\x20\x20\x20<lin");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for 151.101.192.81
Host is up (0.0028s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C09DB4%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100144-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2017:15:31\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100144-AMS\x20\(151\.101\.192\.81\)</p></body></html>")%r(HTTPOpt
SF:ions,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20
SF:close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x
SF:200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-c
SF:ache\r\nX-Served-By:\x20cache-ams21035-AMS\r\nAccept-Ranges:\x20bytes\r
SF:\nDate:\x20Thu,\x2027\x20Feb\x202025\x2017:15:31\x20GMT\r\nVia:\x201\.1
SF:\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown
SF:\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown
SF:\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x
SF:20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21
SF:035-AMS\x20\(151\.101\.192\.81\)</p></body></html>")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100086\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100125\r\n\r\nBad\x20Request")%r(FourOhFourRequest,205,"
SF:HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncon
SF:tent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-
SF:Served-By:\x20cache-ams2100129-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\
SF:x20Thu,\x2027\x20Feb\x202025\x2017:15:31\x20GMT\r\nVia:\x201\.1\x20varn
SF:ish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20doma
SF:in\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20doma
SF:in:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x
SF:20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100129-AM
SF:S\x20\(151\.101\.192\.81\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C09DBA%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1B5,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20291\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21028\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb348716e94e9f83ac2
SF:3533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://www\.fastly\.com/documentat
SF:ion/guides/concepts/errors/#routing-errors\x20for\x20more\x20informatio
SF:n\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Reque
SF:st\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x
SF:20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100085\r\n\
SF:r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alter
SF:native\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb348716
SF:e94e9f83ac23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x20use\x
SF:20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.co
SF:m/en/guides/common-400-errors#error-421-misdirected-request\x20for\x20m
SF:ore\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x20421\
SF:x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2
SF:0297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x
SF:20cache-ams2100088\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20
SF:any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20cert
SF:ificate\x20\[7ccb348716e94e9f83ac23533d4648b0a3a69ede6bd4117e8301228768
SF:55c81a\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20h
SF:ttps://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdirec
SF:ted-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21073\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"HTTP
SF:/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21081\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.228.29
Host is up (0.0098s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|storage-misc|firewall
Running (JUST GUESSING): Linux 2.6.X|4.X|3.X (92%), Synology DiskStation Manager 5.X (86%), WatchGuard Fireware 11.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 4.4 (92%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 3.11 - 4.1 (88%), Linux 3.2 - 3.8 (88%), Linux 4.0 (87%), Linux 2.6.18 (87%), Linux 2.6.32 - 3.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 212.58.228.86
Host is up (0.0090s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  closed https
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: firewall|proxy server|WAP|general purpose|phone|telecom-misc
Running: Check Point embedded, Citrix embedded, Juniper IVE OS 7.X, Linksys embedded, Linux 2.4.X|2.6.X, ISS embedded, Avaya Communication Manager
OS CPE: cpe:/h:checkpoint:zonealarm_z100g cpe:/h:juniper:mag2600 cpe:/h:linksys:wap54g cpe:/o:linux:linux_kernel:2.4.18 cpe:/h:iss:proventia_gx3002c cpe:/o:linux:linux_kernel:2.6.24 cpe:/o:linux:linux_kernel:2.6.11 cpe:/a:avaya:communication_manager
Too many fingerprints match this host to give specific OS details

Nmap scan report for lists1.telhc.bbc.co.uk (212.58.251.122)
Host is up (0.010s latency).
Not shown: 65514 closed tcp ports (reset)
PORT      STATE    SERVICE      VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
587/tcp   open     smtp         Sendmail 8.14.9+Sun/8.12.9
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
1259/tcp  filtered opennl-voice
4769/tcp  filtered unknown
4813/tcp  filtered unknown
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
12606/tcp filtered unknown
13135/tcp filtered unknown
14125/tcp filtered unknown
15862/tcp filtered unknown
31380/tcp filtered unknown
37376/tcp filtered unknown
39195/tcp filtered unknown
44385/tcp filtered unknown
55920/tcp filtered unknown
61776/tcp filtered unknown
62691/tcp filtered unknown
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (87%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (87%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Unix

Nmap scan report for a2-16-6-202.deploy.static.akamaitechnologies.com (2.16.6.202)
Host is up (0.0031s latency).
Not shown: 65532 filtered tcp ports (no-response)
PORT     STATE SERVICE          VERSION
80/tcp   open  http             AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
443/tcp  open  ssl/https?
8883/tcp open  ssl/secure-mqtt?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|5.X|2.6.X|3.X (91%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10
Aggressive OS guesses: Linux 4.15 - 5.8 (91%), Linux 5.0 - 5.4 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 4.4 (90%), Linux 5.0 - 5.5 (89%), Linux 2.6.32 - 2.6.35 (87%), Linux 2.6.32 - 2.6.39 (87%), Linux 2.6.32 - 3.0 (85%), Linux 4.0 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for rt1-132.lh.bbc.co.uk (132.185.132.2)
Host is up (0.0094s latency).
Not shown: 65534 closed tcp ports (reset)
PORT   STATE    SERVICE VERSION
25/tcp filtered smtp
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: switch
Running: Cisco IOS 12.X
OS CPE: cpe:/h:cisco:catalyst_6509:e cpe:/o:cisco:ios:12.2
OS details: Cisco 6509 switch (IOS 12.2)

Nmap scan report for ftping501.bc.bbc.co.uk (212.58.242.5)
Host is up (0.010s latency).
Not shown: 65530 closed tcp ports (reset)
PORT    STATE    SERVICE   VERSION
21/tcp  open     ftp       ProFTPD 1.3.5b
25/tcp  filtered smtp
80/tcp  open     http      Apache httpd 2.4.6 ((Red Hat Enterprise Linux) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/2.7.5)
123/tcp filtered ntp
443/tcp open     ssl/https Apache/2.4.6 (Red Hat Enterprise Linux) OpenSSL/1.0.2k-fips mod_wsgi/3.4 Python/
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (96%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (96%), Linux 4.0 (94%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (91%), Linux 3.10 - 3.12 (90%), Linux 2.6.32 - 2.6.35 (89%), Linux 2.6.32 - 2.6.39 (89%), Linux 4.9 (88%), Linux 3.13 (88%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Unix

Nmap scan report for 212.58.228.25
Host is up (0.0099s latency).
Not shown: 65527 filtered tcp ports (no-response)
PORT     STATE  SERVICE        VERSION
80/tcp   closed http
443/tcp  open   ssl/https?
6081/tcp closed geneve
8080/tcp closed http-proxy
8140/tcp closed puppet
8888/tcp closed sun-answerbook
9339/tcp closed gnmi-gnoi
9933/tcp closed unknown
Device type: general purpose|storage-misc|firewall
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (92%), Synology DiskStation Manager 5.X (85%), WatchGuard Fireware 11.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 4.4 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 2.6.32 - 3.0 (87%), Linux 3.11 - 4.1 (86%), Linux 3.2 - 3.8 (86%), Linux 2.6.34 (86%), Linux 2.6.18 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.81
Host is up (0.0030s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C09DB4%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,200,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21079-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2017:15:31\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21079-AMS\x20\(151\.101\.64\.81\)</p></body></html>")%r(HTTPOptions,
SF:204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close
SF:\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x200\r
SF:\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\
SF:r\nX-Served-By:\x20cache-ams2100110-AMS\r\nAccept-Ranges:\x20bytes\r\nD
SF:ate:\x20Thu,\x2027\x20Feb\x202025\x2017:15:31\x20GMT\r\nVia:\x201\.1\x2
SF:0varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x2
SF:0domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x2
SF:0domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20b
SF:een\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21001
SF:10-AMS\x20\(151\.101\.64\.81\)</p></body></html>")%r(RTSPRequest,96,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100144\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\
SF:x20cache-ams21079\r\n\r\nBad\x20Request")%r(FourOhFourRequest,204,"HTTP
SF:/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent
SF:-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serv
SF:ed-By:\x20cache-ams2100106-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20T
SF:hu,\x2027\x20Feb\x202025\x2017:15:31\x20GMT\r\nVia:\x201\.1\x20varnish\
SF:r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x
SF:20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\
SF:x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20ad
SF:ded\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100106-AMS\x2
SF:0\(151\.101\.64\.81\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C09DBA%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100146\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb348716e94e9f83a
SF:c23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1B5,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20291\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2106
SF:2\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb
SF:348716e94e9f83ac23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://www\.fastl
SF:y\.com/documentation/guides/concepts/errors/#routing-errors\x20for\x20m
SF:ore\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x20421\
SF:x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2
SF:0297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x
SF:20cache-ams2100119\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20
SF:any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20cert
SF:ificate\x20\[7ccb348716e94e9f83ac23533d4648b0a3a69ede6bd4117e8301228768
SF:55c81a\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20h
SF:ttps://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdirec
SF:ted-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100129\r\n\r\nBad\x20Request")%r(RTSPRequest,96,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100107\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 6.X|8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.1 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 6.1-RELEASE (85%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 52.97.131.232
Host is up (0.011s latency).
Not shown: 65528 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  open   http       Microsoft IIS httpd 10.0
110/tcp closed pop3
143/tcp closed imap
443/tcp closed https
587/tcp closed submission
993/tcp closed imaps
995/tcp closed pop3s
Device type: load balancer
Running (JUST GUESSING): Citrix embedded (90%)
Aggressive OS guesses: Citrix NetScaler load balancer (90%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for ec2-54-155-236-209.eu-west-1.compute.amazonaws.com (54.155.236.209)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Node.js Express framework
443/tcp open  ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C09DBA%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-
SF:Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max
SF:-Age=3600;\x20Path=/;\x20Expires=Thu,\x2027\x20Feb\x202025\x2018:15:38\
SF:x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.
SF:com/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x
SF:20charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Thu,\x2027\x20Feb\
SF:x202025\x2017:15:38\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20
SF:Redirect\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-re
SF:quired")%r(HTTPOptions,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r
SF:\nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\
SF:x20Max-Age=3600;\x20Path=/;\x20Expires=Thu,\x2027\x20Feb\x202025\x2018:
SF:15:38\x20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\
SF:.bbc\.com/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Thu,\x2027\x
SF:20Feb\x202025\x2017:15:38\x20GMT\r\nConnection:\x20close\r\n\r\nTempora
SF:ry\x20Redirect\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/lo
SF:gin-required")%r(FourOhFourRequest,1E3,"HTTP/1\.1\x20307\x20Temporary\x
SF:20Redirect\r\nSet-Cookie:\x20ckns_pp_session=%7B%22original_url%22%3A%2
SF:2%2Fnice%2520ports%252C%2FTri%256Eity\.txt%252ebak%22%7D;\x20Max-Age=36
SF:00;\x20Path=/;\x20Expires=Thu,\x2027\x20Feb\x202025\x2018:15:38\x20GMT;
SF:\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.com/log
SF:in-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x20chars
SF:et=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Thu,\x2027\x20Feb\x202025
SF:\x2017:15:38\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20Redirec
SF:t\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-required"
SF:)%r(RTSPRequest,1B6,"HTTP/1\.1\x20307\x20Temporary\x20Redirect\r\nSet-C
SF:ookie:\x20ckns_pp_session=%7B%22original_url%22%3A%22%2F%22%7D;\x20Max-
SF:Age=3600;\x20Path=/;\x20Expires=Thu,\x2027\x20Feb\x202025\x2018:15:43\x
SF:20GMT;\x20HttpOnly;\x20Secure\r\nLocation:\x20https://developer\.bbc\.c
SF:om/login-required\r\nVary:\x20Accept\r\nContent-Type:\x20text/plain;\x2
SF:0charset=utf-8\r\nContent-Length:\x2075\r\nDate:\x20Thu,\x2027\x20Feb\x
SF:202025\x2017:15:43\x20GMT\r\nConnection:\x20close\r\n\r\nTemporary\x20R
SF:edirect\.\x20Redirecting\x20to\x20https://developer\.bbc\.com/login-req
SF:uired");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|2.6.X|3.X (87%)
OS CPE: cpe:/o:linux:linux_kernel:4.0 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10
Aggressive OS guesses: Linux 4.0 (87%), Linux 2.6.32 (85%), Linux 2.6.32 or 3.10 (85%), Linux 4.4 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gatea.cwwtf.bbc.co.uk (132.185.160.100)
Host is up (0.010s latency).
Not shown: 65530 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (91%), Sun OpenSolaris (86%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:opensolaris cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (91%), Sun Solaris 10 (SPARC) (91%), Sun OpenSolaris 2009.06 (86%), Sun Solaris 9 (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.81
Host is up (0.0026s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C09DB4%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100134-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2017:15:31\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100134-AMS\x20\(151\.101\.128\.81\)</p></body></html>")%r(HTTPOpt
SF:ions,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20
SF:close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x
SF:200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-c
SF:ache\r\nX-Served-By:\x20cache-ams2100128-AMS\r\nAccept-Ranges:\x20bytes
SF:\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2017:15:31\x20GMT\r\nVia:\x201\
SF:.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unkno
SF:wn\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unkno
SF:wn\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has
SF:\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams
SF:2100128-AMS\x20\(151\.101\.128\.81\)</p></body></html>")%r(RTSPRequest,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100139\r\n\r\nBad\x20Request")%r(X11Probe,94,"H
SF:TTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams21059\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201
SF:,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\
SF:nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nc
SF:ontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\n
SF:X-Served-By:\x20cache-ams21062-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\
SF:x20Thu,\x2027\x20Feb\x202025\x2017:15:32\x20GMT\r\nVia:\x201\.1\x20varn
SF:ish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20doma
SF:in\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20doma
SF:in:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x
SF:20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21062-AMS\
SF:x20\(151\.101\.128\.81\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C09DBA%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100131\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7ccb348716e94e9f83a
SF:c23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100
SF:115\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\
SF:x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[7c
SF:cb348716e94e9f83ac23533d4648b0a3a69ede6bd4117e830122876855c81a\]\x20in\
SF:x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fa
SF:stly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20
SF:for\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1
SF:\x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21076\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[7ccb348716e94e9f83ac23533d4648b0a3a69ede6bd4117e8301
SF:22876855c81a\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams21063\r\n\r\nBad\x20Request")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100101\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for dns2.p09.nsone.net (198.51.45.9)
Host is up (0.0033s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for 151.101.0.82
Host is up (0.0026s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C09DB4%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100130-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2017:15:31\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100130-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOptio
SF:ns,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20cl
SF:ose\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x20
SF:0\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cac
SF:he\r\nX-Served-By:\x20cache-ams2100102-AMS\r\nAccept-Ranges:\x20bytes\r
SF:\nDate:\x20Thu,\x2027\x20Feb\x202025\x2017:15:31\x20GMT\r\nVia:\x201\.1
SF:\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown
SF:\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown
SF:\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x
SF:20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21
SF:00102-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100136\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams21080\r\n\r\nBad\x20Request")%r(FourOhFourRequest,203,"HT
SF:TP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconte
SF:nt-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Se
SF:rved-By:\x20cache-ams2100108-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x2
SF:0Thu,\x2027\x20Feb\x202025\x2017:15:31\x20GMT\r\nVia:\x201\.1\x20varnis
SF:h\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain
SF:\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain
SF::\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20
SF:added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100108-AMS\
SF:x20\(151\.101\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C09DBA%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100136\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2103
SF:5\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1B7,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20291\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100114\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553
SF:e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://www\.fastly\.com/documentation/guides/concepts/errors/#rou
SF:ting-errors\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21021\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"HTTP
SF:/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21066\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.82
Host is up (0.0027s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C09DB4%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100138-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2017:15:31\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100138-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOpt
SF:ions,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20
SF:close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x
SF:200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-c
SF:ache\r\nX-Served-By:\x20cache-ams2100140-AMS\r\nAccept-Ranges:\x20bytes
SF:\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2017:15:31\x20GMT\r\nVia:\x201\
SF:.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unkno
SF:wn\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unkno
SF:wn\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has
SF:\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams
SF:2100140-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100097\r\n\r\nBad\x20Request")%r(X11Probe,94,"H
SF:TTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serve
SF:d-by:\x20cache-ams21083\r\n\r\nBad\x20Request")%r(FourOhFourRequest,205
SF:,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\
SF:nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nc
SF:ontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\n
SF:X-Served-By:\x20cache-ams2100093-AMS\r\nAccept-Ranges:\x20bytes\r\nDate
SF::\x20Thu,\x2027\x20Feb\x202025\x2017:15:31\x20GMT\r\nVia:\x201\.1\x20va
SF:rnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20do
SF:main\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20do
SF:main:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been
SF:\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100093-
SF:AMS\x20\(151\.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C09DBA%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100136\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100
SF:140\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\
SF:x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19
SF:179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\
SF:x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fa
SF:stly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20
SF:for\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1
SF:\x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21073\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553
SF:e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams21041\r\n\r\nBad\x20Request")%r(RTSPRequest,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21048\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin0.telhc.bbc.co.uk (132.185.161.176)
Host is up (0.0097s latency).
Not shown: 65527 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
14048/tcp filtered unknown
26748/tcp filtered unknown
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip139.lbh.bbc.co.uk (212.58.249.201)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C09DB4%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (90%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin1.cwwtf.bbc.co.uk (132.185.160.177)
Host is up (0.0095s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip083.lbh.bbc.co.uk (212.58.249.145)
Host is up (0.0100s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 3.10 - 3.12 (88%), Linux 3.13 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip102.telhc.bbc.co.uk (212.58.244.57)
Host is up (0.0092s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin1.telhc.bbc.co.uk (132.185.161.177)
Host is up (0.0093s latency).
Not shown: 65529 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 40.160.90.34.bc.googleusercontent.com (34.90.160.40)
Host is up (0.0058s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http-proxy F5 BIG-IP load balancer http proxy
443/tcp open  ssl/https  Apache
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C09DBA%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,F2,"HTTP/1\.1\x20301\x20301\r\ndate:\x20Thu,\x2027\x20
SF:Feb\x202025\x2017:15:37\x20GMT\r\nserver:\x20Apache\r\nlocation:\x20htt
SF:ps://www\.sap\.com/products/recruiting-software\.html\r\nx-content-type
SF:-options:\x20nosniff\r\ncontent-length:\x200\r\nx-xss-protection:\x201;
SF:\x20mode=block\r\nconnection:\x20close\r\n\r\n")%r(HTTPOptions,F2,"HTTP
SF:/1\.1\x20301\x20301\r\ndate:\x20Thu,\x2027\x20Feb\x202025\x2017:15:38\x
SF:20GMT\r\nserver:\x20Apache\r\nlocation:\x20https://www\.sap\.com/produc
SF:ts/recruiting-software\.html\r\nx-content-type-options:\x20nosniff\r\nc
SF:ontent-length:\x200\r\nx-xss-protection:\x201;\x20mode=block\r\nconnect
SF:ion:\x20close\r\n\r\n")%r(FourOhFourRequest,115,"HTTP/1\.1\x20301\x2030
SF:1\r\ndate:\x20Thu,\x2027\x20Feb\x202025\x2017:15:38\x20GMT\r\nserver:\x
SF:20Apache\r\nlocation:\x20https://www\.sap\.com/products/recruiting-soft
SF:ware\.html\r\nx-content-type-options:\x20nosniff\r\ncontent-length:\x20
SF:0\r\ncontent-type:\x20application/x-trash\r\nx-xss-protection:\x201;\x2
SF:0mode=block\r\nconnection:\x20close\r\n\r\n")%r(tor-versions,CF,"HTTP/1
SF:\.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\ncache-control:
SF:\x20no-cache\r\ncontent-type:\x20text/html\r\nconnection:\x20close\r\n\
SF:r\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20browser\x20sent\
SF:x20an\x20invalid\x20request\.\n</body></html>\n")%r(RTSPRequest,CF,"HTT
SF:P/1\.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\ncache-contr
SF:ol:\x20no-cache\r\ncontent-type:\x20text/html\r\nconnection:\x20close\r
SF:\n\r\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20browser\x20se
SF:nt\x20an\x20invalid\x20request\.\n</body></html>\n")%r(RPCCheck,CF,"HTT
SF:P/1\.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\ncache-contr
SF:ol:\x20no-cache\r\ncontent-type:\x20text/html\r\nconnection:\x20close\r
SF:\n\r\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20browser\x20se
SF:nt\x20an\x20invalid\x20request\.\n</body></html>\n")%r(DNSVersionBindRe
SF:qTCP,CF,"HTTP/1\.1\x20400\x20Bad\x20request\r\ncontent-length:\x2090\r\
SF:ncache-control:\x20no-cache\r\ncontent-type:\x20text/html\r\nconnection
SF::\x20close\r\n\r\n<html><body><h1>400\x20Bad\x20request</h1>\nYour\x20b
SF:rowser\x20sent\x20an\x20invalid\x20request\.\n</body></html>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: Device: load balancer

Nmap scan report for 151.101.192.82
Host is up (0.0022s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C09DB4%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21036-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2017:15:31\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21036-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOptions
SF:,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clos
SF:e\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\
SF:r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache
SF:\r\nX-Served-By:\x20cache-ams21076-AMS\r\nAccept-Ranges:\x20bytes\r\nDa
SF:te:\x20Thu,\x2027\x20Feb\x202025\x2017:15:31\x20GMT\r\nVia:\x201\.1\x20
SF:varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20
SF:domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20
SF:domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20be
SF:en\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21076-
SF:AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,94,"HTTP
SF:/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21065\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\.1\x
SF:20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x201
SF:1\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20c
SF:ache-ams21054\r\n\r\nBad\x20Request")%r(FourOhFourRequest,205,"HTTP/1\.
SF:1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent-L
SF:ength:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-typ
SF:e:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served-B
SF:y:\x20cache-ams2100109-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Thu,\
SF:x2027\x20Feb\x202025\x2017:15:32\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\
SF:r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</
SF:title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\
SF:.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\
SF:x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100109-AMS\x20\(1
SF:51\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C09DBA%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21052\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21037\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21043\r\n\r\nRequested\x20host\x20does\x20not\x20match\x
SF:20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20ce
SF:rtificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631
SF:d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x2
SF:0https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdir
SF:ected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21075\r\n\r\nBad\x20Request")%r(RTSPRequest,96,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100087\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ns4.demysdns.co.uk (198.51.44.9)
Host is up (0.0028s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bbc-vip050.lbh.bbc.co.uk (212.58.249.112)
Host is up (0.0100s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (93%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 3.10 - 3.12 (92%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 3.13 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 4.9 (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip138.lbh.bbc.co.uk (212.58.249.200)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C09DB4%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 3.10 - 3.12 (90%), Linux 2.6.32 or 3.10 (89%), Linux 4.9 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip197.telhc.bbc.co.uk (212.58.244.98)
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip171.telhc.bbc.co.uk (212.58.244.39)
Host is up (0.0092s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C09DB4%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip101.telhc.bbc.co.uk (212.58.244.56)
Host is up (0.0095s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.82
Host is up (0.0026s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C09DB4%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,200,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21049-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2017:15:31\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21049-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOptions,
SF:200,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close
SF:\r\nContent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-After:\x200\r
SF:\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\
SF:r\nX-Served-By:\x20cache-ams21063-AMS\r\nAccept-Ranges:\x20bytes\r\nDat
SF:e:\x20Thu,\x2027\x20Feb\x202025\x2017:15:31\x20GMT\r\nVia:\x201\.1\x20v
SF:arnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20d
SF:omain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20d
SF:omain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20bee
SF:n\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21063-A
SF:MS\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,94,"HTTP/1
SF:\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:
SF:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:
SF:\x20cache-ams21037\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\.1\x20
SF:400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011\
SF:r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cac
SF:he-ams21043\r\n\r\nBad\x20Request")%r(FourOhFourRequest,204,"HTTP/1\.1\
SF:x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-type:
SF:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served-By:
SF:\x20cache-ams2100131-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Thu,\x2
SF:027\x20Feb\x202025\x2017:15:32\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\r\
SF:n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</ti
SF:tle>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\.\
SF:x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\x2
SF:0to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100131-AMS\x20\(151
SF:\.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C09DBA%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1B5,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20291\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21046\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://www\.fastly\.com/documentat
SF:ion/guides/concepts/errors/#routing-errors\x20for\x20more\x20informatio
SF:n\.\r\n\r")%r(HTTPOptions,1B7,"HTTP/1\.1\x20421\x20Misdirected\x20Reque
SF:st\r\nConnection:\x20close\r\nContent-Length:\x20291\r\ncontent-type:\x
SF:20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100130\r\n\
SF:r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alter
SF:native\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891f
SF:d028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x
SF:20with\x20this\x20connection\.\r\n\r\nVisit\x20https://www\.fastly\.com
SF:/documentation/guides/concepts/errors/#routing-errors\x20for\x20more\x2
SF:0information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x20421\x20Mis
SF:directed\x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r
SF:\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cach
SF:e-ams2100092\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x2
SF:0Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificat
SF:e\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff
SF:\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https:/
SF:/docs\.fastly\.com/en/guides/common-400-errors#error-421-misdirected-re
SF:quest\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,96,"HTTP/1
SF:\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:
SF:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:
SF:\x20cache-ams2100132\r\n\r\nBad\x20Request")%r(RTSPRequest,96,"HTTP/1\.
SF:1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x
SF:2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x
SF:20cache-ams2100122\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip170.telhc.bbc.co.uk (212.58.244.17)
Host is up (0.0091s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C09DB4%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for cloud.virt.ch.bbc.co.uk (132.185.142.146)
Host is up (0.010s latency).
Not shown: 65430 filtered tcp ports (no-response), 101 closed tcp ports (reset)
PORT     STATE SERVICE   VERSION
21/tcp   open  ftp       vsftpd 3.0.3
80/tcp   open  http      Apache httpd 2.4.29
443/tcp  open  ssl/https Apache/2.4.29 (Ubuntu)
8443/tcp open  ssl/http  Apache httpd 2.4.29
Device type: general purpose|firewall|broadband router|storage-misc|WAP
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X|2.4.X (87%), WatchGuard Fireware 11.X (86%), Zhone embedded (85%), Synology DiskStation Manager 5.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:watchguard:fireware:11.8 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:linux:linux_kernel:2.4
Aggressive OS guesses: Linux 2.6.32 (87%), Linux 2.6.32 or 3.10 (87%), Linux 3.10 - 3.12 (87%), Linux 4.4 (87%), Linux 2.6.39 (86%), WatchGuard Fireware 11.8 (86%), Linux 2.6.37 (85%), Zhone GPON home gateway (85%), Synology DiskStation Manager 5.1 (85%), Linux 2.6.35 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Hosts: default, artifactory-noforge.virt.ch.bbc.co.uk; OS: Unix

Nmap scan report for bbc-vip128.telhc.bbc.co.uk (212.58.244.83)
Host is up (0.0092s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip082.lbh.bbc.co.uk (212.58.249.144)
Host is up (0.010s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http       Apache httpd
443/tcp open  ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 3.10 - 3.12 (90%), Linux 2.6.32 or 3.10 (89%), Linux 3.13 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip168.telhc.bbc.co.uk (212.58.244.15)
Host is up (0.0099s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C09DB5%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Warning: 132.185.161.176 giving up on port because retransmission cap hit (6).
Warning: 132.185.161.100 giving up on port because retransmission cap hit (6).
Warning: 132.185.161.177 giving up on port because retransmission cap hit (6).
Warning: 132.185.160.176 giving up on port because retransmission cap hit (6).
Nmap scan report for bbc-vip136.lbh.bbc.co.uk (212.58.249.198)
Host is up (0.0094s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C0A9D7%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C0A9DE%P=x86_64-pc-linux-
SF:gnu%r(RPCCheck,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\
SF:x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n"
SF:);
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (95%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (95%), Linux 4.0 (91%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (89%), Linux 3.10 - 3.12 (88%), Linux 2.6.32 - 2.6.35 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for lists1.telhc.bbc.co.uk (212.58.251.122)
Host is up (0.0095s latency).
Not shown: 65528 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
587/tcp   open     smtp       Sendmail 8.14.9+Sun/8.12.9
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (87%), Oracle Solaris 10|11 (87%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10 cpe:/o:oracle:solaris:11
Aggressive OS guesses: Sun Solaris 10 (87%), Sun Solaris 10 (SPARC) (87%), Sun Solaris 9 or Oracle Solaris 10 (87%), Oracle Solaris 11 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Unix

Nmap scan report for bbc-vip051.lbh.bbc.co.uk (212.58.249.113)
Host is up (0.0097s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE    VERSION
80/tcp  closed http
443/tcp open   ssl/https?
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (93%), Linux 3.11 - 4.1 (92%), Linux 3.10 - 3.12 (92%), Linux 2.6.32 (91%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 - 2.6.35 (90%), Linux 4.9 (90%), Linux 3.13 (90%), Linux 2.6.32 - 2.6.39 (90%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for a23-53-112-149.deploy.static.akamaitechnologies.com (23.53.112.149)
Host is up (0.0027s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE  VERSION
80/tcp  open  http     AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
443/tcp open  ssl/http AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|5.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:5
Aggressive OS guesses: Linux 4.15 - 5.8 (85%), Linux 5.0 - 5.4 (85%), Linux 5.4 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gatea.telhc.bbc.co.uk (132.185.161.100)
Host is up (0.0089s latency).
Not shown: 55306 closed tcp ports (reset), 10224 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
53/tcp    open  domain     ISC BIND 9.9.9-P8
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (87%), Oracle Solaris 10|11 (87%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10 cpe:/o:oracle:solaris:11
Aggressive OS guesses: Sun Solaris 10 (87%), Sun Solaris 10 (SPARC) (87%), Sun Solaris 9 or Oracle Solaris 10 (87%), Oracle Solaris 11 (85%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 15 hops

Nmap scan report for mailin0.cwwtf.bbc.co.uk (132.185.160.176)
Host is up (0.0094s latency).
Not shown: 65528 closed tcp ports (reset)
PORT      STATE    SERVICE     VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
2944/tcp  filtered megaco-h248
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip118.telhc.bbc.co.uk (212.58.244.73)
Host is up (0.0095s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C0A9D7%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ec2-52-209-149-93.eu-west-1.compute.amazonaws.com (52.209.149.93)
Host is up (0.018s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      BBC-GTM
443/tcp open  ssl/https BBC-GTM
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C0A9D6%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,32F8,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Thu,\x2027
SF:\x20Feb\x202025\x2018:07:17\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x2032408\r\nConnection:\x20close\r\nETag:\x20\"61deec4b-7e
SF:98\"\r\nServer:\x20BBC-GTM\r\nOrigin-Agent-Cluster:\x20\?0\r\n\r\n<!DOC
SF:TYPE\x20html>\n<html\x20lang=\"en-GB\">\n\x20\x20<head>\n\x20\x20\x20\x
SF:20<!--\x20VERSION:\x202\.4\.1\x20-->\n\x20\x20\x20\x20<title>\n\x20\x20
SF:\x20BBC\x20-\x20404:\x20Not\x20Found\n\x20\x20\x20\x20</title>\n\x20\x2
SF:0\x20\x20<meta\x20content=\"text/html;charset=utf-8\"\x20http-equiv=\"C
SF:ontent-Type\">\n\x20\x20\x20\x20<meta\x20content=\"utf-8\"\x20http-equi
SF:v=\"encoding\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-width,
SF:\x20initial-scale=1,\x20user-scalable=1\"\x20name=\"viewport\">\n\x20\x
SF:20\x20\x20<meta\x20content=\"IE=edge,chrome=1\"\x20http-equiv=\"X-UA-Co
SF:mpatible\">\n\x20\x20\x20\x20<meta\x20content=\"noindex,\x20nofollow\"\
SF:x20name=\"robots\">\n\x20\x20\x20\x20<meta\x20content=\"width=device-wi
SF:dth\"\x20name=\"viewport\">\n\x20\x20\x20\x20<meta\x20content=\"The\x20
SF:best\x20of\x20the\x20BBC,\x20with\x20the\x20latest\x20news\x20and\x20sp
SF:ort\x20headlines,\x20weather,\x20TV\x20&amp;\x20radio\x20highlights\x20
SF:and\x20much\x20more\x20from\x20across\x20the\x20whole\x20of\x20BBC\x20O
SF:nline\"\x20name=\"description\">\n\x20\x20\x20\x20<lin")%r(HTTPOptions,
SF:147,"HTTP/1\.1\x20405\x20Not\x20Allowed\r\nDate:\x20Thu,\x2027\x20Feb\x
SF:202025\x2018:07:17\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Leng
SF:th:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\nOrigin-Agen
SF:t-Cluster:\x20\?0\r\n\r\n<html>\r\n<head><title>405\x20Not\x20Allowed</
SF:title></head>\r\n<body>\r\n<center><h1>405\x20Not\x20Allowed</h1></cent
SF:er>\r\n<hr><center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(RTS
SF:PRequest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Thu,\x2027
SF:\x20Feb\x202025\x2018:07:17\x20GMT\r\nContent-Type:\x20text/html\r\nCon
SF:tent-Length:\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r
SF:\n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>
SF:\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>open
SF:resty</center>\r\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C0A9DB%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,17D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Th
SF:u,\x2027\x20Feb\x202025\x2018:07:22\x20GMT\r\nContent-Type:\x20text/htm
SF:l\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nServer:\x20BBC-G
SF:TM\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x20SSL\x20certif
SF:icate\x20was\x20sent</title></head>\r\n<body>\r\n<center><h1>400\x20Bad
SF:\x20Request</h1></center>\r\n<center>No\x20required\x20SSL\x20certifica
SF:te\x20was\x20sent</center>\r\n<hr><center>openresty</center>\r\n</body>
SF:\r\n</html>\r\n")%r(HTTPOptions,17D,"HTTP/1\.1\x20400\x20Bad\x20Request
SF:\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2018:07:23\x20GMT\r\nContent-Ty
SF:pe:\x20text/html\r\nContent-Length:\x20234\r\nConnection:\x20close\r\nS
SF:erver:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20No\x20required\x
SF:20SSL\x20certificate\x20was\x20sent</title></head>\r\n<body>\r\n<center
SF:><h1>400\x20Bad\x20Request</h1></center>\r\n<center>No\x20required\x20S
SF:SL\x20certificate\x20was\x20sent</center>\r\n<hr><center>openresty</cen
SF:ter>\r\n</body>\r\n</html>\r\n")%r(FourOhFourRequest,17D,"HTTP/1\.1\x20
SF:400\x20Bad\x20Request\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2018:07:23
SF:\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20234\r\nConn
SF:ection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>40
SF:0\x20No\x20required\x20SSL\x20certificate\x20was\x20sent</title></head>
SF:\r\n<body>\r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<cente
SF:r>No\x20required\x20SSL\x20certificate\x20was\x20sent</center>\r\n<hr><
SF:center>openresty</center>\r\n</body>\r\n</html>\r\n")%r(tor-versions,12
SF:D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Thu,\x2027\x20Feb\x20
SF:2025\x2018:07:23\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length
SF::\x20154\r\nConnection:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\
SF:n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\r\n<center
SF:><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>openresty</cent
SF:er>\r\n</body>\r\n</html>\r\n")%r(RTSPRequest,12D,"HTTP/1\.1\x20400\x20
SF:Bad\x20Request\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2018:07:28\x20GMT
SF:\r\nContent-Type:\x20text/html\r\nContent-Length:\x20154\r\nConnection:
SF:\x20close\r\nServer:\x20BBC-GTM\r\n\r\n<html>\r\n<head><title>400\x20Ba
SF:d\x20Request</title></head>\r\n<body>\r\n<center><h1>400\x20Bad\x20Requ
SF:est</h1></center>\r\n<hr><center>openresty</center>\r\n</body>\r\n</htm
SF:l>\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bbc-vip144.lbh.bbc.co.uk (212.58.249.206)
Host is up (0.0096s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE  SERVICE VERSION
80/tcp  open   http?
443/tcp closed https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C0A9D7%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (96%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (96%), Linux 4.0 (93%), Linux 3.11 - 4.1 (92%), Linux 2.6.32 (92%), Linux 2.6.32 or 3.10 (92%), Linux 2.6.32 - 2.6.35 (90%), Linux 2.6.32 - 2.6.39 (90%), Linux 3.10 - 3.12 (89%), Linux 3.13 (89%), Linux 3.2 - 3.8 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip085.lbh.bbc.co.uk (212.58.249.147)
Host is up (0.0092s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C0A9D7%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|5.X|2.6.X (97%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:5.1 cpe:/o:linux:linux_kernel:2.6.32
Aggressive OS guesses: Linux 4.4 (97%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 5.1 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 4.9 (88%), Linux 3.10 - 3.12 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bbc-vip059.lbh.bbc.co.uk (212.58.249.121)
Host is up (0.0092s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE    VERSION
80/tcp  open  http?
443/tcp open  ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C0A9D7%P=x86_64-pc-linux-gnu%r(X
SF:11Probe,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text
SF:/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(RPC
SF:Check,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:\x20text/h
SF:tml\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n")%r(DNSVe
SF:rsionBindReqTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nContent-Type:
SF:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request\.</h2>\n
SF:")%r(DNSStatusRequestTCP,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nCont
SF:ent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20request
SF:\.</h2>\n")%r(SSLSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x20request\r\nC
SF:ontent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20bad\x20requ
SF:est\.</h2>\n")%r(TerminalServerCookie,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(TLSSessionReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(Kerberos,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(SMBProgNeg,59,"HTTP/1\.0\x20400\x20Bad\x20r
SF:equest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20
SF:bad\x20request\.</h2>\n")%r(LPDString,59,"HTTP/1\.0\x20400\x20Bad\x20re
SF:quest\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x20b
SF:ad\x20request\.</h2>\n")%r(LDAPSearchReq,59,"HTTP/1\.0\x20400\x20Bad\x2
SF:0request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\x
SF:20bad\x20request\.</h2>\n")%r(LDAPBindReq,59,"HTTP/1\.0\x20400\x20Bad\x
SF:20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20a\
SF:x20bad\x20request\.</h2>\n")%r(TerminalServer,59,"HTTP/1\.0\x20400\x20B
SF:ad\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x
SF:20a\x20bad\x20request\.</h2>\n")%r(NotesRPC,59,"HTTP/1\.0\x20400\x20Bad
SF:\x20request\r\nContent-Type:\x20text/html\r\n\r\n<h2>Client\x20sent\x20
SF:a\x20bad\x20request\.</h2>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X|2.6.X|5.X (95%)
OS CPE: cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:5.1
Aggressive OS guesses: Linux 4.4 (95%), Linux 4.0 (92%), Linux 3.10 - 4.11 (91%), Linux 3.11 - 4.1 (91%), Linux 3.2 - 4.9 (91%), Linux 2.6.32 (90%), Linux 2.6.32 or 3.10 (90%), Linux 5.1 (89%), Linux 3.10 - 3.12 (88%), Linux 2.6.32 - 2.6.35 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.0.82
Host is up (0.0023s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C0A9D7%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,1FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21081-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2018:07:18\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21081-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOptions,2
SF:03,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\
SF:r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\
SF:ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r
SF:\nX-Served-By:\x20cache-ams2100114-AMS\r\nAccept-Ranges:\x20bytes\r\nDa
SF:te:\x20Thu,\x2027\x20Feb\x202025\x2018:07:18\x20GMT\r\nVia:\x201\.1\x20
SF:varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20
SF:domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20
SF:domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20be
SF:en\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams210011
SF:4-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,94,"HTTP
SF:/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21050\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1\x
SF:20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x201
SF:1\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20c
SF:ache-ams2100123\r\n\r\nBad\x20Request")%r(FourOhFourRequest,203,"HTTP/1
SF:\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent
SF:-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-t
SF:ype:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served
SF:-By:\x20cache-ams2100101-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Thu
SF:,\x2027\x20Feb\x202025\x2018:07:18\x20GMT\r\nVia:\x201\.1\x20varnish\r\
SF:n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20
SF:</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x2
SF:0\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20adde
SF:d\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100101-AMS\x20\
SF:(151\.101\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C0A9DD%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21082\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams210010
SF:8\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100117\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553
SF:e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams2100124\r\n\r\nBad\x20Request")%r(RTSPRequest,
SF:94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams21033\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.82
Host is up (0.0025s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C0A9D7%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21020-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2018:07:18\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21020-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOptions
SF:,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clos
SF:e\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\
SF:r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache
SF:\r\nX-Served-By:\x20cache-ams21056-AMS\r\nAccept-Ranges:\x20bytes\r\nDa
SF:te:\x20Thu,\x2027\x20Feb\x202025\x2018:07:18\x20GMT\r\nVia:\x201\.1\x20
SF:varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20
SF:domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20
SF:domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20be
SF:en\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21056-
SF:AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,94,"HTTP
SF:/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21056\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1\x
SF:20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x201
SF:1\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20c
SF:ache-ams2100128\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"HTTP/1
SF:\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent
SF:-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-t
SF:ype:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served
SF:-By:\x20cache-ams21069-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Thu,\
SF:x2027\x20Feb\x202025\x2018:07:18\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\
SF:r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</
SF:title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\
SF:.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\
SF:x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21069-AMS\x20\(151
SF:\.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C0A9DD%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21034\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21022\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21031\r\n\r\nRequested\x20host\x20does\x20not\x20match\x
SF:20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20ce
SF:rtificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631
SF:d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x2
SF:0https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdir
SF:ected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21068\r\n\r\nBad\x20Request")%r(RTSPRequest,96,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100128\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for dns2.p09.nsone.net (198.51.45.9)
Host is up (0.0028s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for 151.101.192.82
Host is up (0.0023s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C0A9D7%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100122-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2018:07:18\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100122-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOpt
SF:ions,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20
SF:close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x
SF:200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-c
SF:ache\r\nX-Served-By:\x20cache-ams21081-AMS\r\nAccept-Ranges:\x20bytes\r
SF:\nDate:\x20Thu,\x2027\x20Feb\x202025\x2018:07:18\x20GMT\r\nVia:\x201\.1
SF:\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown
SF:\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown
SF:\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x
SF:20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21
SF:081-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21069\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\
SF:x20cache-ams21043\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"HTTP
SF:/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent
SF:-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serv
SF:ed-By:\x20cache-ams21062-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Thu
SF:,\x2027\x20Feb\x202025\x2018:07:18\x20GMT\r\nVia:\x201\.1\x20varnish\r\
SF:n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20
SF:</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x2
SF:0\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20adde
SF:d\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21062-AMS\x20\(1
SF:51\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C0A9DD%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21045\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams210012
SF:2\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100131\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553
SF:e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams21064\r\n\r\nBad\x20Request")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100127\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (87%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ns4.demysdns.co.uk (198.51.44.9)
Host is up (0.0027s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for mailin0.telhc.bbc.co.uk (132.185.161.176)
Host is up (0.0093s latency).
Not shown: 55353 closed tcp ports (reset), 10177 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.82
Host is up (0.0023s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C0A9D7%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,200,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21069-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2018:07:18\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21069-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOptions,
SF:200,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close
SF:\r\nContent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-After:\x200\r
SF:\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\
SF:r\nX-Served-By:\x20cache-ams21077-AMS\r\nAccept-Ranges:\x20bytes\r\nDat
SF:e:\x20Thu,\x2027\x20Feb\x202025\x2018:07:18\x20GMT\r\nVia:\x201\.1\x20v
SF:arnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20d
SF:omain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20d
SF:omain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20bee
SF:n\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21077-A
SF:MS\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,96,"HTTP/1
SF:\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:
SF:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:
SF:\x20cache-ams2100106\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1\x
SF:20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x201
SF:1\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20c
SF:ache-ams2100142\r\n\r\nBad\x20Request")%r(FourOhFourRequest,200,"HTTP/1
SF:\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent
SF:-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-t
SF:ype:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served
SF:-By:\x20cache-ams21075-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Thu,\
SF:x2027\x20Feb\x202025\x2018:07:18\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\
SF:r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</
SF:title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\
SF:.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\
SF:x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21075-AMS\x20\(151
SF:\.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C0A9DD%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21048\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21035\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams2100136\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100085\r\n\r\nBad\x20Request")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100144\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 6.X|8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.1 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 6.1-RELEASE (85%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin1.telhc.bbc.co.uk (132.185.161.177)
Host is up (0.0092s latency).
Not shown: 65524 closed tcp ports (reset)
PORT      STATE    SERVICE    VERSION
22/tcp    open     ssh?
25/tcp    filtered smtp
873/tcp   open     tcpwrapped
1010/tcp  open     tcpwrapped
3448/tcp  filtered dnc-port
10015/tcp open     tcpwrapped
10027/tcp open     tcpwrapped
29529/tcp filtered unknown
38989/tcp filtered unknown
40371/tcp filtered unknown
48277/tcp filtered unknown
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Warning: 132.185.160.176 giving up on port because retransmission cap hit (6).
Warning: 132.185.160.177 giving up on port because retransmission cap hit (6).
Nmap scan report for mailin0.cwwtf.bbc.co.uk (132.185.160.176)
Host is up (0.0094s latency).
Not shown: 65495 closed tcp ports (reset), 35 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mailin1.cwwtf.bbc.co.uk (132.185.160.177)
Host is up (0.0093s latency).
Not shown: 65494 closed tcp ports (reset), 36 filtered tcp ports (no-response)
PORT      STATE SERVICE    VERSION
22/tcp    open  ssh?
873/tcp   open  tcpwrapped
1010/tcp  open  tcpwrapped
10015/tcp open  tcpwrapped
10027/tcp open  tcpwrapped
Device type: general purpose
Running (JUST GUESSING): Sun Solaris 10|9 (85%), Oracle Solaris 10 (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:sun:sunos:5.9 cpe:/o:oracle:solaris:10
Aggressive OS guesses: Sun Solaris 10 (85%), Sun Solaris 10 (SPARC) (85%), Sun Solaris 9 or Oracle Solaris 10 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.0.82
Host is up (0.0023s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C0B14C%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,1FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21027-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2018:39:07\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21027-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOptions,1
SF:FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\
SF:r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\
SF:ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r
SF:\nX-Served-By:\x20cache-ams21075-AMS\r\nAccept-Ranges:\x20bytes\r\nDate
SF::\x20Thu,\x2027\x20Feb\x202025\x2018:39:07\x20GMT\r\nVia:\x201\.1\x20va
SF:rnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20do
SF:main\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20do
SF:main:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been
SF:\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21075-AM
SF:S\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,96,"HTTP/1\.
SF:1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x
SF:2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x
SF:20cache-ams2100088\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1\x20
SF:400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2011\
SF:r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cac
SF:he-ams2100144\r\n\r\nBad\x20Request")%r(FourOhFourRequest,1FF,"HTTP/1\.
SF:1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent-L
SF:ength:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-typ
SF:e:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served-B
SF:y:\x20cache-ams21033-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Thu,\x2
SF:027\x20Feb\x202025\x2018:39:07\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\r\
SF:n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</ti
SF:tle>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\.\
SF:x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\x2
SF:0to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21033-AMS\x20\(151\.
SF:101\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C0B152%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100122\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1B7,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20291\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100
SF:138\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\
SF:x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19
SF:179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\
SF:x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://www\.fas
SF:tly\.com/documentation/guides/concepts/errors/#routing-errors\x20for\x2
SF:0more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x2042
SF:1\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:
SF:\x20cache-ams21082\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20
SF:any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20cert
SF:ificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d6
SF:4a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20h
SF:ttps://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdirec
SF:ted-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100121\r\n\r\nBad\x20Request")%r(RTSPRequest,96,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100104\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.82
Host is up (0.0021s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C0B14C%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21031-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2018:39:07\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21031-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOptions
SF:,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clos
SF:e\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\
SF:r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache
SF:\r\nX-Served-By:\x20cache-ams2100127-AMS\r\nAccept-Ranges:\x20bytes\r\n
SF:Date:\x20Thu,\x2027\x20Feb\x202025\x2018:39:07\x20GMT\r\nVia:\x201\.1\x
SF:20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x
SF:20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x
SF:20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20
SF:been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100
SF:127-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100128\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams21073\r\n\r\nBad\x20Request")%r(FourOhFourRequest,205,"HT
SF:TP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconte
SF:nt-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Se
SF:rved-By:\x20cache-ams2100139-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x2
SF:0Thu,\x2027\x20Feb\x202025\x2018:39:07\x20GMT\r\nVia:\x201\.1\x20varnis
SF:h\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain
SF:\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain
SF::\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20
SF:added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100139-AMS\
SF:x20\(151\.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C0B152%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21045\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21057\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21060\r\n\r\nRequested\x20host\x20does\x20not\x20match\x
SF:20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20ce
SF:rtificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631
SF:d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x2
SF:0https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdir
SF:ected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21024\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21030\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.192.82
Host is up (0.0023s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C0B14C%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21038-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2018:39:07\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21038-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOptions
SF:,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clos
SF:e\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\
SF:r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache
SF:\r\nX-Served-By:\x20cache-ams2100136-AMS\r\nAccept-Ranges:\x20bytes\r\n
SF:Date:\x20Thu,\x2027\x20Feb\x202025\x2018:39:07\x20GMT\r\nVia:\x201\.1\x
SF:20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x
SF:20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x
SF:20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20
SF:been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100
SF:136-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21044\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\
SF:x20cache-ams2100127\r\n\r\nBad\x20Request")%r(FourOhFourRequest,205,"HT
SF:TP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconte
SF:nt-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Se
SF:rved-By:\x20cache-ams2100144-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x2
SF:0Thu,\x2027\x20Feb\x202025\x2018:39:07\x20GMT\r\nVia:\x201\.1\x20varnis
SF:h\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain
SF:\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain
SF::\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20
SF:added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100144-AMS\
SF:x20\(151\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C0B152%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100111\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2105
SF:4\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21061\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100106\r\n\r\nBad\x20Request")%r(RTSPRequest,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21062\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for dns2.p09.nsone.net (198.51.45.9)
Host is up (0.0027s latency).
Not shown: 65534 filtered tcp ports (no-response)
PORT   STATE SERVICE    VERSION
53/tcp open  tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for 151.101.64.82
Host is up (0.0022s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C0B14C%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,200,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21045-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2018:39:07\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21045-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOptions,
SF:204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close
SF:\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x200\r
SF:\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\
SF:r\nX-Served-By:\x20cache-ams2100089-AMS\r\nAccept-Ranges:\x20bytes\r\nD
SF:ate:\x20Thu,\x2027\x20Feb\x202025\x2018:39:07\x20GMT\r\nVia:\x201\.1\x2
SF:0varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x2
SF:0domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x2
SF:0domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20b
SF:een\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21000
SF:89-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,96,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams2100088\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\
SF:x20cache-ams21080\r\n\r\nBad\x20Request")%r(FourOhFourRequest,204,"HTTP
SF:/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent
SF:-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serv
SF:ed-By:\x20cache-ams2100089-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20T
SF:hu,\x2027\x20Feb\x202025\x2018:39:07\x20GMT\r\nVia:\x201\.1\x20varnish\
SF:r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x
SF:20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\
SF:x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20ad
SF:ded\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100089-AMS\x2
SF:0\(151\.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C0B152%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21033\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21029\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21067\r\n\r\nRequested\x20host\x20does\x20not\x20match\x
SF:20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20ce
SF:rtificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631
SF:d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x2
SF:0https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdir
SF:ected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21062\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21071\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 6.X|8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.1 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 6.1-RELEASE (85%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.0.82
Host is up (0.0025s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C0B2A6%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,1FF,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20236\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21020-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2018:44:53\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21020-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOptions,2
SF:03,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\
SF:r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\
SF:ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r
SF:\nX-Served-By:\x20cache-ams2100128-AMS\r\nAccept-Ranges:\x20bytes\r\nDa
SF:te:\x20Thu,\x2027\x20Feb\x202025\x2018:44:53\x20GMT\r\nVia:\x201\.1\x20
SF:varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20
SF:domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20
SF:domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20be
SF:en\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams210012
SF:8-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,94,"HTTP
SF:/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21045\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\.1\x
SF:20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x201
SF:1\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20c
SF:ache-ams21067\r\n\r\nBad\x20Request")%r(FourOhFourRequest,1FF,"HTTP/1\.
SF:1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nContent-L
SF:ength:\x20236\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent-typ
SF:e:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Served-B
SF:y:\x20cache-ams21083-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Thu,\x2
SF:027\x20Feb\x202025\x2018:44:53\x20GMT\r\nVia:\x201\.1\x20varnish\r\n\r\
SF:n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20</ti
SF:tle>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x20\.\
SF:x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20added\x2
SF:0to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21083-AMS\x20\(151\.
SF:101\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C0B2AC%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100099\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100
SF:134\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\
SF:x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19
SF:179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\
SF:x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fa
SF:stly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20
SF:for\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1
SF:\x20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Le
SF:ngth:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21030\r\n\r\nRequested\x20host\x20does\x20not\x20mat
SF:ch\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x
SF:20certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553
SF:e631d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisi
SF:t\x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-mi
SF:sdirected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-version
SF:s,96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\n
SF:x-served-by:\x20cache-ams2100084\r\n\r\nBad\x20Request")%r(RTSPRequest,
SF:94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams21033\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 6.X|8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.1 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 6.1-RELEASE (85%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.82
Host is up (0.0024s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C0B2A6%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21046-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2018:44:53\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21046-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOptions
SF:,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clos
SF:e\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\
SF:r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache
SF:\r\nX-Served-By:\x20cache-ams2100106-AMS\r\nAccept-Ranges:\x20bytes\r\n
SF:Date:\x20Thu,\x2027\x20Feb\x202025\x2018:44:53\x20GMT\r\nVia:\x201\.1\x
SF:20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x
SF:20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x
SF:20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20
SF:been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100
SF:106-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100085\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams21035\r\n\r\nBad\x20Request")%r(FourOhFourRequest,205,"HT
SF:TP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconte
SF:nt-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Se
SF:rved-By:\x20cache-ams2100117-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x2
SF:0Thu,\x2027\x20Feb\x202025\x2018:44:53\x20GMT\r\nVia:\x201\.1\x20varnis
SF:h\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain
SF:\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain
SF::\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20
SF:added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100117-AMS\
SF:x20\(151\.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C0B2AC%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BD,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100097\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guid
SF:es/common-400-errors#error-421-misdirected-request\x20for\x20more\x20in
SF:formation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\
SF:x20Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent
SF:-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2106
SF:8\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21071\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams21077\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21066\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (87%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.192.82
Host is up (0.0024s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C0B2A6%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21026-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2018:44:53\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21026-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOptions
SF:,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clos
SF:e\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\
SF:r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache
SF:\r\nX-Served-By:\x20cache-ams21022-AMS\r\nAccept-Ranges:\x20bytes\r\nDa
SF:te:\x20Thu,\x2027\x20Feb\x202025\x2018:44:53\x20GMT\r\nVia:\x201\.1\x20
SF:varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20
SF:domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20
SF:domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20be
SF:en\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21022-
SF:AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,96,"HTTP
SF:/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams2100139\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1
SF:\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2
SF:011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x2
SF:0cache-ams2100102\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"HTTP
SF:/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent
SF:-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serv
SF:ed-By:\x20cache-ams21076-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Thu
SF:,\x2027\x20Feb\x202025\x2018:44:53\x20GMT\r\nVia:\x201\.1\x20varnish\r\
SF:n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20
SF:</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x2
SF:0\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20adde
SF:d\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21076-AMS\x20\(1
SF:51\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C0B2AC%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21050\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21029\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21067\r\n\r\nRequested\x20host\x20does\x20not\x20match\x
SF:20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20ce
SF:rtificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631
SF:d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x2
SF:0https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdir
SF:ected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100118\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21021\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (90%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (90%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.82
Host is up (0.0025s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C0B2A6%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100094-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2018:44:53\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100094-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOpti
SF:ons,204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20c
SF:lose\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x2
SF:00\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-ca
SF:che\r\nX-Served-By:\x20cache-ams2100109-AMS\r\nAccept-Ranges:\x20bytes\
SF:r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2018:44:53\x20GMT\r\nVia:\x201\.
SF:1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknow
SF:n\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknow
SF:n\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\
SF:x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2
SF:100109-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,94
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams21033\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams21021\r\n\r\nBad\x20Request")%r(FourOhFourRequest,200,"HT
SF:TP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconte
SF:nt-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Se
SF:rved-By:\x20cache-ams21024-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20T
SF:hu,\x2027\x20Feb\x202025\x2018:44:53\x20GMT\r\nVia:\x201\.1\x20varnish\
SF:r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x
SF:20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\
SF:x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20ad
SF:ded\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21024-AMS\x20\
SF:(151\.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C0B2AC%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21024\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BD,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams210010
SF:7\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fast
SF:ly\.com/en/guides/common-400-errors#error-421-misdirected-request\x20fo
SF:r\x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x
SF:20421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21021\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:96,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams2100117\r\n\r\nBad\x20Request")%r(RTSPRequest,96
SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent
SF:-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-se
SF:rved-by:\x20cache-ams2100145\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.128.82
Host is up (0.0023s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C0B374%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100108-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2018:48:19\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100108-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(HTTPOpt
SF:ions,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20
SF:close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x
SF:200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-c
SF:ache\r\nX-Served-By:\x20cache-ams21060-AMS\r\nAccept-Ranges:\x20bytes\r
SF:\nDate:\x20Thu,\x2027\x20Feb\x202025\x2018:48:19\x20GMT\r\nVia:\x201\.1
SF:\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown
SF:\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown
SF:\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x
SF:20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21
SF:060-AMS\x20\(151\.101\.128\.82\)</p></body></html>")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21033\r\n\r\nBad\x20Request")%r(X11Probe,94,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\
SF:x20cache-ams21073\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"HTTP
SF:/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent
SF:-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serv
SF:ed-By:\x20cache-ams21066-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Thu
SF:,\x2027\x20Feb\x202025\x2018:48:19\x20GMT\r\nVia:\x201\.1\x20varnish\r\
SF:n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20
SF:</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x2
SF:0\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20adde
SF:d\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21066-AMS\x20\(1
SF:51\.101\.128\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C0B37A%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21079\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1B7,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20291\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams210014
SF:2\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://www\.fastl
SF:y\.com/documentation/guides/concepts/errors/#routing-errors\x20for\x20m
SF:ore\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x20421\
SF:x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2
SF:0297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x
SF:20cache-ams2100147\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20
SF:any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20cert
SF:ificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d6
SF:4a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20h
SF:ttps://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdirec
SF:ted-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21069\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"HTTP
SF:/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Lengt
SF:h:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams21021\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.192.82
Host is up (0.0023s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C0B374%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,201,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21051-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2018:48:19\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21051-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(HTTPOptions
SF:,205,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20clos
SF:e\r\nContent-Length:\x20240\r\nServer:\x20Varnish\r\nRetry-After:\x200\
SF:r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache
SF:\r\nX-Served-By:\x20cache-ams2100104-AMS\r\nAccept-Ranges:\x20bytes\r\n
SF:Date:\x20Thu,\x2027\x20Feb\x202025\x2018:48:19\x20GMT\r\nVia:\x201\.1\x
SF:20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x
SF:20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x
SF:20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20
SF:been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100
SF:104-AMS\x20\(151\.101\.192\.82\)</p></body></html>")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21048\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\
SF:.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\
SF:x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\
SF:x20cache-ams2100113\r\n\r\nBad\x20Request")%r(FourOhFourRequest,201,"HT
SF:TP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nCon
SF:tent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\nconte
SF:nt-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Se
SF:rved-By:\x20cache-ams21027-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20T
SF:hu,\x2027\x20Feb\x202025\x2018:48:19\x20GMT\r\nVia:\x201\.1\x20varnish\
SF:r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x
SF:20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\
SF:x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20ad
SF:ded\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21027-AMS\x20\
SF:(151\.101\.192\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C0B37A%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21051\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1B7,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20291\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams210009
SF:8\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x2
SF:0Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[1917
SF:9c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x2
SF:0use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://www\.fastl
SF:y\.com/documentation/guides/concepts/errors/#routing-errors\x20for\x20m
SF:ore\x20information\.\r\n\r")%r(FourOhFourRequest,1BB,"HTTP/1\.1\x20421\
SF:x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2
SF:0297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x
SF:20cache-ams21058\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20an
SF:y\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certif
SF:icate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a
SF:04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20htt
SF:ps://docs\.fastly\.com/en/guides/common-400-errors#error-421-misdirecte
SF:d-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,94,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21048\r\n\r\nBad\x20Request")%r(RTSPRequest,96,"HTTP/1
SF:\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:
SF:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:
SF:\x20cache-ams2100128\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.0.82
Host is up (0.0021s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C0B374%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams2100131-AMS\r\nAccept-Ranges:\x20
SF:bytes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2018:48:19\x20GMT\r\nVia:\
SF:x201\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20
SF:unknown\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20
SF:unknown\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x
SF:20has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cach
SF:e-ams2100131-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(HTTPOptio
SF:ns,203,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20cl
SF:ose\r\nContent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x20
SF:0\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cac
SF:he\r\nX-Served-By:\x20cache-ams2100090-AMS\r\nAccept-Ranges:\x20bytes\r
SF:\nDate:\x20Thu,\x2027\x20Feb\x202025\x2018:48:19\x20GMT\r\nVia:\x201\.1
SF:\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown
SF:\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown
SF:\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x
SF:20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21
SF:00090-AMS\x20\(151\.101\.0\.82\)</p></body></html>")%r(RTSPRequest,96,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams2100126\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/
SF:1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by
SF::\x20cache-ams2100094\r\n\r\nBad\x20Request")%r(FourOhFourRequest,203,"
SF:HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nC
SF:ontent-Length:\x20238\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncon
SF:tent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-
SF:Served-By:\x20cache-ams2100135-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\
SF:x20Thu,\x2027\x20Feb\x202025\x2018:48:19\x20GMT\r\nVia:\x201\.1\x20varn
SF:ish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20doma
SF:in\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20doma
SF:in:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x
SF:20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams2100135-AM
SF:S\x20\(151\.101\.0\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C0B37A%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1B7,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20291\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams2100090\r\n\r\nReques
SF:ted\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x2
SF:0Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d0934
SF:18c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x2
SF:0this\x20connection\.\r\n\r\nVisit\x20https://www\.fastly\.com/document
SF:ation/guides/concepts/errors/#routing-errors\x20for\x20more\x20informat
SF:ion\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Req
SF:uest\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:
SF:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21072\r\n\
SF:r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alter
SF:native\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891f
SF:d028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x
SF:20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.co
SF:m/en/guides/common-400-errors#error-421-misdirected-request\x20for\x20m
SF:ore\x20information\.\r\n\r")%r(FourOhFourRequest,1B5,"HTTP/1\.1\x20421\
SF:x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2
SF:0291\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x
SF:20cache-ams21066\r\n\r\nRequested\x20host\x20does\x20not\x20match\x20an
SF:y\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certif
SF:icate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a
SF:04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\x20htt
SF:ps://www\.fastly\.com/documentation/guides/concepts/errors/#routing-err
SF:ors\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,96,"HTTP/1\.
SF:1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x
SF:2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x
SF:20cache-ams2100085\r\n\r\nBad\x20Request")%r(RTSPRequest,96,"HTTP/1\.1\
SF:x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x20
SF:11\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20
SF:cache-ams2100099\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for 151.101.64.82
Host is up (0.0024s latency).
Not shown: 65533 filtered tcp ports (no-response)
PORT    STATE SERVICE   VERSION
80/tcp  open  http      Varnish
443/tcp open  ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.94SVN%I=7%D=2/27%Time=67C0B374%P=x86_64-pc-linux-gnu%r(G
SF:etRequest,200,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection
SF::\x20close\r\nContent-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-Aft
SF:er:\x200\r\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x2
SF:0no-cache\r\nX-Served-By:\x20cache-ams21045-AMS\r\nAccept-Ranges:\x20by
SF:tes\r\nDate:\x20Thu,\x2027\x20Feb\x202025\x2018:48:19\x20GMT\r\nVia:\x2
SF:01\.1\x20varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20un
SF:known\x20domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20un
SF:known\x20domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20
SF:has\x20been\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-
SF:ams21045-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(HTTPOptions,
SF:204,"HTTP/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close
SF:\r\nContent-Length:\x20239\r\nServer:\x20Varnish\r\nRetry-After:\x200\r
SF:\ncontent-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\
SF:r\nX-Served-By:\x20cache-ams2100115-AMS\r\nAccept-Ranges:\x20bytes\r\nD
SF:ate:\x20Thu,\x2027\x20Feb\x202025\x2018:48:19\x20GMT\r\nVia:\x201\.1\x2
SF:0varnish\r\n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x2
SF:0domain\x20</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x2
SF:0domain:\x20\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20b
SF:een\x20added\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21001
SF:15-AMS\x20\(151\.101\.64\.82\)</p></body></html>")%r(RTSPRequest,94,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Len
SF:gth:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served
SF:-by:\x20cache-ams21075\r\n\r\nBad\x20Request")%r(X11Probe,96,"HTTP/1\.1
SF:\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-Length:\x2
SF:011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x2
SF:0cache-ams2100104\r\n\r\nBad\x20Request")%r(FourOhFourRequest,200,"HTTP
SF:/1\.1\x20500\x20Domain\x20Not\x20Found\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x20237\r\nServer:\x20Varnish\r\nRetry-After:\x200\r\ncontent
SF:-type:\x20text/html\r\nCache-Control:\x20private,\x20no-cache\r\nX-Serv
SF:ed-By:\x20cache-ams21080-AMS\r\nAccept-Ranges:\x20bytes\r\nDate:\x20Thu
SF:,\x2027\x20Feb\x202025\x2018:48:19\x20GMT\r\nVia:\x201\.1\x20varnish\r\
SF:n\r\n\n<html>\n<head>\n<title>Fastly\x20error:\x20unknown\x20domain\x20
SF:</title>\n</head>\n<body>\n<p>Fastly\x20error:\x20unknown\x20domain:\x2
SF:0\.\x20Please\x20check\x20that\x20this\x20domain\x20has\x20been\x20adde
SF:d\x20to\x20a\x20service\.</p>\n<p>Details:\x20cache-ams21080-AMS\x20\(1
SF:51\.101\.64\.82\)</p></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.94SVN%T=SSL%I=7%D=2/27%Time=67C0B37A%P=x86_64-pc-linux-
SF:gnu%r(GetRequest,1BB,"HTTP/1\.1\x20421\x20Misdirected\x20Request\r\nCon
SF:nection:\x20close\r\nContent-Length:\x20297\r\ncontent-type:\x20text/pl
SF:ain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21069\r\n\r\nRequeste
SF:d\x20host\x20does\x20not\x20match\x20any\x20Subject\x20Alternative\x20N
SF:ames\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c891fd028d093418
SF:c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20use\x20with\x20t
SF:his\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly\.com/en/guides
SF:/common-400-errors#error-421-misdirected-request\x20for\x20more\x20info
SF:rmation\.\r\n\r")%r(HTTPOptions,1BB,"HTTP/1\.1\x20421\x20Misdirected\x2
SF:0Request\r\nConnection:\x20close\r\nContent-Length:\x20297\r\ncontent-t
SF:ype:\x20text/plain;\x20charset=utf-8\r\nx-served-by:\x20cache-ams21036\
SF:r\n\r\nRequested\x20host\x20does\x20not\x20match\x20any\x20Subject\x20A
SF:lternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20certificate\x20\[19179c
SF:891fd028d093418c5c628056c9a530b3a0337e55236553e631d64a04ff\]\x20in\x20u
SF:se\x20with\x20this\x20connection\.\r\n\r\nVisit\x20https://docs\.fastly
SF:\.com/en/guides/common-400-errors#error-421-misdirected-request\x20for\
SF:x20more\x20information\.\r\n\r")%r(FourOhFourRequest,1BD,"HTTP/1\.1\x20
SF:421\x20Misdirected\x20Request\r\nConnection:\x20close\r\nContent-Length
SF::\x20297\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-served-b
SF:y:\x20cache-ams2100134\r\n\r\nRequested\x20host\x20does\x20not\x20match
SF:\x20any\x20Subject\x20Alternative\x20Names\x20\(SANs\)\x20on\x20TLS\x20
SF:certificate\x20\[19179c891fd028d093418c5c628056c9a530b3a0337e55236553e6
SF:31d64a04ff\]\x20in\x20use\x20with\x20this\x20connection\.\r\n\r\nVisit\
SF:x20https://docs\.fastly\.com/en/guides/common-400-errors#error-421-misd
SF:irected-request\x20for\x20more\x20information\.\r\n\r")%r(tor-versions,
SF:94,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nConte
SF:nt-Length:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-
SF:served-by:\x20cache-ams21057\r\n\r\nBad\x20Request")%r(RTSPRequest,94,"
SF:HTTP/1\.1\x20400\x20Bad\x20Request\r\nConnection:\x20close\r\nContent-L
SF:ength:\x2011\r\ncontent-type:\x20text/plain;\x20charset=utf-8\r\nx-serv
SF:ed-by:\x20cache-ams21059\r\n\r\nBad\x20Request");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 8.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:8.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 8.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
# Nmap done at Thu Feb 27 18:48:30 2025 -- 227 IP addresses (166 hosts up) scanned in 16947.79 seconds