Nmap scan report for ipv4-c140-ord003-ix.1.oca.nflxvideo.net (23.246.37.195) Host is up (0.058s latency). Not shown: 996 closed tcp ports (reset) PORT STATE SERVICE VERSION 22/tcp open tcpwrapped |_ssh-hostkey: ERROR: Script execution failed (use -d to debug) 80/tcp open http freenginx | fingerprint-strings: | GenericLines: | HTTP/1.1 400 Bad Request | Server: freenginx | Date: Wed, 16 Apr 2025 19:05:10 GMT | Content-Type: text/html | Content-Length: 154 | Connection: close | Timing-Allow-Origin: * | Cache-Control: no-store | Pragma: no-cache | Access-Control-Allow-Origin: * | Access-Control-Expose-Headers: X-TCP-Info | X-TCP-Info: addr=208.76.253.234;port=58948;sc= | | 400 Bad Request | |

400 Bad Request

|
freenginx
| | | HTTPOptions: | HTTP/1.1 200 OK | Server: freenginx | Date: Wed, 16 Apr 2025 19:05:04 GMT | Content-Type: application/octet-stream | Content-Length: 0 | Connection: close | Timing-Allow-Origin: * | Cache-Control: no-store | Pragma: no-cache | Access-Control-Allow-Origin: * | Access-Control-Expose-Headers: X-TCP-Info | X-TCP-Info: addr=208.76.253.234;port=36410;sc= | RTSPRequest: | HTTP/1.1 400 Bad Request | Server: freenginx | Date: Wed, 16 Apr 2025 19:05:05 GMT | Content-Type: text/html | Content-Length: 154 | Connection: close | Timing-Allow-Origin: * | Cache-Control: no-store | Pragma: no-cache | Access-Control-Allow-Origin: * | Access-Control-Expose-Headers: X-TCP-Info | X-TCP-Info: addr=208.76.253.234;port=36412;sc= | | 400 Bad Request | |

400 Bad Request

|
freenginx
| | | X11Probe: | HTTP/1.1 400 Bad Request | Server: freenginx | Date: Wed, 16 Apr 2025 19:05:05 GMT | Content-Type: text/html | Content-Length: 154 | Connection: close | Timing-Allow-Origin: * | Cache-Control: no-store | Pragma: no-cache | Access-Control-Allow-Origin: * | Access-Control-Expose-Headers: X-TCP-Info | X-TCP-Info: addr=208.76.253.234;port=36418;sc= | | 400 Bad Request | |

400 Bad Request

|
freenginx
| |_ |_http-server-header: freenginx |_http-cors: HEAD GET POST PUT DELETE TRACE OPTIONS CONNECT PATCH 443/tcp open ssl/https freenginx |_ssl-date: TLS randomness does not represent time | ssl-cert: Subject: commonName=*.1.oca.nflxvideo.net | Subject Alternative Name: DNS:*.1.oca.nflxvideo.net | Not valid before: 2025-04-02T06:25:46 |_Not valid after: 2025-05-03T05:52:05 |_http-server-header: freenginx | tls-alpn: | http/1.1 | http/1.0 |_ http/0.9 | fingerprint-strings: | FourOhFourRequest: | HTTP/1.1 400 Bad Request | Server: freenginx | Date: Wed, 16 Apr 2025 19:05:06 GMT | Content-Type: text/html | Content-Length: 154 | Connection: close | Timing-Allow-Origin: * | Cache-Control: no-store | Pragma: no-cache | Access-Control-Allow-Origin: * | Access-Control-Expose-Headers: X-TCP-Info | X-TCP-Info: addr=127.0.0.1;port=15261;sc= | | 400 Bad Request | |

400 Bad Request

|
freenginx
| | | GenericLines: | HTTP/1.1 400 Bad Request | Server: freenginx | Date: Wed, 16 Apr 2025 19:05:07 GMT | Content-Type: text/html | Content-Length: 154 | Connection: close | Timing-Allow-Origin: * | Cache-Control: no-store | Pragma: no-cache | Access-Control-Allow-Origin: * | Access-Control-Expose-Headers: X-TCP-Info | X-TCP-Info: addr=208.76.253.234;port=43462;sc= | | 400 Bad Request | |

400 Bad Request

|
freenginx
| | | GetRequest: | HTTP/1.1 200 OK | Server: freenginx | Date: Wed, 16 Apr 2025 19:05:05 GMT | Content-Type: application/octet-stream | Content-Length: 0 | Connection: close | HTTPOptions: | HTTP/1.1 405 Method Not Allowed | Server: freenginx | Date: Wed, 16 Apr 2025 19:05:06 GMT | Content-Type: text/html | Content-Length: 168 | Connection: close | | 405 Method Not Allowed | |

405 Method Not Allowed

|
freenginx
| | | tor-versions: | HTTP/1.1 400 Bad Request | Server: freenginx | Date: Wed, 16 Apr 2025 19:05:06 GMT | Content-Type: text/html | Content-Length: 154 | Connection: close | Timing-Allow-Origin: * | Cache-Control: no-store | Pragma: no-cache | Access-Control-Allow-Origin: * | Access-Control-Expose-Headers: X-TCP-Info | X-TCP-Info: addr=208.76.253.234;port=43456;sc= | | 400 Bad Request | |

400 Bad Request

|
freenginx
| |_ |_http-cors: HEAD GET POST PUT DELETE TRACE OPTIONS CONNECT PATCH |_http-title: 400 The plain HTTP request was sent to HTTPS port 444/tcp open ssl/snpp? | ssl-cert: Subject: commonName=*.1.oca.nflxvideo.net | Subject Alternative Name: DNS:*.1.oca.nflxvideo.net | Not valid before: 2025-04-02T06:25:46 |_Not valid after: 2025-05-03T05:52:05 |_ssl-date: TLS randomness does not represent time | tls-alpn: | http/1.1 | http/1.0 |_ http/0.9 | fingerprint-strings: | GenericLines: | HTTP/1.1 400 Bad Request | Server: freenginx | Date: Wed, 16 Apr 2025 19:05:05 GMT | Content-Type: text/html | Content-Length: 154 | Connection: close | Timing-Allow-Origin: * | Cache-Control: no-store | Pragma: no-cache | Access-Control-Allow-Origin: * | Access-Control-Expose-Headers: Content-Range,X-TCP-Info | X-TCP-Info: addr=208.76.253.234;port=35766;sc= | | 400 Bad Request | |

400 Bad Request

|
freenginx
| | | GetRequest: | HTTP/1.1 404 Not Found | Server: freenginx | Date: Wed, 16 Apr 2025 19:05:06 GMT | Content-Type: text/html | Content-Length: 150 | Connection: close | Timing-Allow-Origin: * | Cache-Control: no-store | Pragma: no-cache | Access-Control-Allow-Origin: * | Access-Control-Expose-Headers: Content-Range,X-TCP-Info | X-TCP-Info: addr=208.76.253.234;port=47356;sc= | | 404 Not Found | |

404 Not Found

|
freenginx
| | | HTTPOptions: | HTTP/1.1 200 OK | Server: freenginx | Date: Wed, 16 Apr 2025 19:05:06 GMT | Content-Type: application/octet-stream | Content-Length: 0 | Connection: close | Timing-Allow-Origin: * | Cache-Control: no-store | Pragma: no-cache | Access-Control-Allow-Origin: * | Access-Control-Expose-Headers: Content-Range,X-TCP-Info | X-TCP-Info: addr=208.76.253.234;port=47372;sc= | RTSPRequest: | HTTP/1.1 400 Bad Request | Server: freenginx | Date: Wed, 16 Apr 2025 19:05:06 GMT | Content-Type: text/html | Content-Length: 154 | Connection: close | Timing-Allow-Origin: * | Cache-Control: no-store | Pragma: no-cache | Access-Control-Allow-Origin: * | Access-Control-Expose-Headers: Content-Range,X-TCP-Info | X-TCP-Info: addr=208.76.253.234;port=47374;sc= | | 400 Bad Request | |

400 Bad Request

|
freenginx
| |_ 3 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service : ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port80-TCP:V=7.92%I=7%D=4/16%Time=67FFFF60%P=x86_64-redhat-linux-gnu%r( SF:HTTPOptions,157,"HTTP/1\.1\x20200\x20OK\r\nServer:\x20freenginx\r\nDate SF::\x20Wed,\x2016\x20Apr\x202025\x2019:05:04\x20GMT\r\nContent-Type:\x20a SF:pplication/octet-stream\r\nContent-Length:\x200\r\nConnection:\x20close SF:\r\nTiming-Allow-Origin:\x20\*\r\nCache-Control:\x20no-store\r\nPragma: SF:\x20no-cache\r\nAccess-Control-Allow-Origin:\x20\*\r\nAccess-Control-Ex SF:pose-Headers:\x20X-TCP-Info\r\nX-TCP-Info:\x20addr=208\.76\.253\.234;po SF:rt=36410;sc=\r\n\r\n")%r(RTSPRequest,1ED,"HTTP/1\.1\x20400\x20Bad\x20Re SF:quest\r\nServer:\x20freenginx\r\nDate:\x20Wed,\x2016\x20Apr\x202025\x20 SF:19:05:05\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20154 SF:\r\nConnection:\x20close\r\nTiming-Allow-Origin:\x20\*\r\nCache-Control SF::\x20no-store\r\nPragma:\x20no-cache\r\nAccess-Control-Allow-Origin:\x2 SF:0\*\r\nAccess-Control-Expose-Headers:\x20X-TCP-Info\r\nX-TCP-Info:\x20a SF:ddr=208\.76\.253\.234;port=36412;sc=\r\n\r\n\r\n400\ SF:x20Bad\x20Request\r\n\r\n

400\x20Bad\x2 SF:0Request

\r\n
freenginx
\r\n\r\n SF:\r\n")%r(X11Probe,1ED,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nSer SF:ver:\x20freenginx\r\nDate:\x20Wed,\x2016\x20Apr\x202025\x2019:05:05\x20 SF:GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20154\r\nConnecti SF:on:\x20close\r\nTiming-Allow-Origin:\x20\*\r\nCache-Control:\x20no-stor SF:e\r\nPragma:\x20no-cache\r\nAccess-Control-Allow-Origin:\x20\*\r\nAcces SF:s-Control-Expose-Headers:\x20X-TCP-Info\r\nX-TCP-Info:\x20addr=208\.76\ SF:.253\.234;port=36418;sc=\r\n\r\n\r\n400\x20Bad\x20Re SF:quest\r\n\r\n

400\x20Bad\x20Request

\r\n
freenginx
\r\n\r\n\r\n" SF:)%r(GenericLines,1ED,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20 SF:freenginx\r\nDate:\x20Wed,\x2016\x20Apr\x202025\x2019:05:10\x20GMT\r\nC SF:ontent-Type:\x20text/html\r\nContent-Length:\x20154\r\nConnection:\x20c SF:lose\r\nTiming-Allow-Origin:\x20\*\r\nCache-Control:\x20no-store\r\nPra SF:gma:\x20no-cache\r\nAccess-Control-Allow-Origin:\x20\*\r\nAccess-Contro SF:l-Expose-Headers:\x20X-TCP-Info\r\nX-TCP-Info:\x20addr=208\.76\.253\.23 SF:4;port=58948;sc=\r\n\r\n\r\n400\x20Bad\x20Request</t SF:itle></head>\r\n<body>\r\n<center><h1>400\x20Bad\x20Request</h1></cente SF:r>\r\n<hr><center>freenginx</center>\r\n</body>\r\n</html>\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port443-TCP:V=7.92%T=SSL%I=7%D=4/16%Time=67FFFF61%P=x86_64-redhat-linux SF:-gnu%r(GetRequest,99,"HTTP/1\.1\x20200\x20OK\r\nServer:\x20freenginx\r\ SF:nDate:\x20Wed,\x2016\x20Apr\x202025\x2019:05:05\x20GMT\r\nContent-Type: SF:\x20application/octet-stream\r\nContent-Length:\x200\r\nConnection:\x20 SF:close\r\n\r\n")%r(HTTPOptions,144,"HTTP/1\.1\x20405\x20Method\x20Not\x2 SF:0Allowed\r\nServer:\x20freenginx\r\nDate:\x20Wed,\x2016\x20Apr\x202025\ SF:x2019:05:06\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20 SF:168\r\nConnection:\x20close\r\n\r\n<html>\r\n<head><title>405\x20Method SF:\x20Not\x20Allowed\r\n\r\n

405\x20Metho SF:d\x20Not\x20Allowed

\r\n
freenginx
\r\n SF:\r\n\r\n")%r(FourOhFourRequest,1E8,"HTTP/1\.1\x20400\x20B SF:ad\x20Request\r\nServer:\x20freenginx\r\nDate:\x20Wed,\x2016\x20Apr\x20 SF:2025\x2019:05:06\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length SF::\x20154\r\nConnection:\x20close\r\nTiming-Allow-Origin:\x20\*\r\nCache SF:-Control:\x20no-store\r\nPragma:\x20no-cache\r\nAccess-Control-Allow-Or SF:igin:\x20\*\r\nAccess-Control-Expose-Headers:\x20X-TCP-Info\r\nX-TCP-In SF:fo:\x20addr=127\.0\.0\.1;port=15261;sc=\r\n\r\n\r\n4 SF:00\x20Bad\x20Request\r\n\r\n

400\x20Bad SF:\x20Request

\r\n
freenginx
\r\n\ SF:r\n\r\n")%r(tor-versions,1ED,"HTTP/1\.1\x20400\x20Bad\x20Request SF:\r\nServer:\x20freenginx\r\nDate:\x20Wed,\x2016\x20Apr\x202025\x2019:05 SF::06\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20154\r\nC SF:onnection:\x20close\r\nTiming-Allow-Origin:\x20\*\r\nCache-Control:\x20 SF:no-store\r\nPragma:\x20no-cache\r\nAccess-Control-Allow-Origin:\x20\*\r SF:\nAccess-Control-Expose-Headers:\x20X-TCP-Info\r\nX-TCP-Info:\x20addr=2 SF:08\.76\.253\.234;port=43456;sc=\r\n\r\n\r\n400\x20Ba SF:d\x20Request\r\n\r\n

400\x20Bad\x20Requ SF:est

\r\n
freenginx
\r\n\r\n\r\n")%r(GenericLines,1ED,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServ SF:er:\x20freenginx\r\nDate:\x20Wed,\x2016\x20Apr\x202025\x2019:05:07\x20G SF:MT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20154\r\nConnectio SF:n:\x20close\r\nTiming-Allow-Origin:\x20\*\r\nCache-Control:\x20no-store SF:\r\nPragma:\x20no-cache\r\nAccess-Control-Allow-Origin:\x20\*\r\nAccess SF:-Control-Expose-Headers:\x20X-TCP-Info\r\nX-TCP-Info:\x20addr=208\.76\. SF:253\.234;port=43462;sc=\r\n\r\n\r\n400\x20Bad\x20Req SF:uest\r\n\r\n

400\x20Bad\x20Request

SF:
\r\n
freenginx
\r\n\r\n\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port444-TCP:V=7.92%T=SSL%I=7%D=4/16%Time=67FFFF61%P=x86_64-redhat-linux SF:-gnu%r(GenericLines,1FB,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\ SF:x20freenginx\r\nDate:\x20Wed,\x2016\x20Apr\x202025\x2019:05:05\x20GMT\r SF:\nContent-Type:\x20text/html\r\nContent-Length:\x20154\r\nConnection:\x SF:20close\r\nTiming-Allow-Origin:\x20\*\r\nCache-Control:\x20no-store\r\n SF:Pragma:\x20no-cache\r\nAccess-Control-Allow-Origin:\x20\*\r\nAccess-Con SF:trol-Expose-Headers:\x20Content-Range,X-TCP-Info\r\nX-TCP-Info:\x20addr SF:=208\.76\.253\.234;port=35766;sc=\r\n\r\n\r\n400\x20 SF:Bad\x20Request\r\n\r\n

400\x20Bad\x20Re SF:quest

\r\n
freenginx
\r\n\r\n\r\n")%r(GetRequest,1F5,"HTTP/1\.1\x20404\x20Not\x20Found\r\nServer SF::\x20freenginx\r\nDate:\x20Wed,\x2016\x20Apr\x202025\x2019:05:06\x20GMT SF:\r\nContent-Type:\x20text/html\r\nContent-Length:\x20150\r\nConnection: SF:\x20close\r\nTiming-Allow-Origin:\x20\*\r\nCache-Control:\x20no-store\r SF:\nPragma:\x20no-cache\r\nAccess-Control-Allow-Origin:\x20\*\r\nAccess-C SF:ontrol-Expose-Headers:\x20Content-Range,X-TCP-Info\r\nX-TCP-Info:\x20ad SF:dr=208\.76\.253\.234;port=47356;sc=\r\n\r\n\r\n404\x SF:20Not\x20Found\r\n\r\n

404\x20Not\x20Fo SF:und

\r\n
freenginx
\r\n\r\n\r\n")%r(HTTPOptions,165,"HTTP/1\.1\x20200\x20OK\r\nServer:\x20freeng SF:inx\r\nDate:\x20Wed,\x2016\x20Apr\x202025\x2019:05:06\x20GMT\r\nContent SF:-Type:\x20application/octet-stream\r\nContent-Length:\x200\r\nConnectio SF:n:\x20close\r\nTiming-Allow-Origin:\x20\*\r\nCache-Control:\x20no-store SF:\r\nPragma:\x20no-cache\r\nAccess-Control-Allow-Origin:\x20\*\r\nAccess SF:-Control-Expose-Headers:\x20Content-Range,X-TCP-Info\r\nX-TCP-Info:\x20 SF:addr=208\.76\.253\.234;port=47372;sc=\r\n\r\n")%r(RTSPRequest,1FB,"HTTP SF:/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20freenginx\r\nDate:\x20Wed, SF:\x2016\x20Apr\x202025\x2019:05:06\x20GMT\r\nContent-Type:\x20text/html\ SF:r\nContent-Length:\x20154\r\nConnection:\x20close\r\nTiming-Allow-Origi SF:n:\x20\*\r\nCache-Control:\x20no-store\r\nPragma:\x20no-cache\r\nAccess SF:-Control-Allow-Origin:\x20\*\r\nAccess-Control-Expose-Headers:\x20Conte SF:nt-Range,X-TCP-Info\r\nX-TCP-Info:\x20addr=208\.76\.253\.234;port=47374 SF:;sc=\r\n\r\n\r\n400\x20Bad\x20Request SF:\r\n\r\n

400\x20Bad\x20Request

\r\n
freenginx\r\n\r\n\r\n"); Aggressive OS guesses: FreeBSD 11.3-RELEASE (96%), FreeBSD 11.0-CURRENT (94%), FreeBSD 11.2-RELEASE - 11.3 RELEASE or 11.2-STABLE (91%), FreeBSD 12.0-RELEASE - 13.0-CURRENT (91%), FreeBSD 7.0-RELEASE (91%), FreeBSD 11.0-RELEASE - 12.0-CURRENT (91%), FreeBSD 11.1-RELEASE or 11.2-STABLE (91%), FreeBSD 11.1-STABLE (91%), FreeBSD 11.1-RELEASE (90%), FreeBSD 11.2-RELEASE - 11.3-RELEASE (90%) No exact OS matches for host (test conditions non-ideal). Network Distance: 9 hops TRACEROUTE (using port 80/tcp) HOP RTT ADDRESS 1 0.21 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177) 2 0.76 ms gw.mcom-colocationamerica.com (208.64.231.81) 3 1.92 ms r2b4.n1.p1401.lax.multacom.net (64.69.46.11) 4 ... 5 0.95 ms be3271.ccr41.lax04.atlas.cogentco.com (154.54.42.102) 6 2.69 ms lumen.lax04.atlas.cogentco.com (154.54.10.198) 7 ... 8 58.24 ms po1.es02.ord003.ix.nflxvideo.net (66.197.165.32) 9 57.09 ms ipv4-c140-ord003-ix.1.oca.nflxvideo.net (23.246.37.195) OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 98.45 seconds