API tools faq
paste
Advertisement
Guest User

nmap gob.es subdomains

a guest
Oct 7th, 2018
925
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 71.64 KB | None | 0 0
raw download clone embed print report
  1. # Nmap 7.70 scan initiated Sun Oct 7 21:37:18 2018 as: nmap -iL spaingob -oN spaingobmap -O -sV -Pn
  2. Failed to resolve "sede.adifaltavelocidad.gob.es".
  3. Failed to resolve "dnsipv6.administracionelectronica.gob.es".
  4. Failed to resolve "sede.aena.gob.es".
  5. Failed to resolve "www.mobi.agenciatributaria.gob.es".
  6. Failed to resolve "www1.mobi.agenciatributaria.gob.es".
  7. Failed to resolve "www2.mobi.agenciatributaria.gob.es".
  8. Failed to resolve "www.ccs.gob.es".
  9. Failed to resolve "sede.cedex.gob.es".
  10. Failed to resolve "pnr.citco.gob.es".
  11. Failed to resolve "sede.cmt.gob.es".
  12. Failed to resolve "notificaciones.cncompetencia.gob.es".
  13. Failed to resolve "sede.cne.gob.es".
  14. Failed to resolve "sede.cnjuego.gob.es".
  15. Failed to resolve "cnspostal.gob.es".
  16. Failed to resolve "comercio.gob.es".
  17. Failed to resolve "consulado.gob.es".
  18. Failed to resolve "www.contrataciondelsectorpublico.gob.es".
  19. Failed to resolve "certificado.contrataciondelsectorpublico.gob.es".
  20. Failed to resolve "publicacion.contrataciondelsectorpublico.gob.es".
  21. Failed to resolve "agregacion.contratacionsectorpublico.gob.es".
  22. Failed to resolve "csd.gob.es".
  23. Failed to resolve "sede-pre.csic.gob.es".
  24. Failed to resolve "www.admin.tecnologiaeinnovacion.defensa.gob.es".
  25. Failed to resolve "colaboracion.tecnologiaeinnovacion.defensa.gob.es".
  26. Failed to resolve "www.colaboracion.tecnologiaeinnovacion.defensa.gob.es".
  27. Failed to resolve "www.sitios.tecnologiaeinnovacion.defensa.gob.es".
  28. Failed to resolve "emm.gob.es".
  29. Failed to resolve "sede.empleoyseguridadsocial.gob.es".
  30. Failed to resolve "www.facturaelectrica.gob.es".
  31. Failed to resolve "www.firmaelectronica.gob.es".
  32. Nmap scan report for sede.060.gob.es (185.73.172.38)
  33. Host is up (0.062s latency).
  34. rDNS record for 185.73.172.38: 38.red-185-73-172.customer.static.ccgg.telefonica.net
  35. Not shown: 995 filtered ports
  36. PORT STATE SERVICE VERSION
  37. 80/tcp open http Microsoft IIS httpd 5.0
  38. 113/tcp closed ident
  39. 443/tcp open ssl/http Microsoft IIS httpd 5.0
  40. 2000/tcp open cisco-sccp?
  41. 5060/tcp open sip?
  42. OS fingerprint not ideal because: maxTimingRatio (9.736000e+00) is greater than 1.4
  43. No OS matches for host
  44. Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
  45.  
  46. Nmap scan report for sede.adif.gob.es (213.144.33.140)
  47. Host is up (0.070s latency).
  48. Not shown: 998 filtered ports
  49. PORT STATE SERVICE VERSION
  50. 443/tcp open ssl/https
  51. 8443/tcp open ssl/https-alt
  52. 2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
  53. ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
  54. SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/7%Time=5BBA74D3%P=x86_64-pc-linux-gnu
  55. SF:%r(GetRequest,1CA,"HTTP/1\.1\x20302\x20Found\r\nDate:\x20Sun,\x2007\x20
  56. SF:Oct\x202018\x2021:04:18\x20GMT\r\nLocation:\x20https://sede\.adif\.gob\
  57. SF:.es/es_ES/sede_electronica/index\.shtml\r\nContent-Length:\x20243\r\nCo
  58. SF:nnection:\x20close\r\nContent-Type:\x20text/html;\x20charset=iso-8859-1
  59. SF:\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IETF//DTD\x20HTML\x202\.0//
  60. SF:EN\">\n<html><head>\n<title>302\x20Found</title>\n</head><body>\n<h1>Fo
  61. SF:und</h1>\n<p>The\x20document\x20has\x20moved\x20<a\x20href=\"https://se
  62. SF:de\.adif\.gob\.es/es_ES/sede_electronica/index\.shtml\">here</a>\.</p>\
  63. SF:n</body></html>\n")%r(HTTPOptions,1CA,"HTTP/1\.1\x20302\x20Found\r\nDat
  64. SF:e:\x20Sun,\x2007\x20Oct\x202018\x2021:04:18\x20GMT\r\nLocation:\x20http
  65. SF:s://sede\.adif\.gob\.es/es_ES/sede_electronica/index\.shtml\r\nContent-
  66. SF:Length:\x20243\r\nConnection:\x20close\r\nContent-Type:\x20text/html;\x
  67. SF:20charset=iso-8859-1\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IETF//D
  68. SF:TD\x20HTML\x202\.0//EN\">\n<html><head>\n<title>302\x20Found</title>\n<
  69. SF:/head><body>\n<h1>Found</h1>\n<p>The\x20document\x20has\x20moved\x20<a\
  70. SF:x20href=\"https://sede\.adif\.gob\.es/es_ES/sede_electronica/index\.sht
  71. SF:ml\">here</a>\.</p>\n</body></html>\n")%r(FourOhFourRequest,4CA,"HTTP/1
  72. SF:\.1\x20404\x20Not\x20Found\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2021:
  73. SF:04:19\x20GMT\r\nAccept-Ranges:\x20bytes\r\nContent-Length:\x201075\r\nC
  74. SF:onnection:\x20close\r\nContent-Type:\x20text/html\r\n\r\n<!DOCTYPE\x20H
  75. SF:TML\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01//EN\"\x20\"http://www\.
  76. SF:w3\.org/TR/html4/strict\.dtd\">\n<html\x20class=\"dj_gecko\"\x20lang=\"
  77. SF:es\">\n<head>\n<title>Portal\x20INICIA</title>\n<link\x20rel=\"styleshe
  78. SF:et\"\x20type=\"text/css\"\x20href=\"/error/main\.css\">\x20\n\n<meta\x2
  79. SF:0http-equiv=\"content-type\"\x20content=\"text/html;\x20charset=ISO-885
  80. SF:9-1\">\n<script\x20type=\"text/javascript\">\n\tif\x20\(top\.location\.
  81. SF:href\x20!=\x20self\.location\.href\)\n\t\t\t{top\.location=self\.locati
  82. SF:on;}\n</script>\n</head>\n<body>\n\t<center>\n\t\t<div\x20class=\"pagin
  83. SF:a\">\n\t\t\t<div\x20id=\"header\"\x20class=\"header\">\n\t\t\t\t<div\x2
  84. SF:0class=\"header_superior\">\n\t\t\t\t\t<div\x20class=\"margen\">\n\t\t\
  85. SF:t\t\t\t&nbsp;\n\t\t\t\t\t</div>\x20\t\n\t\t\t\t\t\n\t\t\t\t\x20\x20\x20
  86. SF:\x20<div\x20class=\"imagen_title\">\n\t\t\t\t\t\x20\x20\x20\x20<img\x20
  87. SF:alt=\"\"\x20src=\"/error/images/logoCabecera\.png\">\n\t\t\t\t\x20\x20\
  88. SF:x20\x20</div>\n\t\t\t\t\x20\x20\x20\x20<div\x20style=\"clear:\x20both\"
  89. SF:></div>\n\t\t\t");
  90. ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
  91. SF-Port8443-TCP:V=7.70%T=SSL%I=7%D=10/7%Time=5BBA74D3%P=x86_64-pc-linux-gn
  92. SF:u%r(GetRequest,4AD,"HTTP/1\.1\x20403\x20Forbidden\r\nDate:\x20Sun,\x200
  93. SF:7\x20Oct\x202018\x2021:04:18\x20GMT\r\nAccept-Ranges:\x20bytes\r\nConte
  94. SF:nt-Length:\x201046\r\nConnection:\x20close\r\nContent-Type:\x20text/htm
  95. SF:l\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01/
  96. SF:/EN\"\x20\"http://www\.w3\.org/TR/html4/strict\.dtd\">\n<html\x20class=
  97. SF:\"dj_gecko\"\x20lang=\"es\">\n<head>\n<title>Portal\x20INICIA</title>\n
  98. SF:<link\x20rel=\"stylesheet\"\x20type=\"text/css\"\x20href=\"/error/main\
  99. SF:.css\">\x20\n\n<meta\x20http-equiv=\"content-type\"\x20content=\"text/h
  100. SF:tml;\x20charset=ISO-8859-1\">\n<script\x20type=\"text/javascript\">\n\t
  101. SF:if\x20\(top\.location\.href\x20!=\x20self\.location\.href\)\n\t\t\t{top
  102. SF:\.location=self\.location;}\n</script>\n</head>\n<body>\n\t<center>\n\t
  103. SF:\t<div\x20class=\"pagina\">\n\t\t\t<div\x20id=\"header\"\x20class=\"hea
  104. SF:der\">\n\t\t\t\t<div\x20class=\"header_superior\">\n\t\t\t\t\t<div\x20c
  105. SF:lass=\"margen\">\n\t\t\t\t\t\t&nbsp;\n\t\t\t\t\t</div>\x20\t\n\t\t\t\t\
  106. SF:t\n\t\t\t\t\x20\x20\x20\x20<div\x20class=\"imagen_title\">\n\t\t\t\t\t\
  107. SF:x20\x20\x20\x20<img\x20alt=\"\"\x20src=\"/error/images/logoCabecera\.pn
  108. SF:g\">\n\t\t\t\t\x20\x20\x20\x20</div>\n\t\t\t\t\x20\x20\x20\x20<div\x20s
  109. SF:tyle=\"clear:\x20both\"></div>\n\t\t\t")%r(HTTPOptions,A0,"HTTP/1\.1\x2
  110. SF:0200\x20OK\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2021:04:19\x20GMT\r\n
  111. SF:Allow:\x20GET,HEAD,POST,OPTIONS\r\nContent-Length:\x200\r\nConnection:\
  112. SF:x20close\r\nContent-Type:\x20httpd/unix-directory\r\n\r\n")%r(FourOhFou
  113. SF:rRequest,4CA,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Sun,\x2007\x
  114. SF:20Oct\x202018\x2021:04:19\x20GMT\r\nAccept-Ranges:\x20bytes\r\nContent-
  115. SF:Length:\x201075\r\nConnection:\x20close\r\nContent-Type:\x20text/html\r
  116. SF:\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01//EN
  117. SF:\"\x20\"http://www\.w3\.org/TR/html4/strict\.dtd\">\n<html\x20class=\"d
  118. SF:j_gecko\"\x20lang=\"es\">\n<head>\n<title>Portal\x20INICIA</title>\n<li
  119. SF:nk\x20rel=\"stylesheet\"\x20type=\"text/css\"\x20href=\"/error/main\.cs
  120. SF:s\">\x20\n\n<meta\x20http-equiv=\"content-type\"\x20content=\"text/html
  121. SF:;\x20charset=ISO-8859-1\">\n<script\x20type=\"text/javascript\">\n\tif\
  122. SF:x20\(top\.location\.href\x20!=\x20self\.location\.href\)\n\t\t\t{top\.l
  123. SF:ocation=self\.location;}\n</script>\n</head>\n<body>\n\t<center>\n\t\t<
  124. SF:div\x20class=\"pagina\">\n\t\t\t<div\x20id=\"header\"\x20class=\"header
  125. SF:\">\n\t\t\t\t<div\x20class=\"header_superior\">\n\t\t\t\t\t<div\x20clas
  126. SF:s=\"margen\">\n\t\t\t\t\t\t&nbsp;\n\t\t\t\t\t</div>\x20\t\n\t\t\t\t\t\n
  127. SF:\t\t\t\t\x20\x20\x20\x20<div\x20class=\"imagen_title\">\n\t\t\t\t\t\x20
  128. SF:\x20\x20\x20<img\x20alt=\"\"\x20src=\"/error/images/logoCabecera\.png\"
  129. SF:>\n\t\t\t\t\x20\x20\x20\x20</div>\n\t\t\t\t\x20\x20\x20\x20<div\x20styl
  130. SF:e=\"clear:\x20both\"></div>\n\t\t\t");
  131. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  132. OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
  133. No OS matches for host
  134.  
  135. Nmap scan report for sedeav.adif.gob.es (213.144.33.141)
  136. Host is up.
  137. All 1000 scanned ports on sedeav.adif.gob.es (213.144.33.141) are filtered
  138. Too many fingerprints match this host to give specific OS details
  139.  
  140. Nmap scan report for tramites.administracion.gob.es (82.223.253.146)
  141. Host is up (0.065s latency).
  142. Not shown: 998 filtered ports
  143. PORT STATE SERVICE VERSION
  144. 80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
  145. 443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
  146. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  147. Device type: load balancer
  148. Running (JUST GUESSING): F5 Networks TMOS 11.6.X (86%)
  149. OS CPE: cpe:/o:f5:tmos:11.6
  150. Aggressive OS guesses: F5 BIG-IP Local Traffic Manager load balancer (TMOS 11.6) (86%)
  151. No exact OS matches for host (test conditions non-ideal).
  152. Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
  153.  
  154. Nmap scan report for administraciondejusticia.gob.es (212.128.106.105)
  155. Host is up (0.067s latency).
  156. Not shown: 998 filtered ports
  157. PORT STATE SERVICE VERSION
  158. 80/tcp open http-proxy F5 BIG-IP load balancer http proxy
  159. 443/tcp open ssl/https
  160. 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
  161. SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/7%Time=5BBA74D3%P=x86_64-pc-linux-gnu
  162. SF:%r(GetRequest,3D8,"HTTP/1\.1\x20302\x20Found\r\nDate:\x20Sun,\x2007\x20
  163. SF:Oct\x202018\x2021:04:19\x20GMT\r\nLocation:\x20https://apaalto02/paj/pu
  164. SF:blico/ciudadano/home/!ut/p/c5/04_SB8K8xLLM9MSSzPy8xBz9CP0os3gTDzf_AG9HQ
  165. SF:wuzAAsDA08vExMv81BPYwMDA6B8pFm8AQ7gaEBAdzjIPrN4M09XU8-gYBMT41AXEwNP47Aw
  166. SF:1wAPXwMDEwOIPB7z_Tzyc1P1C3IjDLJMHBUBD427TQ!!/dl3/d3/L2dBISEvZ0FBIS9nQSE
  167. SF:h/\r\nCache-Control:\x20max-age=604800\r\nExpires:\x20Sun,\x2014\x20Oct
  168. SF:\x202018\x2021:04:19\x20GMT\r\nContent-Length:\x20422\r\nKeep-Alive:\x2
  169. SF:0timeout=15,\x20max=97\r\nConnection:\x20close\r\nContent-Type:\x20text
  170. SF:/html;\x20charset=iso-8859-1\r\nStrict-Transport-Security:\x20max-age=3
  171. SF:1536000;\x20IncludeSubdomains\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-
  172. SF://IETF//DTD\x20HTML\x202\.0//EN\">\n<html><head>\n<title>302\x20Found</
  173. SF:title>\n</head><body>\n<h1>Found</h1>\n<p>The\x20document\x20has\x20mov
  174. SF:ed\x20<a\x20href=\"http://apaalto02/paj/publico/ciudadano/home/!ut/p/c5
  175. SF:/04_SB8K8xLLM9MSSzPy8xBz9CP0os3gTDzf_AG9HQwuzAAsDA08vExMv81BPYwMDA6B8pF
  176. SF:m8AQ7gaEBAdzjIPrN4M09XU8-gYBMT41AXEwNP47Aw1wAPXwMDEwOIPB7z_Tzy")%r(HTTP
  177. SF:Options,3D8,"HTTP/1\.1\x20302\x20Found\r\nDate:\x20Sun,\x2007\x20Oct\x2
  178. SF:02018\x2021:04:20\x20GMT\r\nLocation:\x20https://apaalto01/paj/publico/
  179. SF:ciudadano/home/!ut/p/c5/04_SB8K8xLLM9MSSzPy8xBz9CP0os3gTDzf_AG9HQwuzAAs
  180. SF:DA08vExMv81BPYwMDA6B8pFm8AQ7gaEBAdzjIPrN4M09XU8-gYBMT41AXEwNP47Aw1wAPXw
  181. SF:MDEwOIPB7z_Tzyc1P1C3IjDLJMHBUBD427TQ!!/dl3/d3/L2dBISEvZ0FBIS9nQSEh/\r\n
  182. SF:Cache-Control:\x20max-age=604800\r\nExpires:\x20Sun,\x2014\x20Oct\x2020
  183. SF:18\x2021:04:20\x20GMT\r\nContent-Length:\x20422\r\nKeep-Alive:\x20timeo
  184. SF:ut=15,\x20max=98\r\nConnection:\x20close\r\nContent-Type:\x20text/html;
  185. SF:\x20charset=iso-8859-1\r\nStrict-Transport-Security:\x20max-age=3153600
  186. SF:0;\x20IncludeSubdomains\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IETF
  187. SF://DTD\x20HTML\x202\.0//EN\">\n<html><head>\n<title>302\x20Found</title>
  188. SF:\n</head><body>\n<h1>Found</h1>\n<p>The\x20document\x20has\x20moved\x20
  189. SF:<a\x20href=\"http://apaalto01/paj/publico/ciudadano/home/!ut/p/c5/04_SB
  190. SF:8K8xLLM9MSSzPy8xBz9CP0os3gTDzf_AG9HQwuzAAsDA08vExMv81BPYwMDA6B8pFm8AQ7g
  191. SF:aEBAdzjIPrN4M09XU8-gYBMT41AXEwNP47Aw1wAPXwMDEwOIPB7z_Tzy");
  192. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  193. OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
  194. No OS matches for host
  195. Service Info: Device: load balancer
  196.  
  197. Nmap scan report for administracionelectronica.gob.es (185.73.172.50)
  198. Host is up (0.065s latency).
  199. Other addresses for administracionelectronica.gob.es (not scanned): 2a03:44a0:100:fffe::afc:8432
  200. rDNS record for 185.73.172.50: 50.red-185-73-172.customer.static.ccgg.telefonica.net
  201. Not shown: 995 filtered ports
  202. PORT STATE SERVICE VERSION
  203. 80/tcp open http Microsoft IIS httpd 5.0
  204. 113/tcp closed ident
  205. 443/tcp open ssl/http Microsoft IIS httpd 5.0
  206. 2000/tcp open cisco-sccp?
  207. 5060/tcp open sip?
  208. OS fingerprint not ideal because: maxTimingRatio (9.666000e+00) is greater than 1.4
  209. No OS matches for host
  210. Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
  211.  
  212. Nmap scan report for listas-ctt.administracionelectronica.gob.es (185.73.172.37)
  213. Host is up (0.062s latency).
  214. Other addresses for listas-ctt.administracionelectronica.gob.es (not scanned): 2a03:44a0:100:fffe::afc:8411
  215. rDNS record for 185.73.172.37: 37.red-185-73-172.customer.static.ccgg.telefonica.net
  216. Not shown: 995 filtered ports
  217. PORT STATE SERVICE VERSION
  218. 80/tcp open http Microsoft IIS httpd 5.0
  219. 113/tcp closed ident
  220. 443/tcp open ssl/http Microsoft IIS httpd 5.0
  221. 2000/tcp open cisco-sccp?
  222. 5060/tcp open sip?
  223. Device type: general purpose
  224. Running (JUST GUESSING): FreeBSD 6.X (86%)
  225. OS CPE: cpe:/o:freebsd:freebsd:6.2
  226. Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
  227. No exact OS matches for host (test conditions non-ideal).
  228. Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
  229.  
  230. Nmap scan report for administracionespublicas.gob.es (185.73.174.13)
  231. Host is up (0.069s latency).
  232. Other addresses for administracionespublicas.gob.es (not scanned): 2a03:44a0:300::b949:ae0d
  233. rDNS record for 185.73.174.13: 13.red-185-73-174.customer.static.ccgg.telefonica.net
  234. Not shown: 999 filtered ports
  235. PORT STATE SERVICE VERSION
  236. 80/tcp open http Apache Tomcat/Coyote JSP engine 1.1
  237. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  238. OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
  239. No OS matches for host
  240.  
  241. Nmap scan report for sede.administracionespublicas.gob.es (185.73.174.63)
  242. Host is up (0.068s latency).
  243. Other addresses for sede.administracionespublicas.gob.es (not scanned): 2a03:44a0:300::b949:ae3f
  244. rDNS record for 185.73.174.63: 63.red-185-73-174.customer.static.ccgg.telefonica.net
  245. Not shown: 998 filtered ports
  246. PORT STATE SERVICE VERSION
  247. 80/tcp open http Apache httpd
  248. 443/tcp open ssl/ssl Apache httpd (SSL-only mode)
  249. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  250. Device type: storage-misc|general purpose|firewall
  251. Running (JUST GUESSING): Linux 2.6.X|3.X (88%), Synology DiskStation Manager 5.X (88%), WatchGuard Fireware 11.X (86%)
  252. OS CPE: cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:watchguard:fireware:11.8
  253. Aggressive OS guesses: Synology DiskStation Manager 5.1 (88%), Linux 2.6.32 (87%), Linux 2.6.39 (86%), Linux 2.6.32 or 3.10 (86%), Linux 3.10 (86%), Linux 3.4 (86%), WatchGuard Fireware 11.8 (86%), Linux 2.6.32 - 2.6.39 (85%), Linux 3.1 - 3.2 (85%)
  254. No exact OS matches for host (test conditions non-ideal).
  255.  
  256. Nmap scan report for aea.gob.es (212.128.114.102)
  257. Host is up (0.067s latency).
  258. rDNS record for 212.128.114.102: 102.red-212-128-114.customer.static.ccgg.telefonica.net
  259. Not shown: 998 filtered ports
  260. PORT STATE SERVICE VERSION
  261. 80/tcp open http Apache Tomcat/Coyote JSP engine 1.1
  262. 113/tcp closed ident
  263. Device type: general purpose
  264. Running (JUST GUESSING): OpenBSD 4.X (87%), FreeBSD 6.X (86%)
  265. OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
  266. Aggressive OS guesses: OpenBSD 4.0 (87%), FreeBSD 6.2-RELEASE (86%), OpenBSD 4.3 (86%)
  267. No exact OS matches for host (test conditions non-ideal).
  268.  
  269. Nmap scan report for aecid.gob.es (192.148.209.54)
  270. Host is up (0.067s latency).
  271. rDNS record for 192.148.209.54: 54.red-192-148-209.customer.static.ccgg.telefonica.net
  272. Not shown: 996 filtered ports
  273. PORT STATE SERVICE VERSION
  274. 80/tcp open http-proxy F5 BIG-IP load balancer http proxy
  275. 443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
  276. 554/tcp closed rtsp
  277. 8080/tcp closed http-proxy
  278. Device type: general purpose
  279. Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 6.X (85%)
  280. OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
  281. Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 6.2-RELEASE (85%), OpenBSD 4.3 (85%)
  282. No exact OS matches for host (test conditions non-ideal).
  283. Service Info: OS: Windows; Device: load balancer; CPE: cpe:/o:microsoft:windows
  284.  
  285. Nmap scan report for www.aei.gob.es (193.146.133.11)
  286. Host is up (0.076s latency).
  287. rDNS record for 193.146.133.11: video.micinn.es
  288. Not shown: 997 filtered ports
  289. PORT STATE SERVICE VERSION
  290. 80/tcp open http?
  291. 81/tcp open http lighttpd 1.4.26
  292. 443/tcp open ssl/https?
  293. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  294. OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
  295. No OS matches for host
  296.  
  297. Nmap scan report for oamail.aei.gob.es (193.146.133.14)
  298. Host is up (0.070s latency).
  299. rDNS record for 193.146.133.14: oamail.ciencia.gob.es
  300. Not shown: 999 filtered ports
  301. PORT STATE SERVICE VERSION
  302. 443/tcp open ssl/http Microsoft IIS httpd 7.5
  303. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  304. OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
  305. No OS matches for host
  306. Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
  307.  
  308. Nmap scan report for smtp1.aei.gob.es (193.146.133.3)
  309. Host is up (0.061s latency).
  310. rDNS record for 193.146.133.3: smtp1.micinn.es
  311. Not shown: 993 filtered ports
  312. PORT STATE SERVICE VERSION
  313. 80/tcp open http Apache httpd
  314. 110/tcp closed pop3
  315. 143/tcp closed imap
  316. 443/tcp open ssl/ssl Apache httpd (SSL-only mode)
  317. 465/tcp closed smtps
  318. 993/tcp closed imaps
  319. 995/tcp closed pop3s
  320. Device type: WAP|general purpose|specialized
  321. Running (JUST GUESSING): Apple embedded (87%), FreeBSD 9.X|10.X|6.X (87%), VMware ESXi 4.X (85%), AirSpan embedded (85%)
  322. OS CPE: cpe:/h:apple:airport_extreme cpe:/o:freebsd:freebsd:9.3 cpe:/o:freebsd:freebsd:10 cpe:/o:freebsd:freebsd:6.2 cpe:/o:vmware:esxi:4.1
  323. Aggressive OS guesses: Apple AirPort Extreme WAP (87%), FreeBSD 9.3-RELEASE (87%), FreeBSD 9.0-RELEASE (86%), FreeBSD 9.0-RELEASE - 10.3-RELEASE (86%), FreeBSD 6.2-RELEASE (86%), VMware ESXi 4.1.0 (85%), AirSpan ProST WiMAX access point (85%)
  324. No exact OS matches for host (test conditions non-ideal).
  325.  
  326. Nmap scan report for sede.aemet.gob.es (212.128.97.201)
  327. Host is up (0.071s latency).
  328. rDNS record for 212.128.97.201: 201.red-212-128-97.customer.static.ccgg.telefonica.net
  329. Not shown: 998 filtered ports
  330. PORT STATE SERVICE VERSION
  331. 80/tcp closed http
  332. 443/tcp open ssl/ssl Apache httpd (SSL-only mode)
  333. Device type: general purpose|specialized
  334. Running (JUST GUESSING): Microsoft Windows 7|2008|8.1|Vista|2012|10 (92%)
  335. OS CPE: cpe:/o:microsoft:windows_7::sp1 cpe:/o:microsoft:windows_server_2008::sp2 cpe:/o:microsoft:windows_8.1 cpe:/o:microsoft:windows_vista::sp1:home_premium cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_server_2012 cpe:/o:microsoft:windows_10:1511
  336. Aggressive OS guesses: Microsoft Windows 7 SP1 or Windows Server 2008 SP2 (92%), Microsoft Windows 7 SP1 or Windows Server 2008 (91%), Microsoft Windows 7 Ultimate (91%), Microsoft Windows 8.1 (91%), Microsoft Windows 7 SP1 (91%), Microsoft Windows Windows 7 SP1 (91%), Microsoft Windows Vista Home Premium SP1, Windows 7, or Windows Server 2008 (91%), Microsoft Windows Vista SP1 (91%), Microsoft Windows 8.1 Update 1 (88%), Microsoft Windows 8.1 Enterprise (88%)
  337. No exact OS matches for host (test conditions non-ideal).
  338.  
  339. Nmap scan report for aemps.gob.es (195.64.186.91)
  340. Host is up (0.065s latency).
  341. Not shown: 998 filtered ports
  342. PORT STATE SERVICE VERSION
  343. 80/tcp open http server-header-none
  344. 443/tcp open ssl/https server-header-none
  345. 2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
  346. ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
  347. SF-Port80-TCP:V=7.70%I=7%D=10/7%Time=5BBA74DA%P=x86_64-pc-linux-gnu%r(GetR
  348. SF:equest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-header-n
  349. SF:one\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2021:04:25\x20GMT\r\nContent
  350. SF:-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20close\r
  351. SF:\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>Forbidden<
  352. SF:/H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20the\x20
  353. SF:requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/1\.1\x2
  354. SF:0501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nDate:\x2
  355. SF:0Sun,\x2007\x20Oct\x202018\x2021:04:25\x20GMT\r\nContent-length:\x20148
  356. SF:\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HE
  357. SF:AD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Implement
  358. SF:ed</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20requested
  359. SF:\x20method\.\n</BODY></HTML>")%r(FourOhFourRequest,1C0,"HTTP/1\.1\x2040
  360. SF:4\x20Not\x20found\r\nServer:\x20server-header-none\r\nDate:\x20Sun,\x20
  361. SF:07\x20Oct\x202018\x2021:04:26\x20GMT\r\nContent-type:\x20text/html\r\nC
  362. SF:ontent-length:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META\x20HTT
  363. SF:P-EQUIV=\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859-1\"><T
  364. SF:ITLE>Not\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x20reque
  365. SF:sted\x20object\x20does\x20not\x20exist\x20on\x20this\x20server\.\x20The
  366. SF:\x20link\x20you\x20followed\x20is\x20either\x20outdated,\x20inaccurate,
  367. SF:\x20or\x20the\x20server\x20has\x20been\x20instructed\x20not\x20to\x20le
  368. SF:t\x20you\x20have\x20it\.\x20");
  369. ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
  370. SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/7%Time=5BBA74E0%P=x86_64-pc-linux-gnu
  371. SF:%r(GetRequest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-h
  372. SF:eader-none\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2021:04:32\x20GMT\r\n
  373. SF:Content-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20
  374. SF:close\r\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>For
  375. SF:bidden</H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20
  376. SF:the\x20requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/
  377. SF:1\.1\x20501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nD
  378. SF:ate:\x20Sun,\x2007\x20Oct\x202018\x2021:04:32\x20GMT\r\nContent-length:
  379. SF:\x20148\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<H
  380. SF:TML><HEAD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Im
  381. SF:plemented</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20re
  382. SF:quested\x20method\.\n</BODY></HTML>")%r(RTSPRequest,131,"HTTP/1\.1\x204
  383. SF:00\x20Bad\x20request\r\nServer:\x20server-header-none\r\nDate:\x20Sun,\
  384. SF:x2007\x20Oct\x202018\x2021:04:43\x20GMT\r\nContent-length:\x20147\r\nCo
  385. SF:ntent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TI
  386. SF:TLE>Bad\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\
  387. SF:x20browser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20u
  388. SF:nderstand\.\n</BODY></HTML>")%r(Help,131,"HTTP/1\.1\x20400\x20Bad\x20re
  389. SF:quest\r\nServer:\x20server-header-none\r\nDate:\x20Sun,\x2007\x20Oct\x2
  390. SF:02018\x2021:04:58\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20
  391. SF:text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20requ
  392. SF:est</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20s
  393. SF:ent\x20a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</
  394. SF:BODY></HTML>")%r(SSLSessionReq,131,"HTTP/1\.1\x20400\x20Bad\x20request\
  395. SF:r\nServer:\x20server-header-none\r\nDate:\x20Sun,\x2007\x20Oct\x202018\
  396. SF:x2021:04:59\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20text/h
  397. SF:tml\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20request</T
  398. SF:ITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20sent\x2
  399. SF:0a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</BODY><
  400. SF:/HTML>");
  401. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  402. Device type: phone|media device|general purpose
  403. Running (JUST GUESSING): Apple iOS 4.X|5.X|6.X|7.X|8.X|9.X (86%), Apple OS X 10.10.X (86%)
  404. OS CPE: cpe:/o:apple:iphone_os:4 cpe:/o:apple:iphone_os:5.1.1 cpe:/o:apple:iphone_os:6 cpe:/o:apple:iphone_os:7.1.1 cpe:/o:apple:iphone_os:8.2 cpe:/o:apple:iphone_os:9 cpe:/o:apple:mac_os_x:10.10
  405. Aggressive OS guesses: Apple iOS 4.3.1 - 4.3.5 (86%), Apple iOS 5.1.1 (86%), Apple iOS 5.1.1 - 6.1 (86%), Apple iOS 6 (86%), Apple iOS 7.1.1 (86%), Apple iOS 8.2 (Darwin 14.0.0) (86%), Apple OS X 10.10 (Yosemite) or iOS 8.3 - 9.0.1 (Darwin 14.0.0 - 15.0.0) (86%), Apple OS X 10.8 (Mountain Lion) (Darwin 12.4.0) (86%), Apple OS X 10.9 (Mavericks) (Darwin 13.0.0 - 13.2.0) (86%), Netgear WNR834Bv2 WAP (86%)
  406. No exact OS matches for host (test conditions non-ideal).
  407.  
  408. Nmap scan report for sede.aemps.gob.es (195.64.186.53)
  409. Host is up (0.070s latency).
  410. Not shown: 998 filtered ports
  411. PORT STATE SERVICE VERSION
  412. 80/tcp open http
  413. 443/tcp open ssl/https?
  414. 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
  415. SF-Port80-TCP:V=7.70%I=7%D=10/7%Time=5BBA74DF%P=x86_64-pc-linux-gnu%r(GetR
  416. SF:equest,57,"HTTP/1\.0\x20302\x20Moved\x20Temporarily\r\nLocation:\x20htt
  417. SF:ps://195\.64\.186\.53/\r\nContent-Length:\x200\r\n\r\n")%r(HTTPOptions,
  418. SF:57,"HTTP/1\.0\x20302\x20Moved\x20Temporarily\r\nLocation:\x20https://19
  419. SF:5\.64\.186\.53/\r\nContent-Length:\x200\r\n\r\n")%r(FourOhFourRequest,7
  420. SF:A,"HTTP/1\.0\x20302\x20Moved\x20Temporarily\r\nLocation:\x20https://195
  421. SF:\.64\.186\.53/nice%20ports%2C/Tri%6Eity\.txt%2ebak\r\nContent-Length:\x
  422. SF:200\r\n\r\n");
  423. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  424. Device type: phone|media device|general purpose
  425. Running (JUST GUESSING): Apple iOS 4.X|5.X|6.X|7.X|8.X|9.X (86%), Apple OS X 10.10.X (86%)
  426. OS CPE: cpe:/o:apple:iphone_os:4 cpe:/o:apple:iphone_os:5.1.1 cpe:/o:apple:iphone_os:6 cpe:/o:apple:iphone_os:7.1.1 cpe:/o:apple:iphone_os:8.2 cpe:/o:apple:iphone_os:9 cpe:/o:apple:mac_os_x:10.10
  427. Aggressive OS guesses: Apple iOS 4.3.1 - 4.3.5 (86%), Apple iOS 5.1.1 (86%), Apple iOS 5.1.1 - 6.1 (86%), Apple iOS 6 (86%), Apple iOS 7.1.1 (86%), Apple iOS 8.2 (Darwin 14.0.0) (86%), Apple OS X 10.10 (Yosemite) or iOS 8.3 - 9.0.1 (Darwin 14.0.0 - 15.0.0) (86%), Apple OS X 10.8 (Mountain Lion) (Darwin 12.4.0) (86%), Apple OS X 10.9 (Mavericks) (Darwin 13.0.0 - 13.2.0) (86%), Netgear WNR834Bv2 WAP (86%)
  428. No exact OS matches for host (test conditions non-ideal).
  429.  
  430. Nmap scan report for www.agenciatributaria.gob.es (195.235.106.207)
  431. Host is up (0.071s latency).
  432. Not shown: 998 filtered ports
  433. PORT STATE SERVICE VERSION
  434. 80/tcp open http-proxy F5 BIG-IP load balancer http proxy
  435. 443/tcp open ssl/http Fortinet FortiGate 50B or FortiWifi 60C or 80C firewall http config
  436. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  437. OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
  438. No OS matches for host
  439. Service Info: OS: FortiOS; Devices: load balancer, firewall; CPE: cpe:/h:fortinet:fortiwifi:80c
  440.  
  441. Nmap scan report for correoseguro.agenciatributaria.gob.es (195.76.38.162)
  442. Host is up (0.064s latency).
  443. rDNS record for 195.76.38.162: mx1.correo.aeat.es
  444. Not shown: 999 filtered ports
  445. PORT STATE SERVICE VERSION
  446. 443/tcp open https?
  447. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  448. OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
  449. No OS matches for host
  450.  
  451. Nmap scan report for www8.ia.agenciatributaria.gob.es (195.76.38.171)
  452. Host is up (0.064s latency).
  453. rDNS record for 195.76.38.171: 171.red-195-76-38.customer.static.ccgg.telefonica.net
  454. Not shown: 999 filtered ports
  455. PORT STATE SERVICE VERSION
  456. 443/tcp open ssl/http-proxy F5 BIG-IP load balancer http proxy
  457. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  458. OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
  459. No OS matches for host
  460. Service Info: Device: load balancer
  461.  
  462. Nmap scan report for www1.agenciatributaria.gob.es (195.235.106.208)
  463. Host is up (0.061s latency).
  464. Not shown: 998 filtered ports
  465. PORT STATE SERVICE VERSION
  466. 80/tcp open http-proxy F5 BIG-IP load balancer http proxy
  467. 443/tcp open ssl/http-proxy F5 BIG-IP load balancer http proxy
  468. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  469. OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
  470. No OS matches for host
  471. Service Info: Device: load balancer
  472.  
  473. Nmap scan report for www2.agenciatributaria.gob.es (195.235.106.209)
  474. Host is up (0.065s latency).
  475. Not shown: 997 filtered ports
  476. PORT STATE SERVICE VERSION
  477. 80/tcp open http-proxy F5 BIG-IP load balancer http proxy
  478. 443/tcp open ssl/http Fortinet FortiGate 50B or FortiWifi 60C or 80C firewall http config
  479. 8010/tcp closed xmpp
  480. Device type: load balancer|firewall
  481. Running (JUST GUESSING): F5 Networks TMOS 11.6.X|11.4.X (89%)
  482. OS CPE: cpe:/o:f5:tmos:11.6 cpe:/o:f5:tmos:11.4
  483. Aggressive OS guesses: F5 BIG-IP Local Traffic Manager load balancer (TMOS 11.6) (89%), F5 BIG-IP AFM firewall (85%), F5 BIG-IP load balancer (TMOS 11.4) (85%)
  484. No exact OS matches for host (test conditions non-ideal).
  485. Service Info: OS: FortiOS; Devices: load balancer, firewall; CPE: cpe:/h:fortinet:fortiwifi:80c
  486.  
  487. Nmap scan report for www3.agenciatributaria.gob.es (195.76.38.161)
  488. Host is up (0.071s latency).
  489. rDNS record for 195.76.38.161: 161.red-195-76-38.customer.static.ccgg.telefonica.net
  490. Not shown: 999 filtered ports
  491. PORT STATE SERVICE VERSION
  492. 443/tcp open ssl/http Fortinet FortiGate 50B or FortiWifi 60C or 80C firewall http config
  493. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  494. OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
  495. No OS matches for host
  496. Service Info: OS: FortiOS; Device: firewall; CPE: cpe:/h:fortinet:fortiwifi:80c
  497.  
  498. Nmap scan report for www4.agenciatributaria.gob.es (195.76.38.163)
  499. Host is up (0.072s latency).
  500. rDNS record for 195.76.38.163: 163.red-195-76-38.customer.static.ccgg.telefonica.net
  501. Not shown: 999 filtered ports
  502. PORT STATE SERVICE VERSION
  503. 443/tcp open ssl/http-proxy F5 BIG-IP load balancer http proxy
  504. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  505. OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
  506. No OS matches for host
  507. Service Info: Device: load balancer
  508.  
  509. Nmap scan report for www5.agenciatributaria.gob.es (195.76.38.164)
  510. Host is up (0.064s latency).
  511. rDNS record for 195.76.38.164: 164.red-195-76-38.customer.static.ccgg.telefonica.net
  512. Not shown: 999 filtered ports
  513. PORT STATE SERVICE VERSION
  514. 443/tcp open ssl/http Fortinet FortiGate 50B or FortiWifi 60C or 80C firewall http config
  515. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  516. OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
  517. No OS matches for host
  518. Service Info: OS: FortiOS; Device: firewall; CPE: cpe:/h:fortinet:fortiwifi:80c
  519.  
  520. Nmap scan report for www6.agenciatributaria.gob.es (195.76.38.168)
  521. Host is up (0.067s latency).
  522. rDNS record for 195.76.38.168: 168.red-195-76-38.customer.static.ccgg.telefonica.net
  523. Not shown: 998 filtered ports
  524. PORT STATE SERVICE VERSION
  525. 80/tcp open http-proxy F5 BIG-IP load balancer http proxy
  526. 443/tcp open ssl/https
  527. 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
  528. SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/7%Time=5BBA74F9%P=x86_64-pc-linux-gnu
  529. SF:%r(GetRequest,24D,"HTTP/1\.1\x20302\x20Found\r\nDate:\x20Sun,\x2007\x20
  530. SF:Oct\x202018\x2021:04:57\x20GMT\r\nLocation:\x20https://www2\.agenciatri
  531. SF:butaria\.gob\.es/static_files/common/internet/dep/aplicaciones/ov/p24au
  532. SF:t01\.html\?ref=%2F\r\nContent-Length:\x20292\r\nKeep-Alive:\x20timeout=
  533. SF:20,\x20max=200\r\nConnection:\x20close\r\nContent-Type:\x20text/html;\x
  534. SF:20charset=iso-8859-1\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IETF//D
  535. SF:TD\x20HTML\x202\.0//EN\">\n<html><head>\n<title>302\x20Found</title>\n<
  536. SF:/head><body>\n<h1>Found</h1>\n<p>The\x20document\x20has\x20moved\x20<a\
  537. SF:x20href=\"https://www2\.agenciatributaria\.gob\.es/static_files/common/
  538. SF:internet/dep/aplicaciones/ov/p24aut01\.html\?ref=%2F\">here</a>\.</p>\n
  539. SF:</body></html>\n")%r(HTTPOptions,24D,"HTTP/1\.1\x20302\x20Found\r\nDate
  540. SF::\x20Sun,\x2007\x20Oct\x202018\x2021:04:57\x20GMT\r\nLocation:\x20https
  541. SF:://www2\.agenciatributaria\.gob\.es/static_files/common/internet/dep/ap
  542. SF:licaciones/ov/p24aut01\.html\?ref=%2F\r\nContent-Length:\x20292\r\nKeep
  543. SF:-Alive:\x20timeout=20,\x20max=200\r\nConnection:\x20close\r\nContent-Ty
  544. SF:pe:\x20text/html;\x20charset=iso-8859-1\r\n\r\n<!DOCTYPE\x20HTML\x20PUB
  545. SF:LIC\x20\"-//IETF//DTD\x20HTML\x202\.0//EN\">\n<html><head>\n<title>302\
  546. SF:x20Found</title>\n</head><body>\n<h1>Found</h1>\n<p>The\x20document\x20
  547. SF:has\x20moved\x20<a\x20href=\"https://www2\.agenciatributaria\.gob\.es/s
  548. SF:tatic_files/common/internet/dep/aplicaciones/ov/p24aut01\.html\?ref=%2F
  549. SF:\">here</a>\.</p>\n</body></html>\n")%r(FourOhFourRequest,A0F,"HTTP/1\.
  550. SF:1\x20404\x20Not\x20Found\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2021:04
  551. SF::57\x20GMT\r\nLast-Modified:\x20Wed,\x2021\x20Dec\x202016\x2008:00:46\x
  552. SF:20GMT\r\nETag:\x20\"10683c-8b8-544268ce4c5f2;54fb29a52df26\"\r\nAccept-
  553. SF:Ranges:\x20bytes\r\nContent-Length:\x202232\r\nAccess-Control-Allow-Cre
  554. SF:dentials:\x20true\r\nKeep-Alive:\x20timeout=20,\x20max=200\r\nConnectio
  555. SF:n:\x20close\r\nContent-Type:\x20text/html\r\nContent-Language:\x20es-ES
  556. SF:\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01//
  557. SF:EN\"\x20\"http://www\.w3\.org/TR/html4/strict\.dtd\">\r\n<html\x20lang=
  558. SF:\"es-ES\">\r\n<head>\r\n\x20\x20\x20\x20<title>Agencia\x20Tributaria\x2
  559. SF:0-\x20Se\x20ha\x20producido\x20un\x20error</title>\r\n\x20\x20\x20\x20<
  560. SF:meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html;\x20charset=
  561. SF:UTF-8\">\x20\x20\x20\x20\x20\x20\x20\r\n<link\x20href=\"https://www\.ag
  562. SF:enciatributaria\.gob\.es/static_files/common/css/xzhtcs04\.css\"\x20rel
  563. SF:=\"stylesheet\"\x20type=\"text/css\">\r\n<script\x20type=\"text/javascr
  564. SF:ipt\">\x20\r\n\t\tfunction\x20toggle\(\)\r\n\t\t{\r\n\t\t\x20\x20\x20\x
  565. SF:20var\x20o=document\.getElementById\(\"AEAT_errores_tecnicos\"\);\r\n\t
  566. SF:\t\to\.style\.display=\(o\.style\.display==''\x20\|\|\x20o\.");
  567. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  568. OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
  569. No OS matches for host
  570. Service Info: Device: load balancer
  571.  
  572. Nmap scan report for www7.agenciatributaria.gob.es (195.76.38.169)
  573. Host is up (0.064s latency).
  574. rDNS record for 195.76.38.169: 169.red-195-76-38.customer.static.ccgg.telefonica.net
  575. Not shown: 998 filtered ports
  576. PORT STATE SERVICE VERSION
  577. 80/tcp open http-proxy F5 BIG-IP load balancer http proxy
  578. 443/tcp open ssl/https
  579. 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
  580. SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/7%Time=5BBA74F9%P=x86_64-pc-linux-gnu
  581. SF:%r(GetRequest,24D,"HTTP/1\.1\x20302\x20Found\r\nDate:\x20Sun,\x2007\x20
  582. SF:Oct\x202018\x2021:04:57\x20GMT\r\nLocation:\x20https://www2\.agenciatri
  583. SF:butaria\.gob\.es/static_files/common/internet/dep/aplicaciones/ov/p24au
  584. SF:t01\.html\?ref=%2F\r\nContent-Length:\x20292\r\nKeep-Alive:\x20timeout=
  585. SF:20,\x20max=200\r\nConnection:\x20close\r\nContent-Type:\x20text/html;\x
  586. SF:20charset=iso-8859-1\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IETF//D
  587. SF:TD\x20HTML\x202\.0//EN\">\n<html><head>\n<title>302\x20Found</title>\n<
  588. SF:/head><body>\n<h1>Found</h1>\n<p>The\x20document\x20has\x20moved\x20<a\
  589. SF:x20href=\"https://www2\.agenciatributaria\.gob\.es/static_files/common/
  590. SF:internet/dep/aplicaciones/ov/p24aut01\.html\?ref=%2F\">here</a>\.</p>\n
  591. SF:</body></html>\n")%r(HTTPOptions,24D,"HTTP/1\.1\x20302\x20Found\r\nDate
  592. SF::\x20Sun,\x2007\x20Oct\x202018\x2021:04:57\x20GMT\r\nLocation:\x20https
  593. SF:://www2\.agenciatributaria\.gob\.es/static_files/common/internet/dep/ap
  594. SF:licaciones/ov/p24aut01\.html\?ref=%2F\r\nContent-Length:\x20292\r\nKeep
  595. SF:-Alive:\x20timeout=20,\x20max=200\r\nConnection:\x20close\r\nContent-Ty
  596. SF:pe:\x20text/html;\x20charset=iso-8859-1\r\n\r\n<!DOCTYPE\x20HTML\x20PUB
  597. SF:LIC\x20\"-//IETF//DTD\x20HTML\x202\.0//EN\">\n<html><head>\n<title>302\
  598. SF:x20Found</title>\n</head><body>\n<h1>Found</h1>\n<p>The\x20document\x20
  599. SF:has\x20moved\x20<a\x20href=\"https://www2\.agenciatributaria\.gob\.es/s
  600. SF:tatic_files/common/internet/dep/aplicaciones/ov/p24aut01\.html\?ref=%2F
  601. SF:\">here</a>\.</p>\n</body></html>\n")%r(FourOhFourRequest,2AB,"HTTP/1\.
  602. SF:1\x20302\x20Found\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2021:04:58\x20
  603. SF:GMT\r\nLocation:\x20https://www2\.agenciatributaria\.gob\.es/static_fil
  604. SF:es/common/internet/dep/aplicaciones/ov/p24aut01\.html\?ref=%2Fnice%2520
  605. SF:ports%252C%2FTri%256Eity%2Etxt%252ebak\r\nContent-Length:\x20339\r\nKee
  606. SF:p-Alive:\x20timeout=20,\x20max=200\r\nConnection:\x20close\r\nContent-T
  607. SF:ype:\x20text/html;\x20charset=iso-8859-1\r\n\r\n<!DOCTYPE\x20HTML\x20PU
  608. SF:BLIC\x20\"-//IETF//DTD\x20HTML\x202\.0//EN\">\n<html><head>\n<title>302
  609. SF:\x20Found</title>\n</head><body>\n<h1>Found</h1>\n<p>The\x20document\x2
  610. SF:0has\x20moved\x20<a\x20href=\"https://www2\.agenciatributaria\.gob\.es/
  611. SF:static_files/common/internet/dep/aplicaciones/ov/p24aut01\.html\?ref=%2
  612. SF:Fnice%2520ports%252C%2FTri%256Eity%2Etxt%252ebak\">here</a>\.</p>\n</bo
  613. SF:dy></html>\n");
  614. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  615. OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
  616. No OS matches for host
  617. Service Info: Device: load balancer
  618.  
  619. Nmap scan report for agendadigital.gob.es (193.147.89.91)
  620. Host is up (0.067s latency).
  621. Other addresses for agendadigital.gob.es (not scanned): 2001:720:438:402::91
  622. rDNS record for 193.147.89.91: www.usuariosteleco.es
  623. Not shown: 999 filtered ports
  624. PORT STATE SERVICE VERSION
  625. 80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
  626. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  627. OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
  628. No OS matches for host
  629. Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
  630.  
  631. Nmap scan report for www.sede.airef.gob.es (46.24.40.246)
  632. Host is up (0.064s latency).
  633. rDNS record for 46.24.40.246: static-246-40-24-46.ipcom.comunitel.net
  634. Not shown: 998 filtered ports
  635. PORT STATE SERVICE VERSION
  636. 80/tcp open http Apache httpd 2.4.25 ((Debian))
  637. 443/tcp open ssl/ssl Apache httpd (SSL-only mode)
  638. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  639. Device type: general purpose
  640. Running (JUST GUESSING): Linux 3.X (86%)
  641. OS CPE: cpe:/o:linux:linux_kernel:3.13
  642. Aggressive OS guesses: Linux 3.13 (86%), Linux 3.2.0 (85%)
  643. No exact OS matches for host (test conditions non-ideal).
  644.  
  645. Nmap scan report for sede.apalmeria.gob.es (195.53.242.28)
  646. Host is up (0.067s latency).
  647. Not shown: 998 filtered ports
  648. PORT STATE SERVICE VERSION
  649. 80/tcp open http nginx 1.12.1
  650. 443/tcp open ssl/http nginx 1.12.1
  651. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  652. Device type: general purpose
  653. Running (JUST GUESSING): Linux 3.X|4.X|2.6.X (89%)
  654. OS CPE: cpe:/o:linux:linux_kernel:3.2.0 cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:2.6
  655. Aggressive OS guesses: Linux 3.2.0 (89%), Linux 3.11 - 4.1 (87%), Linux 3.16 (87%), Linux 4.4 (87%), Linux 2.6.18 - 2.6.22 (86%)
  656. No exact OS matches for host (test conditions non-ideal).
  657.  
  658. Nmap scan report for sede.apfsc.gob.es (213.4.82.205)
  659. Host is up (0.092s latency).
  660. rDNS record for 213.4.82.205: 213.4.82.205.rad.tsai.es
  661. Not shown: 998 filtered ports
  662. PORT STATE SERVICE VERSION
  663. 80/tcp open http nginx 1.8.1
  664. 443/tcp open ssl/http nginx 1.8.1
  665. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  666. Device type: WAP|general purpose|webcam
  667. Running (JUST GUESSING): Asus embedded (98%), Linux 3.X|2.6.X (98%), AXIS embedded (96%)
  668. OS CPE: cpe:/h:asus:rt-n56u cpe:/o:linux:linux_kernel:3.4 cpe:/o:linux:linux_kernel:3.2 cpe:/o:linux:linux_kernel:2.6.17 cpe:/h:axis:210a_network_camera cpe:/h:axis:211_network_camera
  669. Aggressive OS guesses: ASUS RT-N56U WAP (Linux 3.4) (98%), Linux 3.2 (98%), Linux 3.1 (96%), Linux 3.16 (96%), AXIS 210A or 211 Network Camera (Linux 2.6.17) (96%)
  670. No exact OS matches for host (test conditions non-ideal).
  671.  
  672. Nmap scan report for sede.apsevilla.gob.es (195.235.113.45)
  673. Host is up (0.072s latency).
  674. Not shown: 998 filtered ports
  675. PORT STATE SERVICE VERSION
  676. 113/tcp closed ident
  677. 443/tcp open ssl/http Apache Tomcat/Coyote JSP engine 1.1
  678. Device type: router|printer
  679. Running (JUST GUESSING): Linksys embedded (86%), Ricoh embedded (85%)
  680. OS CPE: cpe:/h:ricoh:aficio_sp_c240sf
  681. Aggressive OS guesses: Linksys BEFSR41 EtherFast router (86%), Ricoh Aficio SP C240SF printer (85%)
  682. No exact OS matches for host (test conditions non-ideal).
  683.  
  684. Nmap scan report for sede.apvigo.gob.es (194.69.250.179)
  685. Host is up (0.059s latency).
  686. rDNS record for 194.69.250.179: alh250179.alhsys.es
  687. Not shown: 995 filtered ports
  688. PORT STATE SERVICE VERSION
  689. 80/tcp open http Apache httpd 2.4.29 ((Win64) OpenSSL/1.1.0g)
  690. 113/tcp closed ident
  691. 443/tcp open ssl/ssl Apache httpd (SSL-only mode)
  692. 8080/tcp open http Apache Tomcat/Coyote JSP engine 1.1
  693. 8443/tcp closed https-alt
  694. Device type: general purpose
  695. Running (JUST GUESSING): Microsoft Windows 2012 (87%)
  696. OS CPE: cpe:/o:microsoft:windows_server_2012
  697. Aggressive OS guesses: Microsoft Windows Server 2012 (87%), Microsoft Windows Server 2012 or Windows Server 2012 R2 (87%), Microsoft Windows Server 2012 R2 (87%)
  698. No exact OS matches for host (test conditions non-ideal).
  699.  
  700. Nmap scan report for sede.autoridadportuariadelabahiadealgeciras.gob.es (62.81.230.49)
  701. Host is up (0.075s latency).
  702. rDNS record for 62.81.230.49: 62.81.230.49.static.user.ono.com
  703. Not shown: 997 closed ports
  704. PORT STATE SERVICE VERSION
  705. 80/tcp open http Apache httpd
  706. 443/tcp open ssl/ssl Apache httpd (SSL-only mode)
  707. 465/tcp filtered smtps
  708. Device type: general purpose|storage-misc|WAP
  709. Running (JUST GUESSING): Linux 2.6.X|3.X (89%), HP embedded (87%)
  710. OS CPE: cpe:/o:linux:linux_kernel:2.6 cpe:/o:linux:linux_kernel:3 cpe:/h:hp:p2000_g3 cpe:/o:linux:linux_kernel:2.6.22
  711. Aggressive OS guesses: Linux 2.6.32 - 3.13 (89%), Linux 2.6.32 (88%), Linux 2.6.32 - 2.6.39 (88%), Linux 2.6.32 - 3.1 (88%), Linux 2.6.39 (88%), HP P2000 G3 NAS device (87%), Linux 2.6.32 - 3.10 (86%), Linux 3.10 (86%), Linux 3.2 (86%), Linux 2.6.32 - 3.9 (85%)
  712. No exact OS matches for host (test conditions non-ideal).
  713.  
  714. Nmap scan report for www.aytosalamanca.gob.es (89.140.231.214)
  715. Host is up (0.076s latency).
  716. rDNS record for 89.140.231.214: 89.140.231.214.static.user.ono.com
  717. Not shown: 998 filtered ports
  718. PORT STATE SERVICE VERSION
  719. 80/tcp open http Apache httpd 2.2.15
  720. 443/tcp open ssl/http Apache httpd 2.2.15
  721. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  722. Device type: general purpose
  723. Running (JUST GUESSING): Linux 2.6.X (86%)
  724. OS CPE: cpe:/o:linux:linux_kernel:2.6
  725. Aggressive OS guesses: Linux 2.6.18 - 2.6.22 (86%)
  726. No exact OS matches for host (test conditions non-ideal).
  727. Service Info: Hosts: 89.140.231.214, www.aytosalamanca.gob.es
  728.  
  729. Nmap scan report for bicentenarios.gob.es (217.149.144.15)
  730. Host is up (0.063s latency).
  731. Not shown: 997 filtered ports
  732. PORT STATE SERVICE VERSION
  733. 80/tcp open http Microsoft IIS httpd 7.5
  734. 113/tcp closed ident
  735. 443/tcp open ssl/http Microsoft IIS httpd 7.5
  736. OS fingerprint not ideal because: maxTimingRatio (1.016400e+01) is greater than 1.4
  737. No OS matches for host
  738. Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
  739.  
  740. Nmap scan report for bne.gob.es (212.128.118.0)
  741. Host is up.
  742. All 1000 scanned ports on bne.gob.es (212.128.118.0) are filtered
  743. Too many fingerprints match this host to give specific OS details
  744.  
  745. Nmap scan report for registro.bne.gob.es (212.128.118.20)
  746. Host is up.
  747. All 1000 scanned ports on registro.bne.gob.es (212.128.118.20) are filtered
  748. Too many fingerprints match this host to give specific OS details
  749.  
  750. Nmap scan report for sede.bne.gob.es (212.128.118.13)
  751. Host is up (0.064s latency).
  752. Not shown: 998 filtered ports
  753. PORT STATE SERVICE VERSION
  754. 443/tcp open ssl/http Apache httpd 2.0.52 ((Red Hat))
  755. 8443/tcp open ssl/https-alt?
  756. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  757. Device type: general purpose|firewall|proxy server|WAP|PBX
  758. Running (JUST GUESSING): Linux 2.6.X (87%), Cisco embedded (86%), Riverbed embedded (86%), ZoneAlarm embedded (86%), Ruckus embedded (85%)
  759. OS CPE: cpe:/o:linux:linux_kernel:2.6.9 cpe:/o:linux:linux_kernel:2.6 cpe:/h:cisco:sa520 cpe:/h:riverbed:steelhead_200 cpe:/h:zonealarm:z100g cpe:/h:cisco:uc320w cpe:/h:ruckus:7363
  760. Aggressive OS guesses: Linux 2.6.9 (87%), Linux 2.6.22.1-32.fc6 (x86, SMP) (86%), Oracle Enterprise Linux 6 (Linux 2.6.32) (86%), Cisco SA520 firewall (Linux 2.6) (86%), Linux 2.6.11 (86%), Linux 2.6.18 (86%), Linux 2.6.28 (86%), Linux 2.6.30 (86%), Linux 2.6.32 (86%), Linux 2.6.5 (86%)
  761. No exact OS matches for host (test conditions non-ideal).
  762.  
  763. Nmap scan report for boe.gob.es (81.89.32.212)
  764. Host is up (0.66s latency).
  765. Not shown: 998 filtered ports
  766. PORT STATE SERVICE VERSION
  767. 80/tcp open http Apache httpd
  768. 443/tcp open ssl/http Apache httpd
  769. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  770. Device type: general purpose|firewall|media device
  771. Running (JUST GUESSING): Linux 2.6.X|3.X (86%), IPCop 2.X (86%), Tiandy embedded (86%)
  772. OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.4 cpe:/o:ipcop:ipcop:2 cpe:/o:linux:linux_kernel:3.2
  773. Aggressive OS guesses: Linux 2.6.32 (86%), IPCop 2 firewall (Linux 3.4) (86%), Linux 3.2 (86%), Tiandy NVR (86%)
  774. No exact OS matches for host (test conditions non-ideal).
  775.  
  776. Nmap scan report for www.boveda.gob.es (217.160.0.43)
  777. Host is up (0.094s latency).
  778. rDNS record for 217.160.0.43: 217-160-0-43.elastic-ssl.ui-r.com
  779. Not shown: 942 filtered ports, 55 closed ports
  780. PORT STATE SERVICE VERSION
  781. 80/tcp open http nginx
  782. 81/tcp open http nginx
  783. 443/tcp open ssl/https nginx
  784. Device type: general purpose|WAP|storage-misc
  785. Running (JUST GUESSING): Linux 3.X|4.X|2.6.X|2.4.X (91%), HP embedded (87%), Apple macOS 10.13.X (86%)
  786. OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:2.6.22 cpe:/h:hp:p2000_g3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:apple:mac_os_x:10.13 cpe:/o:linux:linux_kernel:2.4
  787. Aggressive OS guesses: Linux 3.10 - 4.11 (91%), Linux 3.2 - 4.9 (89%), OpenWrt Kamikaze 7.09 (Linux 2.6.22) (88%), HP P2000 G3 NAS device (87%), Linux 4.4 (87%), Linux 2.6.32 (86%), Apple macOS 10.13 (High Sierra) (Darwin 17.0.0) (86%), Linux 3.18 (85%), OpenWrt 0.9 - 7.09 (Linux 2.4.30 - 2.4.34) (85%), OpenWrt White Russian 0.9 (Linux 2.4.30) (85%)
  788. No exact OS matches for host (test conditions non-ideal).
  789.  
  790. Nmap scan report for buscador.gob.es (185.73.172.49)
  791. Host is up (0.062s latency).
  792. rDNS record for 185.73.172.49: 49.red-185-73-172.customer.static.ccgg.telefonica.net
  793. Not shown: 997 filtered ports
  794. PORT STATE SERVICE VERSION
  795. 113/tcp closed ident
  796. 2000/tcp open cisco-sccp?
  797. 5060/tcp open sip?
  798. OS fingerprint not ideal because: maxTimingRatio (1.011200e+01) is greater than 1.4
  799. No OS matches for host
  800.  
  801. Nmap scan report for www.buscador.gob.es (108.177.126.121)
  802. Host is up (0.11s latency).
  803. Other addresses for www.buscador.gob.es (not scanned): 2a00:1450:4013:c01::79
  804. Not shown: 998 filtered ports
  805. PORT STATE SERVICE VERSION
  806. 80/tcp open http Google httpd
  807. 443/tcp open ssl/http Google httpd
  808. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  809. OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
  810. No OS matches for host
  811.  
  812. Nmap scan report for defensa.buscador.gob.es (108.177.119.121)
  813. Host is up (0.096s latency).
  814. Other addresses for defensa.buscador.gob.es (not scanned): 2a00:1450:4013:c05::79
  815. Not shown: 998 filtered ports
  816. PORT STATE SERVICE VERSION
  817. 80/tcp open http Google httpd
  818. 443/tcp open ssl/https?
  819. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  820. OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
  821. No OS matches for host
  822.  
  823. Nmap scan report for ccs.gob.es (195.55.157.69)
  824. Host is up (0.067s latency).
  825. Not shown: 998 filtered ports
  826. PORT STATE SERVICE VERSION
  827. 80/tcp open http Apache httpd
  828. 443/tcp open ssl/http Apache httpd (Arya Stark)
  829. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  830. Device type: general purpose|specialized|storage-misc
  831. Running (JUST GUESSING): Linux 3.X|4.X (89%), Crestron 2-Series (87%), HP embedded (85%)
  832. OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4 cpe:/o:crestron:2_series cpe:/h:hp:p2000_g3
  833. Aggressive OS guesses: Linux 3.2 - 4.9 (89%), Linux 3.18 (88%), Linux 3.10 - 4.11 (87%), Linux 3.12 (87%), Linux 3.13 (87%), Linux 3.13 or 4.2 (87%), Linux 3.16 (87%), Linux 3.16 - 4.6 (87%), Linux 3.8 - 3.11 (87%), Linux 4.2 (87%)
  834. No exact OS matches for host (test conditions non-ideal).
  835.  
  836. Nmap scan report for sede.cdti.gob.es (88.84.78.7)
  837. Host is up (0.069s latency).
  838. Not shown: 998 filtered ports
  839. PORT STATE SERVICE VERSION
  840. 113/tcp closed ident
  841. 443/tcp open ssl/https?
  842. Device type: load balancer|general purpose
  843. Running (JUST GUESSING): Citrix embedded (91%), OpenBSD 4.X (85%)
  844. OS CPE: cpe:/o:openbsd:openbsd:4.0
  845. Aggressive OS guesses: Citrix NetScaler load balancer (91%), OpenBSD 4.0 (85%), OpenBSD 4.3 (85%)
  846. No exact OS matches for host (test conditions non-ideal).
  847.  
  848. Nmap scan report for cepc.gob.es (194.126.225.157)
  849. Host is up (0.059s latency).
  850. rDNS record for 194.126.225.157: wisnet04.medios.es
  851. Not shown: 996 filtered ports
  852. PORT STATE SERVICE VERSION
  853. 20/tcp closed ftp-data
  854. 21/tcp open ftp Microsoft ftpd
  855. 80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
  856. 443/tcp open ssl/http Microsoft IIS httpd 7.5
  857. Device type: general purpose
  858. Running (JUST GUESSING): Microsoft Windows 7|Vista|2008|8.1 (95%)
  859. OS CPE: cpe:/o:microsoft:windows_7::sp1 cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_server_2008::sp1 cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_8.1:r1
  860. Aggressive OS guesses: Microsoft Windows 7 SP1 (95%), Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (90%), Microsoft Windows Server 2008 R2 or Windows 8 (89%), Microsoft Windows Server 2008 R2 SP1 (89%), Microsoft Windows 8.1 Update 1 (89%), Microsoft Windows 8.1 R1 (89%), Microsoft Windows Server 2008 R2 SP1 or Windows 8 (89%), Microsoft Windows Server 2008 R2 (88%), Microsoft Windows Server 2008 (88%), Microsoft Windows 7 or Windows Server 2008 R2 (87%)
  861. No exact OS matches for host (test conditions non-ideal).
  862. Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
  863.  
  864. Nmap scan report for www.cepc.gob.es (194.126.225.167)
  865. Host is up (0.069s latency).
  866. rDNS record for 194.126.225.167: wisnet07.medios.es
  867. Not shown: 998 filtered ports
  868. PORT STATE SERVICE VERSION
  869. 80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
  870. 443/tcp open ssl/http Microsoft IIS httpd 7.5
  871. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  872. Device type: general purpose
  873. Running (JUST GUESSING): Microsoft Windows 7|Vista|2008 (96%)
  874. OS CPE: cpe:/o:microsoft:windows_7::sp1 cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_server_2008::sp1
  875. Aggressive OS guesses: Microsoft Windows 7 SP1 (96%), Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (86%)
  876. No exact OS matches for host (test conditions non-ideal).
  877. Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
  878.  
  879. Nmap scan report for editorial.cepc.gob.es (77.240.122.136)
  880. Host is up (0.069s latency).
  881. rDNS record for 77.240.122.136: 77-240-122-136.redes.acens.net
  882. Not shown: 998 filtered ports
  883. PORT STATE SERVICE VERSION
  884. 80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
  885. 443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
  886. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  887. Device type: general purpose
  888. Running (JUST GUESSING): Microsoft Windows 2012|7|2008 (88%)
  889. OS CPE: cpe:/o:microsoft:windows_server_2012 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_server_2008:r2
  890. Aggressive OS guesses: Microsoft Windows Server 2012 (88%), Microsoft Windows Server 2012 or Windows Server 2012 R2 (88%), Microsoft Windows Server 2012 R2 (88%), Microsoft Windows 7 SP1 or Windows Server 2008 R2 (87%)
  891. No exact OS matches for host (test conditions non-ideal).
  892. Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
  893.  
  894. Nmap scan report for wseditorial.cepc.gob.es (77.240.122.137)
  895. Host is up.
  896. rDNS record for 77.240.122.137: 77-240-122-137.redes.acens.net
  897. All 1000 scanned ports on wseditorial.cepc.gob.es (77.240.122.137) are filtered
  898. Too many fingerprints match this host to give specific OS details
  899.  
  900. Nmap scan report for chguadalquivir.gob.es (212.170.226.193)
  901. Host is up (0.071s latency).
  902. rDNS record for 212.170.226.193: www.chguadalquivir.es
  903. Not shown: 998 filtered ports
  904. PORT STATE SERVICE VERSION
  905. 80/tcp open http Apache httpd
  906. 443/tcp open ssl/ssl Apache httpd (SSL-only mode)
  907. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  908. Device type: storage-misc|general purpose|firewall
  909. Running (JUST GUESSING): Linux 2.6.X|3.X (88%), Synology DiskStation Manager 5.X (88%), WatchGuard Fireware 11.X (86%)
  910. OS CPE: cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:watchguard:fireware:11.8
  911. Aggressive OS guesses: Synology DiskStation Manager 5.1 (88%), Linux 2.6.32 (87%), Linux 2.6.39 (86%), Linux 2.6.32 or 3.10 (86%), Linux 3.10 (86%), Linux 3.4 (86%), WatchGuard Fireware 11.8 (86%), Linux 2.6.32 - 2.6.39 (85%), Linux 3.1 - 3.2 (85%)
  912. No exact OS matches for host (test conditions non-ideal).
  913.  
  914. Nmap scan report for www2.chj.gob.es (212.170.252.228)
  915. Host is up (0.073s latency).
  916. rDNS record for 212.170.252.228: 228.red-212-170-252.customer.static.ccgg.telefonica.net
  917. Not shown: 994 filtered ports
  918. PORT STATE SERVICE VERSION
  919. 20/tcp closed ftp-data
  920. 21/tcp open ftp Microsoft ftpd
  921. 80/tcp open http Microsoft IIS httpd 8.5
  922. 443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
  923. 8008/tcp open http
  924. 8010/tcp open ssl/http-proxy FortiGate Web Filtering Service
  925. 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
  926. SF-Port8008-TCP:V=7.70%I=7%D=10/7%Time=5BBA7543%P=x86_64-pc-linux-gnu%r(Ge
  927. SF:tRequest,CC,"HTTP/1\.1\x20302\x20Found\r\nLocation:\x20https://:8010/\r
  928. SF:\nConnection:\x20close\r\nX-Frame-Options:\x20SAMEORIGIN\r\nX-XSS-Prote
  929. SF:ction:\x201;\x20mode=block\r\nX-Content-Type-Options:\x20nosniff\r\nCon
  930. SF:tent-Security-Policy:\x20frame-ancestors\r\n\r\n")%r(FourOhFourRequest,
  931. SF:EF,"HTTP/1\.1\x20302\x20Found\r\nLocation:\x20https://:8010/nice%20port
  932. SF:s%2C/Tri%6Eity\.txt%2ebak\r\nConnection:\x20close\r\nX-Frame-Options:\x
  933. SF:20SAMEORIGIN\r\nX-XSS-Protection:\x201;\x20mode=block\r\nX-Content-Type
  934. SF:-Options:\x20nosniff\r\nContent-Security-Policy:\x20frame-ancestors\r\n
  935. SF:\r\n")%r(GenericLines,CB,"HTTP/1\.1\x20302\x20Found\r\nLocation:\x20htt
  936. SF:ps://:8010\r\nConnection:\x20close\r\nX-Frame-Options:\x20SAMEORIGIN\r\
  937. SF:nX-XSS-Protection:\x201;\x20mode=block\r\nX-Content-Type-Options:\x20no
  938. SF:sniff\r\nContent-Security-Policy:\x20frame-ancestors\r\n\r\n")%r(HTTPOp
  939. SF:tions,CB,"HTTP/1\.1\x20302\x20Found\r\nLocation:\x20https://:8010\r\nCo
  940. SF:nnection:\x20close\r\nX-Frame-Options:\x20SAMEORIGIN\r\nX-XSS-Protectio
  941. SF:n:\x201;\x20mode=block\r\nX-Content-Type-Options:\x20nosniff\r\nContent
  942. SF:-Security-Policy:\x20frame-ancestors\r\n\r\n")%r(RTSPRequest,CB,"HTTP/1
  943. SF:\.1\x20302\x20Found\r\nLocation:\x20https://:8010\r\nConnection:\x20clo
  944. SF:se\r\nX-Frame-Options:\x20SAMEORIGIN\r\nX-XSS-Protection:\x201;\x20mode
  945. SF:=block\r\nX-Content-Type-Options:\x20nosniff\r\nContent-Security-Policy
  946. SF::\x20frame-ancestors\r\n\r\n")%r(SIPOptions,CB,"HTTP/1\.1\x20302\x20Fou
  947. SF:nd\r\nLocation:\x20https://:8010\r\nConnection:\x20close\r\nX-Frame-Opt
  948. SF:ions:\x20SAMEORIGIN\r\nX-XSS-Protection:\x201;\x20mode=block\r\nX-Conte
  949. SF:nt-Type-Options:\x20nosniff\r\nContent-Security-Policy:\x20frame-ancest
  950. SF:ors\r\n\r\n");
  951. Device type: general purpose
  952. Running (JUST GUESSING): Microsoft Windows 2012|7 (89%)
  953. OS CPE: cpe:/o:microsoft:windows_server_2012 cpe:/o:microsoft:windows_7::-:professional
  954. Aggressive OS guesses: Microsoft Windows Server 2012 (89%), Microsoft Windows Server 2012 or Windows Server 2012 R2 (89%), Microsoft Windows Server 2012 R2 (89%), Microsoft Windows 7 Professional (85%)
  955. No exact OS matches for host (test conditions non-ideal).
  956. Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
  957.  
  958. Nmap scan report for sede.ciemat.gob.es (192.101.166.137)
  959. Host is up (0.060s latency).
  960. Not shown: 996 filtered ports
  961. PORT STATE SERVICE VERSION
  962. 113/tcp closed ident
  963. 443/tcp open ssl/http Apache httpd 2.2.3 ((Red Hat))
  964. 8008/tcp open http
  965. 8443/tcp open ssl/http Apache Tomcat/Coyote JSP engine 1.1
  966. 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
  967. SF-Port8008-TCP:V=7.70%I=7%D=10/7%Time=5BBA7548%P=x86_64-pc-linux-gnu%r(Ge
  968. SF:tRequest,CC,"HTTP/1\.1\x20302\x20Found\r\nLocation:\x20https://:8010/\r
  969. SF:\nConnection:\x20close\r\nX-Frame-Options:\x20SAMEORIGIN\r\nX-XSS-Prote
  970. SF:ction:\x201;\x20mode=block\r\nX-Content-Type-Options:\x20nosniff\r\nCon
  971. SF:tent-Security-Policy:\x20frame-ancestors\r\n\r\n")%r(FourOhFourRequest,
  972. SF:EF,"HTTP/1\.1\x20302\x20Found\r\nLocation:\x20https://:8010/nice%20port
  973. SF:s%2C/Tri%6Eity\.txt%2ebak\r\nConnection:\x20close\r\nX-Frame-Options:\x
  974. SF:20SAMEORIGIN\r\nX-XSS-Protection:\x201;\x20mode=block\r\nX-Content-Type
  975. SF:-Options:\x20nosniff\r\nContent-Security-Policy:\x20frame-ancestors\r\n
  976. SF:\r\n")%r(GenericLines,CB,"HTTP/1\.1\x20302\x20Found\r\nLocation:\x20htt
  977. SF:ps://:8010\r\nConnection:\x20close\r\nX-Frame-Options:\x20SAMEORIGIN\r\
  978. SF:nX-XSS-Protection:\x201;\x20mode=block\r\nX-Content-Type-Options:\x20no
  979. SF:sniff\r\nContent-Security-Policy:\x20frame-ancestors\r\n\r\n")%r(HTTPOp
  980. SF:tions,CB,"HTTP/1\.1\x20302\x20Found\r\nLocation:\x20https://:8010\r\nCo
  981. SF:nnection:\x20close\r\nX-Frame-Options:\x20SAMEORIGIN\r\nX-XSS-Protectio
  982. SF:n:\x201;\x20mode=block\r\nX-Content-Type-Options:\x20nosniff\r\nContent
  983. SF:-Security-Policy:\x20frame-ancestors\r\n\r\n")%r(RTSPRequest,CB,"HTTP/1
  984. SF:\.1\x20302\x20Found\r\nLocation:\x20https://:8010\r\nConnection:\x20clo
  985. SF:se\r\nX-Frame-Options:\x20SAMEORIGIN\r\nX-XSS-Protection:\x201;\x20mode
  986. SF:=block\r\nX-Content-Type-Options:\x20nosniff\r\nContent-Security-Policy
  987. SF::\x20frame-ancestors\r\n\r\n")%r(SIPOptions,CB,"HTTP/1\.1\x20302\x20Fou
  988. SF:nd\r\nLocation:\x20https://:8010\r\nConnection:\x20close\r\nX-Frame-Opt
  989. SF:ions:\x20SAMEORIGIN\r\nX-XSS-Protection:\x201;\x20mode=block\r\nX-Conte
  990. SF:nt-Type-Options:\x20nosniff\r\nContent-Security-Policy:\x20frame-ancest
  991. SF:ors\r\n\r\n");
  992. Device type: general purpose|printer|broadband router|switch|VoIP phone|firewall|security-misc|specialized
  993. Running (JUST GUESSING): Linux 2.6.X|2.4.X (90%), Canon embedded (89%), D-Link embedded (89%), Extreme Networks ExtremeXOS 12.X (89%), Kyocera embedded (89%), Thomson embedded (89%), Barracuda Networks embedded (89%)
  994. OS CPE: cpe:/o:linux:linux_kernel:2.6.23 cpe:/h:canon:imagerunner_advance_c5051 cpe:/h:dlink:dsl-2540b cpe:/o:extremenetworks:extremexos:12.5.4 cpe:/h:kyocera:cs-2560 cpe:/o:linux:linux_kernel:2.4.21
  995. Aggressive OS guesses: Linux 2.6.23 (90%), Linux 2.6.24 (Debian) (89%), Linux 2.6.26 (89%), Canon imageRUNNER ADVANCE C5051 printer (89%), D-Link DSL-2540B ADSL router (89%), Extreme Networks ExtremeXOS 12.5.4 (89%), Kyocera CopyStar CS-2560 printer (89%), Linux 2.6.15 (Ubuntu) (89%), Linux 2.6.15 - 2.6.26 (likely embedded) (89%), Linux 2.6.16 (89%)
  996. No exact OS matches for host (test conditions non-ideal).
  997.  
  998. Nmap scan report for clasespasivas.gob.es (195.10.201.153)
  999. Host is up (0.067s latency).
  1000. Not shown: 998 filtered ports
  1001. PORT STATE SERVICE VERSION
  1002. 113/tcp closed ident
  1003. 443/tcp open ssl/https BigIP
  1004. 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
  1005. SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/7%Time=5BBA7554%P=x86_64-pc-linux-gnu
  1006. SF:%r(HTTPOptions,189,"HTTP/1\.1\x20200\x20OK\r\nCache-Control:\x20no-cach
  1007. SF:e\r\nConnection:\x20close\r\nContent-Type:\x20text/html;\x20charset=iso
  1008. SF:-8859-1\r\nPragma:\x20no-cache\r\nContent-Length:\x20246\r\n\r\n<html><
  1009. SF:head><title>Request\x20Rejected</title></head><body>The\x20requested\x2
  1010. SF:0URL\x20was\x20rejected\.\x20Please\x20consult\x20with\x20your\x20admin
  1011. SF:istrator\.<br><br>Your\x20support\x20ID\x20is:\x207429035151282321577<b
  1012. SF:r><br><a\x20href='javascript:history\.back\(\);'>\[Go\x20Back\]</a></bo
  1013. SF:dy></html>")%r(RTSPRequest,189,"HTTP/1\.1\x20200\x20OK\r\nCache-Control
  1014. SF::\x20no-cache\r\nConnection:\x20close\r\nContent-Type:\x20text/html;\x2
  1015. SF:0charset=iso-8859-1\r\nPragma:\x20no-cache\r\nContent-Length:\x20246\r\
  1016. SF:n\r\n<html><head><title>Request\x20Rejected</title></head><body>The\x20
  1017. SF:requested\x20URL\x20was\x20rejected\.\x20Please\x20consult\x20with\x20y
  1018. SF:our\x20administrator\.<br><br>Your\x20support\x20ID\x20is:\x20742903515
  1019. SF:1282321581<br><br><a\x20href='javascript:history\.back\(\);'>\[Go\x20Ba
  1020. SF:ck\]</a></body></html>")%r(SIPOptions,189,"HTTP/1\.1\x20200\x20OK\r\nCa
  1021. SF:che-Control:\x20no-cache\r\nConnection:\x20close\r\nContent-Type:\x20te
  1022. SF:xt/html;\x20charset=iso-8859-1\r\nPragma:\x20no-cache\r\nContent-Length
  1023. SF::\x20246\r\n\r\n<html><head><title>Request\x20Rejected</title></head><b
  1024. SF:ody>The\x20requested\x20URL\x20was\x20rejected\.\x20Please\x20consult\x
  1025. SF:20with\x20your\x20administrator\.<br><br>Your\x20support\x20ID\x20is:\x
  1026. SF:207429035151282418654<br><br><a\x20href='javascript:history\.back\(\);'
  1027. SF:>\[Go\x20Back\]</a></body></html>");
  1028. Device type: general purpose
  1029. Running (JUST GUESSING): FreeBSD 6.X (86%)
  1030. OS CPE: cpe:/o:freebsd:freebsd:6.2
  1031. Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
  1032. No exact OS matches for host (test conditions non-ideal).
  1033.  
  1034. Nmap scan report for sede.cncompetencia.gob.es (79.170.8.170)
  1035. Host is up (0.080s latency).
  1036. Not shown: 998 filtered ports
  1037. PORT STATE SERVICE VERSION
  1038. 80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
  1039. 443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
  1040. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  1041. Device type: general purpose|phone|specialized
  1042. Running (JUST GUESSING): Microsoft Windows 2008|7|8.1|Phone|Vista (89%)
  1043. OS CPE: cpe:/o:microsoft:windows_server_2008:r2:sp1 cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_7::sp1 cpe:/o:microsoft:windows_8.1:r1 cpe:/o:microsoft:windows cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_7
  1044. Aggressive OS guesses: Microsoft Windows Server 2008 R2 SP1 (89%), Microsoft Windows Server 2008 (89%), Microsoft Windows Server 2008 R2 (89%), Microsoft Windows Server 2008 R2 or Windows 8 (89%), Microsoft Windows 7 SP1 (89%), Microsoft Windows 8.1 Update 1 (89%), Microsoft Windows 8.1 R1 (89%), Microsoft Windows Phone 7.5 or 8.0 (89%), Microsoft Windows 7 or Windows Server 2008 R2 (88%), Microsoft Windows Server 2008 or 2008 Beta 3 (88%)
  1045. No exact OS matches for host (test conditions non-ideal).
  1046. Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
  1047.  
  1048. Nmap scan report for sede.cni.gob.es (2.16.162.128)
  1049. Host is up (0.11s latency).
  1050. Other addresses for sede.cni.gob.es (not scanned): 2.16.162.169
  1051. rDNS record for 2.16.162.128: a2-16-162-128.deploy.static.akamaitechnologies.com
  1052. Not shown: 998 filtered ports
  1053. PORT STATE SERVICE VERSION
  1054. 80/tcp open http AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
  1055. 443/tcp open https AkamaiGHost
  1056. 1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
  1057. SF-Port443-TCP:V=7.70%I=7%D=10/7%Time=5BBA7555%P=x86_64-pc-linux-gnu%r(SSL
  1058. SF:SessionReq,7,"\x15\x03\x04\0\x02\x02P")%r(TLSSessionReq,7,"\x15\x03\x04
  1059. SF:\0\x02\x02P")%r(SSLv23SessionReq,7,"\x15\x03\x04\0\x02\x02P");
  1060. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  1061. Aggressive OS guesses: Linux 3.13 - 3.16 (94%), Linux 4.4 (94%), OpenWrt 0.9 - 7.09 (Linux 2.4.30 - 2.4.34) (94%), OpenWrt White Russian 0.9 (Linux 2.4.30) (94%), OpenWrt Kamikaze 7.09 (Linux 2.6.22) (94%), Asus RT-AC66U router (Linux 2.6) (93%), Asus RT-N10 router or AXIS 211A Network Camera (Linux 2.6) (93%), Linux 2.6.18 (93%), Linux 2.6.24 (93%), Asus RT-N16 WAP (Linux 2.6) (93%)
  1062. No exact OS matches for host (test conditions non-ideal).
  1063. Network Distance: 12 hops
  1064.  
  1065. Nmap scan report for api.cnmc.gob.es (79.170.8.164)
  1066. Host is up (0.078s latency).
  1067. rDNS record for 79.170.8.164: madfrontal1.cnmc.es
  1068. Not shown: 998 filtered ports
  1069. PORT STATE SERVICE VERSION
  1070. 80/tcp open http nginx
  1071. 443/tcp open ssl/http nginx
  1072. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  1073. Device type: general purpose
  1074. Running (JUST GUESSING): Linux 4.X|3.X (88%)
  1075. OS CPE: cpe:/o:linux:linux_kernel:4.9 cpe:/o:linux:linux_kernel:3.18
  1076. Aggressive OS guesses: Linux 4.9 (88%), Linux 3.18 (86%)
  1077. No exact OS matches for host (test conditions non-ideal).
  1078.  
  1079. Nmap scan report for notificaciones.cnmc.gob.es (79.170.8.149)
  1080. Host is up (0.077s latency).
  1081. Not shown: 998 filtered ports
  1082. PORT STATE SERVICE VERSION
  1083. 80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
  1084. 443/tcp open ssl/http Microsoft IIS httpd 7.0
  1085. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  1086. Device type: general purpose|phone|specialized
  1087. Running (JUST GUESSING): Microsoft Windows 2008|7|8.1|Phone|Vista (89%)
  1088. OS CPE: cpe:/o:microsoft:windows_server_2008:r2:sp1 cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_7::sp1 cpe:/o:microsoft:windows_8.1:r1 cpe:/o:microsoft:windows cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_7
  1089. Aggressive OS guesses: Microsoft Windows Server 2008 R2 SP1 (89%), Microsoft Windows Server 2008 (89%), Microsoft Windows Server 2008 R2 (89%), Microsoft Windows Server 2008 R2 or Windows 8 (89%), Microsoft Windows 7 SP1 (89%), Microsoft Windows 8.1 Update 1 (89%), Microsoft Windows 8.1 R1 (89%), Microsoft Windows Phone 7.5 or 8.0 (89%), Microsoft Windows 7 or Windows Server 2008 R2 (88%), Microsoft Windows Server 2008 or 2008 Beta 3 (88%)
  1090. No exact OS matches for host (test conditions non-ideal).
  1091. Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
  1092.  
  1093. Nmap scan report for notificacionespre.cnmc.gob.es (79.170.8.145)
  1094. Host is up.
  1095. All 1000 scanned ports on notificacionespre.cnmc.gob.es (79.170.8.145) are filtered
  1096. Too many fingerprints match this host to give specific OS details
  1097.  
  1098. Nmap scan report for sede.cnmv.gob.es (195.53.156.46)
  1099. Host is up (0.067s latency).
  1100. Other addresses for sede.cnmv.gob.es (not scanned): 88.84.91.46 88.84.92.46
  1101. Not shown: 998 filtered ports
  1102. PORT STATE SERVICE VERSION
  1103. 80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
  1104. 443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
  1105. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  1106. Device type: general purpose|specialized
  1107. Running (JUST GUESSING): Microsoft Windows Vista|7|2008 (86%)
  1108. OS CPE: cpe:/o:microsoft:windows_vista::sp2 cpe:/o:microsoft:windows_7::sp1 cpe:/o:microsoft:windows_server_2008 cpe:/o:microsoft:windows_7
  1109. Aggressive OS guesses: Microsoft Windows Vista SP2, Windows 7 SP1, or Windows Server 2008 (86%), Microsoft Windows Server 2008 R2 (85%), Microsoft Windows Embedded Standard 7 (85%), Microsoft Windows Server 2008 (85%)
  1110. No exact OS matches for host (test conditions non-ideal).
  1111. Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
  1112.  
  1113. Nmap scan report for comarcas.gob.es (188.244.81.91)
  1114. Host is up (0.069s latency).
  1115. Not shown: 996 closed ports
  1116. PORT STATE SERVICE VERSION
  1117. 80/tcp open http Apache httpd
  1118. 443/tcp open ssl/http Apache httpd
  1119. 465/tcp filtered smtps
  1120. 3389/tcp filtered ms-wbt-server
  1121. OS fingerprint not ideal because: maxTimingRatio (9.788000e+00) is greater than 1.4
  1122. No OS matches for host
  1123.  
  1124. Nmap scan report for pre.comarcas.gob.es (195.55.229.85)
  1125. Host is up.
  1126. All 1000 scanned ports on pre.comarcas.gob.es (195.55.229.85) are filtered
  1127. Too many fingerprints match this host to give specific OS details
  1128.  
  1129. Nmap scan report for www.comercio.gob.es (193.146.133.27)
  1130. Host is up (0.071s latency).
  1131. rDNS record for 193.146.133.27: www.comercio.mineco.es
  1132. Not shown: 998 filtered ports
  1133. PORT STATE SERVICE VERSION
  1134. 80/tcp open http?
  1135. 443/tcp open ssl/https?
  1136. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  1137. OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
  1138. No OS matches for host
  1139.  
  1140. Nmap scan report for des-clave.comercio.gob.es (193.144.239.65)
  1141. Host is up (0.068s latency).
  1142. Other addresses for des-clave.comercio.gob.es (not scanned): 195.53.116.65
  1143. rDNS record for 193.144.239.65: des-oficinavirtual.comercio.gob.es
  1144. Not shown: 998 filtered ports
  1145. PORT STATE SERVICE VERSION
  1146. 80/tcp open http Microsoft IIS httpd 8.5
  1147. 443/tcp open https Microsoft-HTTPAPI/2.0
  1148. Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
  1149. Device type: general purpose
  1150. Running (JUST GUESSING): Microsoft Windows 2012 (88%)
  1151. OS CPE: cpe:/o:microsoft:windows_server_2012
  1152. Aggressive OS guesses: Microsoft Windows Server 2012 (88%), Microsoft Windows Server 2012 or Windows Server 2012 R2 (88%), Microsoft Windows Server 2012 R2 (88%)
  1153. No exact OS matches for host (test conditions non-ideal).
  1154. Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!