JustPaste.it

# Nmap 7.70 scan initiated Sun Oct 7 21:37:18 2018 as: nmap -iL spaingob -oN spaingobmap -O -sV -Pn
Failed to resolve "sede.adifaltavelocidad.gob.es".
Failed to resolve "dnsipv6.administracionelectronica.gob.es".
Failed to resolve "sede.aena.gob.es".
Failed to resolve "www.mobi.agenciatributaria.gob.es".
Failed to resolve "www1.mobi.agenciatributaria.gob.es".
Failed to resolve "www2.mobi.agenciatributaria.gob.es".
Failed to resolve "www.ccs.gob.es".
Failed to resolve "sede.cedex.gob.es".
Failed to resolve "pnr.citco.gob.es".
Failed to resolve "sede.cmt.gob.es".
Failed to resolve "notificaciones.cncompetencia.gob.es".
Failed to resolve "sede.cne.gob.es".
Failed to resolve "sede.cnjuego.gob.es".
Failed to resolve "cnspostal.gob.es".
Failed to resolve "comercio.gob.es".
Failed to resolve "consulado.gob.es".
Failed to resolve "www.contrataciondelsectorpublico.gob.es".
Failed to resolve "certificado.contrataciondelsectorpublico.gob.es".
Failed to resolve "publicacion.contrataciondelsectorpublico.gob.es".
Failed to resolve "agregacion.contratacionsectorpublico.gob.es".
Failed to resolve "csd.gob.es".
Failed to resolve "sede-pre.csic.gob.es".
Failed to resolve "www.admin.tecnologiaeinnovacion.defensa.gob.es".
Failed to resolve "colaboracion.tecnologiaeinnovacion.defensa.gob.es".
Failed to resolve "www.colaboracion.tecnologiaeinnovacion.defensa.gob.es".
Failed to resolve "www.sitios.tecnologiaeinnovacion.defensa.gob.es".
Failed to resolve "emm.gob.es".
Failed to resolve "sede.empleoyseguridadsocial.gob.es".
Failed to resolve "www.facturaelectrica.gob.es".
Failed to resolve "www.firmaelectronica.gob.es".
Nmap scan report for sede.060.gob.es (185.73.172.38)
Host is up (0.062s latency).
rDNS record for 185.73.172.38: 38.red-185-73-172.customer.static.ccgg.telefonica.net
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 5.0
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 5.0
2000/tcp open cisco-sccp?
5060/tcp open sip?
OS fingerprint not ideal because: maxTimingRatio (9.736000e+00) is greater than 1.4
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for sede.adif.gob.es (213.144.33.140)
Host is up (0.070s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/https
8443/tcp open ssl/https-alt
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/7%Time=5BBA74D3%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,1CA,"HTTP/1\.1\x20302\x20Found\r\nDate:\x20Sun,\x2007\x20
SF:Oct\x202018\x2021:04:18\x20GMT\r\nLocation:\x20https://sede\.adif\.gob\
SF:.es/es_ES/sede_electronica/index\.shtml\r\nContent-Length:\x20243\r\nCo
SF:nnection:\x20close\r\nContent-Type:\x20text/html;\x20charset=iso-8859-1
SF:\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IETF//DTD\x20HTML\x202\.0//
SF:EN\">\n<html><head>\n<title>302\x20Found</title>\n</head><body>\n<h1>Fo
SF:und</h1>\n<p>The\x20document\x20has\x20moved\x20<a\x20href=\"https://se
SF:de\.adif\.gob\.es/es_ES/sede_electronica/index\.shtml\">here</a>\.</p>\
SF:n</body></html>\n")%r(HTTPOptions,1CA,"HTTP/1\.1\x20302\x20Found\r\nDat
SF:e:\x20Sun,\x2007\x20Oct\x202018\x2021:04:18\x20GMT\r\nLocation:\x20http
SF:s://sede\.adif\.gob\.es/es_ES/sede_electronica/index\.shtml\r\nContent-
SF:Length:\x20243\r\nConnection:\x20close\r\nContent-Type:\x20text/html;\x
SF:20charset=iso-8859-1\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IETF//D
SF:TD\x20HTML\x202\.0//EN\">\n<html><head>\n<title>302\x20Found</title>\n<
SF:/head><body>\n<h1>Found</h1>\n<p>The\x20document\x20has\x20moved\x20<a\
SF:x20href=\"https://sede\.adif\.gob\.es/es_ES/sede_electronica/index\.sht
SF:ml\">here</a>\.</p>\n</body></html>\n")%r(FourOhFourRequest,4CA,"HTTP/1
SF:\.1\x20404\x20Not\x20Found\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2021:
SF:04:19\x20GMT\r\nAccept-Ranges:\x20bytes\r\nContent-Length:\x201075\r\nC
SF:onnection:\x20close\r\nContent-Type:\x20text/html\r\n\r\n<!DOCTYPE\x20H
SF:TML\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01//EN\"\x20\"http://www\.
SF:w3\.org/TR/html4/strict\.dtd\">\n<html\x20class=\"dj_gecko\"\x20lang=\"
SF:es\">\n<head>\n<title>Portal\x20INICIA</title>\n<link\x20rel=\"styleshe
SF:et\"\x20type=\"text/css\"\x20href=\"/error/main\.css\">\x20\n\n<meta\x2
SF:0http-equiv=\"content-type\"\x20content=\"text/html;\x20charset=ISO-885
SF:9-1\">\n<script\x20type=\"text/javascript\">\n\tif\x20\(top\.location\.
SF:href\x20!=\x20self\.location\.href\)\n\t\t\t{top\.location=self\.locati
SF:on;}\n</script>\n</head>\n<body>\n\t<center>\n\t\t<div\x20class=\"pagin
SF:a\">\n\t\t\t<div\x20id=\"header\"\x20class=\"header\">\n\t\t\t\t<div\x2
SF:0class=\"header_superior\">\n\t\t\t\t\t<div\x20class=\"margen\">\n\t\t\
SF:t\t\t\t&nbsp;\n\t\t\t\t\t</div>\x20\t\n\t\t\t\t\t\n\t\t\t\t\x20\x20\x20
SF:\x20<div\x20class=\"imagen_title\">\n\t\t\t\t\t\x20\x20\x20\x20<img\x20
SF:alt=\"\"\x20src=\"/error/images/logoCabecera\.png\">\n\t\t\t\t\x20\x20\
SF:x20\x20</div>\n\t\t\t\t\x20\x20\x20\x20<div\x20style=\"clear:\x20both\"
SF:></div>\n\t\t\t");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port8443-TCP:V=7.70%T=SSL%I=7%D=10/7%Time=5BBA74D3%P=x86_64-pc-linux-gn
SF:u%r(GetRequest,4AD,"HTTP/1\.1\x20403\x20Forbidden\r\nDate:\x20Sun,\x200
SF:7\x20Oct\x202018\x2021:04:18\x20GMT\r\nAccept-Ranges:\x20bytes\r\nConte
SF:nt-Length:\x201046\r\nConnection:\x20close\r\nContent-Type:\x20text/htm
SF:l\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01/
SF:/EN\"\x20\"http://www\.w3\.org/TR/html4/strict\.dtd\">\n<html\x20class=
SF:\"dj_gecko\"\x20lang=\"es\">\n<head>\n<title>Portal\x20INICIA</title>\n
SF:<link\x20rel=\"stylesheet\"\x20type=\"text/css\"\x20href=\"/error/main\
SF:.css\">\x20\n\n<meta\x20http-equiv=\"content-type\"\x20content=\"text/h
SF:tml;\x20charset=ISO-8859-1\">\n<script\x20type=\"text/javascript\">\n\t
SF:if\x20\(top\.location\.href\x20!=\x20self\.location\.href\)\n\t\t\t{top
SF:\.location=self\.location;}\n</script>\n</head>\n<body>\n\t<center>\n\t
SF:\t<div\x20class=\"pagina\">\n\t\t\t<div\x20id=\"header\"\x20class=\"hea
SF:der\">\n\t\t\t\t<div\x20class=\"header_superior\">\n\t\t\t\t\t<div\x20c
SF:lass=\"margen\">\n\t\t\t\t\t\t&nbsp;\n\t\t\t\t\t</div>\x20\t\n\t\t\t\t\
SF:t\n\t\t\t\t\x20\x20\x20\x20<div\x20class=\"imagen_title\">\n\t\t\t\t\t\
SF:x20\x20\x20\x20<img\x20alt=\"\"\x20src=\"/error/images/logoCabecera\.pn
SF:g\">\n\t\t\t\t\x20\x20\x20\x20</div>\n\t\t\t\t\x20\x20\x20\x20<div\x20s
SF:tyle=\"clear:\x20both\"></div>\n\t\t\t")%r(HTTPOptions,A0,"HTTP/1\.1\x2
SF:0200\x20OK\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2021:04:19\x20GMT\r\n
SF:Allow:\x20GET,HEAD,POST,OPTIONS\r\nContent-Length:\x200\r\nConnection:\
SF:x20close\r\nContent-Type:\x20httpd/unix-directory\r\n\r\n")%r(FourOhFou
SF:rRequest,4CA,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Sun,\x2007\x
SF:20Oct\x202018\x2021:04:19\x20GMT\r\nAccept-Ranges:\x20bytes\r\nContent-
SF:Length:\x201075\r\nConnection:\x20close\r\nContent-Type:\x20text/html\r
SF:\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01//EN
SF:\"\x20\"http://www\.w3\.org/TR/html4/strict\.dtd\">\n<html\x20class=\"d
SF:j_gecko\"\x20lang=\"es\">\n<head>\n<title>Portal\x20INICIA</title>\n<li
SF:nk\x20rel=\"stylesheet\"\x20type=\"text/css\"\x20href=\"/error/main\.cs
SF:s\">\x20\n\n<meta\x20http-equiv=\"content-type\"\x20content=\"text/html
SF:;\x20charset=ISO-8859-1\">\n<script\x20type=\"text/javascript\">\n\tif\
SF:x20\(top\.location\.href\x20!=\x20self\.location\.href\)\n\t\t\t{top\.l
SF:ocation=self\.location;}\n</script>\n</head>\n<body>\n\t<center>\n\t\t<
SF:div\x20class=\"pagina\">\n\t\t\t<div\x20id=\"header\"\x20class=\"header
SF:\">\n\t\t\t\t<div\x20class=\"header_superior\">\n\t\t\t\t\t<div\x20clas
SF:s=\"margen\">\n\t\t\t\t\t\t&nbsp;\n\t\t\t\t\t</div>\x20\t\n\t\t\t\t\t\n
SF:\t\t\t\t\x20\x20\x20\x20<div\x20class=\"imagen_title\">\n\t\t\t\t\t\x20
SF:\x20\x20\x20<img\x20alt=\"\"\x20src=\"/error/images/logoCabecera\.png\"
SF:>\n\t\t\t\t\x20\x20\x20\x20</div>\n\t\t\t\t\x20\x20\x20\x20<div\x20styl
SF:e=\"clear:\x20both\"></div>\n\t\t\t");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for sedeav.adif.gob.es (213.144.33.141)
Host is up.
All 1000 scanned ports on sedeav.adif.gob.es (213.144.33.141) are filtered
Too many fingerprints match this host to give specific OS details

Nmap scan report for tramites.administracion.gob.es (82.223.253.146)
Host is up (0.065s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: load balancer
Running (JUST GUESSING): F5 Networks TMOS 11.6.X (86%)
OS CPE: cpe:/o:f5:tmos:11.6
Aggressive OS guesses: F5 BIG-IP Local Traffic Manager load balancer (TMOS 11.6) (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for administraciondejusticia.gob.es (212.128.106.105)
Host is up (0.067s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
443/tcp open ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/7%Time=5BBA74D3%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,3D8,"HTTP/1\.1\x20302\x20Found\r\nDate:\x20Sun,\x2007\x20
SF:Oct\x202018\x2021:04:19\x20GMT\r\nLocation:\x20https://apaalto02/paj/pu
SF:blico/ciudadano/home/!ut/p/c5/04_SB8K8xLLM9MSSzPy8xBz9CP0os3gTDzf_AG9HQ
SF:wuzAAsDA08vExMv81BPYwMDA6B8pFm8AQ7gaEBAdzjIPrN4M09XU8-gYBMT41AXEwNP47Aw
SF:1wAPXwMDEwOIPB7z_Tzyc1P1C3IjDLJMHBUBD427TQ!!/dl3/d3/L2dBISEvZ0FBIS9nQSE
SF:h/\r\nCache-Control:\x20max-age=604800\r\nExpires:\x20Sun,\x2014\x20Oct
SF:\x202018\x2021:04:19\x20GMT\r\nContent-Length:\x20422\r\nKeep-Alive:\x2
SF:0timeout=15,\x20max=97\r\nConnection:\x20close\r\nContent-Type:\x20text
SF:/html;\x20charset=iso-8859-1\r\nStrict-Transport-Security:\x20max-age=3
SF:1536000;\x20IncludeSubdomains\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-
SF://IETF//DTD\x20HTML\x202\.0//EN\">\n<html><head>\n<title>302\x20Found</
SF:title>\n</head><body>\n<h1>Found</h1>\n<p>The\x20document\x20has\x20mov
SF:ed\x20<a\x20href=\"http://apaalto02/paj/publico/ciudadano/home/!ut/p/c5
SF:/04_SB8K8xLLM9MSSzPy8xBz9CP0os3gTDzf_AG9HQwuzAAsDA08vExMv81BPYwMDA6B8pF
SF:m8AQ7gaEBAdzjIPrN4M09XU8-gYBMT41AXEwNP47Aw1wAPXwMDEwOIPB7z_Tzy")%r(HTTP
SF:Options,3D8,"HTTP/1\.1\x20302\x20Found\r\nDate:\x20Sun,\x2007\x20Oct\x2
SF:02018\x2021:04:20\x20GMT\r\nLocation:\x20https://apaalto01/paj/publico/
SF:ciudadano/home/!ut/p/c5/04_SB8K8xLLM9MSSzPy8xBz9CP0os3gTDzf_AG9HQwuzAAs
SF:DA08vExMv81BPYwMDA6B8pFm8AQ7gaEBAdzjIPrN4M09XU8-gYBMT41AXEwNP47Aw1wAPXw
SF:MDEwOIPB7z_Tzyc1P1C3IjDLJMHBUBD427TQ!!/dl3/d3/L2dBISEvZ0FBIS9nQSEh/\r\n
SF:Cache-Control:\x20max-age=604800\r\nExpires:\x20Sun,\x2014\x20Oct\x2020
SF:18\x2021:04:20\x20GMT\r\nContent-Length:\x20422\r\nKeep-Alive:\x20timeo
SF:ut=15,\x20max=98\r\nConnection:\x20close\r\nContent-Type:\x20text/html;
SF:\x20charset=iso-8859-1\r\nStrict-Transport-Security:\x20max-age=3153600
SF:0;\x20IncludeSubdomains\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IETF
SF://DTD\x20HTML\x202\.0//EN\">\n<html><head>\n<title>302\x20Found</title>
SF:\n</head><body>\n<h1>Found</h1>\n<p>The\x20document\x20has\x20moved\x20
SF:<a\x20href=\"http://apaalto01/paj/publico/ciudadano/home/!ut/p/c5/04_SB
SF:8K8xLLM9MSSzPy8xBz9CP0os3gTDzf_AG9HQwuzAAsDA08vExMv81BPYwMDA6B8pFm8AQ7g
SF:aEBAdzjIPrN4M09XU8-gYBMT41AXEwNP47Aw1wAPXwMDEwOIPB7z_Tzy");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: Device: load balancer

Nmap scan report for administracionelectronica.gob.es (185.73.172.50)
Host is up (0.065s latency).
Other addresses for administracionelectronica.gob.es (not scanned): 2a03:44a0:100:fffe::afc:8432
rDNS record for 185.73.172.50: 50.red-185-73-172.customer.static.ccgg.telefonica.net
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 5.0
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 5.0
2000/tcp open cisco-sccp?
5060/tcp open sip?
OS fingerprint not ideal because: maxTimingRatio (9.666000e+00) is greater than 1.4
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for listas-ctt.administracionelectronica.gob.es (185.73.172.37)
Host is up (0.062s latency).
Other addresses for listas-ctt.administracionelectronica.gob.es (not scanned): 2a03:44a0:100:fffe::afc:8411
rDNS record for 185.73.172.37: 37.red-185-73-172.customer.static.ccgg.telefonica.net
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 5.0
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 5.0
2000/tcp open cisco-sccp?
5060/tcp open sip?
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for administracionespublicas.gob.es (185.73.174.13)
Host is up (0.069s latency).
Other addresses for administracionespublicas.gob.es (not scanned): 2a03:44a0:300::b949:ae0d
rDNS record for 185.73.174.13: 13.red-185-73-174.customer.static.ccgg.telefonica.net
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache Tomcat/Coyote JSP engine 1.1
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for sede.administracionespublicas.gob.es (185.73.174.63)
Host is up (0.068s latency).
Other addresses for sede.administracionespublicas.gob.es (not scanned): 2a03:44a0:300::b949:ae3f
rDNS record for 185.73.174.63: 63.red-185-73-174.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: storage-misc|general purpose|firewall
Running (JUST GUESSING): Linux 2.6.X|3.X (88%), Synology DiskStation Manager 5.X (88%), WatchGuard Fireware 11.X (86%)
OS CPE: cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Synology DiskStation Manager 5.1 (88%), Linux 2.6.32 (87%), Linux 2.6.39 (86%), Linux 2.6.32 or 3.10 (86%), Linux 3.10 (86%), Linux 3.4 (86%), WatchGuard Fireware 11.8 (86%), Linux 2.6.32 - 2.6.39 (85%), Linux 3.1 - 3.2 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for aea.gob.es (212.128.114.102)
Host is up (0.067s latency).
rDNS record for 212.128.114.102: 102.red-212-128-114.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache Tomcat/Coyote JSP engine 1.1
113/tcp closed ident
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (87%), FreeBSD 6.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (87%), FreeBSD 6.2-RELEASE (86%), OpenBSD 4.3 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for aecid.gob.es (192.148.209.54)
Host is up (0.067s latency).
rDNS record for 192.148.209.54: 54.red-192-148-209.customer.static.ccgg.telefonica.net
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
554/tcp closed rtsp
8080/tcp closed http-proxy
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 6.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 6.2-RELEASE (85%), OpenBSD 4.3 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; Device: load balancer; CPE: cpe:/o:microsoft:windows

Nmap scan report for www.aei.gob.es (193.146.133.11)
Host is up (0.076s latency).
rDNS record for 193.146.133.11: video.micinn.es
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
81/tcp open http lighttpd 1.4.26
443/tcp open ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for oamail.aei.gob.es (193.146.133.14)
Host is up (0.070s latency).
rDNS record for 193.146.133.14: oamail.ciencia.gob.es
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Microsoft IIS httpd 7.5
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for smtp1.aei.gob.es (193.146.133.3)
Host is up (0.061s latency).
rDNS record for 193.146.133.3: smtp1.micinn.es
Not shown: 993 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
110/tcp closed pop3
143/tcp closed imap
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
465/tcp closed smtps
993/tcp closed imaps
995/tcp closed pop3s
Device type: WAP|general purpose|specialized
Running (JUST GUESSING): Apple embedded (87%), FreeBSD 9.X|10.X|6.X (87%), VMware ESXi 4.X (85%), AirSpan embedded (85%)
OS CPE: cpe:/h:apple:airport_extreme cpe:/o:freebsd:freebsd:9.3 cpe:/o:freebsd:freebsd:10 cpe:/o:freebsd:freebsd:6.2 cpe:/o:vmware:esxi:4.1
Aggressive OS guesses: Apple AirPort Extreme WAP (87%), FreeBSD 9.3-RELEASE (87%), FreeBSD 9.0-RELEASE (86%), FreeBSD 9.0-RELEASE - 10.3-RELEASE (86%), FreeBSD 6.2-RELEASE (86%), VMware ESXi 4.1.0 (85%), AirSpan ProST WiMAX access point (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.aemet.gob.es (212.128.97.201)
Host is up (0.071s latency).
rDNS record for 212.128.97.201: 201.red-212-128-97.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp closed http
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Device type: general purpose|specialized
Running (JUST GUESSING): Microsoft Windows 7|2008|8.1|Vista|2012|10 (92%)
OS CPE: cpe:/o:microsoft:windows_7::sp1 cpe:/o:microsoft:windows_server_2008::sp2 cpe:/o:microsoft:windows_8.1 cpe:/o:microsoft:windows_vista::sp1:home_premium cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_server_2012 cpe:/o:microsoft:windows_10:1511
Aggressive OS guesses: Microsoft Windows 7 SP1 or Windows Server 2008 SP2 (92%), Microsoft Windows 7 SP1 or Windows Server 2008 (91%), Microsoft Windows 7 Ultimate (91%), Microsoft Windows 8.1 (91%), Microsoft Windows 7 SP1 (91%), Microsoft Windows Windows 7 SP1 (91%), Microsoft Windows Vista Home Premium SP1, Windows 7, or Windows Server 2008 (91%), Microsoft Windows Vista SP1 (91%), Microsoft Windows 8.1 Update 1 (88%), Microsoft Windows 8.1 Enterprise (88%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for aemps.gob.es (195.64.186.91)
Host is up (0.065s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http server-header-none
443/tcp open ssl/https server-header-none
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/7%Time=5BBA74DA%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-header-n
SF:one\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2021:04:25\x20GMT\r\nContent
SF:-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20close\r
SF:\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>Forbidden<
SF:/H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20the\x20
SF:requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/1\.1\x2
SF:0501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nDate:\x2
SF:0Sun,\x2007\x20Oct\x202018\x2021:04:25\x20GMT\r\nContent-length:\x20148
SF:\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HE
SF:AD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Implement
SF:ed</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20requested
SF:\x20method\.\n</BODY></HTML>")%r(FourOhFourRequest,1C0,"HTTP/1\.1\x2040
SF:4\x20Not\x20found\r\nServer:\x20server-header-none\r\nDate:\x20Sun,\x20
SF:07\x20Oct\x202018\x2021:04:26\x20GMT\r\nContent-type:\x20text/html\r\nC
SF:ontent-length:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META\x20HTT
SF:P-EQUIV=\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859-1\"><T
SF:ITLE>Not\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x20reque
SF:sted\x20object\x20does\x20not\x20exist\x20on\x20this\x20server\.\x20The
SF:\x20link\x20you\x20followed\x20is\x20either\x20outdated,\x20inaccurate,
SF:\x20or\x20the\x20server\x20has\x20been\x20instructed\x20not\x20to\x20le
SF:t\x20you\x20have\x20it\.\x20");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/7%Time=5BBA74E0%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-h
SF:eader-none\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2021:04:32\x20GMT\r\n
SF:Content-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20
SF:close\r\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>For
SF:bidden</H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20
SF:the\x20requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/
SF:1\.1\x20501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nD
SF:ate:\x20Sun,\x2007\x20Oct\x202018\x2021:04:32\x20GMT\r\nContent-length:
SF:\x20148\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<H
SF:TML><HEAD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Im
SF:plemented</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20re
SF:quested\x20method\.\n</BODY></HTML>")%r(RTSPRequest,131,"HTTP/1\.1\x204
SF:00\x20Bad\x20request\r\nServer:\x20server-header-none\r\nDate:\x20Sun,\
SF:x2007\x20Oct\x202018\x2021:04:43\x20GMT\r\nContent-length:\x20147\r\nCo
SF:ntent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TI
SF:TLE>Bad\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\
SF:x20browser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20u
SF:nderstand\.\n</BODY></HTML>")%r(Help,131,"HTTP/1\.1\x20400\x20Bad\x20re
SF:quest\r\nServer:\x20server-header-none\r\nDate:\x20Sun,\x2007\x20Oct\x2
SF:02018\x2021:04:58\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20
SF:text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20requ
SF:est</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20s
SF:ent\x20a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</
SF:BODY></HTML>")%r(SSLSessionReq,131,"HTTP/1\.1\x20400\x20Bad\x20request\
SF:r\nServer:\x20server-header-none\r\nDate:\x20Sun,\x2007\x20Oct\x202018\
SF:x2021:04:59\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20text/h
SF:tml\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20request</T
SF:ITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20sent\x2
SF:0a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</BODY><
SF:/HTML>");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: phone|media device|general purpose
Running (JUST GUESSING): Apple iOS 4.X|5.X|6.X|7.X|8.X|9.X (86%), Apple OS X 10.10.X (86%)
OS CPE: cpe:/o:apple:iphone_os:4 cpe:/o:apple:iphone_os:5.1.1 cpe:/o:apple:iphone_os:6 cpe:/o:apple:iphone_os:7.1.1 cpe:/o:apple:iphone_os:8.2 cpe:/o:apple:iphone_os:9 cpe:/o:apple:mac_os_x:10.10
Aggressive OS guesses: Apple iOS 4.3.1 - 4.3.5 (86%), Apple iOS 5.1.1 (86%), Apple iOS 5.1.1 - 6.1 (86%), Apple iOS 6 (86%), Apple iOS 7.1.1 (86%), Apple iOS 8.2 (Darwin 14.0.0) (86%), Apple OS X 10.10 (Yosemite) or iOS 8.3 - 9.0.1 (Darwin 14.0.0 - 15.0.0) (86%), Apple OS X 10.8 (Mountain Lion) (Darwin 12.4.0) (86%), Apple OS X 10.9 (Mavericks) (Darwin 13.0.0 - 13.2.0) (86%), Netgear WNR834Bv2 WAP (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.aemps.gob.es (195.64.186.53)
Host is up (0.070s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http
443/tcp open ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.70%I=7%D=10/7%Time=5BBA74DF%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,57,"HTTP/1\.0\x20302\x20Moved\x20Temporarily\r\nLocation:\x20htt
SF:ps://195\.64\.186\.53/\r\nContent-Length:\x200\r\n\r\n")%r(HTTPOptions,
SF:57,"HTTP/1\.0\x20302\x20Moved\x20Temporarily\r\nLocation:\x20https://19
SF:5\.64\.186\.53/\r\nContent-Length:\x200\r\n\r\n")%r(FourOhFourRequest,7
SF:A,"HTTP/1\.0\x20302\x20Moved\x20Temporarily\r\nLocation:\x20https://195
SF:\.64\.186\.53/nice%20ports%2C/Tri%6Eity\.txt%2ebak\r\nContent-Length:\x
SF:200\r\n\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: phone|media device|general purpose
Running (JUST GUESSING): Apple iOS 4.X|5.X|6.X|7.X|8.X|9.X (86%), Apple OS X 10.10.X (86%)
OS CPE: cpe:/o:apple:iphone_os:4 cpe:/o:apple:iphone_os:5.1.1 cpe:/o:apple:iphone_os:6 cpe:/o:apple:iphone_os:7.1.1 cpe:/o:apple:iphone_os:8.2 cpe:/o:apple:iphone_os:9 cpe:/o:apple:mac_os_x:10.10
Aggressive OS guesses: Apple iOS 4.3.1 - 4.3.5 (86%), Apple iOS 5.1.1 (86%), Apple iOS 5.1.1 - 6.1 (86%), Apple iOS 6 (86%), Apple iOS 7.1.1 (86%), Apple iOS 8.2 (Darwin 14.0.0) (86%), Apple OS X 10.10 (Yosemite) or iOS 8.3 - 9.0.1 (Darwin 14.0.0 - 15.0.0) (86%), Apple OS X 10.8 (Mountain Lion) (Darwin 12.4.0) (86%), Apple OS X 10.9 (Mavericks) (Darwin 13.0.0 - 13.2.0) (86%), Netgear WNR834Bv2 WAP (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.agenciatributaria.gob.es (195.235.106.207)
Host is up (0.071s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
443/tcp open ssl/http Fortinet FortiGate 50B or FortiWifi 60C or 80C firewall http config
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: OS: FortiOS; Devices: load balancer, firewall; CPE: cpe:/h:fortinet:fortiwifi:80c

Nmap scan report for correoseguro.agenciatributaria.gob.es (195.76.38.162)
Host is up (0.064s latency).
rDNS record for 195.76.38.162: mx1.correo.aeat.es
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for www8.ia.agenciatributaria.gob.es (195.76.38.171)
Host is up (0.064s latency).
rDNS record for 195.76.38.171: 171.red-195-76-38.customer.static.ccgg.telefonica.net
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http-proxy F5 BIG-IP load balancer http proxy
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: Device: load balancer

Nmap scan report for www1.agenciatributaria.gob.es (195.235.106.208)
Host is up (0.061s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
443/tcp open ssl/http-proxy F5 BIG-IP load balancer http proxy
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: Device: load balancer

Nmap scan report for www2.agenciatributaria.gob.es (195.235.106.209)
Host is up (0.065s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
443/tcp open ssl/http Fortinet FortiGate 50B or FortiWifi 60C or 80C firewall http config
8010/tcp closed xmpp
Device type: load balancer|firewall
Running (JUST GUESSING): F5 Networks TMOS 11.6.X|11.4.X (89%)
OS CPE: cpe:/o:f5:tmos:11.6 cpe:/o:f5:tmos:11.4
Aggressive OS guesses: F5 BIG-IP Local Traffic Manager load balancer (TMOS 11.6) (89%), F5 BIG-IP AFM firewall (85%), F5 BIG-IP load balancer (TMOS 11.4) (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: FortiOS; Devices: load balancer, firewall; CPE: cpe:/h:fortinet:fortiwifi:80c

Nmap scan report for www3.agenciatributaria.gob.es (195.76.38.161)
Host is up (0.071s latency).
rDNS record for 195.76.38.161: 161.red-195-76-38.customer.static.ccgg.telefonica.net
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Fortinet FortiGate 50B or FortiWifi 60C or 80C firewall http config
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: OS: FortiOS; Device: firewall; CPE: cpe:/h:fortinet:fortiwifi:80c

Nmap scan report for www4.agenciatributaria.gob.es (195.76.38.163)
Host is up (0.072s latency).
rDNS record for 195.76.38.163: 163.red-195-76-38.customer.static.ccgg.telefonica.net
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http-proxy F5 BIG-IP load balancer http proxy
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: Device: load balancer

Nmap scan report for www5.agenciatributaria.gob.es (195.76.38.164)
Host is up (0.064s latency).
rDNS record for 195.76.38.164: 164.red-195-76-38.customer.static.ccgg.telefonica.net
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Fortinet FortiGate 50B or FortiWifi 60C or 80C firewall http config
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: OS: FortiOS; Device: firewall; CPE: cpe:/h:fortinet:fortiwifi:80c

Nmap scan report for www6.agenciatributaria.gob.es (195.76.38.168)
Host is up (0.067s latency).
rDNS record for 195.76.38.168: 168.red-195-76-38.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
443/tcp open ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/7%Time=5BBA74F9%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,24D,"HTTP/1\.1\x20302\x20Found\r\nDate:\x20Sun,\x2007\x20
SF:Oct\x202018\x2021:04:57\x20GMT\r\nLocation:\x20https://www2\.agenciatri
SF:butaria\.gob\.es/static_files/common/internet/dep/aplicaciones/ov/p24au
SF:t01\.html\?ref=%2F\r\nContent-Length:\x20292\r\nKeep-Alive:\x20timeout=
SF:20,\x20max=200\r\nConnection:\x20close\r\nContent-Type:\x20text/html;\x
SF:20charset=iso-8859-1\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IETF//D
SF:TD\x20HTML\x202\.0//EN\">\n<html><head>\n<title>302\x20Found</title>\n<
SF:/head><body>\n<h1>Found</h1>\n<p>The\x20document\x20has\x20moved\x20<a\
SF:x20href=\"https://www2\.agenciatributaria\.gob\.es/static_files/common/
SF:internet/dep/aplicaciones/ov/p24aut01\.html\?ref=%2F\">here</a>\.</p>\n
SF:</body></html>\n")%r(HTTPOptions,24D,"HTTP/1\.1\x20302\x20Found\r\nDate
SF::\x20Sun,\x2007\x20Oct\x202018\x2021:04:57\x20GMT\r\nLocation:\x20https
SF:://www2\.agenciatributaria\.gob\.es/static_files/common/internet/dep/ap
SF:licaciones/ov/p24aut01\.html\?ref=%2F\r\nContent-Length:\x20292\r\nKeep
SF:-Alive:\x20timeout=20,\x20max=200\r\nConnection:\x20close\r\nContent-Ty
SF:pe:\x20text/html;\x20charset=iso-8859-1\r\n\r\n<!DOCTYPE\x20HTML\x20PUB
SF:LIC\x20\"-//IETF//DTD\x20HTML\x202\.0//EN\">\n<html><head>\n<title>302\
SF:x20Found</title>\n</head><body>\n<h1>Found</h1>\n<p>The\x20document\x20
SF:has\x20moved\x20<a\x20href=\"https://www2\.agenciatributaria\.gob\.es/s
SF:tatic_files/common/internet/dep/aplicaciones/ov/p24aut01\.html\?ref=%2F
SF:\">here</a>\.</p>\n</body></html>\n")%r(FourOhFourRequest,A0F,"HTTP/1\.
SF:1\x20404\x20Not\x20Found\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2021:04
SF::57\x20GMT\r\nLast-Modified:\x20Wed,\x2021\x20Dec\x202016\x2008:00:46\x
SF:20GMT\r\nETag:\x20\"10683c-8b8-544268ce4c5f2;54fb29a52df26\"\r\nAccept-
SF:Ranges:\x20bytes\r\nContent-Length:\x202232\r\nAccess-Control-Allow-Cre
SF:dentials:\x20true\r\nKeep-Alive:\x20timeout=20,\x20max=200\r\nConnectio
SF:n:\x20close\r\nContent-Type:\x20text/html\r\nContent-Language:\x20es-ES
SF:\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01//
SF:EN\"\x20\"http://www\.w3\.org/TR/html4/strict\.dtd\">\r\n<html\x20lang=
SF:\"es-ES\">\r\n<head>\r\n\x20\x20\x20\x20<title>Agencia\x20Tributaria\x2
SF:0-\x20Se\x20ha\x20producido\x20un\x20error</title>\r\n\x20\x20\x20\x20<
SF:meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html;\x20charset=
SF:UTF-8\">\x20\x20\x20\x20\x20\x20\x20\r\n<link\x20href=\"https://www\.ag
SF:enciatributaria\.gob\.es/static_files/common/css/xzhtcs04\.css\"\x20rel
SF:=\"stylesheet\"\x20type=\"text/css\">\r\n<script\x20type=\"text/javascr
SF:ipt\">\x20\r\n\t\tfunction\x20toggle\(\)\r\n\t\t{\r\n\t\t\x20\x20\x20\x
SF:20var\x20o=document\.getElementById\(\"AEAT_errores_tecnicos\"\);\r\n\t
SF:\t\to\.style\.display=\(o\.style\.display==''\x20\|\|\x20o\.");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: Device: load balancer

Nmap scan report for www7.agenciatributaria.gob.es (195.76.38.169)
Host is up (0.064s latency).
rDNS record for 195.76.38.169: 169.red-195-76-38.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
443/tcp open ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/7%Time=5BBA74F9%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,24D,"HTTP/1\.1\x20302\x20Found\r\nDate:\x20Sun,\x2007\x20
SF:Oct\x202018\x2021:04:57\x20GMT\r\nLocation:\x20https://www2\.agenciatri
SF:butaria\.gob\.es/static_files/common/internet/dep/aplicaciones/ov/p24au
SF:t01\.html\?ref=%2F\r\nContent-Length:\x20292\r\nKeep-Alive:\x20timeout=
SF:20,\x20max=200\r\nConnection:\x20close\r\nContent-Type:\x20text/html;\x
SF:20charset=iso-8859-1\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IETF//D
SF:TD\x20HTML\x202\.0//EN\">\n<html><head>\n<title>302\x20Found</title>\n<
SF:/head><body>\n<h1>Found</h1>\n<p>The\x20document\x20has\x20moved\x20<a\
SF:x20href=\"https://www2\.agenciatributaria\.gob\.es/static_files/common/
SF:internet/dep/aplicaciones/ov/p24aut01\.html\?ref=%2F\">here</a>\.</p>\n
SF:</body></html>\n")%r(HTTPOptions,24D,"HTTP/1\.1\x20302\x20Found\r\nDate
SF::\x20Sun,\x2007\x20Oct\x202018\x2021:04:57\x20GMT\r\nLocation:\x20https
SF:://www2\.agenciatributaria\.gob\.es/static_files/common/internet/dep/ap
SF:licaciones/ov/p24aut01\.html\?ref=%2F\r\nContent-Length:\x20292\r\nKeep
SF:-Alive:\x20timeout=20,\x20max=200\r\nConnection:\x20close\r\nContent-Ty
SF:pe:\x20text/html;\x20charset=iso-8859-1\r\n\r\n<!DOCTYPE\x20HTML\x20PUB
SF:LIC\x20\"-//IETF//DTD\x20HTML\x202\.0//EN\">\n<html><head>\n<title>302\
SF:x20Found</title>\n</head><body>\n<h1>Found</h1>\n<p>The\x20document\x20
SF:has\x20moved\x20<a\x20href=\"https://www2\.agenciatributaria\.gob\.es/s
SF:tatic_files/common/internet/dep/aplicaciones/ov/p24aut01\.html\?ref=%2F
SF:\">here</a>\.</p>\n</body></html>\n")%r(FourOhFourRequest,2AB,"HTTP/1\.
SF:1\x20302\x20Found\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2021:04:58\x20
SF:GMT\r\nLocation:\x20https://www2\.agenciatributaria\.gob\.es/static_fil
SF:es/common/internet/dep/aplicaciones/ov/p24aut01\.html\?ref=%2Fnice%2520
SF:ports%252C%2FTri%256Eity%2Etxt%252ebak\r\nContent-Length:\x20339\r\nKee
SF:p-Alive:\x20timeout=20,\x20max=200\r\nConnection:\x20close\r\nContent-T
SF:ype:\x20text/html;\x20charset=iso-8859-1\r\n\r\n<!DOCTYPE\x20HTML\x20PU
SF:BLIC\x20\"-//IETF//DTD\x20HTML\x202\.0//EN\">\n<html><head>\n<title>302
SF:\x20Found</title>\n</head><body>\n<h1>Found</h1>\n<p>The\x20document\x2
SF:0has\x20moved\x20<a\x20href=\"https://www2\.agenciatributaria\.gob\.es/
SF:static_files/common/internet/dep/aplicaciones/ov/p24aut01\.html\?ref=%2
SF:Fnice%2520ports%252C%2FTri%256Eity%2Etxt%252ebak\">here</a>\.</p>\n</bo
SF:dy></html>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: Device: load balancer

Nmap scan report for agendadigital.gob.es (193.147.89.91)
Host is up (0.067s latency).
Other addresses for agendadigital.gob.es (not scanned): 2001:720:438:402::91
rDNS record for 193.147.89.91: www.usuariosteleco.es
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for www.sede.airef.gob.es (46.24.40.246)
Host is up (0.064s latency).
rDNS record for 46.24.40.246: static-246-40-24-46.ipcom.comunitel.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.4.25 ((Debian))
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 3.X (86%)
OS CPE: cpe:/o:linux:linux_kernel:3.13
Aggressive OS guesses: Linux 3.13 (86%), Linux 3.2.0 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.apalmeria.gob.es (195.53.242.28)
Host is up (0.067s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http nginx 1.12.1
443/tcp open ssl/http nginx 1.12.1
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 3.X|4.X|2.6.X (89%)
OS CPE: cpe:/o:linux:linux_kernel:3.2.0 cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:2.6
Aggressive OS guesses: Linux 3.2.0 (89%), Linux 3.11 - 4.1 (87%), Linux 3.16 (87%), Linux 4.4 (87%), Linux 2.6.18 - 2.6.22 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.apfsc.gob.es (213.4.82.205)
Host is up (0.092s latency).
rDNS record for 213.4.82.205: 213.4.82.205.rad.tsai.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http nginx 1.8.1
443/tcp open ssl/http nginx 1.8.1
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: WAP|general purpose|webcam
Running (JUST GUESSING): Asus embedded (98%), Linux 3.X|2.6.X (98%), AXIS embedded (96%)
OS CPE: cpe:/h:asus:rt-n56u cpe:/o:linux:linux_kernel:3.4 cpe:/o:linux:linux_kernel:3.2 cpe:/o:linux:linux_kernel:2.6.17 cpe:/h:axis:210a_network_camera cpe:/h:axis:211_network_camera
Aggressive OS guesses: ASUS RT-N56U WAP (Linux 3.4) (98%), Linux 3.2 (98%), Linux 3.1 (96%), Linux 3.16 (96%), AXIS 210A or 211 Network Camera (Linux 2.6.17) (96%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.apsevilla.gob.es (195.235.113.45)
Host is up (0.072s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/http Apache Tomcat/Coyote JSP engine 1.1
Device type: router|printer
Running (JUST GUESSING): Linksys embedded (86%), Ricoh embedded (85%)
OS CPE: cpe:/h:ricoh:aficio_sp_c240sf
Aggressive OS guesses: Linksys BEFSR41 EtherFast router (86%), Ricoh Aficio SP C240SF printer (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.apvigo.gob.es (194.69.250.179)
Host is up (0.059s latency).
rDNS record for 194.69.250.179: alh250179.alhsys.es
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.4.29 ((Win64) OpenSSL/1.1.0g)
113/tcp closed ident
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
8080/tcp open http Apache Tomcat/Coyote JSP engine 1.1
8443/tcp closed https-alt
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012 (87%)
OS CPE: cpe:/o:microsoft:windows_server_2012
Aggressive OS guesses: Microsoft Windows Server 2012 (87%), Microsoft Windows Server 2012 or Windows Server 2012 R2 (87%), Microsoft Windows Server 2012 R2 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.autoridadportuariadelabahiadealgeciras.gob.es (62.81.230.49)
Host is up (0.075s latency).
rDNS record for 62.81.230.49: 62.81.230.49.static.user.ono.com
Not shown: 997 closed ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
465/tcp filtered smtps
Device type: general purpose|storage-misc|WAP
Running (JUST GUESSING): Linux 2.6.X|3.X (89%), HP embedded (87%)
OS CPE: cpe:/o:linux:linux_kernel:2.6 cpe:/o:linux:linux_kernel:3 cpe:/h:hp:p2000_g3 cpe:/o:linux:linux_kernel:2.6.22
Aggressive OS guesses: Linux 2.6.32 - 3.13 (89%), Linux 2.6.32 (88%), Linux 2.6.32 - 2.6.39 (88%), Linux 2.6.32 - 3.1 (88%), Linux 2.6.39 (88%), HP P2000 G3 NAS device (87%), Linux 2.6.32 - 3.10 (86%), Linux 3.10 (86%), Linux 3.2 (86%), Linux 2.6.32 - 3.9 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.aytosalamanca.gob.es (89.140.231.214)
Host is up (0.076s latency).
rDNS record for 89.140.231.214: 89.140.231.214.static.user.ono.com
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.15
443/tcp open ssl/http Apache httpd 2.2.15
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 2.6.X (86%)
OS CPE: cpe:/o:linux:linux_kernel:2.6
Aggressive OS guesses: Linux 2.6.18 - 2.6.22 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Hosts: 89.140.231.214, www.aytosalamanca.gob.es

Nmap scan report for bicentenarios.gob.es (217.149.144.15)
Host is up (0.063s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 7.5
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 7.5
OS fingerprint not ideal because: maxTimingRatio (1.016400e+01) is greater than 1.4
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for bne.gob.es (212.128.118.0)
Host is up.
All 1000 scanned ports on bne.gob.es (212.128.118.0) are filtered
Too many fingerprints match this host to give specific OS details

Nmap scan report for registro.bne.gob.es (212.128.118.20)
Host is up.
All 1000 scanned ports on registro.bne.gob.es (212.128.118.20) are filtered
Too many fingerprints match this host to give specific OS details

Nmap scan report for sede.bne.gob.es (212.128.118.13)
Host is up (0.064s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Apache httpd 2.0.52 ((Red Hat))
8443/tcp open ssl/https-alt?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|firewall|proxy server|WAP|PBX
Running (JUST GUESSING): Linux 2.6.X (87%), Cisco embedded (86%), Riverbed embedded (86%), ZoneAlarm embedded (86%), Ruckus embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.9 cpe:/o:linux:linux_kernel:2.6 cpe:/h:cisco:sa520 cpe:/h:riverbed:steelhead_200 cpe:/h:zonealarm:z100g cpe:/h:cisco:uc320w cpe:/h:ruckus:7363
Aggressive OS guesses: Linux 2.6.9 (87%), Linux 2.6.22.1-32.fc6 (x86, SMP) (86%), Oracle Enterprise Linux 6 (Linux 2.6.32) (86%), Cisco SA520 firewall (Linux 2.6) (86%), Linux 2.6.11 (86%), Linux 2.6.18 (86%), Linux 2.6.28 (86%), Linux 2.6.30 (86%), Linux 2.6.32 (86%), Linux 2.6.5 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for boe.gob.es (81.89.32.212)
Host is up (0.66s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/http Apache httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|firewall|media device
Running (JUST GUESSING): Linux 2.6.X|3.X (86%), IPCop 2.X (86%), Tiandy embedded (86%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.4 cpe:/o:ipcop:ipcop:2 cpe:/o:linux:linux_kernel:3.2
Aggressive OS guesses: Linux 2.6.32 (86%), IPCop 2 firewall (Linux 3.4) (86%), Linux 3.2 (86%), Tiandy NVR (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.boveda.gob.es (217.160.0.43)
Host is up (0.094s latency).
rDNS record for 217.160.0.43: 217-160-0-43.elastic-ssl.ui-r.com
Not shown: 942 filtered ports, 55 closed ports
PORT STATE SERVICE VERSION
80/tcp open http nginx
81/tcp open http nginx
443/tcp open ssl/https nginx
Device type: general purpose|WAP|storage-misc
Running (JUST GUESSING): Linux 3.X|4.X|2.6.X|2.4.X (91%), HP embedded (87%), Apple macOS 10.13.X (86%)
OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:2.6.22 cpe:/h:hp:p2000_g3 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:apple:mac_os_x:10.13 cpe:/o:linux:linux_kernel:2.4
Aggressive OS guesses: Linux 3.10 - 4.11 (91%), Linux 3.2 - 4.9 (89%), OpenWrt Kamikaze 7.09 (Linux 2.6.22) (88%), HP P2000 G3 NAS device (87%), Linux 4.4 (87%), Linux 2.6.32 (86%), Apple macOS 10.13 (High Sierra) (Darwin 17.0.0) (86%), Linux 3.18 (85%), OpenWrt 0.9 - 7.09 (Linux 2.4.30 - 2.4.34) (85%), OpenWrt White Russian 0.9 (Linux 2.4.30) (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for buscador.gob.es (185.73.172.49)
Host is up (0.062s latency).
rDNS record for 185.73.172.49: 49.red-185-73-172.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
2000/tcp open cisco-sccp?
5060/tcp open sip?
OS fingerprint not ideal because: maxTimingRatio (1.011200e+01) is greater than 1.4
No OS matches for host

Nmap scan report for www.buscador.gob.es (108.177.126.121)
Host is up (0.11s latency).
Other addresses for www.buscador.gob.es (not scanned): 2a00:1450:4013:c01::79
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Google httpd
443/tcp open ssl/http Google httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for defensa.buscador.gob.es (108.177.119.121)
Host is up (0.096s latency).
Other addresses for defensa.buscador.gob.es (not scanned): 2a00:1450:4013:c05::79
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Google httpd
443/tcp open ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for ccs.gob.es (195.55.157.69)
Host is up (0.067s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/http Apache httpd (Arya Stark)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|specialized|storage-misc
Running (JUST GUESSING): Linux 3.X|4.X (89%), Crestron 2-Series (87%), HP embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4 cpe:/o:crestron:2_series cpe:/h:hp:p2000_g3
Aggressive OS guesses: Linux 3.2 - 4.9 (89%), Linux 3.18 (88%), Linux 3.10 - 4.11 (87%), Linux 3.12 (87%), Linux 3.13 (87%), Linux 3.13 or 4.2 (87%), Linux 3.16 (87%), Linux 3.16 - 4.6 (87%), Linux 3.8 - 3.11 (87%), Linux 4.2 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.cdti.gob.es (88.84.78.7)
Host is up (0.069s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/https?
Device type: load balancer|general purpose
Running (JUST GUESSING): Citrix embedded (91%), OpenBSD 4.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: Citrix NetScaler load balancer (91%), OpenBSD 4.0 (85%), OpenBSD 4.3 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for cepc.gob.es (194.126.225.157)
Host is up (0.059s latency).
rDNS record for 194.126.225.157: wisnet04.medios.es
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp Microsoft ftpd
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft IIS httpd 7.5
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 7|Vista|2008|8.1 (95%)
OS CPE: cpe:/o:microsoft:windows_7::sp1 cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_server_2008::sp1 cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_8.1:r1
Aggressive OS guesses: Microsoft Windows 7 SP1 (95%), Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (90%), Microsoft Windows Server 2008 R2 or Windows 8 (89%), Microsoft Windows Server 2008 R2 SP1 (89%), Microsoft Windows 8.1 Update 1 (89%), Microsoft Windows 8.1 R1 (89%), Microsoft Windows Server 2008 R2 SP1 or Windows 8 (89%), Microsoft Windows Server 2008 R2 (88%), Microsoft Windows Server 2008 (88%), Microsoft Windows 7 or Windows Server 2008 R2 (87%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for www.cepc.gob.es (194.126.225.167)
Host is up (0.069s latency).
rDNS record for 194.126.225.167: wisnet07.medios.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft IIS httpd 7.5
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 7|Vista|2008 (96%)
OS CPE: cpe:/o:microsoft:windows_7::sp1 cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_server_2008::sp1
Aggressive OS guesses: Microsoft Windows 7 SP1 (96%), Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for editorial.cepc.gob.es (77.240.122.136)
Host is up (0.069s latency).
rDNS record for 77.240.122.136: 77-240-122-136.redes.acens.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012|7|2008 (88%)
OS CPE: cpe:/o:microsoft:windows_server_2012 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_server_2008:r2
Aggressive OS guesses: Microsoft Windows Server 2012 (88%), Microsoft Windows Server 2012 or Windows Server 2012 R2 (88%), Microsoft Windows Server 2012 R2 (88%), Microsoft Windows 7 SP1 or Windows Server 2008 R2 (87%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for wseditorial.cepc.gob.es (77.240.122.137)
Host is up.
rDNS record for 77.240.122.137: 77-240-122-137.redes.acens.net
All 1000 scanned ports on wseditorial.cepc.gob.es (77.240.122.137) are filtered
Too many fingerprints match this host to give specific OS details

Nmap scan report for chguadalquivir.gob.es (212.170.226.193)
Host is up (0.071s latency).
rDNS record for 212.170.226.193: www.chguadalquivir.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: storage-misc|general purpose|firewall
Running (JUST GUESSING): Linux 2.6.X|3.X (88%), Synology DiskStation Manager 5.X (88%), WatchGuard Fireware 11.X (86%)
OS CPE: cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Synology DiskStation Manager 5.1 (88%), Linux 2.6.32 (87%), Linux 2.6.39 (86%), Linux 2.6.32 or 3.10 (86%), Linux 3.10 (86%), Linux 3.4 (86%), WatchGuard Fireware 11.8 (86%), Linux 2.6.32 - 2.6.39 (85%), Linux 3.1 - 3.2 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www2.chj.gob.es (212.170.252.228)
Host is up (0.073s latency).
rDNS record for 212.170.252.228: 228.red-212-170-252.customer.static.ccgg.telefonica.net
Not shown: 994 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp Microsoft ftpd
80/tcp open http Microsoft IIS httpd 8.5
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
8008/tcp open http
8010/tcp open ssl/http-proxy FortiGate Web Filtering Service
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port8008-TCP:V=7.70%I=7%D=10/7%Time=5BBA7543%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,CC,"HTTP/1\.1\x20302\x20Found\r\nLocation:\x20https://:8010/\r
SF:\nConnection:\x20close\r\nX-Frame-Options:\x20SAMEORIGIN\r\nX-XSS-Prote
SF:ction:\x201;\x20mode=block\r\nX-Content-Type-Options:\x20nosniff\r\nCon
SF:tent-Security-Policy:\x20frame-ancestors\r\n\r\n")%r(FourOhFourRequest,
SF:EF,"HTTP/1\.1\x20302\x20Found\r\nLocation:\x20https://:8010/nice%20port
SF:s%2C/Tri%6Eity\.txt%2ebak\r\nConnection:\x20close\r\nX-Frame-Options:\x
SF:20SAMEORIGIN\r\nX-XSS-Protection:\x201;\x20mode=block\r\nX-Content-Type
SF:-Options:\x20nosniff\r\nContent-Security-Policy:\x20frame-ancestors\r\n
SF:\r\n")%r(GenericLines,CB,"HTTP/1\.1\x20302\x20Found\r\nLocation:\x20htt
SF:ps://:8010\r\nConnection:\x20close\r\nX-Frame-Options:\x20SAMEORIGIN\r\
SF:nX-XSS-Protection:\x201;\x20mode=block\r\nX-Content-Type-Options:\x20no
SF:sniff\r\nContent-Security-Policy:\x20frame-ancestors\r\n\r\n")%r(HTTPOp
SF:tions,CB,"HTTP/1\.1\x20302\x20Found\r\nLocation:\x20https://:8010\r\nCo
SF:nnection:\x20close\r\nX-Frame-Options:\x20SAMEORIGIN\r\nX-XSS-Protectio
SF:n:\x201;\x20mode=block\r\nX-Content-Type-Options:\x20nosniff\r\nContent
SF:-Security-Policy:\x20frame-ancestors\r\n\r\n")%r(RTSPRequest,CB,"HTTP/1
SF:\.1\x20302\x20Found\r\nLocation:\x20https://:8010\r\nConnection:\x20clo
SF:se\r\nX-Frame-Options:\x20SAMEORIGIN\r\nX-XSS-Protection:\x201;\x20mode
SF:=block\r\nX-Content-Type-Options:\x20nosniff\r\nContent-Security-Policy
SF::\x20frame-ancestors\r\n\r\n")%r(SIPOptions,CB,"HTTP/1\.1\x20302\x20Fou
SF:nd\r\nLocation:\x20https://:8010\r\nConnection:\x20close\r\nX-Frame-Opt
SF:ions:\x20SAMEORIGIN\r\nX-XSS-Protection:\x201;\x20mode=block\r\nX-Conte
SF:nt-Type-Options:\x20nosniff\r\nContent-Security-Policy:\x20frame-ancest
SF:ors\r\n\r\n");
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012|7 (89%)
OS CPE: cpe:/o:microsoft:windows_server_2012 cpe:/o:microsoft:windows_7::-:professional
Aggressive OS guesses: Microsoft Windows Server 2012 (89%), Microsoft Windows Server 2012 or Windows Server 2012 R2 (89%), Microsoft Windows Server 2012 R2 (89%), Microsoft Windows 7 Professional (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for sede.ciemat.gob.es (192.101.166.137)
Host is up (0.060s latency).
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/http Apache httpd 2.2.3 ((Red Hat))
8008/tcp open http
8443/tcp open ssl/http Apache Tomcat/Coyote JSP engine 1.1
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port8008-TCP:V=7.70%I=7%D=10/7%Time=5BBA7548%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,CC,"HTTP/1\.1\x20302\x20Found\r\nLocation:\x20https://:8010/\r
SF:\nConnection:\x20close\r\nX-Frame-Options:\x20SAMEORIGIN\r\nX-XSS-Prote
SF:ction:\x201;\x20mode=block\r\nX-Content-Type-Options:\x20nosniff\r\nCon
SF:tent-Security-Policy:\x20frame-ancestors\r\n\r\n")%r(FourOhFourRequest,
SF:EF,"HTTP/1\.1\x20302\x20Found\r\nLocation:\x20https://:8010/nice%20port
SF:s%2C/Tri%6Eity\.txt%2ebak\r\nConnection:\x20close\r\nX-Frame-Options:\x
SF:20SAMEORIGIN\r\nX-XSS-Protection:\x201;\x20mode=block\r\nX-Content-Type
SF:-Options:\x20nosniff\r\nContent-Security-Policy:\x20frame-ancestors\r\n
SF:\r\n")%r(GenericLines,CB,"HTTP/1\.1\x20302\x20Found\r\nLocation:\x20htt
SF:ps://:8010\r\nConnection:\x20close\r\nX-Frame-Options:\x20SAMEORIGIN\r\
SF:nX-XSS-Protection:\x201;\x20mode=block\r\nX-Content-Type-Options:\x20no
SF:sniff\r\nContent-Security-Policy:\x20frame-ancestors\r\n\r\n")%r(HTTPOp
SF:tions,CB,"HTTP/1\.1\x20302\x20Found\r\nLocation:\x20https://:8010\r\nCo
SF:nnection:\x20close\r\nX-Frame-Options:\x20SAMEORIGIN\r\nX-XSS-Protectio
SF:n:\x201;\x20mode=block\r\nX-Content-Type-Options:\x20nosniff\r\nContent
SF:-Security-Policy:\x20frame-ancestors\r\n\r\n")%r(RTSPRequest,CB,"HTTP/1
SF:\.1\x20302\x20Found\r\nLocation:\x20https://:8010\r\nConnection:\x20clo
SF:se\r\nX-Frame-Options:\x20SAMEORIGIN\r\nX-XSS-Protection:\x201;\x20mode
SF:=block\r\nX-Content-Type-Options:\x20nosniff\r\nContent-Security-Policy
SF::\x20frame-ancestors\r\n\r\n")%r(SIPOptions,CB,"HTTP/1\.1\x20302\x20Fou
SF:nd\r\nLocation:\x20https://:8010\r\nConnection:\x20close\r\nX-Frame-Opt
SF:ions:\x20SAMEORIGIN\r\nX-XSS-Protection:\x201;\x20mode=block\r\nX-Conte
SF:nt-Type-Options:\x20nosniff\r\nContent-Security-Policy:\x20frame-ancest
SF:ors\r\n\r\n");
Device type: general purpose|printer|broadband router|switch|VoIP phone|firewall|security-misc|specialized
Running (JUST GUESSING): Linux 2.6.X|2.4.X (90%), Canon embedded (89%), D-Link embedded (89%), Extreme Networks ExtremeXOS 12.X (89%), Kyocera embedded (89%), Thomson embedded (89%), Barracuda Networks embedded (89%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.23 cpe:/h:canon:imagerunner_advance_c5051 cpe:/h:dlink:dsl-2540b cpe:/o:extremenetworks:extremexos:12.5.4 cpe:/h:kyocera:cs-2560 cpe:/o:linux:linux_kernel:2.4.21
Aggressive OS guesses: Linux 2.6.23 (90%), Linux 2.6.24 (Debian) (89%), Linux 2.6.26 (89%), Canon imageRUNNER ADVANCE C5051 printer (89%), D-Link DSL-2540B ADSL router (89%), Extreme Networks ExtremeXOS 12.5.4 (89%), Kyocera CopyStar CS-2560 printer (89%), Linux 2.6.15 (Ubuntu) (89%), Linux 2.6.15 - 2.6.26 (likely embedded) (89%), Linux 2.6.16 (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for clasespasivas.gob.es (195.10.201.153)
Host is up (0.067s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/https BigIP
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/7%Time=5BBA7554%P=x86_64-pc-linux-gnu
SF:%r(HTTPOptions,189,"HTTP/1\.1\x20200\x20OK\r\nCache-Control:\x20no-cach
SF:e\r\nConnection:\x20close\r\nContent-Type:\x20text/html;\x20charset=iso
SF:-8859-1\r\nPragma:\x20no-cache\r\nContent-Length:\x20246\r\n\r\n<html><
SF:head><title>Request\x20Rejected</title></head><body>The\x20requested\x2
SF:0URL\x20was\x20rejected\.\x20Please\x20consult\x20with\x20your\x20admin
SF:istrator\.<br><br>Your\x20support\x20ID\x20is:\x207429035151282321577<b
SF:r><br><a\x20href=''>\[Go\x20Back\]</a></bo
SF:dy></html>")%r(RTSPRequest,189,"HTTP/1\.1\x20200\x20OK\r\nCache-Control
SF::\x20no-cache\r\nConnection:\x20close\r\nContent-Type:\x20text/html;\x2
SF:0charset=iso-8859-1\r\nPragma:\x20no-cache\r\nContent-Length:\x20246\r\
SF:n\r\n<html><head><title>Request\x20Rejected</title></head><body>The\x20
SF:requested\x20URL\x20was\x20rejected\.\x20Please\x20consult\x20with\x20y
SF:our\x20administrator\.<br><br>Your\x20support\x20ID\x20is:\x20742903515
SF:1282321581<br><br><a\x20href=''>\[Go\x20Ba
SF:ck\]</a></body></html>")%r(SIPOptions,189,"HTTP/1\.1\x20200\x20OK\r\nCa
SF:che-Control:\x20no-cache\r\nConnection:\x20close\r\nContent-Type:\x20te
SF:xt/html;\x20charset=iso-8859-1\r\nPragma:\x20no-cache\r\nContent-Length
SF::\x20246\r\n\r\n<html><head><title>Request\x20Rejected</title></head><b
SF:ody>The\x20requested\x20URL\x20was\x20rejected\.\x20Please\x20consult\x
SF:20with\x20your\x20administrator\.<br><br>Your\x20support\x20ID\x20is:\x
SF:207429035151282418654<br><br><a\x20href=''
SF:>\[Go\x20Back\]</a></body></html>");
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.cncompetencia.gob.es (79.170.8.170)
Host is up (0.080s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|phone|specialized
Running (JUST GUESSING): Microsoft Windows 2008|7|8.1|Phone|Vista (89%)
OS CPE: cpe:/o:microsoft:windows_server_2008:r2:sp1 cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_7::sp1 cpe:/o:microsoft:windows_8.1:r1 cpe:/o:microsoft:windows cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_7
Aggressive OS guesses: Microsoft Windows Server 2008 R2 SP1 (89%), Microsoft Windows Server 2008 (89%), Microsoft Windows Server 2008 R2 (89%), Microsoft Windows Server 2008 R2 or Windows 8 (89%), Microsoft Windows 7 SP1 (89%), Microsoft Windows 8.1 Update 1 (89%), Microsoft Windows 8.1 R1 (89%), Microsoft Windows Phone 7.5 or 8.0 (89%), Microsoft Windows 7 or Windows Server 2008 R2 (88%), Microsoft Windows Server 2008 or 2008 Beta 3 (88%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for sede.cni.gob.es (2.16.162.128)
Host is up (0.11s latency).
Other addresses for sede.cni.gob.es (not scanned): 2.16.162.169
rDNS record for 2.16.162.128: a2-16-162-128.deploy.static.akamaitechnologies.com
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
443/tcp open https AkamaiGHost
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.70%I=7%D=10/7%Time=5BBA7555%P=x86_64-pc-linux-gnu%r(SSL
SF:SessionReq,7,"\x15\x03\x04\0\x02\x02P")%r(TLSSessionReq,7,"\x15\x03\x04
SF:\0\x02\x02P")%r(SSLv23SessionReq,7,"\x15\x03\x04\0\x02\x02P");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Aggressive OS guesses: Linux 3.13 - 3.16 (94%), Linux 4.4 (94%), OpenWrt 0.9 - 7.09 (Linux 2.4.30 - 2.4.34) (94%), OpenWrt White Russian 0.9 (Linux 2.4.30) (94%), OpenWrt Kamikaze 7.09 (Linux 2.6.22) (94%), Asus RT-AC66U router (Linux 2.6) (93%), Asus RT-N10 router or AXIS 211A Network Camera (Linux 2.6) (93%), Linux 2.6.18 (93%), Linux 2.6.24 (93%), Asus RT-N16 WAP (Linux 2.6) (93%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 12 hops

Nmap scan report for api.cnmc.gob.es (79.170.8.164)
Host is up (0.078s latency).
rDNS record for 79.170.8.164: madfrontal1.cnmc.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http nginx
443/tcp open ssl/http nginx
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X (88%)
OS CPE: cpe:/o:linux:linux_kernel:4.9 cpe:/o:linux:linux_kernel:3.18
Aggressive OS guesses: Linux 4.9 (88%), Linux 3.18 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for notificaciones.cnmc.gob.es (79.170.8.149)
Host is up (0.077s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft IIS httpd 7.0
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|phone|specialized
Running (JUST GUESSING): Microsoft Windows 2008|7|8.1|Phone|Vista (89%)
OS CPE: cpe:/o:microsoft:windows_server_2008:r2:sp1 cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_7::sp1 cpe:/o:microsoft:windows_8.1:r1 cpe:/o:microsoft:windows cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_7
Aggressive OS guesses: Microsoft Windows Server 2008 R2 SP1 (89%), Microsoft Windows Server 2008 (89%), Microsoft Windows Server 2008 R2 (89%), Microsoft Windows Server 2008 R2 or Windows 8 (89%), Microsoft Windows 7 SP1 (89%), Microsoft Windows 8.1 Update 1 (89%), Microsoft Windows 8.1 R1 (89%), Microsoft Windows Phone 7.5 or 8.0 (89%), Microsoft Windows 7 or Windows Server 2008 R2 (88%), Microsoft Windows Server 2008 or 2008 Beta 3 (88%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for notificacionespre.cnmc.gob.es (79.170.8.145)
Host is up.
All 1000 scanned ports on notificacionespre.cnmc.gob.es (79.170.8.145) are filtered
Too many fingerprints match this host to give specific OS details

Nmap scan report for sede.cnmv.gob.es (195.53.156.46)
Host is up (0.067s latency).
Other addresses for sede.cnmv.gob.es (not scanned): 88.84.91.46 88.84.92.46
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|specialized
Running (JUST GUESSING): Microsoft Windows Vista|7|2008 (86%)
OS CPE: cpe:/o:microsoft:windows_vista::sp2 cpe:/o:microsoft:windows_7::sp1 cpe:/o:microsoft:windows_server_2008 cpe:/o:microsoft:windows_7
Aggressive OS guesses: Microsoft Windows Vista SP2, Windows 7 SP1, or Windows Server 2008 (86%), Microsoft Windows Server 2008 R2 (85%), Microsoft Windows Embedded Standard 7 (85%), Microsoft Windows Server 2008 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for comarcas.gob.es (188.244.81.91)
Host is up (0.069s latency).
Not shown: 996 closed ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/http Apache httpd
465/tcp filtered smtps
3389/tcp filtered ms-wbt-server
OS fingerprint not ideal because: maxTimingRatio (9.788000e+00) is greater than 1.4
No OS matches for host

Nmap scan report for pre.comarcas.gob.es (195.55.229.85)
Host is up.
All 1000 scanned ports on pre.comarcas.gob.es (195.55.229.85) are filtered
Too many fingerprints match this host to give specific OS details

Nmap scan report for www.comercio.gob.es (193.146.133.27)
Host is up (0.071s latency).
rDNS record for 193.146.133.27: www.comercio.mineco.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
443/tcp open ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for des-clave.comercio.gob.es (193.144.239.65)
Host is up (0.068s latency).
Other addresses for des-clave.comercio.gob.es (not scanned): 195.53.116.65
rDNS record for 193.144.239.65: des-oficinavirtual.comercio.gob.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 8.5
443/tcp open https Microsoft-HTTPAPI/2.0
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012 (88%)
OS CPE: cpe:/o:microsoft:windows_server_2012
Aggressive OS guesses: Microsoft Windows Server 2012 (88%), Microsoft Windows Server 2012 or Windows Server 2012 R2 (88%), Microsoft Windows Server 2012 R2 (88%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for des-serviciossede.comercio.gob.es (195.53.116.66)
Host is up (0.062s latency).
Other addresses for des-serviciossede.comercio.gob.es (not scanned): 193.144.239.66
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 8.5
443/tcp open https Microsoft-HTTPAPI/2.0
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012 (89%)
OS CPE: cpe:/o:microsoft:windows_server_2012:r2
Aggressive OS guesses: Microsoft Windows Server 2012 or Windows Server 2012 R2 (89%), Microsoft Windows Server 2012 R2 (89%), Microsoft Windows Server 2012 (87%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for oficinavirtual.comercio.gob.es (193.144.239.64)
Host is up (0.062s latency).
Other addresses for oficinavirtual.comercio.gob.es (not scanned): 195.53.116.64
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 8.5
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012 (89%)
OS CPE: cpe:/o:microsoft:windows_server_2012:r2
Aggressive OS guesses: Microsoft Windows Server 2012 or Windows Server 2012 R2 (89%), Microsoft Windows Server 2012 R2 (89%), Microsoft Windows Server 2012 (87%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for pre-oficinavirtual.comercio.gob.es (193.146.133.31)
Host is up (0.060s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open https Microsoft-HTTPAPI/2.0
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for pru-sede.comercio.gob.es (195.53.116.70)
Host is up (0.063s latency).
Other addresses for pru-sede.comercio.gob.es (not scanned): 193.144.239.70
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 8.5
443/tcp closed https
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012|7|2008|2016|Vista (92%)
OS CPE: cpe:/o:microsoft:windows_server_2012 cpe:/o:microsoft:windows_7::-:professional cpe:/o:microsoft:windows_server_2008:r2:sp1 cpe:/o:microsoft:windows_server_2016 cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_8
Aggressive OS guesses: Microsoft Windows Server 2012 (92%), Microsoft Windows Server 2012 or Windows Server 2012 R2 (92%), Microsoft Windows Server 2012 R2 (92%), Microsoft Windows 7 Professional (87%), Microsoft Windows Server 2008 R2 SP1 (87%), Microsoft Windows Server 2008 (87%), Microsoft Windows 7 SP1 (87%), Microsoft Windows Server 2008 R2 (86%), Microsoft Windows Server 2016 (86%), Microsoft Windows 7 SP1 or Windows Server 2008 SP2 or 2008 R2 SP1 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for serviciossede.comercio.gob.es (195.53.116.43)
Host is up (0.067s latency).
Other addresses for serviciossede.comercio.gob.es (not scanned): 193.144.239.43
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 8.5
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: phone
Running: Nokia Symbian OS
OS CPE: cpe:/o:nokia:symbian_os
OS details: Nokia E70 or N86 mobile phone (Symbian OS)
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for sede.consejodetransparencia.gob.es (185.73.172.76)
Host is up (0.060s latency).
rDNS record for 185.73.172.76: 76.red-185-73-172.customer.static.ccgg.telefonica.net
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 5.0
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 5.0
2000/tcp open cisco-sccp?
5060/tcp open sip?
OS fingerprint not ideal because: maxTimingRatio (6.086000e+00) is greater than 1.4
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for contratacioncentralizada.gob.es (185.73.172.59)
Host is up (0.060s latency).
rDNS record for 185.73.172.59: 59.red-185-73-172.customer.static.ccgg.telefonica.net
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache Tomcat/Coyote JSP engine 1.1
113/tcp closed ident
443/tcp open ssl/https?
2000/tcp open cisco-sccp?
5060/tcp open sip?
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012|2008|7|Vista (91%)
OS CPE: cpe:/o:microsoft:windows_server_2012 cpe:/o:microsoft:windows_server_2008:r2:sp1 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_8
Aggressive OS guesses: Microsoft Windows Server 2012 (91%), Microsoft Windows Server 2012 or Windows Server 2012 R2 (91%), Microsoft Windows Server 2012 R2 (91%), Microsoft Windows Server 2008 R2 SP1 (86%), Microsoft Windows Server 2008 R2 (85%), Microsoft Windows 7 (85%), Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (85%), Microsoft Windows Vista SP2, Windows 7 SP1, or Windows Server 2008 (85%), Microsoft Windows 7 Professional (85%), Microsoft Windows Vista SP2 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for contrataciondelsectorpublico.gob.es (193.148.34.9)
Host is up (0.060s latency).
rDNS record for 193.148.34.9: contrataciondelestado.es
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http
113/tcp closed ident
443/tcp open ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBA85DE%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,1D9,"HTTP/1\.0\x20302\x20Internal\x20Server\x20Error\r\nContent-
SF:Type:\x20text/html;\x20charset=UTF-8\r\nLocation:\x20https://contrataci
SF:ondelestado\.es:443/\r\nConnection:\x20close\r\n\r\n<html><head><meta\x
SF:20content=\"text/html;\x20charset=UTF-8\"\x20http-equiv=\"Content-Type\
SF:"><meta\x20http-equiv=\"refresh\"\x20content=\"5;false\"><title>Redirec
SF:ting\x20to\x20a\x20secure\x20page</title></head><body><h2>DGPE</h2><p>H
SF:TTP\x20Port\x20is\x20not\x20accessible\x20on\x20this\x20server</p><p>Yo
SF:u\x20are\x20being\x20redirected\x20to\x20a\x20secure\x20page</p><p>Than
SF:k\x20you</p><p></p></body></html>")%r(HTTPOptions,20C,"HTTP/1\.0\x20200
SF:\x20Error\r\nContent-Type:\x20text/html;\x20charset=UTF-8\r\nConnection
SF::\x20close\r\n\r\n<html><head><meta\x20content=\"text/html;\x20charset=
SF:UTF-8\"\x20http-equiv=\"Content-Type\"><meta\x20http-equiv=\"refresh\"\
SF:x20content=\"5;url=http://contrataciondelestado\.es/wps/portal\"><title
SF:>Redireccionando\.\.\.</title></head><body><h1>Plataforma\x20de\x20Cont
SF:rataci&oacute;n\x20del\x20Sector\x20P&uacute;blico\x20</h1><p>Se\x20ha\
SF:x20producido\x20un\x20error\x20de\x20acceso\.\.\.</p><p><h2></h2></p><p
SF:>\n\t\t\t\t\t\tRedireccionando\x20a\x20la\x20pagina\x20principal\x20del
SF:\n\t\t\t\t\t\tPortal\n\t\t\t\t\t\t</p><p>Gracias</p></body></html>")%r(
SF:RTSPRequest,62,"HTTP/1\.1\x20505\x20Error\r\nX-Backside-Transport:\x20F
SF:AIL\x20FAIL\r\nContent-Type:\x20text/xml\r\nConnection:\x20close\r\n\r\
SF:n")%r(FourOhFourRequest,1FC,"HTTP/1\.0\x20302\x20Internal\x20Server\x20
SF:Error\r\nContent-Type:\x20text/html;\x20charset=UTF-8\r\nLocation:\x20h
SF:ttps://contrataciondelestado\.es:443/nice%20ports%2C/Tri%6Eity\.txt%2eb
SF:ak\r\nConnection:\x20close\r\n\r\n<html><head><meta\x20content=\"text/h
SF:tml;\x20charset=UTF-8\"\x20http-equiv=\"Content-Type\"><meta\x20http-eq
SF:uiv=\"refresh\"\x20content=\"5;false\"><title>Redirecting\x20to\x20a\x2
SF:0secure\x20page</title></head><body><h2>DGPE</h2><p>HTTP\x20Port\x20is\
SF:x20not\x20accessible\x20on\x20this\x20server</p><p>You\x20are\x20being\
SF:x20redirected\x20to\x20a\x20secure\x20page</p><p>Thank\x20you</p><p></p
SF:></body></html>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBA85E5%P=x86_64-pc-linux-gnu
SF:%r(HTTPOptions,20C,"HTTP/1\.0\x20200\x20Error\r\nContent-Type:\x20text/
SF:html;\x20charset=UTF-8\r\nConnection:\x20close\r\n\r\n<html><head><meta
SF:\x20content=\"text/html;\x20charset=UTF-8\"\x20http-equiv=\"Content-Typ
SF:e\"><meta\x20http-equiv=\"refresh\"\x20content=\"5;url=http://contratac
SF:iondelestado\.es/wps/portal\"><title>Redireccionando\.\.\.</title></hea
SF:d><body><h1>Plataforma\x20de\x20Contrataci&oacute;n\x20del\x20Sector\x2
SF:0P&uacute;blico\x20</h1><p>Se\x20ha\x20producido\x20un\x20error\x20de\x
SF:20acceso\.\.\.</p><p><h2></h2></p><p>\n\t\t\t\t\t\tRedireccionando\x20a
SF:\x20la\x20pagina\x20principal\x20del\n\t\t\t\t\t\tPortal\n\t\t\t\t\t\t<
SF:/p><p>Gracias</p></body></html>")%r(tor-versions,62,"HTTP/1\.1\x20500\x
SF:20Error\r\nX-Backside-Transport:\x20FAIL\x20FAIL\r\nContent-Type:\x20te
SF:xt/xml\r\nConnection:\x20close\r\n\r\n")%r(RTSPRequest,62,"HTTP/1\.1\x2
SF:0505\x20Error\r\nX-Backside-Transport:\x20FAIL\x20FAIL\r\nContent-Type:
SF:\x20text/xml\r\nConnection:\x20close\r\n\r\n")%r(RPCCheck,62,"HTTP/1\.1
SF:\x20500\x20Error\r\nX-Backside-Transport:\x20FAIL\x20FAIL\r\nContent-Ty
SF:pe:\x20text/xml\r\nConnection:\x20close\r\n\r\n")%r(DNSVersionBindReqTC
SF:P,62,"HTTP/1\.1\x20500\x20Error\r\nX-Backside-Transport:\x20FAIL\x20FAI
SF:L\r\nContent-Type:\x20text/xml\r\nConnection:\x20close\r\n\r\n")%r(DNSS
SF:tatusRequestTCP,62,"HTTP/1\.1\x20500\x20Error\r\nX-Backside-Transport:\
SF:x20FAIL\x20FAIL\r\nContent-Type:\x20text/xml\r\nConnection:\x20close\r\
SF:n\r\n")%r(SSLSessionReq,62,"HTTP/1\.1\x20500\x20Error\r\nX-Backside-Tra
SF:nsport:\x20FAIL\x20FAIL\r\nContent-Type:\x20text/xml\r\nConnection:\x20
SF:close\r\n\r\n")%r(TLSSessionReq,62,"HTTP/1\.1\x20500\x20Error\r\nX-Back
SF:side-Transport:\x20FAIL\x20FAIL\r\nContent-Type:\x20text/xml\r\nConnect
SF:ion:\x20close\r\n\r\n")%r(Kerberos,62,"HTTP/1\.1\x20500\x20Error\r\nX-B
SF:ackside-Transport:\x20FAIL\x20FAIL\r\nContent-Type:\x20text/xml\r\nConn
SF:ection:\x20close\r\n\r\n")%r(SMBProgNeg,62,"HTTP/1\.1\x20500\x20Error\r
SF:\nX-Backside-Transport:\x20FAIL\x20FAIL\r\nContent-Type:\x20text/xml\r\
SF:nConnection:\x20close\r\n\r\n");
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 6.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (88%), OpenBSD 4.3 (88%), FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for agregacion.contrataciondelsectorpublico.gob.es (193.148.34.20)
Host is up (0.060s latency).
rDNS record for 193.148.34.20: agregacion.contratacionsectorpublico.gob.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/https?
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 6.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (88%), OpenBSD 4.3 (86%), FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for luthien.correo.gob.es (185.73.174.97)
Host is up (0.059s latency).
Other addresses for luthien.correo.gob.es (not scanned): 185.73.174.98 185.73.174.102 185.73.174.99 185.73.174.103 185.73.174.101 185.73.174.220 185.73.174.91
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
Too many fingerprints match this host to give specific OS details

Nmap scan report for mdm.correo.gob.es (185.73.174.75)
Host is up (0.062s latency).
Other addresses for mdm.correo.gob.es (not scanned): 2a03:44a0:300::b949:ae4b
rDNS record for 185.73.174.75: 75.red-185-73-174.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/http Apache httpd
993/tcp open ssl/imap Dovecot imapd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 3.X|4.X (88%)
OS CPE: cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4
Aggressive OS guesses: Linux 3.10 (88%), Linux 3.10 - 3.12 (87%), Linux 4.4 (87%), Linux 4.9 (87%), Linux 3.10 - 3.16 (86%), Linux 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for coruna.gob.es (212.51.63.15)
Host is up (0.085s latency).
rDNS record for 212.51.63.15: aras.coruna.es
Not shown: 994 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.4.25
113/tcp closed ident
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
2000/tcp open cisco-sccp?
5060/tcp open sip?
8443/tcp open ssl/https-alt?
Device type: general purpose|broadband router|firewall
Running (JUST GUESSING): Linux 3.X|4.X|2.6.X (91%), WatchGuard Fireware 11.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Linux 3.11 - 4.1 (91%), Linux 3.16 (91%), Linux 3.10 - 3.16 (90%), Linux 3.13 (90%), Linux 4.4 (89%), Linux 2.6.32 (86%), Linux 4.0 (86%), Linux 3.2 - 3.8 (85%), Linux 3.8 (85%), WatchGuard Fireware 11.8 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Host: coruna.es

Nmap scan report for www.csd.gob.es (212.128.114.244)
Host is up (0.062s latency).
rDNS record for 212.128.114.244: 244.red-212-128-114.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Zope httpd 2.7.8-final (python 2.3.5, linux2; ZServer/1.1 Plone/Unknown)
113/tcp closed ident
443/tcp open tcpwrapped
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for aplicaciones.csd.gob.es (212.128.114.252)
Host is up (0.062s latency).
rDNS record for 212.128.114.252: 252.red-212-128-114.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open tcpwrapped
113/tcp closed ident
443/tcp open ssl/http Citrix Access Gateway firewall http config
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; Device: firewall; CPE: cpe:/o:microsoft:windows

Nmap scan report for escorpio.csd.gob.es (212.128.114.250)
Host is up (0.062s latency).
rDNS record for 212.128.114.250: 250.red-212-128-114.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 7.5
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 7.5
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for proad.csd.gob.es (212.128.114.253)
Host is up (0.062s latency).
rDNS record for 212.128.114.253: 253.red-212-128-114.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
113/tcp closed ident
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.csd.gob.es (212.128.114.251)
Host is up (0.063s latency).
rDNS record for 212.128.114.251: 251.red-212-128-114.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 7.5
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 7.5
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for venus.csd.gob.es (212.128.114.242)
Host is up (0.062s latency).
rDNS record for 212.128.114.242: 242.red-212-128-114.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 7.5
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 7.5
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for sede.csic.gob.es (161.111.100.149)
Host is up (0.060s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open ssl/http Apache
113/tcp closed ident
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Device type: general purpose|storage-misc|firewall
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (86%), Synology DiskStation Manager 5.X (85%), WatchGuard Fireware 11.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Linux 2.6.32 or 3.10 (86%), Linux 3.10 - 3.12 (85%), Linux 4.4 (85%), Synology DiskStation Manager 5.1 (85%), Linux 2.6.35 (85%), Linux 3.10 (85%), Linux 2.6.32 (85%), Linux 2.6.39 (85%), WatchGuard Fireware 11.8 (85%), Linux 4.0 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.csn.gob.es (213.134.60.164)
Host is up (0.058s latency).
rDNS record for 213.134.60.164: www.sede.csn.gob.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open tcpwrapped
443/tcp open tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: specialized|WAP|phone
Running: iPXE 1.X, Linux 2.4.X|2.6.X, Sony Ericsson embedded
OS CPE: cpe:/o:ipxe:ipxe:1.0.0%2b cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.6.22 cpe:/h:sonyericsson:u8i_vivaz
OS details: iPXE 1.0.0+, Tomato 1.28 (Linux 2.4.20), Tomato firmware (Linux 2.6.22), Sony Ericsson U8i Vivaz mobile phone

Nmap scan report for cteaje.gob.es (212.128.106.72)
Host is up (0.061s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
443/tcp open ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBA85FE%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,22E,"HTTP/1\.1\x20302\x20Found\r\nDate:\x20Sun,\x2007\x20
SF:Oct\x202018\x2022:17:34\x20GMT\r\nX-XSS-Protection:\x201;\x20mode=block
SF:\r\nLocation:\x20http://apaalto02/cteaje/publico\r\nContent-Length:\x20
SF:215\r\nKeep-Alive:\x20timeout=15,\x20max=100\r\nConnection:\x20close\r\
SF:nContent-Type:\x20text/html;\x20charset=iso-8859-1\r\nX-Pad:\x20avoid\x
SF:20browser\x20bug\r\nStrict-Transport-Security:\x20max-age=31536000;\x20
SF:IncludeSubdomains\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IETF//DTD\
SF:x20HTML\x202\.0//EN\">\n<html><head>\n<title>302\x20Found</title>\n</he
SF:ad><body>\n<h1>Found</h1>\n<p>The\x20document\x20has\x20moved\x20<a\x20
SF:href=\"http://apaalto02/cteaje/publico\">here</a>\.</p>\n</body></html>
SF:\n")%r(HTTPOptions,1F3,"HTTP/1\.1\x20302\x20Found\r\nDate:\x20Sun,\x200
SF:7\x20Oct\x202018\x2022:17:34\x20GMT\r\nLocation:\x20http://apaalto01/ct
SF:eaje/publico\r\nContent-Length:\x20215\r\nKeep-Alive:\x20timeout=15,\x2
SF:0max=100\r\nConnection:\x20close\r\nContent-Type:\x20text/html;\x20char
SF:set=iso-8859-1\r\nStrict-Transport-Security:\x20max-age=31536000;\x20In
SF:cludeSubdomains\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IETF//DTD\x2
SF:0HTML\x202\.0//EN\">\n<html><head>\n<title>302\x20Found</title>\n</head
SF:><body>\n<h1>Found</h1>\n<p>The\x20document\x20has\x20moved\x20<a\x20hr
SF:ef=\"http://apaalto01/cteaje/publico\">here</a>\.</p>\n</body></html>\n
SF:")%r(FourOhFourRequest,1F6,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x
SF:20Sun,\x2007\x20Oct\x202018\x2022:17:35\x20GMT\r\nX-XSS-Protection:\x20
SF:1;\x20mode=block\r\nContent-Length:\x20225\r\nKeep-Alive:\x20timeout=15
SF:,\x20max=99\r\nConnection:\x20close\r\nContent-Type:\x20text/html;\x20c
SF:harset=iso-8859-1\r\nStrict-Transport-Security:\x20max-age=31536000;\x2
SF:0IncludeSubdomains\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IETF//DTD
SF:\x20HTML\x202\.0//EN\">\n<html><head>\n<title>404\x20Not\x20Found</titl
SF:e>\n</head><body>\n<h1>Not\x20Found</h1>\n<p>The\x20requested\x20URL\x2
SF:0/nice\x20ports,/Trinity\.txt\.bak\x20was\x20not\x20found\x20on\x20this
SF:\x20server\.</p>\n</body></html>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: Device: load balancer

Nmap scan report for www.cultura.gob.es (212.128.117.210)
Host is up (0.061s latency).
rDNS record for 212.128.117.210: 210.red-212-128-117.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
113/tcp closed ident
443/tcp open ssl/http Apache httpd 2.2.3 ((Red Hat))
Device type: general purpose|proxy server|firewall|telecom-misc|load balancer
Running (JUST GUESSING): Linux 2.6.X|2.4.X (91%), Citrix embedded (89%), Juniper IVE OS 7.X (89%), Avaya Communication Manager (89%), F5 Networks embedded (89%), Cyberoam embedded (89%), Cymphonix embedded (89%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.18 cpe:/h:juniper:sa4000 cpe:/o:juniper:ive_os:7.0 cpe:/o:linux:linux_kernel:2.6.11 cpe:/a:avaya:communication_manager cpe:/h:cymphonix:ex550 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.6
Aggressive OS guesses: Linux 2.6.18 (91%), Linux 2.6.24 (90%), Citrix Access Gateway VPN gateway (89%), Juniper SA4000 SSL VPN gateway (IVE OS 7.0) (89%), Avaya Communication Manager (Linux 2.6.11) (89%), F5 BIG-IP load balancer (89%), Cyberoam UTM firewall (89%), Cymphonix EX550 firewall (89%), Linux 2.4.21 (89%), Endian 2.3 or IPCop firewall 1.4.10 - 1.4.21 (Linux 2.4.31 - 2.6.22) (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for datos.gob.es (194.69.254.39)
Host is up (0.062s latency).
Other addresses for datos.gob.es (not scanned): 2001:67c:21cc:2000::64:170
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http
443/tcp open ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBA85FB%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,3070,"HTTP/1\.1\x20200\x20OK\r\nDate:\x20Sun,\x2007\x20Oct\x2020
SF:18\x2022:17:30\x20GMT\r\nContent-Language:\x20es\r\nLink:\x20<http://da
SF:tos\.gob\.es/es>;\x20rel=\"canonical\"\r\nCache-Control:\x20public,\x20
SF:max-age=1800\r\nLast-Modified:\x20Sun,\x2007\x20Oct\x202018\x2022:01:34
SF:\x20GMT\r\nExpires:\x20Sun,\x2019\x20Nov\x201978\x2005:00:00\x20GMT\r\n
SF:Vary:\x20Cookie,Accept-Encoding\r\nContent-Type:\x20text/html;\x20chars
SF:et=utf-8\r\nAge:\x200\r\nETag:\x20W/\"1538949694-1\"\r\nX-Frame-Options
SF::\x20SAMEORIGIN\r\nX-Content-Type-Options:\x20nosniff\r\nX-XSS-Protecti
SF:on:\x201;\x20mode=block\r\nConnection:\x20close\r\nAccept-Ranges:\x20by
SF:tes\r\n\r\n<!DOCTYPE\x20html>\n<html\x20lang=\"es\"\x20dir=\"ltr\">\n<h
SF:ead>\n<link\x20rel=\"stylesheet\"\x20href=\"https://cdnjs\.cloudflare\.
SF:com/ajax/libs/font-awesome/4\.7\.0/css/font-awesome\.min\.css\">\n\x20\
SF:x20<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html;\x20char
SF:set=utf-8\"\x20/>\n<link\x20href=\"http://datos\.gob\.es/gl\"\x20rel=\"
SF:alternate\"\x20hreflang=\"gl\"\x20/>\n<link\x20href=\"http://datos\.gob
SF:\.es/eu\"\x20rel=\"alternate\"\x20hreflang=\"eu\"\x20/>\n<script\x20typ
SF:e=\"text/javascript\">dataLay")%r(HTTPOptions,3070,"HTTP/1\.1\x20405\x2
SF:0Not\x20allowed\.\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2022:17:31\x20
SF:GMT\r\nContent-Length:\x2070783\r\nConnection:\x20close\r\n\r\n<html\x2
SF:0lang=\"es\"\x20dir=\"ltr\"\x20id=\"HTML_1\">\n<head\x20id=\"HEAD_2\">\
SF:n<script>\ndataLayer\x20=\x20\[{\n'pagina':\x20'',\n'seccion_s1':\x20''
SF:,\x20\x20\n'seccion_s2':\x20'',\x20\n'seccion_s3':\x20'',\n'seccion_s4'
SF::\x20'',\n'contenido_categoria':\x20'',\n'publicador':\x20'',\n'tipo_vi
SF:sitante':\x20'',\n'idioma':\x20'es',\n'pagina_error':\x20'pagina\x20err
SF:or',\n'event':\x20'loadComplete'\n}\];\n</script>\n<!--\x20GoogleTagMan
SF:ager\x20-->\n<script>\(function\(w,d,s,l,i\){w\[l\]=w\[l\]\|\|\[\];w\[l
SF:\]\.push\({'gtm\.start':new\x20Date\(\)\.getTime\(\),event:'gtm\.js'}\)
SF:;var\x20f=d\.getElementsByTagName\(s\)\[0\],j=d\.createElement\(s\),dl=
SF:l!='dataLayer'\?'&l='\+l:'';j\.async=true;j\.src='https://www\.googleta
SF:gmanager\.com/gtm\.js\?id='\+i\+dl;f\.parentNode\.insertBefore\(j,f\);}
SF:\)\(window,document,'script','dataLayer','GTM-PL62VCW'\);</script>\n<!-
SF:-\x20End\x20GoogleTagManager\x20-->\n<title\x20id=\"TITLE_3\">Error\x20
SF:interno\x20del\x20servidor\x20\|\x20datos\.go");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBA8604%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,4000,"HTTP/1\.1\x20200\x20OK\r\nDate:\x20Sun,\x2007\x20Oc
SF:t\x202018\x2022:17:40\x20GMT\r\nContent-Type:\x20text/html;\x20charset=
SF:utf-8\r\nConnection:\x20close\r\nContent-Language:\x20es\r\nLink:\x20<h
SF:ttp://datos\.gob\.es/es>;\x20rel=\"canonical\"\r\nCache-Control:\x20pub
SF:lic,\x20max-age=1800\r\nLast-Modified:\x20Sun,\x2007\x20Oct\x202018\x20
SF:20:06:30\x20GMT\r\nExpires:\x20Sun,\x2019\x20Nov\x201978\x2005:00:00\x2
SF:0GMT\r\nVary:\x20Cookie,Accept-Encoding\r\nAge:\x201548\r\nETag:\x20W/\
SF:"1538942790-1\"\r\nX-Frame-Options:\x20SAMEORIGIN\r\nX-Content-Type-Opt
SF:ions:\x20nosniff\r\nX-XSS-Protection:\x201;\x20mode=block\r\nAccept-Ran
SF:ges:\x20bytes\r\n\r\n<!DOCTYPE\x20html>\n<html\x20lang=\"es\"\x20dir=\"
SF:ltr\">\n<head>\n<link\x20rel=\"stylesheet\"\x20href=\"https://cdnjs\.cl
SF:oudflare\.com/ajax/libs/font-awesome/4\.7\.0/css/font-awesome\.min\.css
SF:\">\n\x20\x20<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/htm
SF:l;\x20charset=utf-8\"\x20/>\n<link\x20href=\"http://datos\.gob\.es/gl\"
SF:\x20rel=\"alternate\"\x20hreflang=\"gl\"\x20/>\n<link\x20href=\"http://
SF:datos\.gob\.es/eu\"\x20rel=\"alternate\"\x20hreflang=\"eu\"\x20/>\n<scr
SF:ipt\x20type=\"text/javascript\">data")%r(HTTPOptions,4000,"HTTP/1\.1\x2
SF:0405\x20Not\x20allowed\.\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2022:17
SF::41\x20GMT\r\nContent-Length:\x2070783\r\nConnection:\x20close\r\n\r\n<
SF:html\x20lang=\"es\"\x20dir=\"ltr\"\x20id=\"HTML_1\">\n<head\x20id=\"HEA
SF:D_2\">\n<script>\ndataLayer\x20=\x20\[{\n'pagina':\x20'',\n'seccion_s1'
SF::\x20'',\x20\x20\n'seccion_s2':\x20'',\x20\n'seccion_s3':\x20'',\n'secc
SF:ion_s4':\x20'',\n'contenido_categoria':\x20'',\n'publicador':\x20'',\n'
SF:tipo_visitante':\x20'',\n'idioma':\x20'es',\n'pagina_error':\x20'pagina
SF:\x20error',\n'event':\x20'loadComplete'\n}\];\n</script>\n<!--\x20Googl
SF:eTagManager\x20-->\n<script>\(function\(w,d,s,l,i\){w\[l\]=w\[l\]\|\|\[
SF:\];w\[l\]\.push\({'gtm\.start':new\x20Date\(\)\.getTime\(\),event:'gtm\
SF:.js'}\);var\x20f=d\.getElementsByTagName\(s\)\[0\],j=d\.createElement\(
SF:s\),dl=l!='dataLayer'\?'&l='\+l:'';j\.async=true;j\.src='https://www\.g
SF:oogletagmanager\.com/gtm\.js\?id='\+i\+dl;f\.parentNode\.insertBefore\(
SF:j,f\);}\)\(window,document,'script','dataLayer','GTM-PL62VCW'\);</scrip
SF:t>\n<!--\x20End\x20GoogleTagManager\x20-->\n<title\x20id=\"TITLE_3\">Er
SF:ror\x20interno\x20del\x20servidor\x20\|\x20datos\.go");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: specialized
Running (JUST GUESSING): AVtech embedded (87%)
Aggressive OS guesses: AVtech Room Alert 26W environmental monitor (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for pre.datos.gob.es (194.69.254.181)
Host is up (0.061s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open ssl/http nginx
443/tcp open ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBA8605%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,94,"HTTP/1\.1\x20401\x20Unauthorized\r\nDate:\x20Sun,\x20
SF:07\x20Oct\x202018\x2022:18:31\x20GMT\r\nContent-Length:\x200\r\nConnect
SF:ion:\x20close\r\nX-Varnish:\x20361023\r\nWWW-Authenticate:\x20Basic\r\n
SF:\r\n")%r(HTTPOptions,94,"HTTP/1\.1\x20401\x20Unauthorized\r\nDate:\x20S
SF:un,\x2007\x20Oct\x202018\x2022:18:24\x20GMT\r\nContent-Length:\x200\r\n
SF:Connection:\x20close\r\nX-Varnish:\x20394235\r\nWWW-Authenticate:\x20Ba
SF:sic\r\n\r\n")%r(FourOhFourRequest,94,"HTTP/1\.1\x20401\x20Unauthorized\
SF:r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2022:18:32\x20GMT\r\nContent-Len
SF:gth:\x200\r\nConnection:\x20close\r\nX-Varnish:\x20393725\r\nWWW-Authen
SF:ticate:\x20Basic\r\n\r\n")%r(tor-versions,122,"HTTP/1\.1\x20404\x20Not\
SF:x20Found\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2022:18:25\x20GMT\r\nCo
SF:ntent-Type:\x20text/html\r\nContent-Length:\x20162\r\nConnection:\x20cl
SF:ose\r\n\r\n<html>\r\n<head><title>404\x20Not\x20Found</title></head>\r\
SF:n<body\x20bgcolor=\"white\">\r\n<center><h1>404\x20Not\x20Found</h1></c
SF:enter>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n")%r(RTSP
SF:Request,A2,"<html>\r\n<head><title>404\x20Not\x20Found</title></head>\r
SF:\n<body\x20bgcolor=\"white\">\r\n<center><h1>404\x20Not\x20Found</h1></
SF:center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\n")%r(RPC
SF:Check,122,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Sun,\x2007\x20O
SF:ct\x202018\x2022:18:38\x20GMT\r\nContent-Type:\x20text/html\r\nContent-
SF:Length:\x20162\r\nConnection:\x20close\r\n\r\n<html>\r\n<head><title>40
SF:4\x20Not\x20Found</title></head>\r\n<body\x20bgcolor=\"white\">\r\n<cen
SF:ter><h1>404\x20Not\x20Found</h1></center>\r\n<hr><center>nginx</center>
SF:\r\n</body>\r\n</html>\r\n")%r(DNSVersionBindReqTCP,122,"HTTP/1\.1\x204
SF:04\x20Not\x20Found\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2022:18:31\x2
SF:0GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20162\r\nConnect
SF:ion:\x20close\r\n\r\n<html>\r\n<head><title>404\x20Not\x20Found</title>
SF:</head>\r\n<body\x20bgcolor=\"white\">\r\n<center><h1>404\x20Not\x20Fou
SF:nd</h1></center>\r\n<hr><center>nginx</center>\r\n</body>\r\n</html>\r\
SF:n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X (87%)
OS CPE: cpe:/o:linux:linux_kernel:4.9 cpe:/o:linux:linux_kernel:3.18
Aggressive OS guesses: Linux 4.9 (87%), Linux 3.18 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for defensa.gob.es (193.33.2.155)
Host is up (0.059s latency).
rDNS record for 193.33.2.155: IP-193-33-2-155.mde.es
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for patrimoniocultural.defensa.gob.es (217.75.231.132)
Host is up (0.059s latency).
rDNS record for 217.75.231.132: sdg-pat1.c.mad.interhost.com
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open tcpwrapped
443/tcp open tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: specialized|WAP|phone
Running: iPXE 1.X, Linux 2.4.X|2.6.X, Sony Ericsson embedded
OS CPE: cpe:/o:ipxe:ipxe:1.0.0%2b cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.6.22 cpe:/h:sonyericsson:u8i_vivaz
OS details: iPXE 1.0.0+, Tomato 1.28 (Linux 2.4.20), Tomato firmware (Linux 2.6.22), Sony Ericsson U8i Vivaz mobile phone

Nmap scan report for publicaciones.defensa.gob.es (194.140.79.54)
Host is up (0.078s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/http Apache httpd (PHP 5.5.21)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 3.X|4.X|2.6.X (87%)
OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4.4 cpe:/o:linux:linux_kernel:2.6
Aggressive OS guesses: Linux 3.10 - 3.12 (87%), Linux 4.4 (87%), Linux 4.9 (87%), Linux 2.6.18 - 2.6.22 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.defensa.gob.es (193.33.2.137)
Host is up (0.060s latency).
rDNS record for 193.33.2.137: IP-193-33-2-137.mde.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
443/tcp open https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for tecnologiaeinnovacion.defensa.gob.es (213.134.41.188)
Host is up (0.059s latency).
rDNS record for 213.134.41.188: ih-vm-dgam-web.c.mad.interhost.com
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open tcpwrapped
443/tcp open tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: specialized|WAP|phone
Running: iPXE 1.X, Linux 2.4.X|2.6.X, Sony Ericsson embedded
OS CPE: cpe:/o:ipxe:ipxe:1.0.0%2b cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.6.22 cpe:/h:sonyericsson:u8i_vivaz
OS details: iPXE 1.0.0+, Tomato 1.28 (Linux 2.4.20), Tomato firmware (Linux 2.6.22), Sony Ericsson U8i Vivaz mobile phone

Nmap scan report for extranet.dgt.gob.es (213.198.1.39)
Host is up (0.082s latency).
rDNS record for 213.198.1.39: eua1900555-vip_extranet.dgt.gob.es_nat.sys.ntt.eu
Not shown: 990 filtered ports
PORT STATE SERVICE VERSION
80/tcp closed http
443/tcp open ssl/http Apache httpd 2.2.15 ((Unix))
2000/tcp open cisco-sccp?
5060/tcp open sip?
5555/tcp closed freeciv
6100/tcp closed synchronet-db
6101/tcp closed backupexec
7443/tcp open ssl/oracleas-https?
8080/tcp closed http-proxy
8086/tcp closed d-s-n
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port7443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBA8619%P=x86_64-pc-linux-gn
SF:u%r(GetRequest,5B4,"HTTP/1\.0\x20500\x20Error\r\nContent-Type:\x20text/
SF:html;\x20charset=ISO-8859-1\r\nX-Backside-Transport:\x20FAIL\x20FAIL\r\
SF:nConnection:\x20close\r\n\r\n\n<html>\n<head>\n<meta\x20content=\"text/
SF:html;\x20charset=ISO-8859-1\"\x20http-equiv=\"Content-Type\">\n\n<title
SF:\x20xmlns:dpconfig=\"http://www\.datapower\.com/param/config\">Se\x20ha
SF:\x20producido\x20un\x20error\x20al\x20procesar\x20su\x20solicitud</titl
SF:e>\n<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html;\x20cha
SF:rset=ISO-8859-1\">\n<link\x20href=\"https://sedeapl\.dgt\.gob\.es:7443/
SF:DPOW/images/iconos/logoDGT\.ico\"\x20rel=\"shortcut\x20icon\"\x20type=\
SF:"text/css\">\n<link\x20href=\"https://sedeapl\.dgt\.gob\.es:7443/DPOW/c
SF:ss/estilosComObl\.css\"\x20rel=\"stylesheet\"\x20type=\"text/css\">\n<l
SF:ink\x20href=\"https://sedeapl\.dgt\.gob\.es:7443/DPOW/css/estilosComOpc
SF:\.css\"\x20rel=\"stylesheet\"\x20type=\"text/css\">\n<link\x20href=\"ht
SF:tps://sedeapl\.dgt\.gob\.es:7443/DPOW/css/estiloPropio\.css\"\x20rel=\"
SF:stylesheet\"\x20type=\"text/css\"></head>\n<body\x20id=\"bodyPrincipal\
SF:">\n<div\x20id=\"alinedoIzquierda\"><img\x20id=\"")%r(HTTPOptions,56D,"
SF:HTTP/1\.0\x20500\x20Error\r\nContent-Type:\x20text/html;\x20charset=ISO
SF:-8859-1\r\nX-Backside-Transport:\x20FAIL\x20FAIL\r\nConnection:\x20clos
SF:e\r\n\r\n\n<html>\n<head>\n<meta\x20content=\"text/html;\x20charset=ISO
SF:-8859-1\"\x20http-equiv=\"Content-Type\">\n\n<title\x20xmlns:dpconfig=\
SF:"http://www\.datapower\.com/param/config\">Se\x20ha\x20producido\x20un\
SF:x20error\x20al\x20procesar\x20su\x20solicitud</title>\n<meta\x20http-eq
SF:uiv=\"Content-Type\"\x20content=\"text/html;\x20charset=ISO-8859-1\">\n
SF:<link\x20href=\"https://sedeapl\.dgt\.gob\.es:7443/DPOW/images/iconos/l
SF:ogoDGT\.ico\"\x20rel=\"shortcut\x20icon\"\x20type=\"text/css\">\n<link\
SF:x20href=\"https://sedeapl\.dgt\.gob\.es:7443/DPOW/css/estilosComObl\.cs
SF:s\"\x20rel=\"stylesheet\"\x20type=\"text/css\">\n<link\x20href=\"https:
SF://sedeapl\.dgt\.gob\.es:7443/DPOW/css/estilosComOpc\.css\"\x20rel=\"sty
SF:lesheet\"\x20type=\"text/css\">\n<link\x20href=\"https://sedeapl\.dgt\.
SF:gob\.es:7443/DPOW/css/estiloPropio\.css\"\x20rel=\"stylesheet\"\x20type
SF:=\"text/css\"></head>\n<body\x20id=\"bodyPrincipal\">\n<div\x20id=\"ali
SF:nedoIzquierda\"><img\x20id=\"");
Device type: load balancer|general purpose|specialized
Running (JUST GUESSING): Citrix embedded (95%), OpenBSD 4.X (87%), AVtech embedded (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: Citrix NetScaler load balancer (95%), OpenBSD 4.0 (87%), Citrix NetScaler VPX load balancer (87%), AVtech Room Alert 26W environmental monitor (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for pasarela.dgt.gob.es (213.198.1.42)
Host is up (0.082s latency).
rDNS record for 213.198.1.42: eua1900555-vip_pasarela.dgt.gob.es_nat.sys.ntt.eu
Not shown: 990 filtered ports
PORT STATE SERVICE VERSION
80/tcp closed http
443/tcp open ssl/https
2000/tcp open cisco-sccp?
5060/tcp open sip?
5555/tcp closed freeciv
6100/tcp closed synchronet-db
6101/tcp closed backupexec
7443/tcp closed oracleas-https
8080/tcp closed http-proxy
8086/tcp closed d-s-n
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBA861F%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,5B4,"HTTP/1\.0\x20500\x20Error\r\nContent-Type:\x20text/h
SF:tml;\x20charset=ISO-8859-1\r\nX-Backside-Transport:\x20FAIL\x20FAIL\r\n
SF:Connection:\x20close\r\n\r\n\n<html>\n<head>\n<meta\x20content=\"text/h
SF:tml;\x20charset=ISO-8859-1\"\x20http-equiv=\"Content-Type\">\n\n<title\
SF:x20xmlns:dpconfig=\"http://www\.datapower\.com/param/config\">Se\x20ha\
SF:x20producido\x20un\x20error\x20al\x20procesar\x20su\x20solicitud</title
SF:>\n<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html;\x20char
SF:set=ISO-8859-1\">\n<link\x20href=\"https://sedeapl\.dgt\.gob\.es:7443/D
SF:POW/images/iconos/logoDGT\.ico\"\x20rel=\"shortcut\x20icon\"\x20type=\"
SF:text/css\">\n<link\x20href=\"https://sedeapl\.dgt\.gob\.es:7443/DPOW/cs
SF:s/estilosComObl\.css\"\x20rel=\"stylesheet\"\x20type=\"text/css\">\n<li
SF:nk\x20href=\"https://sedeapl\.dgt\.gob\.es:7443/DPOW/css/estilosComOpc\
SF:.css\"\x20rel=\"stylesheet\"\x20type=\"text/css\">\n<link\x20href=\"htt
SF:ps://sedeapl\.dgt\.gob\.es:7443/DPOW/css/estiloPropio\.css\"\x20rel=\"s
SF:tylesheet\"\x20type=\"text/css\"></head>\n<body\x20id=\"bodyPrincipal\"
SF:>\n<div\x20id=\"alinedoIzquierda\"><img\x20id=\"")%r(HTTPOptions,56D,"H
SF:TTP/1\.0\x20500\x20Error\r\nContent-Type:\x20text/html;\x20charset=ISO-
SF:8859-1\r\nX-Backside-Transport:\x20FAIL\x20FAIL\r\nConnection:\x20close
SF:\r\n\r\n\n<html>\n<head>\n<meta\x20content=\"text/html;\x20charset=ISO-
SF:8859-1\"\x20http-equiv=\"Content-Type\">\n\n<title\x20xmlns:dpconfig=\"
SF:http://www\.datapower\.com/param/config\">Se\x20ha\x20producido\x20un\x
SF:20error\x20al\x20procesar\x20su\x20solicitud</title>\n<meta\x20http-equ
SF:iv=\"Content-Type\"\x20content=\"text/html;\x20charset=ISO-8859-1\">\n<
SF:link\x20href=\"https://sedeapl\.dgt\.gob\.es:7443/DPOW/images/iconos/lo
SF:goDGT\.ico\"\x20rel=\"shortcut\x20icon\"\x20type=\"text/css\">\n<link\x
SF:20href=\"https://sedeapl\.dgt\.gob\.es:7443/DPOW/css/estilosComObl\.css
SF:\"\x20rel=\"stylesheet\"\x20type=\"text/css\">\n<link\x20href=\"https:/
SF:/sedeapl\.dgt\.gob\.es:7443/DPOW/css/estilosComOpc\.css\"\x20rel=\"styl
SF:esheet\"\x20type=\"text/css\">\n<link\x20href=\"https://sedeapl\.dgt\.g
SF:ob\.es:7443/DPOW/css/estiloPropio\.css\"\x20rel=\"stylesheet\"\x20type=
SF:\"text/css\"></head>\n<body\x20id=\"bodyPrincipal\">\n<div\x20id=\"alin
SF:edoIzquierda\"><img\x20id=\"");
Device type: load balancer|general purpose|specialized
Running (JUST GUESSING): Citrix embedded (94%), OpenBSD 4.X (87%), AVtech embedded (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: Citrix NetScaler load balancer (94%), OpenBSD 4.0 (87%), Citrix NetScaler VPX load balancer (87%), AVtech Room Alert 26W environmental monitor (86%), OpenBSD 4.3 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.dgt.gob.es (213.198.1.38)
Host is up (0.082s latency).
rDNS record for 213.198.1.38: eua1900555-vip_sede.dgt.gob.es_nat.sys.ntt.eu
Not shown: 990 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.15 ((Unix))
443/tcp open ssl/http Apache httpd 2.2.15 ((Unix))
2000/tcp open cisco-sccp?
5060/tcp open sip?
5555/tcp closed freeciv
6100/tcp closed synchronet-db
6101/tcp closed backupexec
7443/tcp closed oracleas-https
8080/tcp closed http-proxy
8086/tcp closed d-s-n
Device type: load balancer|general purpose|specialized
Running (JUST GUESSING): Citrix embedded (94%), OpenBSD 4.X (87%), AVtech embedded (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: Citrix NetScaler load balancer (94%), OpenBSD 4.0 (87%), Citrix NetScaler VPX load balancer (87%), AVtech Room Alert 26W environmental monitor (86%), OpenBSD 4.3 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sedeapl.dgt.gob.es (213.198.1.40)
Host is up (0.082s latency).
rDNS record for 213.198.1.40: eua1900555-vip_sedeapl.dgt.gob.es_nat.sys.ntt.eu
Not shown: 990 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Fortinet FortiGate 50B or FortiWifi 60C or 80C firewall http config
443/tcp open ssl/http Fortinet FortiGate 50B or FortiWifi 60C or 80C firewall http config
2000/tcp open cisco-sccp?
5060/tcp open sip?
5555/tcp open ssl/freeciv?
6100/tcp open synchronet-db?
6101/tcp open backupexec?
7443/tcp open ssl/oracleas-https?
8080/tcp open ssl/http-proxy
8086/tcp closed d-s-n
4 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port6100-TCP:V=7.70%I=7%D=10/8%Time=5BBA865C%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,157,"HTTP/1\.0\x20200\x20OK\r\nServer:\x20\r\nConnection:\x20c
SF:lose\r\nContent-type:\x20text/html\r\nX-Content-Type-Options:\x20nosnif
SF:f\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IETF//DTD\x20HTML\x202\.0/
SF:/EN\">\n<HTML><HEAD><meta\x20http-equiv=\"X-UA-Compatible\"\x20content=
SF:\"IE=8\"\x20/>\n<TITLE>/</TITLE>\n</HEAD><BODY>\n<H1>Index\x20of\x20/</
SF:H1>\n<PRE>\n</PRE><HR>\n<ADDRESS>\x20at\x20XI52\x20Port\x206100</ADDRES
SF:S>\n</BODY></HTML>\n")%r(HTTPOptions,219,"HTTP/1\.0\x20400\x20Bad\x20Re
SF:quest\r\nServer:\x20\r\nConnection:\x20close\r\nContent-type:\x20text/h
SF:tml\r\nX-Content-Type-Options:\x20nosniff\r\n\r\n<!DOCTYPE\x20html\x20P
SF:UBLIC\x20\"-//W3C//DTD\x20XHTML\x201\.0\x20Transitional//EN\"\x20\"http
SF:://www\.w3\.org/TR/xhtml1/DTD/xhtml1-transitional\.dtd\">\n<html\x20xml
SF:ns=\"http://www\.w3\.org/1999/xhtml\"\x20xml:lang=\"en\"\x20lang=\"en\"
SF:><head><meta\x20http-equiv=\"X-UA-Compatible\"\x20content=\"IE=8\"\x20/
SF:>\n<title>400\x20Bad\x20Request</title>\n</head><body>\n<h1>Bad\x20Requ
SF:est</h1>\nThe\x20requested\x20URL\x20\(unavailable\)\x20was\x20a\x20bad
SF:\x20request\.<P>\n<hr/>\n<ADDRESS>\x20at\x200\x20Port\x2080</ADDRESS>\n
SF:</body></html>\n")%r(FourOhFourRequest,22B,"HTTP/1\.0\x20404\x20Not\x20
SF:Found\r\nServer:\x20\r\nConnection:\x20close\r\nContent-type:\x20text/h
SF:tml\r\nX-Content-Type-Options:\x20nosniff\r\n\r\n<!DOCTYPE\x20html\x20P
SF:UBLIC\x20\"-//W3C//DTD\x20XHTML\x201\.0\x20Transitional//EN\"\x20\"http
SF:://www\.w3\.org/TR/xhtml1/DTD/xhtml1-transitional\.dtd\">\n<html\x20xml
SF:ns=\"http://www\.w3\.org/1999/xhtml\"\x20xml:lang=\"en\"\x20lang=\"en\"
SF:><head><meta\x20http-equiv=\"X-UA-Compatible\"\x20content=\"IE=8\"\x20/
SF:>\n<title>404\x20Not\x20Found</title>\n</head><body>\n<h1>Not\x20Found<
SF:/h1>\nThe\x20requested\x20URL\x20/nice%20ports%2C/Tri%6Eity\.txt%2ebak\
SF:x20was\x20not\x20found\.<P>\n<hr/>\n<ADDRESS>\x20at\x20XI52\x20Port\x20
SF:6100</ADDRESS>\n</body></html>\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port6101-TCP:V=7.70%I=7%D=10/8%Time=5BBA8662%P=x86_64-pc-linux-gnu%r(Ge
SF:tRequest,157,"HTTP/1\.0\x20200\x20OK\r\nServer:\x20\r\nConnection:\x20c
SF:lose\r\nContent-type:\x20text/html\r\nX-Content-Type-Options:\x20nosnif
SF:f\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IETF//DTD\x20HTML\x202\.0/
SF:/EN\">\n<HTML><HEAD><meta\x20http-equiv=\"X-UA-Compatible\"\x20content=
SF:\"IE=8\"\x20/>\n<TITLE>/</TITLE>\n</HEAD><BODY>\n<H1>Index\x20of\x20/</
SF:H1>\n<PRE>\n</PRE><HR>\n<ADDRESS>\x20at\x20XI52\x20Port\x206101</ADDRES
SF:S>\n</BODY></HTML>\n")%r(HTTPOptions,219,"HTTP/1\.0\x20400\x20Bad\x20Re
SF:quest\r\nServer:\x20\r\nConnection:\x20close\r\nContent-type:\x20text/h
SF:tml\r\nX-Content-Type-Options:\x20nosniff\r\n\r\n<!DOCTYPE\x20html\x20P
SF:UBLIC\x20\"-//W3C//DTD\x20XHTML\x201\.0\x20Transitional//EN\"\x20\"http
SF:://www\.w3\.org/TR/xhtml1/DTD/xhtml1-transitional\.dtd\">\n<html\x20xml
SF:ns=\"http://www\.w3\.org/1999/xhtml\"\x20xml:lang=\"en\"\x20lang=\"en\"
SF:><head><meta\x20http-equiv=\"X-UA-Compatible\"\x20content=\"IE=8\"\x20/
SF:>\n<title>400\x20Bad\x20Request</title>\n</head><body>\n<h1>Bad\x20Requ
SF:est</h1>\nThe\x20requested\x20URL\x20\(unavailable\)\x20was\x20a\x20bad
SF:\x20request\.<P>\n<hr/>\n<ADDRESS>\x20at\x200\x20Port\x2080</ADDRESS>\n
SF:</body></html>\n")%r(FourOhFourRequest,22B,"HTTP/1\.0\x20404\x20Not\x20
SF:Found\r\nServer:\x20\r\nConnection:\x20close\r\nContent-type:\x20text/h
SF:tml\r\nX-Content-Type-Options:\x20nosniff\r\n\r\n<!DOCTYPE\x20html\x20P
SF:UBLIC\x20\"-//W3C//DTD\x20XHTML\x201\.0\x20Transitional//EN\"\x20\"http
SF:://www\.w3\.org/TR/xhtml1/DTD/xhtml1-transitional\.dtd\">\n<html\x20xml
SF:ns=\"http://www\.w3\.org/1999/xhtml\"\x20xml:lang=\"en\"\x20lang=\"en\"
SF:><head><meta\x20http-equiv=\"X-UA-Compatible\"\x20content=\"IE=8\"\x20/
SF:>\n<title>404\x20Not\x20Found</title>\n</head><body>\n<h1>Not\x20Found<
SF:/h1>\nThe\x20requested\x20URL\x20/nice%20ports%2C/Tri%6Eity\.txt%2ebak\
SF:x20was\x20not\x20found\.<P>\n<hr/>\n<ADDRESS>\x20at\x20XI52\x20Port\x20
SF:6101</ADDRESS>\n</body></html>\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port7443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBA8672%P=x86_64-pc-linux-gn
SF:u%r(GetRequest,5B4,"HTTP/1\.0\x20500\x20Error\r\nContent-Type:\x20text/
SF:html;\x20charset=ISO-8859-1\r\nX-Backside-Transport:\x20FAIL\x20FAIL\r\
SF:nConnection:\x20close\r\n\r\n\n<html>\n<head>\n<meta\x20content=\"text/
SF:html;\x20charset=ISO-8859-1\"\x20http-equiv=\"Content-Type\">\n\n<title
SF:\x20xmlns:dpconfig=\"http://www\.datapower\.com/param/config\">Se\x20ha
SF:\x20producido\x20un\x20error\x20al\x20procesar\x20su\x20solicitud</titl
SF:e>\n<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html;\x20cha
SF:rset=ISO-8859-1\">\n<link\x20href=\"https://sedeapl\.dgt\.gob\.es:7443/
SF:DPOW/images/iconos/logoDGT\.ico\"\x20rel=\"shortcut\x20icon\"\x20type=\
SF:"text/css\">\n<link\x20href=\"https://sedeapl\.dgt\.gob\.es:7443/DPOW/c
SF:ss/estilosComObl\.css\"\x20rel=\"stylesheet\"\x20type=\"text/css\">\n<l
SF:ink\x20href=\"https://sedeapl\.dgt\.gob\.es:7443/DPOW/css/estilosComOpc
SF:\.css\"\x20rel=\"stylesheet\"\x20type=\"text/css\">\n<link\x20href=\"ht
SF:tps://sedeapl\.dgt\.gob\.es:7443/DPOW/css/estiloPropio\.css\"\x20rel=\"
SF:stylesheet\"\x20type=\"text/css\"></head>\n<body\x20id=\"bodyPrincipal\
SF:">\n<div\x20id=\"alinedoIzquierda\"><img\x20id=\"")%r(HTTPOptions,56D,"
SF:HTTP/1\.0\x20500\x20Error\r\nContent-Type:\x20text/html;\x20charset=ISO
SF:-8859-1\r\nX-Backside-Transport:\x20FAIL\x20FAIL\r\nConnection:\x20clos
SF:e\r\n\r\n\n<html>\n<head>\n<meta\x20content=\"text/html;\x20charset=ISO
SF:-8859-1\"\x20http-equiv=\"Content-Type\">\n\n<title\x20xmlns:dpconfig=\
SF:"http://www\.datapower\.com/param/config\">Se\x20ha\x20producido\x20un\
SF:x20error\x20al\x20procesar\x20su\x20solicitud</title>\n<meta\x20http-eq
SF:uiv=\"Content-Type\"\x20content=\"text/html;\x20charset=ISO-8859-1\">\n
SF:<link\x20href=\"https://sedeapl\.dgt\.gob\.es:7443/DPOW/images/iconos/l
SF:ogoDGT\.ico\"\x20rel=\"shortcut\x20icon\"\x20type=\"text/css\">\n<link\
SF:x20href=\"https://sedeapl\.dgt\.gob\.es:7443/DPOW/css/estilosComObl\.cs
SF:s\"\x20rel=\"stylesheet\"\x20type=\"text/css\">\n<link\x20href=\"https:
SF://sedeapl\.dgt\.gob\.es:7443/DPOW/css/estilosComOpc\.css\"\x20rel=\"sty
SF:lesheet\"\x20type=\"text/css\">\n<link\x20href=\"https://sedeapl\.dgt\.
SF:gob\.es:7443/DPOW/css/estiloPropio\.css\"\x20rel=\"stylesheet\"\x20type
SF:=\"text/css\"></head>\n<body\x20id=\"bodyPrincipal\">\n<div\x20id=\"ali
SF:nedoIzquierda\"><img\x20id=\"");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port8080-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBA8684%P=x86_64-pc-linux-gn
SF:u%r(GetRequest,14A,"HTTP/1\.0\x20500\x20Error\r\nX-Backside-Transport:\
SF:x20FAIL\x20FAIL\r\nContent-Type:\x20text/xml\r\nConnection:\x20close\r\
SF:n\r\n<\?xml\x20version='1\.0'\x20\?>\n<env:Envelope\x20xmlns:env='http:
SF://schemas\.xmlsoap\.org/soap/envelope/'>\n<env:Body>\n<env:Fault>\n<fau
SF:ltcode>env:Client</faultcode>\n<faultstring>Internal\x20Error</faultstr
SF:ing>\n</env:Fault>\n</env:Body>\n</env:Envelope>\n")%r(HTTPOptions,14A,
SF:"HTTP/1\.0\x20500\x20Error\r\nX-Backside-Transport:\x20FAIL\x20FAIL\r\n
SF:Content-Type:\x20text/xml\r\nConnection:\x20close\r\n\r\n<\?xml\x20vers
SF:ion='1\.0'\x20\?>\n<env:Envelope\x20xmlns:env='http://schemas\.xmlsoap\
SF:.org/soap/envelope/'>\n<env:Body>\n<env:Fault>\n<faultcode>env:Client</
SF:faultcode>\n<faultstring>Internal\x20Error</faultstring>\n</env:Fault>\
SF:n</env:Body>\n</env:Envelope>\n")%r(RTSPRequest,62,"HTTP/1\.1\x20505\x2
SF:0Error\r\nX-Backside-Transport:\x20FAIL\x20FAIL\r\nContent-Type:\x20tex
SF:t/xml\r\nConnection:\x20close\r\n\r\n")%r(SSLSessionReq,62,"HTTP/1\.1\x
SF:20500\x20Error\r\nX-Backside-Transport:\x20FAIL\x20FAIL\r\nContent-Type
SF::\x20text/xml\r\nConnection:\x20close\r\n\r\n")%r(TLSSessionReq,62,"HTT
SF:P/1\.1\x20500\x20Error\r\nX-Backside-Transport:\x20FAIL\x20FAIL\r\nCont
SF:ent-Type:\x20text/xml\r\nConnection:\x20close\r\n\r\n")%r(Kerberos,62,"
SF:HTTP/1\.1\x20500\x20Error\r\nX-Backside-Transport:\x20FAIL\x20FAIL\r\nC
SF:ontent-Type:\x20text/xml\r\nConnection:\x20close\r\n\r\n")%r(SMBProgNeg
SF:,62,"HTTP/1\.1\x20500\x20Error\r\nX-Backside-Transport:\x20FAIL\x20FAIL
SF:\r\nContent-Type:\x20text/xml\r\nConnection:\x20close\r\n\r\n")%r(FourO
SF:hFourRequest,14A,"HTTP/1\.0\x20500\x20Error\r\nX-Backside-Transport:\x2
SF:0FAIL\x20FAIL\r\nContent-Type:\x20text/xml\r\nConnection:\x20close\r\n\
SF:r\n<\?xml\x20version='1\.0'\x20\?>\n<env:Envelope\x20xmlns:env='http://
SF:schemas\.xmlsoap\.org/soap/envelope/'>\n<env:Body>\n<env:Fault>\n<fault
SF:code>env:Client</faultcode>\n<faultstring>Internal\x20Error</faultstrin
SF:g>\n</env:Fault>\n</env:Body>\n</env:Envelope>\n")%r(LPDString,62,"HTTP
SF:/1\.1\x20500\x20Error\r\nX-Backside-Transport:\x20FAIL\x20FAIL\r\nConte
SF:nt-Type:\x20text/xml\r\nConnection:\x20close\r\n\r\n");
Device type: load balancer|general purpose|specialized
Running (JUST GUESSING): Citrix embedded (95%), OpenBSD 4.X (87%), AVtech embedded (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: Citrix NetScaler load balancer (95%), Citrix NetScaler VPX load balancer (88%), OpenBSD 4.0 (87%), AVtech Room Alert 26W environmental monitor (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: FortiOS; Device: firewall; CPE: cpe:/h:fortinet:fortiwifi:80c

Nmap scan report for sedecr.dgt.gob.es (213.198.1.43)
Host is up (0.082s latency).
rDNS record for 213.198.1.43: eua1900555-vip_sedecr.dgt.gob.es_nat.sys.ntt.eu
Not shown: 990 filtered ports
PORT STATE SERVICE VERSION
80/tcp closed http
443/tcp open ssl/https
2000/tcp open cisco-sccp?
5060/tcp open sip?
5555/tcp closed freeciv
6100/tcp closed synchronet-db
6101/tcp closed backupexec
7443/tcp closed oracleas-https
8080/tcp closed http-proxy
8086/tcp closed d-s-n
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBA867E%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,1EC,"HTTP/1\.1\x20302\x20Found\r\nDate:\x20Sun,\x2007\x20
SF:Oct\x202018\x2022:19:42\x20GMT\r\nLocation:\x20https://sedeapl\.dgt\.go
SF:b\.es/Forbidden\.html\r\nContent-Length:\x20295\r\nConnection:\x20close
SF:\r\nContent-Type:\x20text/html;\x20charset=iso-8859-1\r\n\r\n<!DOCTYPE\
SF:x20HTML\x20PUBLIC\x20\"-//IETF//DTD\x20HTML\x202\.0//EN\">\n<html><head
SF:>\n<title>302\x20Found</title>\n</head><body>\n<h1>Found</h1>\n<p>The\x
SF:20document\x20has\x20moved\x20<a\x20href=\"https://sedeapl\.dgt\.gob\.e
SF:s/Forbidden\.html\">here</a>\.</p>\n<hr>\n<address>IBM_HTTP_Server\x20a
SF:t\x20sedecr\.dgt\.gob\.es\x20Port\x20443</address>\n</body></html>\n")%
SF:r(HTTPOptions,1EC,"HTTP/1\.1\x20302\x20Found\r\nDate:\x20Sun,\x2007\x20
SF:Oct\x202018\x2022:19:43\x20GMT\r\nLocation:\x20https://sedeapl\.dgt\.go
SF:b\.es/Forbidden\.html\r\nContent-Length:\x20295\r\nConnection:\x20close
SF:\r\nContent-Type:\x20text/html;\x20charset=iso-8859-1\r\n\r\n<!DOCTYPE\
SF:x20HTML\x20PUBLIC\x20\"-//IETF//DTD\x20HTML\x202\.0//EN\">\n<html><head
SF:>\n<title>302\x20Found</title>\n</head><body>\n<h1>Found</h1>\n<p>The\x
SF:20document\x20has\x20moved\x20<a\x20href=\"https://sedeapl\.dgt\.gob\.e
SF:s/Forbidden\.html\">here</a>\.</p>\n<hr>\n<address>IBM_HTTP_Server\x20a
SF:t\x20sedecr\.dgt\.gob\.es\x20Port\x20443</address>\n</body></html>\n")%
SF:r(FourOhFourRequest,1EC,"HTTP/1\.1\x20302\x20Found\r\nDate:\x20Sun,\x20
SF:07\x20Oct\x202018\x2022:19:43\x20GMT\r\nLocation:\x20https://sedeapl\.d
SF:gt\.gob\.es/Forbidden\.html\r\nContent-Length:\x20295\r\nConnection:\x2
SF:0close\r\nContent-Type:\x20text/html;\x20charset=iso-8859-1\r\n\r\n<!DO
SF:CTYPE\x20HTML\x20PUBLIC\x20\"-//IETF//DTD\x20HTML\x202\.0//EN\">\n<html
SF:><head>\n<title>302\x20Found</title>\n</head><body>\n<h1>Found</h1>\n<p
SF:>The\x20document\x20has\x20moved\x20<a\x20href=\"https://sedeapl\.dgt\.
SF:gob\.es/Forbidden\.html\">here</a>\.</p>\n<hr>\n<address>IBM_HTTP_Serve
SF:r\x20at\x20sedecr\.dgt\.gob\.es\x20Port\x20443</address>\n</body></html
SF:>\n")%r(RTSPRequest,1BE,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x2
SF:0Sun,\x2007\x20Oct\x202018\x2022:19:54\x20GMT\r\nContent-Length:\x20296
SF:\r\nConnection:\x20close\r\nContent-Type:\x20text/html;\x20charset=iso-
SF:8859-1\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IETF//DTD\x20HTML\x20
SF:2\.0//EN\">\n<html><head>\n<title>400\x20Bad\x20Request</title>\n</head
SF:><body>\n<h1>Bad\x20Request</h1>\n<p>Your\x20browser\x20sent\x20a\x20re
SF:quest\x20that\x20this\x20server\x20could\x20not\x20understand\.<br\x20/
SF:>\n</p>\n<hr>\n<address>IBM_HTTP_Server\x20at\x20sedecr\.dgt\.gob\.es\x
SF:20Port\x20443</address>\n</body></html>\n");
Device type: load balancer|general purpose|specialized
Running (JUST GUESSING): Citrix embedded (94%), OpenBSD 4.X (87%), AVtech embedded (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: Citrix NetScaler load balancer (94%), OpenBSD 4.0 (87%), Citrix NetScaler VPX load balancer (87%), AVtech Room Alert 26W environmental monitor (86%), OpenBSD 4.3 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.diputaciondesalamanca.gob.es (194.224.128.4)
Host is up (0.069s latency).
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.17 ((Win32) mod_jk/1.2.26 mod_ssl/2.2.17 OpenSSL/0.9.8o PHP/5.2.8)
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
8008/tcp open http Fortinet FortiGuard block page
8010/tcp open ssl/http-proxy FortiGate Web Filtering Service
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: WAP
Running (JUST GUESSING): Linux 2.4.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.4.20
Aggressive OS guesses: Tomato 1.27 - 1.28 (Linux 2.4.20) (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: security-misc

Nmap scan report for dire.gob.es (185.73.172.74)
Host is up (0.060s latency).
rDNS record for 185.73.172.74: 74.red-185-73-172.customer.static.ccgg.telefonica.net
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 5.0
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 5.0
2000/tcp open cisco-sccp?
5060/tcp open sip?
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%), OpenBSD 4.3 (88%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for www.dire.gob.es (185.73.172.75)
Host is up (0.059s latency).
rDNS record for 185.73.172.75: 75.red-185-73-172.customer.static.ccgg.telefonica.net
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 5.0
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 5.0
2000/tcp open cisco-sccp?
5060/tcp open sip?
OS fingerprint not ideal because: maxTimingRatio (6.112000e+00) is greater than 1.4
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for www.dsn.gob.es (212.128.109.10)
Host is up (0.061s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBA86A3%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,C3,"HTTP/1\.1\x20403\x20Forbidden\r\nContent-Length:\x20148\r\n\
SF:r\n<html><title>Request\x20Denied!</title><body><center><h1>Request\x20
SF:Denied!</h1><p>If\x20you\x20have\x20any\x20questions\x20contact\x20the\
SF:x20admin\.</p></center></body></html>")%r(HTTPOptions,C3,"HTTP/1\.1\x20
SF:403\x20Forbidden\r\nContent-Length:\x20148\r\n\r\n<html><title>Request\
SF:x20Denied!</title><body><center><h1>Request\x20Denied!</h1><p>If\x20you
SF:\x20have\x20any\x20questions\x20contact\x20the\x20admin\.</p></center><
SF:/body></html>")%r(FourOhFourRequest,C3,"HTTP/1\.1\x20403\x20Forbidden\r
SF:\nContent-Length:\x20148\r\n\r\n<html><title>Request\x20Denied!</title>
SF:<body><center><h1>Request\x20Denied!</h1><p>If\x20you\x20have\x20any\x2
SF:0questions\x20contact\x20the\x20admin\.</p></center></body></html>");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: specialized
Running (JUST GUESSING): AVtech embedded (85%)
Aggressive OS guesses: AVtech Room Alert 26W environmental monitor (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for av.dsn.gob.es (212.128.110.223)
Host is up (0.059s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
8010/tcp closed xmpp
Too many fingerprints match this host to give specific OS details

Nmap scan report for lyncmeet.dsn.gob.es (212.128.110.222)
Host is up (0.059s latency).
rDNS record for 212.128.110.222: extlync.dsn.gob.es
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
113/tcp closed ident
8010/tcp closed xmpp
Device type: firewall|specialized|general purpose
Running (JUST GUESSING): Fortinet embedded (91%), AVtech embedded (89%), Linux 2.6.X (88%)
OS CPE: cpe:/h:fortinet:fortigate_100d cpe:/o:linux:linux_kernel:2.6
Aggressive OS guesses: Fortinet FortiGate 100D firewall (91%), Fortinet FortiGate-50B or 310B firewall (90%), AVtech Room Alert 26W environmental monitor (89%), Linux 2.6.18 - 2.6.22 (88%), Fortinet FortiGate 1500D firewall (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for portal.dsn.gob.es (212.128.110.240)
Host is up (0.061s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
113/tcp closed ident
8010/tcp closed xmpp
Device type: firewall|general purpose|specialized
Running (JUST GUESSING): Fortinet embedded (91%), Linux 2.6.X (88%), AVtech embedded (87%)
OS CPE: cpe:/h:fortinet:fortigate_100d cpe:/o:linux:linux_kernel:2.6
Aggressive OS guesses: Fortinet FortiGate 100D firewall (91%), Fortinet FortiGate-50B or 310B firewall (90%), Linux 2.6.18 - 2.6.22 (88%), AVtech Room Alert 26W environmental monitor (87%), Fortinet FortiGate 1500D firewall (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sip.dsn.gob.es (212.128.110.224)
Host is up (0.062s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
8010/tcp closed xmpp
Too many fingerprints match this host to give specific OS details

Nmap scan report for webcon.dsn.gob.es (212.128.110.225)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
8010/tcp closed xmpp
Too many fingerprints match this host to give specific OS details

Nmap scan report for educacion.gob.es (212.128.114.112)
Host is up (0.061s latency).
rDNS record for 212.128.114.112: 112.red-212-128-114.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
113/tcp closed ident
443/tcp open ssl/https?
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for sede.educacion.gob.es (212.128.114.87)
Host is up (0.060s latency).
rDNS record for 212.128.114.87: 87.red-212-128-114.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
113/tcp closed ident
443/tcp open ssl/http Apache Tomcat/Coyote JSP engine 1.1
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for www2.educacion.gob.es (213.229.186.82)
Host is up (0.094s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open tcpwrapped
443/tcp open tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: specialized|WAP|phone
Running: iPXE 1.X, Linux 2.4.X|2.6.X, Sony Ericsson embedded
OS CPE: cpe:/o:ipxe:ipxe:1.0.0%2b cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.6.22 cpe:/h:sonyericsson:u8i_vivaz
OS details: iPXE 1.0.0+, Tomato 1.28 (Linux 2.4.20), Tomato firmware (Linux 2.6.22), Sony Ericsson U8i Vivaz mobile phone

Nmap scan report for empleate.gob.es (195.57.139.183)
Host is up (0.061s latency).
rDNS record for 195.57.139.183: 183.red-195-57-139.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http
113/tcp closed ident
443/tcp open ssl/https Servidor Web 1.0
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBA86CA%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,8A,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nLocation:\x20htt
SF:ps://empleate\.gob\.es/empleo/#/\r\nContent-Length:\x200\r\nContent-Typ
SF:e:\x20text/html;\x20charset=UTF-8\r\n\r\n")%r(HTTPOptions,8A,"HTTP/1\.1
SF:\x20301\x20Moved\x20Permanently\r\nLocation:\x20https://empleate\.gob\.
SF:es/empleo/#/\r\nContent-Length:\x200\r\nContent-Type:\x20text/html;\x20
SF:charset=UTF-8\r\n\r\n")%r(FourOhFourRequest,8A,"HTTP/1\.1\x20301\x20Mov
SF:ed\x20Permanently\r\nLocation:\x20https://empleate\.gob\.es/empleo/#/\r
SF:\nContent-Length:\x200\r\nContent-Type:\x20text/html;\x20charset=UTF-8\
SF:r\n\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBA86D0%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,B8,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServer:\x
SF:20Servidor\x20Web\x201\.0\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2022:2
SF:1:04\x20GMT\r\nLocation:\x20https://www\.empleate\.gob\.es/empleo/#/\r\
SF:nContent-length:\x200\r\nConnection:\x20close\r\n\r\n")%r(HTTPOptions,1
SF:D4,"HTTP/1\.1\x20200\x20OK\r\nServer:\x20Servidor\x20Web\x201\.0\r\nDat
SF:e:\x20Sun,\x2007\x20Oct\x202018\x2022:21:04\x20GMT\r\nAllow:\x20HEAD,\x
SF:20GET,\x20PUT,\x20POST,\x20DELETE,\x20OPTIONS,\x20MOVE,\x20INDEX,\x20MK
SF:DIR,\x20RMDIR,\x20COPY,\x20CONNECT,\x20PROPFIND,\x20PROPPATCH,\x20MKCOL
SF:,\x20LOCK,\x20UNLOCK,\x20ACL,\x20REPORT,\x20VERSION-CONTROL,\x20CHECKOU
SF:T,\x20CHECKIN,\x20UNCHECKOUT,\x20MKWORKSPACE,\x20UPDATE,\x20LABEL,\x20M
SF:ERGE,\x20BASELINE-CONTROL,\x20MKACTIVITY,\x20SEARCH,\x20SUBSCRIBE,\x20U
SF:NSUBSCRIBE,\x20NOTIFY,\x20POLL,\x20BDELETE,\x20BCOPY,\x20BMOVE,\x20BPRO
SF:PPATCH,\x20BPROPFIND\r\nContent-length:\x200\r\nConnection:\x20close\r\
SF:n\r\n")%r(FourOhFourRequest,1BE,"HTTP/1\.1\x20404\x20Not\x20found\r\nSe
SF:rver:\x20Servidor\x20Web\x201\.0\r\nDate:\x20Sun,\x2007\x20Oct\x202018\
SF:x2022:21:05\x20GMT\r\nContent-type:\x20text/html\r\nContent-length:\x20
SF:292\r\nConnection:\x20close\r\n\r\n<HEAD><META\x20HTTP-EQUIV=\"Content-
SF:Type\"\x20CONTENT=\"text/html;charset=ISO-8859-1\"><TITLE>Not\x20Found<
SF:/TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x20requested\x20object\x20
SF:does\x20not\x20exist\x20on\x20this\x20server\.\x20The\x20link\x20you\x2
SF:0followed\x20is\x20either\x20outdated,\x20inaccurate,\x20or\x20the\x20s
SF:erver\x20has\x20been\x20instructed\x20not\x20to\x20let\x20you\x20have\x
SF:20it\.\x20")%r(RTSPRequest,12F,"HTTP/1\.1\x20400\x20Bad\x20request\r\nS
SF:erver:\x20Servidor\x20Web\x201\.0\r\nDate:\x20Sun,\x2007\x20Oct\x202018
SF:\x2022:21:18\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20text/
SF:html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20request</
SF:TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20sent\x
SF:20a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</BODY>
SF:</HTML>")%r(Help,12F,"HTTP/1\.1\x20400\x20Bad\x20request\r\nServer:\x20
SF:Servidor\x20Web\x201\.0\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2022:21:
SF:34\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20text/html\r\nCo
SF:nnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20request</TITLE></HE
SF:AD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20sent\x20a\x20que
SF:ry\x20this\x20server\x20could\x20not\x20understand\.\n</BODY></HTML>");
OS fingerprint not ideal because: maxTimingRatio (6.022000e+00) is greater than 1.4
No OS matches for host

Nmap scan report for www.empleo.gob.es (54.230.14.169)
Host is up (0.087s latency).
Other addresses for www.empleo.gob.es (not scanned): 54.230.14.92 54.230.14.165 54.230.14.2
rDNS record for 54.230.14.169: server-54-230-14-169.ams1.r.cloudfront.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Amazon CloudFront httpd
443/tcp open ssl/http Amazon CloudFront httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: PBX
Running (JUST GUESSING): Vodavi embedded (87%)
OS CPE: cpe:/h:vodavi:xts-ip
Aggressive OS guesses: Vodavi XTS-IP PBX (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bibliotecavirtual.empleo.gob.es (192.148.211.33)
Host is up (0.069s latency).
rDNS record for 192.148.211.33: 33.red-192-148-211.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/http Apache httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|phone|specialized
Running (JUST GUESSING): Microsoft Windows 2008|7|Vista|Phone|8.1 (90%)
OS CPE: cpe:/o:microsoft:windows_server_2008:r2 cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows cpe:/o:microsoft:windows_8.1
Aggressive OS guesses: Microsoft Windows Server 2008 R2 or Windows 8 (90%), Microsoft Windows 7 (89%), Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (89%), Microsoft Windows Vista SP2, Windows 7 SP1, or Windows Server 2008 (89%), Microsoft Windows Server 2008 R2 SP1 (88%), Microsoft Windows 7 SP1 (88%), Microsoft Windows 8.1 Update 1 (88%), Microsoft Windows Phone 7.5 or 8.0 (88%), Microsoft Windows 7 or Windows Server 2008 R2 (87%), Microsoft Windows Server 2008 or 2008 Beta 3 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ca.empleo.gob.es (192.148.211.184)
Host is up (0.064s latency).
rDNS record for 192.148.211.184: 184.red-192-148-211.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http
443/tcp open ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBA86D2%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,1534,"HTTP/1\.1\x20200\x20OK\r\nDate:\x20Sun,\x2007\x20Oct\x2020
SF:18\x2022:23:34\x20GMT\r\nServer:\x20\x20\r\nX-Frame-Options:\x20SAMEORI
SF:GIN\r\nX-Content-Type-Options:\x20nosniff\r\nX-XSS-Protection:\x201;\x2
SF:0mode=block\r\nLast-Modified:\x20Thu,\x2002\x20Aug\x202018\x2010:33:35\
SF:x20GMT\r\nETag:\x20\"1b20-5727157f06bd6\"\r\nAccept-Ranges:\x20bytes\r\
SF:nContent-Length:\x206944\r\nCache-Control:\x20max-age=0,\x20no-cache,\x
SF:20no-store,\x20must-revalidate\r\nPragma:\x20no-cache\r\nConnection:\x2
SF:0close\r\nContent-Type:\x20text/html\r\n\r\n\n\n\n\t\x20\n\n\n\n\n\t\n\
SF:n\n\n\t\n\n\n\n\n<!DOCTYPE\x20html\x20PUBLIC\x20\"-//W3C//DTD\x20XHTML\
SF:x201\.0\x20Transitional//EN\"\x20\"http://www\.w3\.org/TR/xhtml1/DTD/xh
SF:tml1-transitional\.dtd\">\n\x20\x20<html\x20xmlns=\"http://www\.w3\.org
SF:/1999/xhtml\"\x20xml:lang=\"es\"\x20lang=\"es\">\n\x20\x20<head\x20prof
SF:ile=\"http://www\.w3\.org/2000/08/w3c-synd/#\">\n\t<meta\x20http-equiv=
SF:\"X-UA-Compatible\"\x20content=\"IE=edge\"\x20/>\n\t<meta\x20http-equiv
SF:=\"Content-Type\"\x20content=\"text/html;\x20charset=UTF-8\"\x20/>\n\t<
SF:meta\x20name=\"keywords\"\x20content=\"CA,\x20CA-MEYSS,\x20PSCM,\x20Aut
SF:oridad,\x20Certificaci&oacute;n,\x20Certificado,\x20")%r(HTTPOptions,9E
SF:E,"HTTP/1\.1\x20403\x20Forbidden\r\nDate:\x20Sun,\x2007\x20Oct\x202018\
SF:x2022:23:34\x20GMT\r\nServer:\x20\x20\r\nX-Frame-Options:\x20SAMEORIGIN
SF:\r\nX-Content-Type-Options:\x20nosniff\r\nX-XSS-Protection:\x201;\x20mo
SF:de=block\r\nLast-Modified:\x20Tue,\x2026\x20Jun\x202018\x2010:08:18\x20
SF:GMT\r\nETag:\x20\"853-56f88ad5db87a\"\r\nAccept-Ranges:\x20bytes\r\nCon
SF:tent-Length:\x202131\r\nCache-Control:\x20max-age=0,\x20no-cache,\x20no
SF:-store,\x20must-revalidate\r\nPragma:\x20no-cache\r\nConnection:\x20clo
SF:se\r\nContent-Type:\x20text/html\r\n\r\n\xef\xbb\xbf<!DOCTYPE\x20HTML\x
SF:20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01\x20Transitional//EN\"\x20\"h
SF:ttp://www\.w3c\.org/TR/1999/REC-html401-19991224/loose\.dtd\">\r\n<!DOC
SF:TYPE\x20html\x20PUBLIC\x20\"-//W3C//DTD\x20XHTML\x201\.0\x20Transitiona
SF:l//EN\"\x20\"http://www\.w3\.org/TR/xhtml1/DTD/xhtml1-transitional\.dtd
SF:\">\r\n<HTML\x20lang=\"es\"\x20lang=\"es\"\x20xml:lang=\"es\"\x20xmlns=
SF:\"http://www\.w3\.org/1999/xhtml\">\r\n<HEAD\x20profile=\"http://www\.w
SF:3\.org/2000/08/w3c-synd/#\">\r\n<META\x20content=\"IE=11\.0000\"\x20htt
SF:p-equiv=\"X-UA-Compatible\">\r\n<META\x20http-equiv=\"Content-Type\"\x2
SF:0content=\"text/");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBA86DE%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,1CB5,"HTTP/1\.1\x20200\x20OK\r\nDate:\x20Sun,\x2007\x20Oc
SF:t\x202018\x2022:23:46\x20GMT\r\nServer:\x20\x20\r\nX-Frame-Options:\x20
SF:SAMEORIGIN\r\nX-Content-Type-Options:\x20nosniff\r\nX-XSS-Protection:\x
SF:201;\x20mode=block\r\nLast-Modified:\x20Thu,\x2002\x20Aug\x202018\x2010
SF::33:35\x20GMT\r\nETag:\x20\"1b20-5727157f06bd6\"\r\nAccept-Ranges:\x20b
SF:ytes\r\nContent-Length:\x206944\r\nCache-Control:\x20max-age=0,\x20no-c
SF:ache,\x20no-store,\x20must-revalidate\r\nPragma:\x20no-cache\r\nConnect
SF:ion:\x20close\r\nContent-Type:\x20text/html\r\n\r\n\n\n\n\t\x20\n\n\n\n
SF:\n\t\n\n\n\n\t\n\n\n\n\n<!DOCTYPE\x20html\x20PUBLIC\x20\"-//W3C//DTD\x2
SF:0XHTML\x201\.0\x20Transitional//EN\"\x20\"http://www\.w3\.org/TR/xhtml1
SF:/DTD/xhtml1-transitional\.dtd\">\n\x20\x20<html\x20xmlns=\"http://www\.
SF:w3\.org/1999/xhtml\"\x20xml:lang=\"es\"\x20lang=\"es\">\n\x20\x20<head\
SF:x20profile=\"http://www\.w3\.org/2000/08/w3c-synd/#\">\n\t<meta\x20http
SF:-equiv=\"X-UA-Compatible\"\x20content=\"IE=edge\"\x20/>\n\t<meta\x20htt
SF:p-equiv=\"Content-Type\"\x20content=\"text/html;\x20charset=UTF-8\"\x20
SF:/>\n\t<meta\x20name=\"keywords\"\x20content=\"CA,\x20CA-MEYSS,\x20PSCM,
SF:\x20Autoridad,\x20Certificaci&oacute;n,\x20Certificado,\x20")%r(HTTPOpt
SF:ions,9EE,"HTTP/1\.1\x20403\x20Forbidden\r\nDate:\x20Sun,\x2007\x20Oct\x
SF:202018\x2022:23:46\x20GMT\r\nServer:\x20\x20\r\nX-Frame-Options:\x20SAM
SF:EORIGIN\r\nX-Content-Type-Options:\x20nosniff\r\nX-XSS-Protection:\x201
SF:;\x20mode=block\r\nLast-Modified:\x20Tue,\x2026\x20Jun\x202018\x2010:08
SF::18\x20GMT\r\nETag:\x20\"853-56f88ad5db87a\"\r\nAccept-Ranges:\x20bytes
SF:\r\nContent-Length:\x202131\r\nCache-Control:\x20max-age=0,\x20no-cache
SF:,\x20no-store,\x20must-revalidate\r\nPragma:\x20no-cache\r\nConnection:
SF:\x20close\r\nContent-Type:\x20text/html\r\n\r\n\xef\xbb\xbf<!DOCTYPE\x2
SF:0HTML\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01\x20Transitional//EN\"
SF:\x20\"http://www\.w3c\.org/TR/1999/REC-html401-19991224/loose\.dtd\">\r
SF:\n<!DOCTYPE\x20html\x20PUBLIC\x20\"-//W3C//DTD\x20XHTML\x201\.0\x20Tran
SF:sitional//EN\"\x20\"http://www\.w3\.org/TR/xhtml1/DTD/xhtml1-transition
SF:al\.dtd\">\r\n<HTML\x20lang=\"es\"\x20lang=\"es\"\x20xml:lang=\"es\"\x2
SF:0xmlns=\"http://www\.w3\.org/1999/xhtml\">\r\n<HEAD\x20profile=\"http:/
SF:/www\.w3\.org/2000/08/w3c-synd/#\">\r\n<META\x20content=\"IE=11\.0000\"
SF:\x20http-equiv=\"X-UA-Compatible\">\r\n<META\x20http-equiv=\"Content-Ty
SF:pe\"\x20content=\"text/");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: firewall|specialized|proxy server|general purpose
Running (JUST GUESSING): Cisco ASA 7.X|8.X (87%), AVtech embedded (86%), Blue Coat embedded (85%), OpenBSD 4.X (85%)
OS CPE: cpe:/a:cisco:adaptive_security_appliance_software:7.2 cpe:/a:cisco:adaptive_security_appliance_software:8.4 cpe:/h:bluecoat:packetshaper cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: Cisco Adaptive Security Appliance (ASA 7.2) (87%), AVtech Room Alert 26W environmental monitor (86%), Cisco Adaptive Security Appliance (ASA 8.4) (86%), Blue Coat PacketShaper appliance (85%), OpenBSD 4.0 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.ciudadaniaexterior.empleo.gob.es (54.230.14.242)
Host is up (0.087s latency).
Other addresses for www.ciudadaniaexterior.empleo.gob.es (not scanned): 54.230.14.89 54.230.14.147 54.230.14.70
rDNS record for 54.230.14.242: server-54-230-14-242.ams1.r.cloudfront.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Amazon CloudFront httpd
443/tcp open ssl/http Amazon CloudFront httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: PBX
Running (JUST GUESSING): Vodavi embedded (87%)
OS CPE: cpe:/h:vodavi:xts-ip
Aggressive OS guesses: Vodavi XTS-IP PBX (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for delta.empleo.gob.es (192.148.211.27)
Host is up (0.062s latency).
rDNS record for 192.148.211.27: webdelta.mtin.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for expinterweb.empleo.gob.es (192.148.211.182)
Host is up (0.062s latency).
rDNS record for 192.148.211.182: 182.red-192-148-211.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for extranjeros.empleo.gob.es (54.230.14.237)
Host is up (0.088s latency).
Other addresses for extranjeros.empleo.gob.es (not scanned): 54.230.14.18 54.230.14.43 54.230.14.150
rDNS record for 54.230.14.237: server-54-230-14-237.ams1.r.cloudfront.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Amazon CloudFront httpd
443/tcp open ssl/http Amazon CloudFront httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: PBX
Running (JUST GUESSING): Vodavi embedded (87%)
OS CPE: cpe:/h:vodavi:xts-ip
Aggressive OS guesses: Vodavi XTS-IP PBX (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.autocalculo.fogasa.empleo.gob.es (192.148.211.46)
Host is up (0.060s latency).
rDNS record for 192.148.211.46: 46.red-192-148-211.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.31 ((Unix) mod_ssl/2.2.31 OpenSSL/1.0.1r DAV/2 mod_auth_kerb/5.4 mod_cluster/1.2.6.Final mod_jk/1.2.30)
443/tcp open ssl/http Apache httpd 2.2.31 ((Unix) mod_ssl/2.2.31 OpenSSL/1.0.1r DAV/2 mod_auth_kerb/5.4 mod_cluster/1.2.6.Final mod_jk/1.2.30)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|WAP
Running (JUST GUESSING): Sun Solaris 10 (86%), Linux 2.4.X (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:linux:linux_kernel:2.4.20
Aggressive OS guesses: Sun Solaris 10 (86%), Sun Solaris 10 (SPARC) (86%), Tomato 1.27 - 1.28 (Linux 2.4.20) (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ftps.empleo.gob.es (192.148.211.28)
Host is up (0.059s latency).
rDNS record for 192.148.211.28: 28.red-192-148-211.customer.static.ccgg.telefonica.net
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
990/tcp open ssl/ftp Microsoft ftpd
5000/tcp closed upnp
5001/tcp closed commplex-link
Aggressive OS guesses: Microsoft Windows Server 2008 R2 SP1 (92%), Microsoft Windows Server 2008 or 2008 Beta 3 (92%), Microsoft Windows Server 2008 R2 (92%), Microsoft Windows 7 (92%), Microsoft Windows 7 SP1 or Windows Server 2008 R2 (92%), Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (92%), Microsoft Windows Vista SP2, Windows 7 SP1, or Windows Server 2008 (92%), Microsoft Windows Server 2008 (91%), Microsoft Windows Server 2008 R2 or Windows 8 (91%), Microsoft Windows 8.1 Update 1 (91%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for garantiajuvenil.empleo.gob.es (192.148.211.186)
Host is up (0.062s latency).
rDNS record for 192.148.211.186: 186.red-192-148-211.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for pregarantiajuvenil.empleo.gob.es (192.148.211.187)
Host is up (0.060s latency).
rDNS record for 192.148.211.187: 187.red-192-148-211.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for preinterweb.empleo.gob.es (192.148.211.181)
Host is up (0.061s latency).
rDNS record for 192.148.211.181: 181.red-192-148-211.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (86%), OpenBSD 4.3 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for prensa.empleo.gob.es (192.148.211.179)
Host is up (0.060s latency).
rDNS record for 192.148.211.179: 179.red-192-148-211.customer.static.ccgg.telefonica.net
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for prensaseguro.empleo.gob.es (192.148.211.45)
Host is up (0.060s latency).
rDNS record for 192.148.211.45: 45.red-192-148-211.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012 (89%)
OS CPE: cpe:/o:microsoft:windows_server_2012:r2
Aggressive OS guesses: Microsoft Windows Server 2012 or Windows Server 2012 R2 (89%), Microsoft Windows Server 2012 R2 (89%), Microsoft Windows Server 2012 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for pruebasdelta.empleo.gob.es (192.148.211.188)
Host is up (0.060s latency).
rDNS record for 192.148.211.188: 188.red-192-148-211.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for repositoriodocumental.empleo.gob.es (192.148.211.183)
Host is up (0.060s latency).
rDNS record for 192.148.211.183: 183.red-192-148-211.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: WAP|general purpose|router|phone|specialized|broadband router|printer
Running (JUST GUESSING): Linux 2.4.X|2.6.X|3.X (97%), MikroTik RouterOS 6.X (97%), Nokia Symbian OS (97%), AVtech embedded (97%), OneAccess embedded (96%), HP embedded (96%), Linksys embedded (96%), Ricoh embedded (96%)
OS CPE: cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.6 cpe:/o:linux:linux_kernel:3.2.0 cpe:/o:mikrotik:routeros:6.15 cpe:/o:nokia:symbian_os cpe:/h:oneaccess:1641 cpe:/h:hp:procurve_7102dl cpe:/h:ricoh:aficio_sp_c240sf
Aggressive OS guesses: Tomato 1.27 - 1.28 (Linux 2.4.20) (97%), Linux 2.6.18 - 2.6.22 (97%), Linux 3.2.0 (97%), MikroTik RouterOS 6.15 (Linux 3.3.5) (97%), Nokia E70 or N86 mobile phone (Symbian OS) (97%), AVtech Room Alert 26W environmental monitor (97%), OneAccess 1641 router (96%), HP ProCurve Secure Router 7102dl (96%), Linksys BEFSR41 EtherFast router (96%), Ricoh Aficio SP C240SF printer (96%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ca.seguro.empleo.gob.es (195.53.48.48)
Host is up.
rDNS record for 195.53.48.48: 48.red-195-53-48.customer.static.ccgg.telefonica.net
All 1000 scanned ports on ca.seguro.empleo.gob.es (195.53.48.48) are filtered
Too many fingerprints match this host to give specific OS details

Failed to resolve "funciona.gob.es".
Failed to resolve "www.deh.hacienda.gob.es".
Unable to split netmask from target expression: "https://"
Failed to resolve "www.registro.idae.gob.es".
Failed to resolve "infoebola.gob.es".
Failed to resolve "www.infoebola.gob.es".
Failed to resolve "desa-servicios.mapa.gob.es".
Failed to resolve "origin.mapa.gob.es".
Failed to resolve "test-servicios.mapa.gob.es".
Failed to resolve "desa-servicios.mapama.gob.es".
Failed to resolve "test-servicios.mapama.gob.es".
Nmap scan report for ca2.seguro.empleo.gob.es (195.53.48.49)
Host is up (0.14s latency).
rDNS record for 195.53.48.49: 49.red-195-53-48.customer.static.ccgg.telefonica.net
All 1000 scanned ports on ca2.seguro.empleo.gob.es (195.53.48.49) are filtered
Too many fingerprints match this host to give specific OS details

Nmap scan report for www.testat2.empleo.gob.es (195.53.48.2)
Host is up.
rDNS record for 195.53.48.2: 2.red-195-53-48.customer.static.ccgg.telefonica.net
All 1000 scanned ports on www.testat2.empleo.gob.es (195.53.48.2) are filtered
Too many fingerprints match this host to give specific OS details

Nmap scan report for www.webtrabajouk.empleo.gob.es (192.148.211.14)
Host is up (0.060s latency).
rDNS record for 192.148.211.14: smtp2.meyss.es
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for emshi.gob.es (31.47.73.55)
Host is up (0.059s latency).
rDNS record for 31.47.73.55: hostv1b21-a55.neodigit.net
Not shown: 987 closed ports
PORT STATE SERVICE VERSION
21/tcp open ftp Pure-FTPd
22/tcp filtered ssh
25/tcp open smtp Postfix smtpd
80/tcp open http Apache httpd
110/tcp open pop3 Dovecot pop3d
143/tcp open imap Dovecot imapd
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
587/tcp open smtp Postfix smtpd
873/tcp filtered rsync
993/tcp filtered imaps
995/tcp filtered pop3s
3306/tcp filtered mysql
5666/tcp filtered nrpe
Aggressive OS guesses: OpenWrt Kamikaze 7.09 (Linux 2.6.22) (95%), ProVision-ISR security DVR (94%), Linux 3.0 (94%), Linux 2.6.32 (93%), OpenWrt 0.9 - 7.09 (Linux 2.4.30 - 2.4.34) (93%), OpenWrt White Russian 0.9 (Linux 2.4.30) (93%), HP P2000 G3 NAS device (93%), DD-WRT v24-sp2 (Linux 3.10) (93%), Linux 2.6.32 - 3.10 (92%), Western Digital My Cloud DL4100 NAS (Linux 3.10) (92%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 10 hops

Nmap scan report for extranet.emshi.gob.es (217.127.170.236)
Host is up (0.072s latency).
rDNS record for 217.127.170.236: 236.red-217-127-170.staticip.rima-tde.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
22/tcp closed ssh
444/tcp closed snpp
Too many fingerprints match this host to give specific OS details

Nmap scan report for sede.emshi.gob.es (185.79.130.124)
Host is up (0.070s latency).
rDNS record for 185.79.130.124: 124.Red-185.79.130.staticIP.cloud4b.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Apache Tomcat/Coyote JSP engine 1.1
8443/tcp closed https-alt
Device type: general purpose|firewall
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (89%), WatchGuard Fireware 11.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Linux 2.6.32 (89%), Linux 3.11 - 4.1 (85%), Linux 3.16 (85%), Linux 3.2 - 3.8 (85%), Linux 3.8 (85%), Linux 4.4 (85%), WatchGuard Fireware 11.8 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.enaire.gob.es (195.55.44.82)
Host is up (0.12s latency).
rDNS record for 195.55.44.82: 82.red-195-55-44.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
443/tcp open ssl/http Apache httpd 2.2.15
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Host: sede.enaire.gob.es; Device: load balancer

Nmap scan report for erasmusplus.gob.es (82.98.139.44)
Host is up (0.058s latency).
rDNS record for 82.98.139.44: hl316.dinaserver.com
Not shown: 827 closed ports, 163 filtered ports
PORT STATE SERVICE VERSION
21/tcp open ftp vsftpd 2.0.8 or later
22/tcp open ssh OpenSSH 5.9p1 Debian 5ubuntu1.10 (Ubuntu Linux; protocol 2.0)
80/tcp open http Apache httpd
110/tcp open pop3 Dovecot pop3d
143/tcp open imap Dovecot imapd
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
465/tcp open ssl/smtp?
993/tcp open ssl/imap Dovecot imapd
995/tcp open ssl/pop3 Dovecot pop3d
3306/tcp open mysql MySQL 5.5.54-0ubuntu0.12.04.1-log
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port465-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBA99C0%P=x86_64-pc-linux-gnu
SF:%r(NULL,25,"220\x20hl316\.dinaserver\.com\x20SMTP\x20Ready\r\n")%r(Hell
SF:o,40,"220\x20hl316\.dinaserver\.com\x20SMTP\x20Ready\r\n501\x20Syntax:\
SF:x20EHLO\x20hostname\r\n");
Aggressive OS guesses: Linux 3.16 (95%), Linux 3.10 - 4.11 (94%), Linux 3.13 (94%), Linux 3.13 or 4.2 (94%), Linux 3.16 - 4.6 (94%), Linux 4.2 (94%), Linux 4.4 (94%), HP P2000 G3 NAS device (93%), Linux 3.2 - 4.9 (92%), Linux 3.18 (92%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 6 hops
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

Nmap scan report for face.gob.es (185.73.172.48)
Host is up (0.062s latency).
rDNS record for 185.73.172.48: 48.red-185-73-172.customer.static.ccgg.telefonica.net
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 5.0
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 5.0
2000/tcp open cisco-sccp?
5060/tcp open sip?
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for faceb2b.gob.es (185.73.172.70)
Host is up (0.059s latency).
rDNS record for 185.73.172.70: 70.red-185-73-172.customer.static.ccgg.telefonica.net
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 5.0
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 5.0
2000/tcp open cisco-sccp?
5060/tcp open sip?
Aggressive OS guesses: Vonage V-Portal VoIP adapter (89%), Cisco Unified Communications Manager VoIP adapter (89%), Android 7.1.2 (Linux 3.10) (89%), DD-WRT v23 (Linux 2.4.36) (89%), Vyatta router (Linux 2.6.26) (89%), Linux 2.6.18 (89%), Linux 2.6.26 (PCLinuxOS) (89%), Tomato firmware (Linux 2.6.22) (89%), MikroTik RouterOS 5.25 (Linux 2.6.35) (89%), Netgear ReadyNAS Duo NAS device (RAIDiator 4.1.4) (89%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for www.sede.fega.gob.es (93.188.52.194)
Host is up (0.063s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
443/tcp open ssl/http Apache httpd 2.4.7 ((Ubuntu))
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|WAP
Running (JUST GUESSING): OpenBSD 4.X (92%), Apple embedded (92%), FreeBSD 6.X (92%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/h:apple:airport_extreme cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (92%), Apple AirPort Extreme WAP (92%), FreeBSD 6.2-RELEASE (92%), OpenBSD 4.3 (92%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for www1.sede.fega.gob.es (93.188.52.195)
Host is up (0.061s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
443/tcp open ssl/http Apache Tomcat/Coyote JSP engine 1.1
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|WAP
Running (JUST GUESSING): OpenBSD 4.X (92%), Apple embedded (92%), FreeBSD 6.X (92%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/h:apple:airport_extreme cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (92%), Apple AirPort Extreme WAP (92%), FreeBSD 6.2-RELEASE (92%), OpenBSD 4.3 (92%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for www3.sede.fega.gob.es (93.188.52.197)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
443/tcp open ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBA99CC%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,1CD,"HTTP/1\.1\x20200\x20OK\r\nServer:\x20\x20\x20\r\nAcc
SF:ept-Ranges:\x20bytes\r\nETag:\x20W/\"97-1461665160000\"\r\nLast-Modifie
SF:d:\x20Tue,\x2026\x20Apr\x202016\x2010:06:00\x20GMT\r\nContent-Type:\x20
SF:text/html\r\nContent-Length:\x2097\r\nDate:\x20Sun,\x2007\x20Oct\x20201
SF:8\x2023:42:04\x20GMT\r\nConnection:\x20close\r\nSet-Cookie:\x20perjk87h
SF:jiuw3s=!Hp\+mwfAGFcr54uWhFlgovspMXvnvorqepLGe0q1MQZ3IcAui3cwEhbFKvKIFEf
SF:bFPWcJkajUa93fNg==;\x20path=/;\x20Httponly;\x20Secure\r\n\r\n<HTML>\n<H
SF:EAD>\n\x20<meta\x20HTTP-EQUIV=\"REFRESH\"\x20content=\"0;\x20url=http:/
SF:/www\.fega\.es/\">\n</HEAD>\n</HTML>\n\n")%r(HTTPOptions,127,"HTTP/1\.1
SF:\x20200\x20OK\r\nServer:\x20\x20\x20\r\nAllow:\x20GET,\x20HEAD,\x20POST
SF:,\x20PUT,\x20DELETE,\x20TRACE,\x20OPTIONS\r\nContent-Length:\x200\r\nDa
SF:te:\x20Sun,\x2007\x20Oct\x202018\x2023:42:05\x20GMT\r\nConnection:\x20c
SF:lose\r\nSet-Cookie:\x20perjk87hjiuw3s=!1zPnW7VhReojciShFlgovspMXvnvopwn
SF:\+3ytZ5Qx6BJ8RzHJmmtXCdk4zxwrdSjvS/WnuQ7my56bOQ==;\x20path=/;\x20Httpon
SF:ly;\x20Secure\r\n\r\n")%r(FourOhFourRequest,166,"HTTP/1\.1\x20404\x20Re
SF:source_not_found\r\nContent-Length:\x20110\r\nDate:\x20Sun,\x2007\x20Oc
SF:t\x202018\x2023:42:04\x20GMT\r\nConnection:\x20close\r\nSet-Cookie:\x20
SF:perjk87hjiuw3s=!VBrWMqMC3DFsgp\+hFlgovspMXvnvoosPfczkmKUU7fOHe7asi3x/GD
SF:ueMtrdXQ8P5MQrxi/gXJPkWQ==;\x20path=/;\x20Httponly;\x20Secure\r\n\r\n<H
SF:TML>\n<HEAD>\n\x20<meta\x20HTTP-EQUIV=\"REFRESH\"\x20content=\"0;\x20ur
SF:l=http://www\.fega\.es/no_encontrada\">\n</HEAD>\n</HTML>\n\n")%r(RTSPR
SF:equest,EB,"HTTP/1\.1\x20505\x20HTTP\x20Version\x20Not\x20Supported\r\nD
SF:ate:\x20Sun,\x2007\x20Oct\x202018\x2023:42:16\x20GMT\r\nConnection:\x20
SF:close\r\nSet-Cookie:\x20perjk87hjiuw3s=!kkO1eUG5A0bbX8ChFlgovspMXvnvoip
SF:lMYSHh9N\+HUXn6RmbU47l2M2nZ8HndBf/SH57mS7UQyIcGg==;\x20path=/;\x20Httpo
SF:nly;\x20Secure\r\n\r\n")%r(SIPOptions,EB,"HTTP/1\.1\x20505\x20HTTP\x20V
SF:ersion\x20Not\x20Supported\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2023:
SF:43:20\x20GMT\r\nConnection:\x20close\r\nSet-Cookie:\x20perjk87hjiuw3s=!
SF:ZanG0Jj4opY1oAehFlgovspMXvnvogdz/0VYi3a4J2kvb4O3jjr0RWDYoA75TU1\+gPn6Te
SF:2il0iysw==;\x20path=/;\x20Httponly;\x20Secure\r\n\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: WAP|general purpose|router|phone|specialized|broadband router|printer
Running (JUST GUESSING): Linux 2.4.X|2.6.X|3.X (97%), MikroTik RouterOS 6.X (97%), Nokia Symbian OS (97%), AVtech embedded (97%), OneAccess embedded (96%), HP embedded (96%), Linksys embedded (96%), Ricoh embedded (96%)
OS CPE: cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.6 cpe:/o:linux:linux_kernel:3.2.0 cpe:/o:mikrotik:routeros:6.15 cpe:/o:nokia:symbian_os cpe:/h:oneaccess:1641 cpe:/h:hp:procurve_7102dl cpe:/h:ricoh:aficio_sp_c240sf
Aggressive OS guesses: Tomato 1.27 - 1.28 (Linux 2.4.20) (97%), Linux 2.6.18 - 2.6.22 (97%), Linux 3.2.0 (97%), MikroTik RouterOS 6.15 (Linux 3.3.5) (97%), Nokia E70 or N86 mobile phone (Symbian OS) (97%), AVtech Room Alert 26W environmental monitor (97%), OneAccess 1641 router (96%), HP ProCurve Secure Router 7102dl (96%), Linksys BEFSR41 EtherFast router (96%), Ricoh Aficio SP C240SF printer (96%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for registro.fnmt.gob.es (195.55.245.145)
Host is up (0.060s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.sede.fnmt.gob.es (193.104.0.131)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: broadband router
Running (JUST GUESSING): OneAccess embedded (86%)
OS CPE: cpe:/h:oneaccess:1641
Aggressive OS guesses: OneAccess 1641 router (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for fomento.gob.es (13.80.10.204)
Host is up (0.094s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for administracion.gob.es (185.73.172.38)
Host is up (0.064s latency).
Other addresses for administracion.gob.es (not scanned): 2a03:44a0:100:fffe::afc:8407
rDNS record for 185.73.172.38: 38.red-185-73-172.customer.static.ccgg.telefonica.net
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 5.0
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 5.0
2000/tcp open cisco-sccp?
5060/tcp open sip?
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (92%), OpenBSD 4.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2 cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: FreeBSD 6.2-RELEASE (92%), OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for www.administraciondejusticia.gob.es (212.128.106.105)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
443/tcp open ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBA99D2%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,3D9,"HTTP/1\.1\x20302\x20Found\r\nDate:\x20Sun,\x2007\x20
SF:Oct\x202018\x2023:42:10\x20GMT\r\nLocation:\x20https://apaalto02/paj/pu
SF:blico/ciudadano/home/!ut/p/c5/04_SB8K8xLLM9MSSzPy8xBz9CP0os3gTDzf_AG9HQ
SF:wuzAAsDA08vExMv81BPYwMDA6B8pFm8AQ7gaEBAdzjIPrN4M09XU8-gYBMT41AXEwNP47Aw
SF:1wAPXwMDEwOIPB7z_Tzyc1P1C3IjDLJMHBUBD427TQ!!/dl3/d3/L2dBISEvZ0FBIS9nQSE
SF:h/\r\nCache-Control:\x20max-age=604800\r\nExpires:\x20Sun,\x2014\x20Oct
SF:\x202018\x2023:42:10\x20GMT\r\nContent-Length:\x20422\r\nKeep-Alive:\x2
SF:0timeout=15,\x20max=100\r\nConnection:\x20close\r\nContent-Type:\x20tex
SF:t/html;\x20charset=iso-8859-1\r\nStrict-Transport-Security:\x20max-age=
SF:31536000;\x20IncludeSubdomains\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"
SF:-//IETF//DTD\x20HTML\x202\.0//EN\">\n<html><head>\n<title>302\x20Found<
SF:/title>\n</head><body>\n<h1>Found</h1>\n<p>The\x20document\x20has\x20mo
SF:ved\x20<a\x20href=\"http://apaalto02/paj/publico/ciudadano/home/!ut/p/c
SF:5/04_SB8K8xLLM9MSSzPy8xBz9CP0os3gTDzf_AG9HQwuzAAsDA08vExMv81BPYwMDA6B8p
SF:Fm8AQ7gaEBAdzjIPrN4M09XU8-gYBMT41AXEwNP47Aw1wAPXwMDEwOIPB7z_Tz")%r(HTTP
SF:Options,3D9,"HTTP/1\.1\x20302\x20Found\r\nDate:\x20Sun,\x2007\x20Oct\x2
SF:02018\x2023:42:10\x20GMT\r\nLocation:\x20https://apaalto01/paj/publico/
SF:ciudadano/home/!ut/p/c5/04_SB8K8xLLM9MSSzPy8xBz9CP0os3gTDzf_AG9HQwuzAAs
SF:DA08vExMv81BPYwMDA6B8pFm8AQ7gaEBAdzjIPrN4M09XU8-gYBMT41AXEwNP47Aw1wAPXw
SF:MDEwOIPB7z_Tzyc1P1C3IjDLJMHBUBD427TQ!!/dl3/d3/L2dBISEvZ0FBIS9nQSEh/\r\n
SF:Cache-Control:\x20max-age=604800\r\nExpires:\x20Sun,\x2014\x20Oct\x2020
SF:18\x2023:42:10\x20GMT\r\nContent-Length:\x20422\r\nKeep-Alive:\x20timeo
SF:ut=15,\x20max=100\r\nConnection:\x20close\r\nContent-Type:\x20text/html
SF:;\x20charset=iso-8859-1\r\nStrict-Transport-Security:\x20max-age=315360
SF:00;\x20IncludeSubdomains\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IET
SF:F//DTD\x20HTML\x202\.0//EN\">\n<html><head>\n<title>302\x20Found</title
SF:>\n</head><body>\n<h1>Found</h1>\n<p>The\x20document\x20has\x20moved\x2
SF:0<a\x20href=\"http://apaalto01/paj/publico/ciudadano/home/!ut/p/c5/04_S
SF:B8K8xLLM9MSSzPy8xBz9CP0os3gTDzf_AG9HQwuzAAsDA08vExMv81BPYwMDA6B8pFm8AQ7
SF:gaEBAdzjIPrN4M09XU8-gYBMT41AXEwNP47Aw1wAPXwMDEwOIPB7z_Tz");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: Device: load balancer

Nmap scan report for www.administracionelectronica.gob.es (185.73.172.50)
Host is up (0.059s latency).
Other addresses for www.administracionelectronica.gob.es (not scanned): 2a03:44a0:100:fffe::afc:840d
rDNS record for 185.73.172.50: 50.red-185-73-172.customer.static.ccgg.telefonica.net
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 5.0
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 5.0
2000/tcp open cisco-sccp?
5060/tcp open sip?
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for www.aecid.gob.es (192.148.209.54)
Host is up (0.061s latency).
rDNS record for 192.148.209.54: 54.red-192-148-209.customer.static.ccgg.telefonica.net
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
554/tcp closed rtsp
8080/tcp closed http-proxy
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (89%), FreeBSD 6.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (89%), OpenBSD 4.3 (87%), FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; Device: load balancer; CPE: cpe:/o:microsoft:windows

Nmap scan report for www.aemps.gob.es (195.64.186.91)
Host is up (0.068s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http server-header-none
443/tcp open ssl/https server-header-none
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBA99D2%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-header-n
SF:one\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2023:42:10\x20GMT\r\nContent
SF:-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20close\r
SF:\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>Forbidden<
SF:/H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20the\x20
SF:requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/1\.1\x2
SF:0501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nDate:\x2
SF:0Sun,\x2007\x20Oct\x202018\x2023:42:10\x20GMT\r\nContent-length:\x20148
SF:\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HE
SF:AD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Implement
SF:ed</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20requested
SF:\x20method\.\n</BODY></HTML>")%r(FourOhFourRequest,1C0,"HTTP/1\.1\x2040
SF:4\x20Not\x20found\r\nServer:\x20server-header-none\r\nDate:\x20Sun,\x20
SF:07\x20Oct\x202018\x2023:42:11\x20GMT\r\nContent-type:\x20text/html\r\nC
SF:ontent-length:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META\x20HTT
SF:P-EQUIV=\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859-1\"><T
SF:ITLE>Not\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x20reque
SF:sted\x20object\x20does\x20not\x20exist\x20on\x20this\x20server\.\x20The
SF:\x20link\x20you\x20followed\x20is\x20either\x20outdated,\x20inaccurate,
SF:\x20or\x20the\x20server\x20has\x20been\x20instructed\x20not\x20to\x20le
SF:t\x20you\x20have\x20it\.\x20");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBA99D9%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-h
SF:eader-none\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2023:42:17\x20GMT\r\n
SF:Content-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20
SF:close\r\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>For
SF:bidden</H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20
SF:the\x20requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/
SF:1\.1\x20501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nD
SF:ate:\x20Sun,\x2007\x20Oct\x202018\x2023:42:17\x20GMT\r\nContent-length:
SF:\x20148\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<H
SF:TML><HEAD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Im
SF:plemented</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20re
SF:quested\x20method\.\n</BODY></HTML>")%r(FourOhFourRequest,1C0,"HTTP/1\.
SF:1\x20404\x20Not\x20found\r\nServer:\x20server-header-none\r\nDate:\x20S
SF:un,\x2007\x20Oct\x202018\x2023:42:17\x20GMT\r\nContent-type:\x20text/ht
SF:ml\r\nContent-length:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META
SF:\x20HTTP-EQUIV=\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859
SF:-1\"><TITLE>Not\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x
SF:20requested\x20object\x20does\x20not\x20exist\x20on\x20this\x20server\.
SF:\x20The\x20link\x20you\x20followed\x20is\x20either\x20outdated,\x20inac
SF:curate,\x20or\x20the\x20server\x20has\x20been\x20instructed\x20not\x20t
SF:o\x20let\x20you\x20have\x20it\.\x20")%r(RTSPRequest,131,"HTTP/1\.1\x204
SF:00\x20Bad\x20request\r\nServer:\x20server-header-none\r\nDate:\x20Sun,\
SF:x2007\x20Oct\x202018\x2023:42:28\x20GMT\r\nContent-length:\x20147\r\nCo
SF:ntent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TI
SF:TLE>Bad\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\
SF:x20browser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20u
SF:nderstand\.\n</BODY></HTML>")%r(Help,131,"HTTP/1\.1\x20400\x20Bad\x20re
SF:quest\r\nServer:\x20server-header-none\r\nDate:\x20Sun,\x2007\x20Oct\x2
SF:02018\x2023:42:44\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20
SF:text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20requ
SF:est</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20s
SF:ent\x20a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</
SF:BODY></HTML>");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: phone|media device|general purpose
Running (JUST GUESSING): Apple iOS 4.X|5.X|6.X|7.X (89%), OpenBSD 4.X (88%), Apple OS X 10.8.X|10.9.X (87%)
OS CPE: cpe:/o:apple:iphone_os:4 cpe:/o:openbsd:openbsd:4.0 cpe:/o:apple:iphone_os:5 cpe:/o:apple:iphone_os:6 cpe:/o:apple:mac_os_x:10.8 cpe:/o:apple:mac_os_x:10.9 cpe:/o:apple:iphone_os:7.1.1
Aggressive OS guesses: Apple iOS 4.3.1 - 4.3.5 (89%), OpenBSD 4.0 (88%), Apple iOS 5.1.1 - 6.1 (87%), Apple OS X 10.8 (Mountain Lion) - 10.9 (Mavericks) or iOS 5.0.1 - 5.1.1 (Darwin 11.0.0 - 13.2.0) (87%), Apple iOS 5.1.1 (86%), Apple iOS 6 (86%), Apple iOS 7.1.1 (86%), Apple iOS 8.2 (Darwin 14.0.0) (86%), Apple OS X 10.10 (Yosemite) or iOS 8.3 - 9.0.1 (Darwin 14.0.0 - 15.0.0) (86%), Apple OS X 10.8 (Mountain Lion) (Darwin 12.4.0) (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.aepsad.gob.es (212.128.114.102)
Host is up (0.059s latency).
rDNS record for 212.128.114.102: 102.red-212-128-114.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache Tomcat/Coyote JSP engine 1.1
113/tcp closed ident
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.agendadigital.gob.es (193.147.89.91)
Host is up (0.060s latency).
Other addresses for www.agendadigital.gob.es (not scanned): 2001:720:438:402::91
rDNS record for 193.147.89.91: www.usuariosteleco.es
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for www.bicentenarios.gob.es (217.149.144.15)
Host is up (0.059s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 7.5
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 7.5
OS fingerprint not ideal because: maxTimingRatio (3.844000e+00) is greater than 1.4
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for clave.buscador.gob.es (108.177.126.121)
Host is up (0.094s latency).
Other addresses for clave.buscador.gob.es (not scanned): 2a00:1450:4013:c01::79
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Google httpd
443/tcp open ssl/http Google httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (91%)
OS CPE: cpe:/o:openbsd:openbsd:4.3
Aggressive OS guesses: OpenBSD 4.3 (91%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for firmaelectronica.buscador.gob.es (108.177.119.121)
Host is up (0.094s latency).
Other addresses for firmaelectronica.buscador.gob.es (not scanned): 2a00:1450:4013:c00::79
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Google httpd
443/tcp open ssl/http Google httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (91%)
OS CPE: cpe:/o:openbsd:openbsd:4.3
Aggressive OS guesses: OpenBSD 4.3 (91%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.ciencia.gob.es (193.146.133.11)
Host is up (0.066s latency).
rDNS record for 193.146.133.11: video.micinn.es
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
81/tcp open http lighttpd 1.4.26
443/tcp open ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for apipre.cnmc.gob.es (79.170.8.164)
Host is up (0.076s latency).
rDNS record for 79.170.8.164: madfrontal1.cnmc.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http nginx
443/tcp open ssl/http nginx
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X (89%)
OS CPE: cpe:/o:linux:linux_kernel:4.9 cpe:/o:linux:linux_kernel:3.18
Aggressive OS guesses: Linux 4.9 (89%), Linux 3.18 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for des-oficinavirtual.comercio.gob.es (193.144.239.65)
Host is up (0.060s latency).
Other addresses for des-oficinavirtual.comercio.gob.es (not scanned): 195.53.116.65
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 8.5
443/tcp open https Microsoft-HTTPAPI/2.0
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012 (89%)
OS CPE: cpe:/o:microsoft:windows_server_2012:r2
Aggressive OS guesses: Microsoft Windows Server 2012 or Windows Server 2012 R2 (89%), Microsoft Windows Server 2012 R2 (89%), Microsoft Windows Server 2012 (87%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for pre-serviciossede.comercio.gob.es (193.146.133.31)
Host is up (0.059s latency).
rDNS record for 193.146.133.31: pre-oficinavirtual.comercio.gob.es
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open https Microsoft-HTTPAPI/2.0
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for sede.comercio.gob.es (193.146.133.27)
Host is up (0.060s latency).
rDNS record for 193.146.133.27: www.comercio.mineco.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
443/tcp open ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for sede.coruna.gob.es (212.51.63.15)
Host is up (0.083s latency).
rDNS record for 212.51.63.15: aras.coruna.es
Not shown: 994 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.4.25
113/tcp closed ident
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
2000/tcp open cisco-sccp?
5060/tcp open sip?
8443/tcp open ssl/https-alt?
Device type: general purpose|firewall
Running (JUST GUESSING): Linux 3.X|4.X (91%), WatchGuard Fireware 11.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Linux 3.11 - 4.1 (91%), Linux 3.16 (91%), Linux 4.4 (89%), Linux 3.13 (88%), Linux 3.10 - 3.16 (87%), Linux 4.0 (86%), Linux 3.2 - 3.8 (85%), Linux 3.8 (85%), WatchGuard Fireware 11.8 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Host: coruna.es

Nmap scan report for www.cteaje.gob.es (212.128.106.72)
Host is up (0.062s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
443/tcp open ssl/https
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBA9A04%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,1F3,"HTTP/1\.1\x20302\x20Found\r\nDate:\x20Sun,\x2007\x20
SF:Oct\x202018\x2023:43:00\x20GMT\r\nLocation:\x20http://apaalto01/cteaje/
SF:publico\r\nContent-Length:\x20215\r\nKeep-Alive:\x20timeout=15,\x20max=
SF:100\r\nConnection:\x20close\r\nContent-Type:\x20text/html;\x20charset=i
SF:so-8859-1\r\nStrict-Transport-Security:\x20max-age=31536000;\x20Include
SF:Subdomains\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IETF//DTD\x20HTML
SF:\x202\.0//EN\">\n<html><head>\n<title>302\x20Found</title>\n</head><bod
SF:y>\n<h1>Found</h1>\n<p>The\x20document\x20has\x20moved\x20<a\x20href=\"
SF:http://apaalto01/cteaje/publico\">here</a>\.</p>\n</body></html>\n")%r(
SF:HTTPOptions,22E,"HTTP/1\.1\x20302\x20Found\r\nDate:\x20Sun,\x2007\x20Oc
SF:t\x202018\x2023:43:00\x20GMT\r\nX-XSS-Protection:\x201;\x20mode=block\r
SF:\nLocation:\x20http://apaalto02/cteaje/publico\r\nContent-Length:\x2021
SF:5\r\nKeep-Alive:\x20timeout=15,\x20max=100\r\nConnection:\x20close\r\nC
SF:ontent-Type:\x20text/html;\x20charset=iso-8859-1\r\nX-Pad:\x20avoid\x20
SF:browser\x20bug\r\nStrict-Transport-Security:\x20max-age=31536000;\x20In
SF:cludeSubdomains\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IETF//DTD\x2
SF:0HTML\x202\.0//EN\">\n<html><head>\n<title>302\x20Found</title>\n</head
SF:><body>\n<h1>Found</h1>\n<p>The\x20document\x20has\x20moved\x20<a\x20hr
SF:ef=\"http://apaalto02/cteaje/publico\">here</a>\.</p>\n</body></html>\n
SF:")%r(FourOhFourRequest,1D5,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x
SF:20Sun,\x2007\x20Oct\x202018\x2023:43:01\x20GMT\r\nContent-Length:\x2022
SF:5\r\nKeep-Alive:\x20timeout=15,\x20max=99\r\nConnection:\x20close\r\nCo
SF:ntent-Type:\x20text/html;\x20charset=iso-8859-1\r\nStrict-Transport-Sec
SF:urity:\x20max-age=31536000;\x20IncludeSubdomains\r\n\r\n<!DOCTYPE\x20HT
SF:ML\x20PUBLIC\x20\"-//IETF//DTD\x20HTML\x202\.0//EN\">\n<html><head>\n<t
SF:itle>404\x20Not\x20Found</title>\n</head><body>\n<h1>Not\x20Found</h1>\
SF:n<p>The\x20requested\x20URL\x20/nice\x20ports,/Trinity\.txt\.bak\x20was
SF:\x20not\x20found\x20on\x20this\x20server\.</p>\n</body></html>\n")%r(RT
SF:SPRequest,1F3,"HTTP/1\.1\x20302\x20Found\r\nDate:\x20Sun,\x2007\x20Oct\
SF:x202018\x2023:43:12\x20GMT\r\nLocation:\x20http://apaalto01/cteaje/publ
SF:ico\r\nContent-Length:\x20215\r\nKeep-Alive:\x20timeout=15,\x20max=100\
SF:r\nConnection:\x20close\r\nContent-Type:\x20text/html;\x20charset=iso-8
SF:859-1\r\nStrict-Transport-Security:\x20max-age=31536000;\x20IncludeSubd
SF:omains\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//IETF//DTD\x20HTML\x20
SF:2\.0//EN\">\n<html><head>\n<title>302\x20Found</title>\n</head><body>\n
SF:<h1>Found</h1>\n<p>The\x20document\x20has\x20moved\x20<a\x20href=\"http
SF:://apaalto01/cteaje/publico\">here</a>\.</p>\n</body></html>\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: Device: load balancer

Nmap scan report for www.datos.gob.es (194.69.254.39)
Host is up (0.060s latency).
Other addresses for www.datos.gob.es (not scanned): 2001:67c:21cc:2000::64:170
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http
443/tcp open ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBA9A05%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,3070,"HTTP/1\.1\x20200\x20OK\r\nDate:\x20Sun,\x2007\x20Oct\x2020
SF:18\x2023:43:00\x20GMT\r\nContent-Language:\x20es\r\nLink:\x20<http://da
SF:tos\.gob\.es/es>;\x20rel=\"canonical\"\r\nCache-Control:\x20public,\x20
SF:max-age=1800\r\nLast-Modified:\x20Sun,\x2007\x20Oct\x202018\x2022:01:34
SF:\x20GMT\r\nExpires:\x20Sun,\x2019\x20Nov\x201978\x2005:00:00\x20GMT\r\n
SF:Vary:\x20Cookie,Accept-Encoding\r\nContent-Type:\x20text/html;\x20chars
SF:et=utf-8\r\nAge:\x200\r\nETag:\x20W/\"1538949694-1\"\r\nX-Frame-Options
SF::\x20SAMEORIGIN\r\nX-Content-Type-Options:\x20nosniff\r\nX-XSS-Protecti
SF:on:\x201;\x20mode=block\r\nConnection:\x20close\r\nAccept-Ranges:\x20by
SF:tes\r\n\r\n<!DOCTYPE\x20html>\n<html\x20lang=\"es\"\x20dir=\"ltr\">\n<h
SF:ead>\n<link\x20rel=\"stylesheet\"\x20href=\"https://cdnjs\.cloudflare\.
SF:com/ajax/libs/font-awesome/4\.7\.0/css/font-awesome\.min\.css\">\n\x20\
SF:x20<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html;\x20char
SF:set=utf-8\"\x20/>\n<link\x20href=\"http://datos\.gob\.es/gl\"\x20rel=\"
SF:alternate\"\x20hreflang=\"gl\"\x20/>\n<link\x20href=\"http://datos\.gob
SF:\.es/eu\"\x20rel=\"alternate\"\x20hreflang=\"eu\"\x20/>\n<script\x20typ
SF:e=\"text/javascript\">dataLay")%r(HTTPOptions,3070,"HTTP/1\.1\x20405\x2
SF:0Not\x20allowed\.\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2023:43:01\x20
SF:GMT\r\nContent-Length:\x2070783\r\nConnection:\x20close\r\n\r\n<html\x2
SF:0lang=\"es\"\x20dir=\"ltr\"\x20id=\"HTML_1\">\n<head\x20id=\"HEAD_2\">\
SF:n<script>\ndataLayer\x20=\x20\[{\n'pagina':\x20'',\n'seccion_s1':\x20''
SF:,\x20\x20\n'seccion_s2':\x20'',\x20\n'seccion_s3':\x20'',\n'seccion_s4'
SF::\x20'',\n'contenido_categoria':\x20'',\n'publicador':\x20'',\n'tipo_vi
SF:sitante':\x20'',\n'idioma':\x20'es',\n'pagina_error':\x20'pagina\x20err
SF:or',\n'event':\x20'loadComplete'\n}\];\n</script>\n<!--\x20GoogleTagMan
SF:ager\x20-->\n<script>\(function\(w,d,s,l,i\){w\[l\]=w\[l\]\|\|\[\];w\[l
SF:\]\.push\({'gtm\.start':new\x20Date\(\)\.getTime\(\),event:'gtm\.js'}\)
SF:;var\x20f=d\.getElementsByTagName\(s\)\[0\],j=d\.createElement\(s\),dl=
SF:l!='dataLayer'\?'&l='\+l:'';j\.async=true;j\.src='https://www\.googleta
SF:gmanager\.com/gtm\.js\?id='\+i\+dl;f\.parentNode\.insertBefore\(j,f\);}
SF:\)\(window,document,'script','dataLayer','GTM-PL62VCW'\);</script>\n<!-
SF:-\x20End\x20GoogleTagManager\x20-->\n<title\x20id=\"TITLE_3\">Error\x20
SF:interno\x20del\x20servidor\x20\|\x20datos\.go");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBA9A2E%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,4000,"HTTP/1\.1\x20200\x20OK\r\nDate:\x20Sun,\x2007\x20Oc
SF:t\x202018\x2023:43:41\x20GMT\r\nContent-Type:\x20text/html;\x20charset=
SF:utf-8\r\nConnection:\x20close\r\nContent-Language:\x20es\r\nLink:\x20<h
SF:ttp://datos\.gob\.es/es>;\x20rel=\"canonical\"\r\nCache-Control:\x20pub
SF:lic,\x20max-age=1800\r\nLast-Modified:\x20Sun,\x2007\x20Oct\x202018\x20
SF:22:00:43\x20GMT\r\nExpires:\x20Sun,\x2019\x20Nov\x201978\x2005:00:00\x2
SF:0GMT\r\nVary:\x20Cookie,Accept-Encoding\r\nAge:\x20771\r\nETag:\x20W/\"
SF:1538949643-1\"\r\nX-Frame-Options:\x20SAMEORIGIN\r\nX-Content-Type-Opti
SF:ons:\x20nosniff\r\nX-XSS-Protection:\x201;\x20mode=block\r\nAccept-Rang
SF:es:\x20bytes\r\n\r\n<!DOCTYPE\x20html>\n<html\x20lang=\"es\"\x20dir=\"l
SF:tr\">\n<head>\n<link\x20rel=\"stylesheet\"\x20href=\"https://cdnjs\.clo
SF:udflare\.com/ajax/libs/font-awesome/4\.7\.0/css/font-awesome\.min\.css\
SF:">\n\x20\x20<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html
SF:;\x20charset=utf-8\"\x20/>\n<link\x20href=\"http://datos\.gob\.es/gl\"\
SF:x20rel=\"alternate\"\x20hreflang=\"gl\"\x20/>\n<link\x20href=\"http://d
SF:atos\.gob\.es/eu\"\x20rel=\"alternate\"\x20hreflang=\"eu\"\x20/>\n<scri
SF:pt\x20type=\"text/javascript\">dataL")%r(HTTPOptions,4000,"HTTP/1\.1\x2
SF:0405\x20Not\x20allowed\.\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2023:43
SF::42\x20GMT\r\nContent-Length:\x2070783\r\nConnection:\x20close\r\n\r\n<
SF:html\x20lang=\"es\"\x20dir=\"ltr\"\x20id=\"HTML_1\">\n<head\x20id=\"HEA
SF:D_2\">\n<script>\ndataLayer\x20=\x20\[{\n'pagina':\x20'',\n'seccion_s1'
SF::\x20'',\x20\x20\n'seccion_s2':\x20'',\x20\n'seccion_s3':\x20'',\n'secc
SF:ion_s4':\x20'',\n'contenido_categoria':\x20'',\n'publicador':\x20'',\n'
SF:tipo_visitante':\x20'',\n'idioma':\x20'es',\n'pagina_error':\x20'pagina
SF:\x20error',\n'event':\x20'loadComplete'\n}\];\n</script>\n<!--\x20Googl
SF:eTagManager\x20-->\n<script>\(function\(w,d,s,l,i\){w\[l\]=w\[l\]\|\|\[
SF:\];w\[l\]\.push\({'gtm\.start':new\x20Date\(\)\.getTime\(\),event:'gtm\
SF:.js'}\);var\x20f=d\.getElementsByTagName\(s\)\[0\],j=d\.createElement\(
SF:s\),dl=l!='dataLayer'\?'&l='\+l:'';j\.async=true;j\.src='https://www\.g
SF:oogletagmanager\.com/gtm\.js\?id='\+i\+dl;f\.parentNode\.insertBefore\(
SF:j,f\);}\)\(window,document,'script','dataLayer','GTM-PL62VCW'\);</scrip
SF:t>\n<!--\x20End\x20GoogleTagManager\x20-->\n<title\x20id=\"TITLE_3\">Er
SF:ror\x20interno\x20del\x20servidor\x20\|\x20datos\.go");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: specialized
Running (JUST GUESSING): AVtech embedded (87%)
Aggressive OS guesses: AVtech Room Alert 26W environmental monitor (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.defensa.gob.es (193.33.2.155)
Host is up (0.059s latency).
Other addresses for www.defensa.gob.es (not scanned): 2a03:44a0:100:fffe::c121:281
rDNS record for 193.33.2.155: IP-193-33-2-155.mde.es
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for www.tecnologiaeinnovacion.defensa.gob.es (213.134.41.188)
Host is up.
rDNS record for 213.134.41.188: ih-vm-dgam-web.c.mad.interhost.com
All 1000 scanned ports on www.tecnologiaeinnovacion.defensa.gob.es (213.134.41.188) are filtered
Too many fingerprints match this host to give specific OS details

Nmap scan report for www.educacion.gob.es (212.128.114.112)
Host is up (0.061s latency).
rDNS record for 212.128.114.112: 112.red-212-128-114.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
113/tcp closed ident
443/tcp open ssl/https?
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for www.empleate.gob.es (195.57.139.183)
Host is up (0.064s latency).
rDNS record for 195.57.139.183: 183.red-195-57-139.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http
113/tcp closed ident
443/tcp open ssl/https Servidor Web 1.0
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBA9A56%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,8A,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nLocation:\x20htt
SF:ps://empleate\.gob\.es/empleo/#/\r\nContent-Length:\x200\r\nContent-Typ
SF:e:\x20text/html;\x20charset=UTF-8\r\n\r\n")%r(HTTPOptions,8A,"HTTP/1\.1
SF:\x20301\x20Moved\x20Permanently\r\nLocation:\x20https://empleate\.gob\.
SF:es/empleo/#/\r\nContent-Length:\x200\r\nContent-Type:\x20text/html;\x20
SF:charset=UTF-8\r\n\r\n")%r(FourOhFourRequest,8A,"HTTP/1\.1\x20301\x20Mov
SF:ed\x20Permanently\r\nLocation:\x20https://empleate\.gob\.es/empleo/#/\r
SF:\nContent-Length:\x200\r\nContent-Type:\x20text/html;\x20charset=UTF-8\
SF:r\n\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBA9A58%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,B8,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServer:\x
SF:20Servidor\x20Web\x201\.0\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2023:4
SF:4:24\x20GMT\r\nLocation:\x20https://www\.empleate\.gob\.es/empleo/#/\r\
SF:nContent-length:\x200\r\nConnection:\x20close\r\n\r\n")%r(HTTPOptions,1
SF:D4,"HTTP/1\.1\x20200\x20OK\r\nServer:\x20Servidor\x20Web\x201\.0\r\nDat
SF:e:\x20Sun,\x2007\x20Oct\x202018\x2023:44:24\x20GMT\r\nAllow:\x20HEAD,\x
SF:20GET,\x20PUT,\x20POST,\x20DELETE,\x20OPTIONS,\x20MOVE,\x20INDEX,\x20MK
SF:DIR,\x20RMDIR,\x20COPY,\x20CONNECT,\x20PROPFIND,\x20PROPPATCH,\x20MKCOL
SF:,\x20LOCK,\x20UNLOCK,\x20ACL,\x20REPORT,\x20VERSION-CONTROL,\x20CHECKOU
SF:T,\x20CHECKIN,\x20UNCHECKOUT,\x20MKWORKSPACE,\x20UPDATE,\x20LABEL,\x20M
SF:ERGE,\x20BASELINE-CONTROL,\x20MKACTIVITY,\x20SEARCH,\x20SUBSCRIBE,\x20U
SF:NSUBSCRIBE,\x20NOTIFY,\x20POLL,\x20BDELETE,\x20BCOPY,\x20BMOVE,\x20BPRO
SF:PPATCH,\x20BPROPFIND\r\nContent-length:\x200\r\nConnection:\x20close\r\
SF:n\r\n")%r(FourOhFourRequest,1BE,"HTTP/1\.1\x20404\x20Not\x20found\r\nSe
SF:rver:\x20Servidor\x20Web\x201\.0\r\nDate:\x20Sun,\x2007\x20Oct\x202018\
SF:x2023:44:25\x20GMT\r\nContent-type:\x20text/html\r\nContent-length:\x20
SF:292\r\nConnection:\x20close\r\n\r\n<HEAD><META\x20HTTP-EQUIV=\"Content-
SF:Type\"\x20CONTENT=\"text/html;charset=ISO-8859-1\"><TITLE>Not\x20Found<
SF:/TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x20requested\x20object\x20
SF:does\x20not\x20exist\x20on\x20this\x20server\.\x20The\x20link\x20you\x2
SF:0followed\x20is\x20either\x20outdated,\x20inaccurate,\x20or\x20the\x20s
SF:erver\x20has\x20been\x20instructed\x20not\x20to\x20let\x20you\x20have\x
SF:20it\.\x20")%r(RTSPRequest,12F,"HTTP/1\.1\x20400\x20Bad\x20request\r\nS
SF:erver:\x20Servidor\x20Web\x201\.0\r\nDate:\x20Sun,\x2007\x20Oct\x202018
SF:\x2023:44:35\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20text/
SF:html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20request</
SF:TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20sent\x
SF:20a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</BODY>
SF:</HTML>")%r(Help,12F,"HTTP/1\.1\x20400\x20Bad\x20request\r\nServer:\x20
SF:Servidor\x20Web\x201\.0\r\nDate:\x20Sun,\x2007\x20Oct\x202018\x2023:44:
SF:51\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20text/html\r\nCo
SF:nnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20request</TITLE></HE
SF:AD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20sent\x20a\x20que
SF:ry\x20this\x20server\x20could\x20not\x20understand\.\n</BODY></HTML>");
Device type: general purpose|WAP
Running (JUST GUESSING): Linux 2.6.X (91%), D-Link embedded (91%), TRENDnet embedded (91%)
OS CPE: cpe:/o:linux:linux_kernel:2.6 cpe:/h:dlink:dwl-624%2b cpe:/h:dlink:dwl-2000ap cpe:/h:trendnet:tew-432brp cpe:/o:linux:linux_kernel:2.6.22
Aggressive OS guesses: Linux 2.6.18 - 2.6.22 (91%), D-Link DWL-624+ or DWL-2000AP, or TRENDnet TEW-432BRP WAP (91%), Tomato firmware (Linux 2.6.22) (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for deltaseg.empleo.gob.es (192.148.211.27)
Host is up (0.061s latency).
rDNS record for 192.148.211.27: webdelta.mtin.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/https Apache
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for expinterwebseg.empleo.gob.es (192.148.211.182)
Host is up (0.059s latency).
rDNS record for 192.148.211.182: 182.red-192-148-211.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/https Apache
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for www.perfilcontratante.fogasa.empleo.gob.es (192.148.211.46)
Host is up (0.060s latency).
rDNS record for 192.148.211.46: 46.red-192-148-211.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.31 ((Unix) mod_ssl/2.2.31 OpenSSL/1.0.1r DAV/2 mod_auth_kerb/5.4 mod_cluster/1.2.6.Final mod_jk/1.2.30)
443/tcp open ssl/http Apache httpd 2.2.31 ((Unix) mod_ssl/2.2.31 OpenSSL/1.0.1r DAV/2 mod_auth_kerb/5.4 mod_cluster/1.2.6.Final mod_jk/1.2.30)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|WAP
Running (JUST GUESSING): Sun Solaris 10 (86%), Linux 2.4.X (85%)
OS CPE: cpe:/o:sun:sunos:5.10 cpe:/o:linux:linux_kernel:2.4.20
Aggressive OS guesses: Sun Solaris 10 (86%), Sun Solaris 10 (SPARC) (86%), Tomato 1.27 - 1.28 (Linux 2.4.20) (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gestoresgarantiajuvenil.empleo.gob.es (192.148.211.186)
Host is up (0.060s latency).
rDNS record for 192.148.211.186: 186.red-192-148-211.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Failed to resolve "marcaespaña.gob.es".
Failed to resolve "sede.migualdad.gob.es".
Failed to resolve "webpub2des.igae.mihap.gob.es".
Failed to resolve "safe.minetad.gob.es".
Failed to resolve "correoweb.minetur.gob.es".
Failed to resolve "extranet.minetur.gob.es".
Failed to resolve "intermediosfirma.minetur.gob.es".
Failed to resolve "oficinamovil.minetur.gob.es".
Warning: Hostname portalextranet.minetur.gob.es resolves, but not to any IPv4 address. Try scanning with -6
Failed to resolve "portalextranet.minetur.gob.es".
Failed to resolve "remoto.minetur.gob.es".
Failed to resolve "www.deh.minhafp.gob.es".
Failed to resolve "webpub3.igae.minhafp.gob.es".
Failed to resolve "www.sefp.minhafp.gob.es".
Failed to resolve "archiva.minhap.gob.es".
Failed to resolve "www.deh.minhap.gob.es".
Failed to resolve "Webpub2Pyf.igae.minhap.gob.es".
Failed to resolve "almanzorv6.igae.minhap.gob.es".
Nmap scan report for www.emshi.gob.es (31.47.73.55)
Host is up (0.062s latency).
rDNS record for 31.47.73.55: hostv1b21-a55.neodigit.net
Not shown: 986 closed ports
PORT STATE SERVICE VERSION
21/tcp open ftp Pure-FTPd
22/tcp filtered ssh
25/tcp filtered smtp
80/tcp open http Apache httpd
110/tcp open pop3 Dovecot pop3d
143/tcp open imap Dovecot imapd
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
465/tcp filtered smtps
587/tcp filtered submission
873/tcp filtered rsync
993/tcp filtered imaps
995/tcp filtered pop3s
3306/tcp filtered mysql
5666/tcp filtered nrpe
Aggressive OS guesses: OpenWrt Kamikaze 7.09 (Linux 2.6.22) (95%), ProVision-ISR security DVR (94%), Linux 3.0 (94%), Linux 2.6.32 (93%), OpenWrt 0.9 - 7.09 (Linux 2.4.30 - 2.4.34) (93%), OpenWrt White Russian 0.9 (Linux 2.4.30) (93%), HP P2000 G3 NAS device (93%), DD-WRT v24-sp2 (Linux 3.10) (92%), Linux 2.6.32 - 3.10 (92%), Linux 3.2 (91%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 10 hops

Nmap scan report for www.erasmusplus.gob.es (82.98.139.44)
Host is up (0.060s latency).
rDNS record for 82.98.139.44: hl316.dinaserver.com
Not shown: 827 closed ports, 164 filtered ports
PORT STATE SERVICE VERSION
21/tcp open ftp vsftpd 2.0.8 or later
22/tcp open ssh OpenSSH 5.9p1 Debian 5ubuntu1.10 (Ubuntu Linux; protocol 2.0)
80/tcp open http Apache httpd
110/tcp open pop3 Dovecot pop3d
143/tcp open imap Dovecot imapd
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
993/tcp open ssl/imap Dovecot imapd
995/tcp open ssl/pop3 Dovecot pop3d
3306/tcp open mysql MySQL 5.5.54-0ubuntu0.12.04.1-log
Aggressive OS guesses: Linux 3.10 - 4.11 (94%), Linux 3.13 (94%), Linux 3.13 or 4.2 (94%), Linux 3.16 (94%), Linux 4.2 (94%), Linux 4.4 (94%), Linux 3.16 - 4.6 (92%), Linux 3.2 - 4.9 (92%), OpenWrt Kamikaze 7.09 (Linux 2.6.22) (91%), HP P2000 G3 NAS device (91%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 6 hops
Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel

Nmap scan report for www.face.gob.es (185.73.172.48)
Host is up (0.059s latency).
rDNS record for 185.73.172.48: 48.red-185-73-172.customer.static.ccgg.telefonica.net
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 5.0
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 5.0
2000/tcp open cisco-sccp?
5060/tcp open sip?
OS fingerprint not ideal because: maxTimingRatio (6.034000e+00) is greater than 1.4
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for www.fomento.gob.es (13.80.10.204)
Host is up (0.094s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for aplicaciones.fomento.gob.es (192.148.212.238)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/http Microsoft ISA httpd
Device type: general purpose|WAP
Running (JUST GUESSING): Microsoft Windows Vista|2008|7|8.1 (89%), AirSpan embedded (88%), OpenBSD 4.X (86%), Apple embedded (85%)
OS CPE: cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_server_2008::sp1 cpe:/o:microsoft:windows_7 cpe:/o:openbsd:openbsd:4.0 cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_8.1:r1 cpe:/h:apple:airport_extreme
Aggressive OS guesses: Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (89%), AirSpan ProST WiMAX access point (88%), Microsoft Windows Server 2008 R2 SP1 (87%), Microsoft Windows Server 2008 (87%), Microsoft Windows Server 2008 R2 (87%), Microsoft Windows 7 SP1 (87%), Microsoft Windows 7 or Windows Server 2008 R2 (86%), Microsoft Windows Server 2008 or 2008 Beta 3 (86%), Microsoft Windows 7 (86%), Microsoft Windows 7 SP1 or Windows Server 2008 R2 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for apps.fomento.gob.es (192.148.212.13)
Host is up (0.060s latency).
rDNS record for 192.148.212.13: 13.red-192-148-212.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 7.5
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 7.5
Device type: general purpose|WAP
Running (JUST GUESSING): Microsoft Windows Vista|2008|7|8.1 (89%), AirSpan embedded (88%), OpenBSD 4.X (88%), Apple embedded (85%)
OS CPE: cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_server_2008::sp1 cpe:/o:microsoft:windows_7 cpe:/o:openbsd:openbsd:4.0 cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_8.1:r1 cpe:/h:apple:airport_extreme
Aggressive OS guesses: Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (89%), AirSpan ProST WiMAX access point (88%), OpenBSD 4.0 (88%), Microsoft Windows Server 2008 R2 SP1 (87%), Microsoft Windows Server 2008 R2 or Windows 8 (87%), Microsoft Windows Server 2008 (87%), Microsoft Windows Server 2008 R2 (87%), Microsoft Windows 7 SP1 (87%), Microsoft Windows 7 or Windows Server 2008 R2 (86%), Microsoft Windows Server 2008 or 2008 Beta 3 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for appspre.fomento.gob.es (192.148.212.157)
Host is up (0.060s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 7.5
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 7.5
Device type: general purpose|WAP
Running (JUST GUESSING): Microsoft Windows Vista|2008|7|8.1 (89%), AirSpan embedded (88%), Apple embedded (86%), FreeBSD 6.X (85%)
OS CPE: cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_server_2008::sp1 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_8.1:r1 cpe:/h:apple:airport_extreme cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (89%), AirSpan ProST WiMAX access point (88%), Microsoft Windows Server 2008 R2 SP1 (88%), Microsoft Windows Server 2008 (88%), Microsoft Windows Server 2008 R2 (88%), Microsoft Windows 7 SP1 (88%), Microsoft Windows 7 or Windows Server 2008 R2 (87%), Microsoft Windows Server 2008 or 2008 Beta 3 (87%), Microsoft Windows 7 (87%), Microsoft Windows 7 SP1 or Windows Server 2008 R2 (87%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for atlasau.fomento.gob.es (192.148.212.14)
Host is up (0.061s latency).
rDNS record for 192.148.212.14: 14.red-192-148-212.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.4.2 ((Win64) PHP/5.4.3)
113/tcp closed ident
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012 (87%)
OS CPE: cpe:/o:microsoft:windows_server_2012
Aggressive OS guesses: Microsoft Windows Server 2012 (87%), Microsoft Windows Server 2012 or Windows Server 2012 R2 (87%), Microsoft Windows Server 2012 R2 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for bonificaciontransporte.fomento.gob.es (192.148.212.19)
Host is up (0.059s latency).
rDNS record for 192.148.212.19: 19.red-192-148-212.customer.static.ccgg.telefonica.net
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
Too many fingerprints match this host to give specific OS details

Nmap scan report for comparte.fomento.gob.es (192.148.212.26)
Host is up (0.059s latency).
rDNS record for 192.148.212.26: 26.red-192-148-212.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 7.5
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 7.5
Device type: general purpose|WAP
Running (JUST GUESSING): Microsoft Windows Vista|2008|7|8.1 (89%), AirSpan embedded (88%), Apple embedded (85%)
OS CPE: cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_server_2008::sp1 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_8.1:r1 cpe:/h:apple:airport_extreme
Aggressive OS guesses: Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (89%), AirSpan ProST WiMAX access point (88%), Microsoft Windows Server 2008 R2 SP1 (87%), Microsoft Windows Server 2008 R2 or Windows 8 (87%), Microsoft Windows Server 2008 (87%), Microsoft Windows Server 2008 R2 (87%), Microsoft Windows 7 SP1 (87%), Microsoft Windows 7 or Windows Server 2008 R2 (86%), Microsoft Windows Server 2008 or 2008 Beta 3 (86%), Microsoft Windows 7 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for extranet.fomento.gob.es (192.148.212.246)
Host is up (0.060s latency).
rDNS record for 192.148.212.246: 246.red-192-148-212.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd
Device type: general purpose|WAP
Running (JUST GUESSING): Microsoft Windows Vista|2008|7|8.1 (89%), AirSpan embedded (88%), OpenBSD 4.X (86%), Apple embedded (85%)
OS CPE: cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_server_2008::sp1 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_8 cpe:/o:openbsd:openbsd:4.0 cpe:/o:microsoft:windows_8.1:r1 cpe:/h:apple:airport_extreme
Aggressive OS guesses: Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (89%), AirSpan ProST WiMAX access point (88%), Microsoft Windows Server 2008 R2 SP1 (87%), Microsoft Windows Server 2008 R2 or Windows 8 (87%), Microsoft Windows Server 2008 (87%), Microsoft Windows Server 2008 R2 (87%), Microsoft Windows 7 SP1 (87%), Microsoft Windows 7 or Windows Server 2008 R2 (86%), Microsoft Windows Server 2008 or 2008 Beta 3 (86%), Microsoft Windows 7 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for iee.fomento.gob.es (192.148.212.21)
Host is up (0.059s latency).
rDNS record for 192.148.212.21: 21.red-192-148-212.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
113/tcp closed ident
443/tcp open https Microsoft-IIS/8.0
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012 (89%)
OS CPE: cpe:/o:microsoft:windows_server_2012:r2
Aggressive OS guesses: Microsoft Windows Server 2012 or Windows Server 2012 R2 (89%), Microsoft Windows Server 2012 (87%), Microsoft Windows Server 2012 R2 (87%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for m.fomento.gob.es (192.148.212.29)
Host is up (0.059s latency).
rDNS record for 192.148.212.29: 29.red-192-148-212.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 7.5
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 7.5
Device type: general purpose|WAP
Running (JUST GUESSING): Microsoft Windows Vista|2008|7|8.1 (89%), AirSpan embedded (88%), OpenBSD 4.X (86%), Apple embedded (85%)
OS CPE: cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_server_2008::sp1 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_8 cpe:/o:openbsd:openbsd:4.0 cpe:/o:microsoft:windows_8.1:r1 cpe:/h:apple:airport_extreme
Aggressive OS guesses: Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (89%), AirSpan ProST WiMAX access point (88%), Microsoft Windows Server 2008 R2 SP1 (87%), Microsoft Windows Server 2008 R2 or Windows 8 (87%), Microsoft Windows Server 2008 (87%), Microsoft Windows Server 2008 R2 (87%), Microsoft Windows 7 SP1 (87%), Microsoft Windows 7 or Windows Server 2008 R2 (86%), Microsoft Windows Server 2008 or 2008 Beta 3 (86%), Microsoft Windows 7 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for sede.fomento.gob.es (192.148.212.27)
Host is up (0.059s latency).
rDNS record for 192.148.212.27: 27.red-192-148-212.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 7.5
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 7.5
Device type: general purpose|WAP
Running (JUST GUESSING): Microsoft Windows Vista|2008|7|8.1 (89%), AirSpan embedded (88%), Apple embedded (85%)
OS CPE: cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_server_2008::sp1 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_8.1:r1 cpe:/h:apple:airport_extreme
Aggressive OS guesses: Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (89%), AirSpan ProST WiMAX access point (88%), Microsoft Windows Server 2008 R2 SP1 (87%), Microsoft Windows Server 2008 R2 or Windows 8 (87%), Microsoft Windows Server 2008 (87%), Microsoft Windows Server 2008 R2 (87%), Microsoft Windows 7 SP1 (87%), Microsoft Windows 7 or Windows Server 2008 R2 (86%), Microsoft Windows Server 2008 or 2008 Beta 3 (86%), Microsoft Windows 7 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for transporte.fomento.gob.es (192.148.212.176)
Host is up (0.059s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 8.5
113/tcp closed ident
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012 (89%)
OS CPE: cpe:/o:microsoft:windows_server_2012:r2
Aggressive OS guesses: Microsoft Windows Server 2012 or Windows Server 2012 R2 (89%), Microsoft Windows Server 2012 (87%), Microsoft Windows Server 2012 R2 (87%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for webdav.fomento.gob.es (192.148.212.241)
Host is up (0.060s latency).
rDNS record for 192.148.212.241: 241.red-192-148-212.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd
444/tcp open ssl/http Microsoft IIS httpd
Device type: general purpose|WAP
Running (JUST GUESSING): Microsoft Windows Vista|2008|7|8.1 (89%), AirSpan embedded (88%), OpenBSD 4.X (86%), Apple embedded (85%)
OS CPE: cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_server_2008::sp1 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_8 cpe:/o:openbsd:openbsd:4.0 cpe:/o:microsoft:windows_8.1:r1 cpe:/h:apple:airport_extreme
Aggressive OS guesses: Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (89%), AirSpan ProST WiMAX access point (88%), Microsoft Windows Server 2008 R2 SP1 (87%), Microsoft Windows Server 2008 R2 or Windows 8 (87%), Microsoft Windows Server 2008 (87%), Microsoft Windows Server 2008 R2 (87%), Microsoft Windows 7 SP1 (87%), Microsoft Windows 7 or Windows Server 2008 R2 (86%), Microsoft Windows Server 2008 or 2008 Beta 3 (86%), Microsoft Windows 7 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for geoportalgasolineras.gob.es (193.146.1.96)
Host is up (0.060s latency).
Other addresses for geoportalgasolineras.gob.es (not scanned): 2001:720:438:400::96
rDNS record for 193.146.1.96: geoportal.minetad.gob.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.4.10 ((Win64) mod_jk/1.2.37)
443/tcp open ssl/http Apache httpd 2.4.10 ((Win64) mod_jk/1.2.37)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for sede.guimar.gob.es (62.36.11.146)
Host is up (0.096s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 8.5
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 8.5
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012 (89%)
OS CPE: cpe:/o:microsoft:windows_server_2012:r2
Aggressive OS guesses: Microsoft Windows Server 2012 or Windows Server 2012 R2 (89%), Microsoft Windows Server 2012 (87%), Microsoft Windows Server 2012 R2 (87%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for hacienda.gob.es (193.203.200.85)
Host is up (0.060s latency).
rDNS record for 193.203.200.85: www.patrimoniodelestado.minhafp.es
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp closed https
8082/tcp closed blackice-alerts
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 6.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 6.2-RELEASE (85%), OpenBSD 4.3 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for autodiscover.igae.hacienda.gob.es (195.10.201.174)
Host is up (0.059s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
Too many fingerprints match this host to give specific OS details

Nmap scan report for quimera10.igae.hacienda.gob.es (88.12.28.65)
Host is up (0.061s latency).
rDNS record for 88.12.28.65: 65.red-88-12-28.staticip.rima-tde.net
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
7443/tcp open ssl/http Fortinet security device httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: WAP|general purpose
Running: Linux 2.4.X|2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.6
OS details: Tomato 1.27 - 1.28 (Linux 2.4.20), Linux 2.6.18 - 2.6.22
Service Info: Device: security-misc

Nmap scan report for quimera11.igae.hacienda.gob.es (80.59.122.129)
Host is up (0.093s latency).
rDNS record for 80.59.122.129: 129.red-80-59-122.staticip.rima-tde.net
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
7443/tcp open ssl/http Fortinet security device httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: WAP|general purpose
Running (JUST GUESSING): Linux 2.4.X|2.6.X (98%), D-Link embedded (93%), TRENDnet embedded (93%)
OS CPE: cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.6 cpe:/h:dlink:dwl-624%2b cpe:/h:dlink:dwl-2000ap cpe:/h:trendnet:tew-432brp
Aggressive OS guesses: Tomato 1.27 - 1.28 (Linux 2.4.20) (98%), Linux 2.6.18 - 2.6.22 (98%), D-Link DWL-624+ or DWL-2000AP, or TRENDnet TEW-432BRP WAP (93%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: security-misc

Nmap scan report for sip.igae.hacienda.gob.es (195.10.201.73)
Host is up (0.059s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/sip Microsoft Skype for Business SIP 2015
5061/tcp open ssl/sip-tls?
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012|Vista|2008|7 (90%)
OS CPE: cpe:/o:microsoft:windows_server_2012:r2 cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_server_2008::sp1 cpe:/o:microsoft:windows_7
Aggressive OS guesses: Microsoft Windows Server 2012 or Windows Server 2012 R2 (90%), Microsoft Windows Server 2012 (88%), Microsoft Windows Server 2012 R2 (88%), Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for tique.igae.hacienda.gob.es (195.10.201.50)
Host is up (0.059s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/https BigIP
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAAD74%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,107,"HTTP/1\.0\x20302\x20Found\r\nServer:\x20BigIP\r\nCac
SF:he-Control:\x20no-cache,\x20no-store\r\nConnection:\x20Close\r\nContent
SF:-Length:\x200\r\nLocation:\x20/vdesk/hangup\.php3\r\nSet-Cookie:\x20Las
SF:tMRH_Session=16a2bd42;path=/;secure\r\nSet-Cookie:\x20MRHSession=28d792
SF:6c3ea91136d468786116a2bd42;path=/;secure\r\n\r\n")%r(HTTPOptions,D6A,"H
SF:TTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x
SF:2001:05:56\x20GMT\r\nServer:\x20BigIP\r\nContent-Length:\x203229\r\nCon
SF:nection:\x20close\r\nContent-Type:\x20text/html;\x20charset=utf-8\r\nX-
SF:Frame-Options:\x20DENY\r\nVary:\x20Accept-Encoding\r\n\r\n<html>\n\x20\
SF:x20<head>\n\x20\x20\x20\x20<title>BIG-IP:\x20p\xc3\xa1gina\x20de\x20err
SF:or</title>\n\x20\x20\x20\x20<link\x20rel=\"stylesheet\"\x20type=\"text/
SF:css\"\x20HREF=\"/public/include/css/apm\.css\">\n\x20\x20\x20\x20<scrip
SF:t\x20src=\"/public/include/js/common\.js\"\x20language=\"javascript\"><
SF:/script>\n\x20\x20\x20\x20<script\x20src=\"/public/include/js/agent_com
SF:mon\.js\"\x20language=\"javascript\"></script>\n\x20\x20\x20\x20<script
SF:\x20language=\"javascript\">\n\x20\x20\x20\x20\n\x20\x20\x20\x20\x20\x2
SF:0function\x20OnLoad\(\)\x20\n\x20\x20\x20\x20\x20\x20{\n\x20\x20\x20\x2
SF:0\x20\x20\x20\x20var\x20display_session\x20=\x20get_cookie\(\"LastMRH_S
SF:ession\"\);\n\x20\x20\x20\x20\x20\x20\x20\x20if\(null\x20!=\x20display_
SF:session\)\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20\x20\x20document\.getEl
SF:ementById\(\"sessionDIV\"\)\.innerHTML\x20=\x20'<BR>'\x20\+\x20\"N\xc3\
SF:xbamero\x20de\x20referencia\x20de\x20la\x20sesi\xc3\xb3n:\"\x20\+\x20'&
SF:nbsp;'\x20\+\x20display_session\x20\+\x20'<BR>';\n\x20\x20\x20\x20\x20\
SF:x20\x20\x20\x20\x20document\.getElementById\(\"sessionDIV\"\)\.style\.v
SF:isibility\x20=\x20\"visib")%r(FourOhFourRequest,107,"HTTP/1\.0\x20302\x
SF:20Found\r\nServer:\x20BigIP\r\nCache-Control:\x20no-cache,\x20no-store\
SF:r\nConnection:\x20Close\r\nContent-Length:\x200\r\nLocation:\x20/vdesk/
SF:hangup\.php3\r\nSet-Cookie:\x20LastMRH_Session=aafa40bd;path=/;secure\r
SF:\nSet-Cookie:\x20MRHSession=79de8bd18ec226caa1cee52eaafa40bd;path=/;sec
SF:ure\r\n\r\n");
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for webconf.igae.hacienda.gob.es (195.10.201.74)
Host is up (0.059s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/https?
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012|Vista|2008|7 (88%)
OS CPE: cpe:/o:microsoft:windows_server_2012 cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_server_2008::sp1 cpe:/o:microsoft:windows_7
Aggressive OS guesses: Microsoft Windows Server 2012 (88%), Microsoft Windows Server 2012 or Windows Server 2012 R2 (88%), Microsoft Windows Server 2012 R2 (88%), Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for webpub2.igae.hacienda.gob.es (195.10.201.169)
Host is up (0.060s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
113/tcp closed ident
443/tcp open ssl/https BigIP
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAAD76%P=x86_64-pc-linux-gnu
SF:%r(FourOhFourRequest,7E,"HTTP/1\.0\x20302\x20Found\r\nLocation:\x20http
SF:s:///vdesk/my\.acl\.php3\?errorcode=17\r\nServer:\x20BigIP\r\nConnectio
SF:n:\x20close\r\nContent-Length:\x200\r\n\r\n")%r(SIPOptions,83,"HTTP/1\.
SF:0\x20302\x20Found\r\nLocation:\x20https:///vdesk/my\.acl\.php3\?errorco
SF:de=17\r\nServer:\x20BigIP\r\nConnection:\x20Keep-Alive\r\nContent-Lengt
SF:h:\x200\r\n\r\n");
Device type: general purpose|load balancer
Running (JUST GUESSING): FreeBSD 6.X (92%), OpenBSD 4.X (86%), F5 Networks embedded (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2 cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: FreeBSD 6.2-RELEASE (92%), OpenBSD 4.0 (86%), OpenBSD 4.3 (85%), F5 BIG-IP Edge Gateway (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for webpub4.igae.hacienda.gob.es (195.10.201.151)
Host is up (0.059s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/http-proxy F5 BIG-IP load balancer http proxy
Device type: general purpose|load balancer
Running (JUST GUESSING): FreeBSD 6.X (92%), OpenBSD 4.X (86%), F5 Networks embedded (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2 cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: FreeBSD 6.2-RELEASE (92%), OpenBSD 4.0 (86%), OpenBSD 4.3 (85%), F5 BIG-IP Edge Gateway (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for pda.pap.hacienda.gob.es (195.10.201.149)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/https?
Device type: general purpose|load balancer
Running (JUST GUESSING): FreeBSD 6.X (92%), OpenBSD 4.X (86%), F5 Networks embedded (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2 cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: FreeBSD 6.2-RELEASE (92%), OpenBSD 4.0 (86%), OpenBSD 4.3 (85%), F5 BIG-IP Edge Gateway (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for cdrportal.haciendayadministracionespublicas.gob.es (193.203.200.129)
Host is up (0.060s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp closed https
8082/tcp closed blackice-alerts
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (87%), FreeBSD 6.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (87%), FreeBSD 6.2-RELEASE (85%), OpenBSD 4.3 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for puertohuelva.gob.es (104.40.179.177)
Host is up (0.094s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/http Apache httpd
843/tcp open http Apache httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012 (87%)
OS CPE: cpe:/o:microsoft:windows_server_2012:r2
Aggressive OS guesses: Microsoft Windows Server 2012 or Windows Server 2012 R2 (87%), Microsoft Windows Server 2012 R2 (87%), Microsoft Windows Server 2012 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for idae.gob.es (185.37.224.183)
Host is up (0.064s latency).
rDNS record for 185.37.224.183: ptrxolido183.xolido.com
Not shown: 994 closed ports
PORT STATE SERVICE VERSION
21/tcp open ftp ProFTPD
25/tcp filtered smtp
80/tcp open http nginx
443/tcp open ssl/http nginx
465/tcp filtered smtps
587/tcp filtered submission
Aggressive OS guesses: Linux 2.6.32 (95%), Linux 2.6.32 - 3.13 (94%), Linux 2.6.32 - 2.6.39 (94%), Linux 2.6.32 - 3.1 (94%), Linux 2.6.39 (94%), HP P2000 G3 NAS device (93%), Linux 2.6.32 - 3.10 (92%), Linux 2.6.32 - 3.9 (92%), Linux 3.10 (92%), Linux 3.2 (92%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 6 hops

Nmap scan report for movaltvehiculos.idae.gob.es (185.37.224.160)
Host is up (0.066s latency).
rDNS record for 185.37.224.160: ptrxolido160.xolido.com
Not shown: 992 filtered ports
PORT STATE SERVICE VERSION
21/tcp open ftp Microsoft ftpd
53/tcp open domain?
80/tcp open http Microsoft IIS httpd 8.5
110/tcp open pop3 MailEnable POP3 Server
143/tcp open imap MailEnable imapd
443/tcp open https Microsoft-HTTPAPI/2.0
3389/tcp open ms-wbt-server Microsoft Terminal Service
8443/tcp open ssl/http Microsoft IIS httpd 8.5
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port53-TCP:V=7.70%I=7%D=10/8%Time=5BBAAD7D%P=x86_64-pc-linux-gnu%r(DNSV
SF:ersionBindReqTCP,20,"\0\x1e\0\x06\x81\x04\0\x01\0\0\0\0\0\0\x07version\
SF:x04bind\0\0\x10\0\x03");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012 (86%)
OS CPE: cpe:/o:microsoft:windows_server_2012
Aggressive OS guesses: Microsoft Windows Server 2012 (86%), Microsoft Windows Server 2012 or Windows Server 2012 R2 (86%), Microsoft Windows Server 2012 R2 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for notificaciones.idae.gob.es (185.37.224.175)
Host is up (0.064s latency).
rDNS record for 185.37.224.175: ptrxolido175.xolido.com
Not shown: 994 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
25/tcp filtered smtp
80/tcp open http Apache httpd
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
465/tcp filtered smtps
587/tcp filtered submission
Aggressive OS guesses: Linux 2.6.32 - 3.13 (94%), Linux 2.6.32 (94%), Linux 2.6.32 - 2.6.39 (94%), Linux 2.6.32 - 3.1 (94%), Linux 2.6.39 (94%), HP P2000 G3 NAS device (93%), Linux 3.10 (92%), Linux 3.2 (92%), OpenWrt Kamikaze 7.09 (Linux 2.6.22) (91%), Linux 3.11 (91%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 6 hops

Nmap scan report for registro.idae.gob.es (185.37.224.143)
Host is up (0.065s latency).
rDNS record for 185.37.224.143: ptrxolido143.xolido.com
Not shown: 997 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
25/tcp filtered smtp
587/tcp filtered submission
Too many fingerprints match this host to give specific OS details
Network Distance: 6 hops

Nmap scan report for sede.idae.gob.es (185.37.224.144)
Host is up (0.064s latency).
rDNS record for 185.37.224.144: ptrxolido144.xolido.com
Not shown: 994 closed ports
PORT STATE SERVICE VERSION
21/tcp open ftp ProFTPD
25/tcp filtered smtp
80/tcp open http nginx
443/tcp open ssl/http nginx
465/tcp filtered smtps
587/tcp filtered submission
Aggressive OS guesses: Linux 2.6.32 (94%), Linux 2.6.32 - 3.13 (94%), Linux 2.6.32 - 2.6.39 (94%), Linux 2.6.32 - 3.1 (94%), Linux 2.6.39 (94%), HP P2000 G3 NAS device (93%), Linux 2.6.32 - 3.10 (92%), Linux 3.10 (92%), Linux 3.2 (92%), Linux 2.6.32 - 3.9 (91%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 6 hops

Nmap scan report for dependencia.imserso.gob.es (91.216.12.144)
Host is up (0.061s latency).
rDNS record for 91.216.12.144: 144.red-91-216-12.customer.static.ccgg.telefonica.net
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http IBM HTTP Server 6.0.2 (Derived from Apache 2.0.47; Unix)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|WAP
Running (JUST GUESSING): Linux 2.6.X (97%), D-Link embedded (94%), TRENDnet embedded (94%)
OS CPE: cpe:/o:linux:linux_kernel:2.6 cpe:/h:dlink:dwl-624%2b cpe:/h:dlink:dwl-2000ap cpe:/h:trendnet:tew-432brp
Aggressive OS guesses: Linux 2.6.18 - 2.6.22 (97%), D-Link DWL-624+ or DWL-2000AP, or TRENDnet TEW-432BRP WAP (94%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.imserso.gob.es (91.216.12.150)
Host is up (0.061s latency).
rDNS record for 91.216.12.150: 150.red-91-216-12.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
443/tcp open ssl/http Apache httpd 2.2.29 ((Unix) mod_ssl/2.2.29 OpenSSL/1.0.1e-fips DAV/2)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|WAP
Running (JUST GUESSING): Linux 2.6.X (97%), D-Link embedded (94%), TRENDnet embedded (94%)
OS CPE: cpe:/o:linux:linux_kernel:2.6 cpe:/h:dlink:dwl-624%2b cpe:/h:dlink:dwl-2000ap cpe:/h:trendnet:tew-432brp
Aggressive OS guesses: Linux 2.6.18 - 2.6.22 (97%), D-Link DWL-624+ or DWL-2000AP, or TRENDnet TEW-432BRP WAP (94%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for sede.inap.gob.es (185.73.174.129)
Host is up (0.061s latency).
rDNS record for 185.73.174.129: 129.red-185-73-174.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 3.X|4.X (86%)
OS CPE: cpe:/o:linux:linux_kernel:3.10 cpe:/o:linux:linux_kernel:4.0
Aggressive OS guesses: Linux 3.10 (86%), Linux 3.10 - 3.16 (86%), Linux 4.0 (86%), Linux 3.10 - 3.12 (86%), Linux 4.4 (86%), Linux 4.9 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sedepre.inap.gob.es (185.73.174.139)
Host is up (0.061s latency).
rDNS record for 185.73.174.139: 139.red-185-73-174.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 3.X|4.X (89%)
OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4
Aggressive OS guesses: Linux 3.10 - 3.16 (89%), Linux 3.11 - 4.1 (88%), Linux 3.16 (88%), Linux 4.4 (88%), Linux 3.2.0 (87%), Linux 3.13 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for hada.industriaconectada40.gob.es (213.170.48.221)
Host is up (0.059s latency).
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http nginx 1.12.1
443/tcp open ssl/http nginx 1.12.1
5432/tcp open postgresql PostgreSQL DB 9.6.4 - 9.6.6
8080/tcp open http Apache Tomcat/Coyote JSP engine 1.1
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: WAP|general purpose
Running (JUST GUESSING): Linux 2.6.X|3.X (88%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.22 cpe:/o:linux:linux_kernel:3.18
Aggressive OS guesses: OpenWrt Kamikaze 7.09 (Linux 2.6.22) (88%), OpenWrt Chaos Calmer (Linux 3.18) (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.ine.gob.es (195.254.149.89)
Host is up (0.060s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Apache httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|firewall|proxy server|WAP|PBX
Running (JUST GUESSING): Linux 2.6.X (88%), Cisco embedded (86%), Riverbed embedded (86%), ZoneAlarm embedded (86%), Ruckus embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.22.1 cpe:/o:linux:linux_kernel:2.6 cpe:/h:cisco:sa520 cpe:/h:riverbed:steelhead_200 cpe:/h:zonealarm:z100g cpe:/h:cisco:uc320w cpe:/h:ruckus:7363
Aggressive OS guesses: Linux 2.6.22.1-32.fc6 (x86, SMP) (88%), Linux 2.6.9 - 2.6.18 (87%), Linux 2.6.9 (87%), Oracle Enterprise Linux 6 (Linux 2.6.32) (86%), Cisco SA520 firewall (Linux 2.6) (86%), Linux 2.6.11 (86%), Linux 2.6.18 (86%), Linux 2.6.28 (86%), Linux 2.6.30 (86%), Linux 2.6.32 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.inmujer.gob.es (195.64.186.137)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http server-header-none
443/tcp open ssl/https server-header-none
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAAD8C%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-header-n
SF:one\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2001:06:20\x20GMT\r\nContent
SF:-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20close\r
SF:\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>Forbidden<
SF:/H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20the\x20
SF:requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/1\.1\x2
SF:0501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nDate:\x2
SF:0Mon,\x2008\x20Oct\x202018\x2001:06:20\x20GMT\r\nContent-length:\x20148
SF:\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HE
SF:AD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Implement
SF:ed</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20requested
SF:\x20method\.\n</BODY></HTML>")%r(RTSPRequest,131,"HTTP/1\.1\x20400\x20B
SF:ad\x20request\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x
SF:20Oct\x202018\x2001:06:20\x20GMT\r\nContent-length:\x20147\r\nContent-t
SF:ype:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad
SF:\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20brow
SF:ser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20understa
SF:nd\.\n</BODY></HTML>")%r(FourOhFourRequest,1C0,"HTTP/1\.1\x20404\x20Not
SF:\x20found\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oc
SF:t\x202018\x2001:06:26\x20GMT\r\nContent-type:\x20text/html\r\nContent-l
SF:ength:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META\x20HTTP-EQUIV=
SF:\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859-1\"><TITLE>Not
SF:\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x20requested\x20
SF:object\x20does\x20not\x20exist\x20on\x20this\x20server\.\x20The\x20link
SF:\x20you\x20followed\x20is\x20either\x20outdated,\x20inaccurate,\x20or\x
SF:20the\x20server\x20has\x20been\x20instructed\x20not\x20to\x20let\x20you
SF:\x20have\x20it\.\x20")%r(Help,131,"HTTP/1\.1\x20400\x20Bad\x20request\r
SF:\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x
SF:2001:06:46\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20text/ht
SF:ml\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20request</TI
SF:TLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20sent\x20
SF:a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</BODY></
SF:HTML>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAAD93%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-h
SF:eader-none\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2001:06:27\x20GMT\r\n
SF:Content-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20
SF:close\r\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>For
SF:bidden</H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20
SF:the\x20requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/
SF:1\.1\x20501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nD
SF:ate:\x20Mon,\x2008\x20Oct\x202018\x2001:06:28\x20GMT\r\nContent-length:
SF:\x20148\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<H
SF:TML><HEAD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Im
SF:plemented</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20re
SF:quested\x20method\.\n</BODY></HTML>")%r(FourOhFourRequest,1C0,"HTTP/1\.
SF:1\x20404\x20Not\x20found\r\nServer:\x20server-header-none\r\nDate:\x20M
SF:on,\x2008\x20Oct\x202018\x2001:06:28\x20GMT\r\nContent-type:\x20text/ht
SF:ml\r\nContent-length:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META
SF:\x20HTTP-EQUIV=\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859
SF:-1\"><TITLE>Not\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x
SF:20requested\x20object\x20does\x20not\x20exist\x20on\x20this\x20server\.
SF:\x20The\x20link\x20you\x20followed\x20is\x20either\x20outdated,\x20inac
SF:curate,\x20or\x20the\x20server\x20has\x20been\x20instructed\x20not\x20t
SF:o\x20let\x20you\x20have\x20it\.\x20")%r(RTSPRequest,131,"HTTP/1\.1\x204
SF:00\x20Bad\x20request\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\
SF:x2008\x20Oct\x202018\x2001:06:38\x20GMT\r\nContent-length:\x20147\r\nCo
SF:ntent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TI
SF:TLE>Bad\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\
SF:x20browser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20u
SF:nderstand\.\n</BODY></HTML>")%r(Help,131,"HTTP/1\.1\x20400\x20Bad\x20re
SF:quest\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oct\x2
SF:02018\x2001:06:54\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20
SF:text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20requ
SF:est</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20s
SF:ent\x20a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</
SF:BODY></HTML>");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for www.interior.gob.es (209.84.3.254)
Host is up (0.091s latency).
Other addresses for www.interior.gob.es (not scanned): 4.26.245.126 8.254.119.254
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Sandpiper Footprint http load balancer 6.1.951.28
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for sede.irmc.gob.es (193.147.89.116)
Host is up (0.061s latency).
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
21/tcp open tcpwrapped
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
8080/tcp closed http-proxy
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012|Vista|2008|7 (89%)
OS CPE: cpe:/o:microsoft:windows_server_2012 cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_server_2008::sp1 cpe:/o:microsoft:windows_7
Aggressive OS guesses: Microsoft Windows Server 2012 (89%), Microsoft Windows Server 2012 or Windows Server 2012 R2 (89%), Microsoft Windows Server 2012 R2 (89%), Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (86%), Microsoft Windows 7 Professional (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for sede.isciii.gob.es (193.146.50.159)
Host is up (0.061s latency).
Not shown: 985 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http
113/tcp closed ident
443/tcp open ssl/https
1720/tcp open h323q931?
6000/tcp closed X11
6001/tcp closed X11:1
6002/tcp closed X11:2
6003/tcp closed X11:3
6004/tcp closed X11:4
6005/tcp closed X11:5
6006/tcp closed X11:6
6007/tcp closed X11:7
6009/tcp closed X11:9
6025/tcp closed x11
6059/tcp closed X11:59
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAAD90%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,3502,"HTTP/1\.1\x20503\x20Service\x20Unavailable\r\nDate:\x20Mon
SF:\x20Oct\x20\x208\x2001:06:23\x202018\x20GMT\r\nContent-Length:\x2086358
SF:\r\nConnection:\x20close\r\nContent-Type:\x20text/html\r\n\r\n<!DOCTYPE
SF:\x20html\x20PUBLIC\x20\"-//W3C//DTD\x20XHTML\x201\.0\x20Transitional//E
SF:N\"\x20\"http://www\.w3\.org/TR/xhtml1/DTD/xhtml1-transitional\.dtd\">\
SF:n<html\x20xmlns=\"http://www\.w3\.org/1999/xhtml\">\n\x20\x20\n\x20\x20
SF:<head>\n\x20\x20\x20\x20<meta\x20http-equiv=\"Content-Type\"\x20content
SF:=\"text/html;\x20charset=utf-8\"\x20/>\n\x20\x20\x20\x20<style\x20type=
SF:\"text/css\">\n\x20\x20\x20\x20\x20\x20body{\n\x20\x20\x20\x20\x20\x20\
SF:x20\x20background:url\('https://sede\.isciii\.gob\.es/images/fnd_cab2\.
SF:jpg'\)\x20repeat-x\x20top\x20center;\n\x20\x20\x20\x20\x20\x20\x20\x20f
SF:ont-family:Arial,\x20Helvetica,\x20sans-serif;\n\x20\x20\x20\x20\x20\x2
SF:0\x20\x2062\.5%;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20
SF:\x20\x20\*{\n\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x2
SF:0\x20\x20\x20\x20padding:0;\n\x20\x20\x20\x20\x20\x20\x20\x20border:0}\
SF:n\x20\x20\x20\x20\x20\x20#TODO{\n\x20\x20\x20\x20\x20\x20\x20\x20margin
SF::0\x20auto;\n\x20\x20\x20\x20\x20\x20\x20\x20width:965px;\n\x20\x20\x20
SF:\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div\.link{\n\x20\x20\x20\x20\x20
SF:\x20\x20\x201\.1em}\n\x20\x20\x20\x20\x20\x20\n\x20\x20\x20\x
SF:20\x20\x20#CABECERA{\n\x20\x20\x20\x20\x20\x20\x20\x20background:url\('
SF:https://sede\.isciii\.gob\.es/images/fnd_cab3\.jpg'\)\x20no-repeat\x20t
SF:op\x20center;\n\x20\x20\x20")%r(HTTPOptions,3502,"HTTP/1\.1\x20503\x20S
SF:ervice\x20Unavailable\r\nDate:\x20Mon\x20Oct\x20\x208\x2001:06:24\x2020
SF:18\x20GMT\r\nContent-Length:\x2086358\r\nConnection:\x20close\r\nConten
SF:t-Type:\x20text/html\r\n\r\n<!DOCTYPE\x20html\x20PUBLIC\x20\"-//W3C//DT
SF:D\x20XHTML\x201\.0\x20Transitional//EN\"\x20\"http://www\.w3\.org/TR/xh
SF:tml1/DTD/xhtml1-transitional\.dtd\">\n<html\x20xmlns=\"http://www\.w3\.
SF:org/1999/xhtml\">\n\x20\x20\n\x20\x20<head>\n\x20\x20\x20\x20<meta\x20h
SF:ttp-equiv=\"Content-Type\"\x20content=\"text/html;\x20charset=utf-8\"\x
SF:20/>\n\x20\x20\x20\x20<style\x20type=\"text/css\">\n\x20\x20\x20\x20\x2
SF:0\x20body{\n\x20\x20\x20\x20\x20\x20\x20\x20background:url\('https://se
SF:de\.isciii\.gob\.es/images/fnd_cab2\.jpg'\)\x20repeat-x\x20top\x20cente
SF:r;\n\x20\x20\x20\x20\x20\x20\x20\x20Arial,\x20Helvetica,\x2
SF:0sans-serif;\n\x20\x20\x20\x20\x20\x20\x20\x2062\.5%;\n\x20\x
SF:20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20\*{\n\x20\x20\x20\x20\x20\
SF:x20\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:0;\n\x20\
SF:x20\x20\x20\x20\x20\x20\x20border:0}\n\x20\x20\x20\x20\x20\x20#TODO{\n\
SF:x20\x20\x20\x20\x20\x20\x20\x200\x20auto;\n\x20\x20\x20\x20\x20\
SF:x20\x20\x20width:965px;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x2
SF:0\x20div\.link{\n\x20\x20\x20\x20\x20\x20\x20\x201\.1em}\n\x2
SF:0\x20\x20\x20\x20\x20\n\x20\x20\x20\x20\x20\x20#CABECERA{\n\x20\x20\x20
SF:\x20\x20\x20\x20\x20background:url\('https://sede\.isciii\.gob\.es/imag
SF:es/fnd_cab3\.jpg'\)\x20no-repeat\x20top\x20center;\n\x20\x20\x20");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAAD97%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,6E78,"HTTP/1\.1\x20503\x20Service\x20Unavailable\r\nDate:
SF:\x20Mon\x20Oct\x20\x208\x2001:06:31\x202018\x20GMT\r\nContent-Length:\x
SF:2086358\r\nConnection:\x20close\r\nContent-Type:\x20text/html\r\n\r\n<!
SF:DOCTYPE\x20html\x20PUBLIC\x20\"-//W3C//DTD\x20XHTML\x201\.0\x20Transiti
SF:onal//EN\"\x20\"http://www\.w3\.org/TR/xhtml1/DTD/xhtml1-transitional\.
SF:dtd\">\n<html\x20xmlns=\"http://www\.w3\.org/1999/xhtml\">\n\x20\x20\n\
SF:x20\x20<head>\n\x20\x20\x20\x20<meta\x20http-equiv=\"Content-Type\"\x20
SF:content=\"text/html;\x20charset=utf-8\"\x20/>\n\x20\x20\x20\x20<style\x
SF:20type=\"text/css\">\n\x20\x20\x20\x20\x20\x20body{\n\x20\x20\x20\x20\x
SF:20\x20\x20\x20background:url\('https://sede\.isciii\.gob\.es/images/fnd
SF:_cab2\.jpg'\)\x20repeat-x\x20top\x20center;\n\x20\x20\x20\x20\x20\x20\x
SF:20\x20Arial,\x20Helvetica,\x20sans-serif;\n\x20\x20\x20\x20
SF:\x20\x20\x20\x2062\.5%;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\
SF:x20\x20\x20\x20\*{\n\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20
SF:\x20\x20\x20\x20\x20\x20padding:0;\n\x20\x20\x20\x20\x20\x20\x20\x20bor
SF:der:0}\n\x20\x20\x20\x20\x20\x20#TODO{\n\x20\x20\x20\x20\x20\x20\x20\x2
SF:00\x20auto;\n\x20\x20\x20\x20\x20\x20\x20\x20width:965px;\n\x20\
SF:x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div\.link{\n\x20\x20\x20\
SF:x20\x20\x20\x20\x201\.1em}\n\x20\x20\x20\x20\x20\x20\n\x20\x2
SF:0\x20\x20\x20\x20#CABECERA{\n\x20\x20\x20\x20\x20\x20\x20\x20background
SF::url\('https://sede\.isciii\.gob\.es/images/fnd_cab3\.jpg'\)\x20no-repe
SF:at\x20top\x20center;\n\x20\x20\x20")%r(HTTPOptions,4EE8,"HTTP/1\.1\x205
SF:03\x20Service\x20Unavailable\r\nDate:\x20Mon\x20Oct\x20\x208\x2001:06:3
SF:1\x202018\x20GMT\r\nContent-Length:\x2086358\r\nConnection:\x20close\r\
SF:nContent-Type:\x20text/html\r\n\r\n<!DOCTYPE\x20html\x20PUBLIC\x20\"-//
SF:W3C//DTD\x20XHTML\x201\.0\x20Transitional//EN\"\x20\"http://www\.w3\.or
SF:g/TR/xhtml1/DTD/xhtml1-transitional\.dtd\">\n<html\x20xmlns=\"http://ww
SF:w\.w3\.org/1999/xhtml\">\n\x20\x20\n\x20\x20<head>\n\x20\x20\x20\x20<me
SF:ta\x20http-equiv=\"Content-Type\"\x20content=\"text/html;\x20charset=ut
SF:f-8\"\x20/>\n\x20\x20\x20\x20<style\x20type=\"text/css\">\n\x20\x20\x20
SF:\x20\x20\x20body{\n\x20\x20\x20\x20\x20\x20\x20\x20background:url\('htt
SF:ps://sede\.isciii\.gob\.es/images/fnd_cab2\.jpg'\)\x20repeat-x\x20top\x
SF:20center;\n\x20\x20\x20\x20\x20\x20\x20\x20Arial,\x20Helvet
SF:ica,\x20sans-serif;\n\x20\x20\x20\x20\x20\x20\x20\x2062\.5%;\
SF:n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20\*{\n\x20\x20\x20\x
SF:20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:0;
SF:\n\x20\x20\x20\x20\x20\x20\x20\x20border:0}\n\x20\x20\x20\x20\x20\x20#T
SF:ODO{\n\x20\x20\x20\x20\x20\x20\x20\x200\x20auto;\n\x20\x20\x20\x
SF:20\x20\x20\x20\x20width:965px;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20
SF:\x20\x20\x20div\.link{\n\x20\x20\x20\x20\x20\x20\x20\x201\.1e
SF:m}\n\x20\x20\x20\x20\x20\x20\n\x20\x20\x20\x20\x20\x20#CABECERA{\n\x20\
SF:x20\x20\x20\x20\x20\x20\x20background:url\('https://sede\.isciii\.gob\.
SF:es/images/fnd_cab3\.jpg'\)\x20no-repeat\x20top\x20center;\n\x20\x20\x20
SF:");
Aggressive OS guesses: Linux 3.18 (85%), D-Link DSL-2890AL ADSL router (85%), Draytek Vigor 2960 VPN firewall (85%), OpenWrt Kamikaze 8.09 (Linux 2.6.25.20) (85%), IPCop 1.9.19 or IPFire 2.9 firewall (Linux 2.6.32) (85%), IPCop 2.0 (Linux 2.6.32) (85%), Linux 2.6.32 (85%), Linux 2.6.36 (85%), IPCop 2 firewall (Linux 3.4) (85%), Linux 3.2 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.isfas.gob.es (193.33.2.141)
Host is up (0.060s latency).
rDNS record for 193.33.2.141: IP-193-33-2-141.mde.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for lamoncloa.gob.es (212.128.109.1)
Host is up (0.060s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAAD99%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,C3,"HTTP/1\.1\x20403\x20Forbidden\r\nContent-Length:\x20148\r\n\
SF:r\n<html><title>Request\x20Denied!</title><body><center><h1>Request\x20
SF:Denied!</h1><p>If\x20you\x20have\x20any\x20questions\x20contact\x20the\
SF:x20admin\.</p></center></body></html>")%r(HTTPOptions,C3,"HTTP/1\.1\x20
SF:403\x20Forbidden\r\nContent-Length:\x20148\r\n\r\n<html><title>Request\
SF:x20Denied!</title><body><center><h1>Request\x20Denied!</h1><p>If\x20you
SF:\x20have\x20any\x20questions\x20contact\x20the\x20admin\.</p></center><
SF:/body></html>")%r(FourOhFourRequest,C3,"HTTP/1\.1\x20403\x20Forbidden\r
SF:\nContent-Length:\x20148\r\n\r\n<html><title>Request\x20Denied!</title>
SF:<body><center><h1>Request\x20Denied!</h1><p>If\x20you\x20have\x20any\x2
SF:0questions\x20contact\x20the\x20admin\.</p></center></body></html>");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for voz.lamoncloa.gob.es (79.136.80.254)
Host is up (0.12s latency).
rDNS record for 79.136.80.254: app-se.readspeaker.com
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Aggressive OS guesses: Crestron XPanel control system (89%), ASUS RT-N56U WAP (Linux 3.4) (88%), Linux 3.2 (88%), HP P2000 G3 NAS device (86%), Linux 3.1 (86%), Linux 3.16 (86%), AXIS 210A or 211 Network Camera (Linux 2.6.17) (86%), Linux 2.6.32 - 3.10 (85%), Linux 2.6.32 - 3.9 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for lexnetjusticia.gob.es (212.128.106.71)
Host is up (0.061s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
443/tcp open ssl/http Apache httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: Device: load balancer

Nmap scan report for lssi.gob.es (193.146.1.81)
Host is up (0.060s latency).
Other addresses for lssi.gob.es (not scanned): 2001:720:438:400::81
rDNS record for 193.146.1.81: www.lssi.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
49152/tcp closed unknown
OS fingerprint not ideal because: maxTimingRatio (6.110000e+00) is greater than 1.4
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for sede.maec.gob.es (192.148.208.87)
Host is up (0.060s latency).
rDNS record for 192.148.208.87: 87.red-192-148-208.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.15 ((Red Hat))
443/tcp open ssl/http Apache httpd 2.2.15 ((Red Hat))
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for magrama.gob.es (93.188.53.33)
Host is up (0.060s latency).
rDNS record for 93.188.53.33: www.magrama.gob.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Linux 2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.6
OS details: Linux 2.6.18 - 2.6.22
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for eportal.magrama.gob.es (93.188.53.79)
Host is up (0.061s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.32 ((Unix) DAV/2 mod_jk/1.2.41 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips)
443/tcp open ssl/http Apache httpd 2.2.32 ((Unix) DAV/2 mod_jk/1.2.41 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Linux 2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.6
OS details: Linux 2.6.18 - 2.6.22

Nmap scan report for preservicio.magrama.gob.es (93.188.53.30)
Host is up (0.061s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.4.25
443/tcp open ssl/http Apache httpd 2.4.25 ((Debian))
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Linux 2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.6
OS details: Linux 2.6.18 - 2.6.22
Service Info: Host: eproxypre3.forestroot.lan

Nmap scan report for sede.magrama.gob.es (93.188.53.80)
Host is up (0.061s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.32 ((Unix) DAV/2 mod_jk/1.2.41 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips)
443/tcp open ssl/http Apache httpd 2.2.32 ((Unix) DAV/2 mod_jk/1.2.41 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Linux 2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.6
OS details: Linux 2.6.18 - 2.6.22

Nmap scan report for servicio.magrama.gob.es (93.188.53.29)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.4.25 ((Debian))
443/tcp open ssl/http Apache httpd 2.4.25 ((Debian))
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Linux 2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.6
OS details: Linux 2.6.18 - 2.6.22

Nmap scan report for servicios.mapa.gob.es (93.188.49.179)
Host is up (0.060s latency).
rDNS record for 93.188.49.179: servicios.magrama.es
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http SAP WebDispatcher
90/tcp closed dnsix
100/tcp closed newacct
113/tcp closed ident
443/tcp open ssl/http SAP WebDispatcher
Device type: storage-misc|general purpose|firewall
Running (JUST GUESSING): Linux 2.6.X|3.X (91%), Synology DiskStation Manager 5.X (91%), WatchGuard Fireware 11.X (89%)
OS CPE: cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Synology DiskStation Manager 5.1 (91%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 (89%), Linux 2.6.39 (89%), Linux 3.4 (89%), WatchGuard Fireware 11.8 (89%), Linux 2.6.32 - 2.6.39 (89%), Linux 3.10 (88%), Linux 3.1 - 3.2 (88%), Linux 2.6.38 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sig.mapa.gob.es (93.188.53.108)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy HAProxy http proxy 1.3.1 or later
443/tcp open ssl/http-proxy HAProxy http proxy 1.3.1 or later
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Linux 2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.6
OS details: Linux 2.6.18 - 2.6.22
Service Info: Device: load balancer

Nmap scan report for wms.mapa.gob.es (93.188.53.90)
Host is up.
All 1000 scanned ports on wms.mapa.gob.es (93.188.53.90) are filtered
Too many fingerprints match this host to give specific OS details

Nmap scan report for wmts.mapa.gob.es (93.188.53.19)
Host is up (0.061s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.4.25 ((Debian))
443/tcp open ssl/http Apache httpd 2.4.25 ((Debian))
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|firewall|media device
Running (JUST GUESSING): Linux 2.6.X|3.X (86%), IPCop 2.X (86%), Tiandy embedded (86%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.4 cpe:/o:ipcop:ipcop:2 cpe:/o:linux:linux_kernel:3.2
Aggressive OS guesses: Linux 2.6.32 (86%), IPCop 2 firewall (Linux 3.4) (86%), Linux 3.2 (86%), Tiandy NVR (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.mapama.gob.es (23.47.50.173)
Host is up (0.094s latency).
Other addresses for www.mapama.gob.es (not scanned): 2a02:26f0:fe:294::3ff3 2a02:26f0:fe:280::3ff3
rDNS record for 23.47.50.173: a23-47-50-173.deploy.static.akamaitechnologies.com
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
443/tcp open ssl/http AkamaiGHost (Akamai's HTTP Acceleration/Mirror service)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Aggressive OS guesses: OpenWrt Kamikaze 7.09 (Linux 2.6.22) (91%), Crestron XPanel control system (89%), OpenWrt White Russian 0.9 (Linux 2.4.30) (89%), OpenWrt 0.9 - 7.09 (Linux 2.4.30 - 2.4.34) (87%), Asus RT-AC66U router (Linux 2.6) (86%), Asus RT-N10 router or AXIS 211A Network Camera (Linux 2.6) (86%), Linux 2.6.18 (86%), Linux 2.6.24 (86%), Asus RT-N16 WAP (Linux 2.6) (86%), Asus RT-N66U WAP (Linux 2.6) (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sigpac.mapama.gob.es (93.188.53.68)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/http Apache httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|firewall|media device
Running (JUST GUESSING): Linux 2.6.X|3.X (86%), IPCop 2.X (86%), Tiandy embedded (86%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.4 cpe:/o:ipcop:ipcop:2 cpe:/o:linux:linux_kernel:3.2
Aggressive OS guesses: Linux 2.6.32 (86%), IPCop 2 firewall (Linux 3.4) (86%), Linux 3.2 (86%), Tiandy NVR (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.administracion.gob.es (185.73.172.38)
Host is up (0.059s latency).
Other addresses for sede.administracion.gob.es (not scanned): 2a03:44a0:100:fffe::afc:8407
rDNS record for 185.73.172.38: 38.red-185-73-172.customer.static.ccgg.telefonica.net
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 5.0
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 5.0
2000/tcp open cisco-sccp?
5060/tcp open sip?
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for bonosocial.gob.es (193.147.89.91)
Host is up (0.060s latency).
rDNS record for 193.147.89.91: www.usuariosteleco.es
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for consejodetransparencia.buscador.gob.es (108.177.126.121)
Host is up (0.10s latency).
Other addresses for consejodetransparencia.buscador.gob.es (not scanned): 2a00:1450:4013:c01::79
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Google httpd
443/tcp open ssl/http Google httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for pae.buscador.gob.es (108.177.119.121)
Host is up (0.095s latency).
Other addresses for pae.buscador.gob.es (not scanned): 2a00:1450:4013:c01::79
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Google httpd
443/tcp open ssl/http Google httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for clave.gob.es (185.73.172.50)
Host is up (0.059s latency).
Other addresses for clave.gob.es (not scanned): 2a03:44a0:100:fffe::afc:840d
rDNS record for 185.73.172.50: 50.red-185-73-172.customer.static.ccgg.telefonica.net
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 5.0
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 5.0
2000/tcp open cisco-sccp?
5060/tcp open sip?
OS fingerprint not ideal because: maxTimingRatio (5.702000e+00) is greater than 1.4
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for sede.cnmc.gob.es (79.170.8.164)
Host is up (0.076s latency).
rDNS record for 79.170.8.164: madfrontal1.cnmc.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http nginx
443/tcp open ssl/http nginx
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 3.X|4.X (86%)
OS CPE: cpe:/o:linux:linux_kernel:3.18 cpe:/o:linux:linux_kernel:4.9
Aggressive OS guesses: Linux 3.18 (86%), Linux 4.9 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for red.datos.gob.es (194.69.254.39)
Host is up (0.061s latency).
Other addresses for red.datos.gob.es (not scanned): 2001:67c:21cc:2000::64:170
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http
443/tcp open ssl/https
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAC12C%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,3070,"HTTP/1\.1\x20200\x20OK\r\nDate:\x20Mon,\x2008\x20Oct\x2020
SF:18\x2002:30:04\x20GMT\r\nContent-Language:\x20es\r\nLink:\x20<http://da
SF:tos\.gob\.es/es>;\x20rel=\"canonical\"\r\nCache-Control:\x20public,\x20
SF:max-age=1800\r\nLast-Modified:\x20Mon,\x2008\x20Oct\x202018\x2002:01:26
SF:\x20GMT\r\nExpires:\x20Sun,\x2019\x20Nov\x201978\x2005:00:00\x20GMT\r\n
SF:Vary:\x20Cookie,Accept-Encoding\r\nContent-Type:\x20text/html;\x20chars
SF:et=utf-8\r\nAge:\x200\r\nETag:\x20W/\"1538964086-1\"\r\nX-Frame-Options
SF::\x20SAMEORIGIN\r\nX-Content-Type-Options:\x20nosniff\r\nX-XSS-Protecti
SF:on:\x201;\x20mode=block\r\nConnection:\x20close\r\nAccept-Ranges:\x20by
SF:tes\r\n\r\n<!DOCTYPE\x20html>\n<html\x20lang=\"es\"\x20dir=\"ltr\">\n<h
SF:ead>\n<link\x20rel=\"stylesheet\"\x20href=\"https://cdnjs\.cloudflare\.
SF:com/ajax/libs/font-awesome/4\.7\.0/css/font-awesome\.min\.css\">\n\x20\
SF:x20<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html;\x20char
SF:set=utf-8\"\x20/>\n<link\x20href=\"http://datos\.gob\.es/gl\"\x20rel=\"
SF:alternate\"\x20hreflang=\"gl\"\x20/>\n<link\x20href=\"http://datos\.gob
SF:\.es/eu\"\x20rel=\"alternate\"\x20hreflang=\"eu\"\x20/>\n<script\x20typ
SF:e=\"text/javascript\">dataLay")%r(HTTPOptions,3070,"HTTP/1\.1\x20405\x2
SF:0Not\x20allowed\.\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2002:30:05\x20
SF:GMT\r\nContent-Length:\x2070783\r\nConnection:\x20close\r\n\r\n<html\x2
SF:0lang=\"es\"\x20dir=\"ltr\"\x20id=\"HTML_1\">\n<head\x20id=\"HEAD_2\">\
SF:n<script>\ndataLayer\x20=\x20\[{\n'pagina':\x20'',\n'seccion_s1':\x20''
SF:,\x20\x20\n'seccion_s2':\x20'',\x20\n'seccion_s3':\x20'',\n'seccion_s4'
SF::\x20'',\n'contenido_categoria':\x20'',\n'publicador':\x20'',\n'tipo_vi
SF:sitante':\x20'',\n'idioma':\x20'es',\n'pagina_error':\x20'pagina\x20err
SF:or',\n'event':\x20'loadComplete'\n}\];\n</script>\n<!--\x20GoogleTagMan
SF:ager\x20-->\n<script>\(function\(w,d,s,l,i\){w\[l\]=w\[l\]\|\|\[\];w\[l
SF:\]\.push\({'gtm\.start':new\x20Date\(\)\.getTime\(\),event:'gtm\.js'}\)
SF:;var\x20f=d\.getElementsByTagName\(s\)\[0\],j=d\.createElement\(s\),dl=
SF:l!='dataLayer'\?'&l='\+l:'';j\.async=true;j\.src='https://www\.googleta
SF:gmanager\.com/gtm\.js\?id='\+i\+dl;f\.parentNode\.insertBefore\(j,f\);}
SF:\)\(window,document,'script','dataLayer','GTM-PL62VCW'\);</script>\n<!-
SF:-\x20End\x20GoogleTagManager\x20-->\n<title\x20id=\"TITLE_3\">Error\x20
SF:interno\x20del\x20servidor\x20\|\x20datos\.go");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAC134%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,4000,"HTTP/1\.1\x20200\x20OK\r\nDate:\x20Mon,\x2008\x20Oc
SF:t\x202018\x2002:30:11\x20GMT\r\nContent-Type:\x20text/html;\x20charset=
SF:utf-8\r\nConnection:\x20close\r\nContent-Language:\x20es\r\nLink:\x20<h
SF:ttp://datos\.gob\.es/es>;\x20rel=\"canonical\"\r\nCache-Control:\x20pub
SF:lic,\x20max-age=1800\r\nLast-Modified:\x20Mon,\x2008\x20Oct\x202018\x20
SF:02:07:31\x20GMT\r\nExpires:\x20Sun,\x2019\x20Nov\x201978\x2005:00:00\x2
SF:0GMT\r\nVary:\x20Cookie,Accept-Encoding\r\nAge:\x20423\r\nETag:\x20W/\"
SF:1538964451-1\"\r\nX-Frame-Options:\x20SAMEORIGIN\r\nX-Content-Type-Opti
SF:ons:\x20nosniff\r\nX-XSS-Protection:\x201;\x20mode=block\r\nAccept-Rang
SF:es:\x20bytes\r\n\r\n<!DOCTYPE\x20html>\n<html\x20lang=\"es\"\x20dir=\"l
SF:tr\">\n<head>\n<link\x20rel=\"stylesheet\"\x20href=\"https://cdnjs\.clo
SF:udflare\.com/ajax/libs/font-awesome/4\.7\.0/css/font-awesome\.min\.css\
SF:">\n\x20\x20<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html
SF:;\x20charset=utf-8\"\x20/>\n<link\x20href=\"http://datos\.gob\.es/gl\"\
SF:x20rel=\"alternate\"\x20hreflang=\"gl\"\x20/>\n<link\x20href=\"http://d
SF:atos\.gob\.es/eu\"\x20rel=\"alternate\"\x20hreflang=\"eu\"\x20/>\n<scri
SF:pt\x20type=\"text/javascript\">dataL")%r(HTTPOptions,4000,"HTTP/1\.1\x2
SF:0405\x20Not\x20allowed\.\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2002:30
SF::12\x20GMT\r\nContent-Length:\x2070783\r\nConnection:\x20close\r\n\r\n<
SF:html\x20lang=\"es\"\x20dir=\"ltr\"\x20id=\"HTML_1\">\n<head\x20id=\"HEA
SF:D_2\">\n<script>\ndataLayer\x20=\x20\[{\n'pagina':\x20'',\n'seccion_s1'
SF::\x20'',\x20\x20\n'seccion_s2':\x20'',\x20\n'seccion_s3':\x20'',\n'secc
SF:ion_s4':\x20'',\n'contenido_categoria':\x20'',\n'publicador':\x20'',\n'
SF:tipo_visitante':\x20'',\n'idioma':\x20'es',\n'pagina_error':\x20'pagina
SF:\x20error',\n'event':\x20'loadComplete'\n}\];\n</script>\n<!--\x20Googl
SF:eTagManager\x20-->\n<script>\(function\(w,d,s,l,i\){w\[l\]=w\[l\]\|\|\[
SF:\];w\[l\]\.push\({'gtm\.start':new\x20Date\(\)\.getTime\(\),event:'gtm\
SF:.js'}\);var\x20f=d\.getElementsByTagName\(s\)\[0\],j=d\.createElement\(
SF:s\),dl=l!='dataLayer'\?'&l='\+l:'';j\.async=true;j\.src='https://www\.g
SF:oogletagmanager\.com/gtm\.js\?id='\+i\+dl;f\.parentNode\.insertBefore\(
SF:j,f\);}\)\(window,document,'script','dataLayer','GTM-PL62VCW'\);</scrip
SF:t>\n<!--\x20End\x20GoogleTagManager\x20-->\n<title\x20id=\"TITLE_3\">Er
SF:ror\x20interno\x20del\x20servidor\x20\|\x20datos\.go");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for papea.defensa.gob.es (193.33.2.155)
Host is up (0.060s latency).
rDNS record for 193.33.2.155: IP-193-33-2-155.mde.es
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for admin.tecnologiaeinnovacion.defensa.gob.es (213.134.41.188)
Host is up.
rDNS record for 213.134.41.188: ih-vm-dgam-web.c.mad.interhost.com
All 1000 scanned ports on admin.tecnologiaeinnovacion.defensa.gob.es (213.134.41.188) are filtered
Too many fingerprints match this host to give specific OS details

Nmap scan report for sede.fogasa.empleo.gob.es (192.148.211.46)
Host is up (0.060s latency).
rDNS record for 192.148.211.46: 46.red-192-148-211.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.31 ((Unix) mod_ssl/2.2.31 OpenSSL/1.0.1r DAV/2 mod_auth_kerb/5.4 mod_cluster/1.2.6.Final mod_jk/1.2.30)
443/tcp open ssl/http Apache httpd 2.2.31 ((Unix) mod_ssl/2.2.31 OpenSSL/1.0.1r DAV/2 mod_auth_kerb/5.4 mod_cluster/1.2.6.Final mod_jk/1.2.30)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: WAP
Running (JUST GUESSING): Linux 2.4.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.4.20
Aggressive OS guesses: Tomato 1.27 - 1.28 (Linux 2.4.20) (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for exteriores.gob.es (217.149.144.15)
Host is up (0.059s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 7.5
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 7.5
OS fingerprint not ideal because: maxTimingRatio (5.830000e+00) is greater than 1.4
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for aytoburgos.face.gob.es (185.73.172.48)
Host is up (0.059s latency).
rDNS record for 185.73.172.48: 48.red-185-73-172.customer.static.ccgg.telefonica.net
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 5.0
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 5.0
2000/tcp open cisco-sccp?
5060/tcp open sip?
OS fingerprint not ideal because: maxTimingRatio (5.830000e+00) is greater than 1.4
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for observatoriotransporte.fomento.gob.es (192.148.212.29)
Host is up (0.060s latency).
rDNS record for 192.148.212.29: 29.red-192-148-212.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 7.5
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 7.5
Device type: general purpose|WAP
Running (JUST GUESSING): Microsoft Windows Vista|2008|7|8.1 (89%), AirSpan embedded (88%), OpenBSD 4.X (86%), Apple embedded (85%)
OS CPE: cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_server_2008::sp1 cpe:/o:microsoft:windows_7 cpe:/o:openbsd:openbsd:4.0 cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_8.1:r1 cpe:/h:apple:airport_extreme
Aggressive OS guesses: Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (89%), AirSpan ProST WiMAX access point (88%), Microsoft Windows Server 2008 R2 SP1 (87%), Microsoft Windows Server 2008 (87%), Microsoft Windows Server 2008 R2 (87%), Microsoft Windows 7 SP1 (87%), Microsoft Windows 7 or Windows Server 2008 R2 (86%), Microsoft Windows Server 2008 or 2008 Beta 3 (86%), Microsoft Windows 7 (86%), Microsoft Windows 7 SP1 or Windows Server 2008 R2 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for www.geoportalgasolineras.gob.es (193.146.1.96)
Host is up (0.060s latency).
Other addresses for www.geoportalgasolineras.gob.es (not scanned): 2001:720:438:400::96
rDNS record for 193.146.1.96: geoportal.minetad.gob.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.4.10 ((Win64) mod_jk/1.2.37)
443/tcp open ssl/http Apache httpd 2.4.10 ((Win64) mod_jk/1.2.37)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|WAP
Running (JUST GUESSING): OpenBSD 4.X (92%), Apple embedded (92%), FreeBSD 6.X (92%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/h:apple:airport_extreme cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (92%), Apple AirPort Extreme WAP (92%), FreeBSD 6.2-RELEASE (92%), OpenBSD 4.3 (92%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.hacienda.gob.es (193.203.200.85)
Host is up (0.065s latency).
rDNS record for 193.203.200.85: www.patrimoniodelestado.minhafp.es
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp closed https
8082/tcp closed blackice-alerts
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (89%), FreeBSD 6.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (89%), OpenBSD 4.3 (87%), FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for autodiscover.sepg.hacienda.gob.es (195.10.201.174)
Host is up (0.059s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
Too many fingerprints match this host to give specific OS details

Nmap scan report for www.notificaciones.idae.gob.es (185.37.224.175)
Host is up (0.061s latency).
rDNS record for 185.37.224.175: ptrxolido175.xolido.com
Not shown: 996 closed ports
PORT STATE SERVICE VERSION
22/tcp filtered ssh
80/tcp open http Apache httpd
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
465/tcp filtered smtps
Aggressive OS guesses: Linux 2.6.32 - 3.13 (94%), Linux 2.6.32 (94%), Linux 2.6.32 - 2.6.39 (94%), Linux 2.6.32 - 3.1 (94%), Linux 2.6.39 (94%), HP P2000 G3 NAS device (93%), Linux 3.10 (92%), Linux 3.2 (92%), Linux 2.6.32 - 3.10 (91%), Linux 2.6.32 - 3.9 (91%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 6 hops

Nmap scan report for hadasurvey.industriaconectada40.gob.es (213.170.48.221)
Host is up (0.060s latency).
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http nginx 1.12.1
443/tcp open ssl/http nginx 1.12.1
5432/tcp open postgresql PostgreSQL DB 9.6.4 - 9.6.6
8080/tcp open http Apache Tomcat/Coyote JSP engine 1.1
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: WAP|general purpose
Running (JUST GUESSING): Linux 2.6.X|3.X (88%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.22 cpe:/o:linux:linux_kernel:3.18
Aggressive OS guesses: OpenWrt Kamikaze 7.09 (Linux 2.6.22) (88%), OpenWrt Chaos Calmer (Linux 3.18) (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for xfind.irmc.gob.es (193.147.89.116)
Host is up (0.060s latency).
rDNS record for 193.147.89.116: sede.irmc.gob.es
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
21/tcp open tcpwrapped
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
8080/tcp closed http-proxy
Device type: general purpose|specialized
Running (JUST GUESSING): Microsoft Windows 2012|2016|10|7 (90%), OpenBSD 4.X (86%), FreeBSD 6.X (86%), AVtech embedded (85%)
OS CPE: cpe:/o:microsoft:windows_server_2012 cpe:/o:microsoft:windows_server_2016 cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2 cpe:/o:microsoft:windows_10:1607 cpe:/o:microsoft:windows_7::-:professional
Aggressive OS guesses: Microsoft Windows Server 2012 (90%), Microsoft Windows Server 2012 or Windows Server 2012 R2 (90%), Microsoft Windows Server 2012 R2 (90%), Microsoft Windows Server 2016 (90%), OpenBSD 4.0 (86%), FreeBSD 6.2-RELEASE (86%), OpenBSD 4.3 (86%), Microsoft Windows 10 1607 (85%), Microsoft Windows 7 Professional (85%), AVtech Room Alert 26W environmental monitor (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for www.lamoncloa.gob.es (212.128.109.1)
Host is up (0.060s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAC13F%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,C3,"HTTP/1\.1\x20403\x20Forbidden\r\nContent-Length:\x20148\r\n\
SF:r\n<html><title>Request\x20Denied!</title><body><center><h1>Request\x20
SF:Denied!</h1><p>If\x20you\x20have\x20any\x20questions\x20contact\x20the\
SF:x20admin\.</p></center></body></html>")%r(HTTPOptions,C3,"HTTP/1\.1\x20
SF:403\x20Forbidden\r\nContent-Length:\x20148\r\n\r\n<html><title>Request\
SF:x20Denied!</title><body><center><h1>Request\x20Denied!</h1><p>If\x20you
SF:\x20have\x20any\x20questions\x20contact\x20the\x20admin\.</p></center><
SF:/body></html>")%r(FourOhFourRequest,C3,"HTTP/1\.1\x20403\x20Forbidden\r
SF:\nContent-Length:\x20148\r\n\r\n<html><title>Request\x20Denied!</title>
SF:<body><center><h1>Request\x20Denied!</h1><p>If\x20you\x20have\x20any\x2
SF:0questions\x20contact\x20the\x20admin\.</p></center></body></html>");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for www.lssi.gob.es (193.146.1.81)
Host is up (0.060s latency).
Other addresses for www.lssi.gob.es (not scanned): 2001:720:438:400::81
rDNS record for 193.146.1.81: www.lssi.es
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|WAP
Running (JUST GUESSING): OpenBSD 4.X (91%), FreeBSD 6.X (91%), Apple embedded (89%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2 cpe:/h:apple:airport_extreme
Aggressive OS guesses: OpenBSD 4.0 (91%), FreeBSD 6.2-RELEASE (91%), OpenBSD 4.3 (91%), Apple AirPort Extreme WAP (89%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for www.magrama.gob.es (93.188.53.33)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Linux 2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.6
OS details: Linux 2.6.18 - 2.6.22
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for sigtile1.mapa.gob.es (93.188.53.108)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy HAProxy http proxy 1.3.1 or later
443/tcp open ssl/http-proxy HAProxy http proxy 1.3.1 or later
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Linux 2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.6
OS details: Linux 2.6.18 - 2.6.22
Service Info: Device: load balancer

Nmap scan report for eportal.mapama.gob.es (93.188.53.79)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.32 ((Unix) DAV/2 mod_jk/1.2.41 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips)
443/tcp open ssl/http Apache httpd 2.2.32 ((Unix) DAV/2 mod_jk/1.2.41 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Linux 2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.6
OS details: Linux 2.6.18 - 2.6.22

Nmap scan report for preservicio.mapama.gob.es (93.188.53.30)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.4.25
443/tcp open ssl/http Apache httpd 2.4.25 ((Debian))
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Aggressive OS guesses: Linux 3.18 (98%), Linux 2.6.32 (96%), Linux 4.9 (94%), D-Link DSL-2890AL ADSL router (92%), Draytek Vigor 2960 VPN firewall (92%), OpenWrt Kamikaze 8.09 (Linux 2.6.25.20) (92%), IPCop 1.9.19 or IPFire 2.9 firewall (Linux 2.6.32) (92%), IPCop 2.0 (Linux 2.6.32) (92%), Linux 2.6.36 (92%), IPCop 2 firewall (Linux 3.4) (92%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Host: eproxypre3.forestroot.lan

Nmap scan report for sede.mapama.gob.es (93.188.53.80)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.32 ((Unix) DAV/2 mod_jk/1.2.41 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips)
443/tcp open ssl/http Apache httpd 2.2.32 ((Unix) DAV/2 mod_jk/1.2.41 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Linux 2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.6
OS details: Linux 2.6.18 - 2.6.22

Nmap scan report for servicio.mapama.gob.es (93.188.53.29)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.4.25 ((Debian))
443/tcp open ssl/http Apache httpd 2.4.25 ((Debian))
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Linux 2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.6
OS details: Linux 2.6.18 - 2.6.22

Nmap scan report for servicios.mapama.gob.es (93.188.49.179)
Host is up (0.060s latency).
rDNS record for 93.188.49.179: servicios.magrama.es
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http SAP WebDispatcher
90/tcp closed dnsix
100/tcp closed newacct
113/tcp closed ident
443/tcp open ssl/http SAP WebDispatcher
Device type: storage-misc|general purpose|firewall
Running (JUST GUESSING): Linux 2.6.X|3.X (91%), Synology DiskStation Manager 5.X (91%), WatchGuard Fireware 11.X (89%)
OS CPE: cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Synology DiskStation Manager 5.1 (91%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 (89%), Linux 2.6.39 (89%), Linux 3.4 (89%), WatchGuard Fireware 11.8 (89%), Linux 2.6.32 - 2.6.39 (89%), Linux 3.10 (88%), Linux 3.1 - 3.2 (88%), Linux 2.6.38 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for wms.mapama.gob.es (93.188.53.90)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/http Apache httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|firewall|media device
Running (JUST GUESSING): Linux 2.6.X|3.X (86%), IPCop 2.X (86%), Tiandy embedded (86%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.4 cpe:/o:ipcop:ipcop:2 cpe:/o:linux:linux_kernel:3.2
Aggressive OS guesses: Linux 2.6.32 (86%), IPCop 2 firewall (Linux 3.4) (86%), Linux 3.2 (86%), Tiandy NVR (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for wmts.mapama.gob.es (93.188.53.19)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.4.25 ((Debian))
443/tcp open ssl/http Apache httpd 2.4.25 ((Debian))
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|firewall|media device
Running (JUST GUESSING): Linux 2.6.X|3.X (86%), IPCop 2.X (86%), Tiandy embedded (86%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.4 cpe:/o:ipcop:ipcop:2 cpe:/o:linux:linux_kernel:3.2
Aggressive OS guesses: Linux 2.6.32 (86%), IPCop 2 firewall (Linux 3.4) (86%), Linux 3.2 (86%), Tiandy NVR (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for marcaespana.gob.es (217.15.44.9)
Host is up (0.060s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http nginx 1.6.2
113/tcp closed ident
443/tcp open ssl/http nginx 1.6.2
Device type: general purpose
Running (JUST GUESSING): Linux 3.X|4.X (88%)
OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4
Aggressive OS guesses: Linux 3.11 - 4.1 (88%), Linux 3.16 (88%), Linux 4.4 (88%), Linux 3.10 - 3.16 (87%), Linux 3.13 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.mcu.gob.es (212.128.117.210)
Host is up (0.060s latency).
rDNS record for 212.128.117.210: 210.red-212-128-117.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
113/tcp closed ident
443/tcp open ssl/http Apache httpd 2.2.3 ((Red Hat))
Aggressive OS guesses: Linux 2.6.24 (90%), Citrix Access Gateway VPN gateway (89%), Juniper SA4000 SSL VPN gateway (IVE OS 7.0) (89%), Avaya Communication Manager (Linux 2.6.11) (89%), Linux 2.6.18 (89%), Cyberoam UTM firewall (89%), Cymphonix EX550 firewall (89%), Linux 2.4.21 (89%), Endian 2.3 or IPCop firewall 1.4.10 - 1.4.21 (Linux 2.4.31 - 2.6.22) (89%), Linux 2.6.24 (Gentoo) (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for mecd.gob.es (212.128.114.116)
Host is up (0.060s latency).
rDNS record for 212.128.114.116: 116.red-212-128-114.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
113/tcp closed ident
443/tcp open ssl/https?
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for aulacorto.mecd.gob.es (62.138.139.113)
Host is up (0.082s latency).
rDNS record for 62.138.139.113: ip-139.113.hosteurope.es
Not shown: 984 filtered ports
PORT STATE SERVICE VERSION
20/tcp closed ftp-data
21/tcp open ftp Pure-FTPd
22/tcp open ssh OpenSSH 4.3 (protocol 2.0)
26/tcp open smtp Exim smtpd 4.84
53/tcp open domain NLnet Labs NSD 3.2.17
80/tcp open http Apache httpd (PHP 5.5.30)
110/tcp open pop3 Dovecot pop3d
143/tcp open imap Dovecot imapd
443/tcp open ssl/http Apache httpd
465/tcp open ssl/smtp Exim smtpd 4.84
993/tcp open ssl/imap Dovecot imapd
995/tcp open ssl/pop3 Dovecot pop3d
11110/tcp closed sgi-soap
11111/tcp closed vce
11967/tcp closed sysinfo-sp
12000/tcp closed cce4x
Device type: storage-misc|general purpose|firewall
Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (87%), Synology DiskStation Manager 5.X (87%), WatchGuard Fireware 11.X (85%)
OS CPE: cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:linux:linux_kernel:2.6.37 cpe:/o:linux:linux_kernel:3.10 cpe:/o:watchguard:fireware:11.8 cpe:/o:linux:linux_kernel:4.2
Aggressive OS guesses: Synology DiskStation Manager 5.1 (87%), Linux 2.6.37 (85%), Linux 2.6.32 (85%), Linux 2.6.32 or 3.10 (85%), Linux 2.6.39 (85%), Linux 3.4 (85%), WatchGuard Fireware 11.8 (85%), Linux 2.6.32 - 2.6.39 (85%), Linux 3.18 (85%), Linux 2.6.32 - 2.6.35 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Host: vl20144.dns-privadas.es

Nmap scan report for blogbibliotecas.mecd.gob.es (212.128.121.16)
Host is up (0.060s latency).
rDNS record for 212.128.121.16: eva.educalab.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open ssl/http Apache
113/tcp closed ident
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (85%), Linux 3.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:linux:linux_kernel:3.6
Aggressive OS guesses: OpenBSD 4.0 (85%), Linux 3.6 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for eleo.mecd.gob.es (34.248.96.243)
Host is up (0.092s latency).
Other addresses for eleo.mecd.gob.es (not scanned): 34.240.51.133
rDNS record for 34.248.96.243: ec2-34-248-96-243.eu-west-1.compute.amazonaws.com
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http nginx 1.6.2
443/tcp open ssl/http nginx 1.6.2
8181/tcp closed intermapper
Device type: general purpose|PBX
Running (JUST GUESSING): Linux 3.X|4.X (88%), Vodavi embedded (87%)
OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4 cpe:/h:vodavi:xts-ip
Aggressive OS guesses: Linux 3.10 - 4.11 (88%), Linux 3.13 (88%), Linux 3.13 or 4.2 (88%), Linux 3.16 (88%), Linux 4.2 (88%), Linux 4.4 (88%), Vodavi XTS-IP PBX (87%), Linux 3.18 (86%), Linux 3.16 - 4.6 (85%), Linux 3.2 - 4.9 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ipce.mecd.gob.es (212.128.114.104)
Host is up (0.060s latency).
rDNS record for 212.128.114.104: 104.red-212-128-114.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache Tomcat/Coyote JSP engine 1.1
113/tcp closed ident
443/tcp open ssl/https?
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for redined.mecd.gob.es (212.128.114.82)
Host is up (0.060s latency).
rDNS record for 212.128.114.82: 82.red-212-128-114.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache Tomcat/Coyote JSP engine 1.1
113/tcp closed ident
8000/tcp open http Handle System Proxy Server
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for verpeliculasonline.mecd.gob.es (51.255.166.95)
Host is up (0.083s latency).
rDNS record for 51.255.166.95: 95.ip-51-255-166.eu
Not shown: 994 closed ports
PORT STATE SERVICE VERSION
25/tcp filtered smtp
80/tcp open http Apache httpd 2.4.10 ((Debian))
111/tcp open rpcbind 2-4 (RPC #100000)
445/tcp filtered microsoft-ds
465/tcp filtered smtps
587/tcp filtered submission
Device type: general purpose|WAP|storage-misc
Running (JUST GUESSING): Linux 3.X|4.X|2.6.X|2.4.X (94%), HP embedded (91%), Asus embedded (91%)
OS CPE: cpe:/o:linux:linux_kernel:3.16 cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:2.6.22 cpe:/h:hp:p2000_g3 cpe:/h:asus:rt-n56u cpe:/o:linux:linux_kernel:3.4 cpe:/o:linux:linux_kernel cpe:/o:linux:linux_kernel:2.4
Aggressive OS guesses: Linux 3.16 (94%), Linux 3.10 - 4.11 (94%), Linux 3.13 (94%), Linux 3.13 or 4.2 (94%), Linux 4.2 (94%), Linux 4.4 (94%), Linux 3.16 - 4.6 (92%), Linux 3.2 - 4.9 (92%), OpenWrt Kamikaze 7.09 (Linux 2.6.22) (91%), HP P2000 G3 NAS device (91%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 13 hops

Nmap scan report for www.memoriahistorica.gob.es (212.128.109.4)
Host is up (0.060s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAC15F%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,C3,"HTTP/1\.1\x20403\x20Forbidden\r\nContent-Length:\x20148\r\n\
SF:r\n<html><title>Request\x20Denied!</title><body><center><h1>Request\x20
SF:Denied!</h1><p>If\x20you\x20have\x20any\x20questions\x20contact\x20the\
SF:x20admin\.</p></center></body></html>")%r(HTTPOptions,C3,"HTTP/1\.1\x20
SF:403\x20Forbidden\r\nContent-Length:\x20148\r\n\r\n<html><title>Request\
SF:x20Denied!</title><body><center><h1>Request\x20Denied!</h1><p>If\x20you
SF:\x20have\x20any\x20questions\x20contact\x20the\x20admin\.</p></center><
SF:/body></html>")%r(FourOhFourRequest,C3,"HTTP/1\.1\x20403\x20Forbidden\r
SF:\nContent-Length:\x20148\r\n\r\n<html><title>Request\x20Denied!</title>
SF:<body><center><h1>Request\x20Denied!</h1><p>If\x20you\x20have\x20any\x2
SF:0questions\x20contact\x20the\x20admin\.</p></center></body></html>");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for sede.micinn.gob.es (193.146.133.15)
Host is up (0.059s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for mincotur.gob.es (193.147.89.90)
Host is up (0.071s latency).
Other addresses for mincotur.gob.es (not scanned): 2001:720:438:402::90
rDNS record for 193.147.89.90: minetad.gob.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: specialized|WAP|phone
Running: iPXE 1.X, Linux 2.4.X|2.6.X, Sony Ericsson embedded
OS CPE: cpe:/o:ipxe:ipxe:1.0.0%2b cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.6.22 cpe:/h:sonyericsson:u8i_vivaz
OS details: iPXE 1.0.0+, Tomato 1.28 (Linux 2.4.20), Tomato firmware (Linux 2.6.22), Sony Ericsson U8i Vivaz mobile phone
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for safe.mincotur.gob.es (193.146.1.106)
Host is up (0.060s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Microsoft IIS httpd 8.5
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|WAP
Running (JUST GUESSING): OpenBSD 4.X (92%), Apple embedded (92%), FreeBSD 6.X (92%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/h:apple:airport_extreme cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (92%), Apple AirPort Extreme WAP (92%), FreeBSD 6.2-RELEASE (92%), OpenBSD 4.3 (92%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for www.mineco.gob.es (193.146.133.11)
Host is up (0.059s latency).
rDNS record for 193.146.133.11: video.micinn.es
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
81/tcp open http lighttpd 1.4.26
443/tcp open ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for www.comercio.mineco.gob.es (193.146.133.27)
Host is up (0.059s latency).
rDNS record for 193.146.133.27: www.comercio.mineco.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
443/tcp open ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for sede.mineco.gob.es (193.146.133.19)
Host is up (0.059s latency).
rDNS record for 193.146.133.19: icac.gob.es
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for serviciosede.mineco.gob.es (193.146.133.20)
Host is up (0.059s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
443/tcp open ssl/http Microsoft IIS httpd 7.5
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for crm.minetad.gob.es (193.146.1.87)
Host is up.
rDNS record for 193.146.1.87: crm.minetur.gob.es
All 1000 scanned ports on crm.minetad.gob.es (193.146.1.87) are filtered
Too many fingerprints match this host to give specific OS details

Nmap scan report for extranet.minetad.gob.es (193.146.1.89)
Host is up (0.060s latency).
Other addresses for extranet.minetad.gob.es (not scanned): 2001:720:438:400::89
rDNS record for 193.146.1.89: extranet.mincotur.gob.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAC16C%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,50,"HTTP/1\.0\x20302\x20Found\r\nLocation:\x20https://\r\nConnec
SF:tion:\x20close\r\nContent-Length:\x200\r\n\r\n")%r(HTTPOptions,50,"HTTP
SF:/1\.0\x20302\x20Found\r\nLocation:\x20https://\r\nConnection:\x20close\
SF:r\nContent-Length:\x200\r\n\r\n")%r(RTSPRequest,50,"HTTP/1\.0\x20302\x2
SF:0Found\r\nLocation:\x20https://\r\nConnection:\x20close\r\nContent-Leng
SF:th:\x200\r\n\r\n")%r(FourOhFourRequest,50,"HTTP/1\.0\x20302\x20Found\r\
SF:nLocation:\x20https://\r\nConnection:\x20close\r\nContent-Length:\x200\
SF:r\n\r\n")%r(SIPOptions,50,"HTTP/1\.0\x20302\x20Found\r\nLocation:\x20ht
SF:tps://\r\nConnection:\x20close\r\nContent-Length:\x200\r\n\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|WAP
Running (JUST GUESSING): OpenBSD 4.X (92%), Apple embedded (92%), FreeBSD 6.X (92%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/h:apple:airport_extreme cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (92%), Apple AirPort Extreme WAP (92%), FreeBSD 6.2-RELEASE (92%), OpenBSD 4.3 (92%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for intermediosfirma.minetad.gob.es (193.146.1.105)
Host is up (0.060s latency).
Other addresses for intermediosfirma.minetad.gob.es (not scanned): 2001:720:438:400::105
rDNS record for 193.146.1.105: intermediosfirma.mincotur.gob.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache Tomcat/Coyote JSP engine 1.1
443/tcp open ssl/http Apache Tomcat/Coyote JSP engine 1.1
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|WAP
Running (JUST GUESSING): OpenBSD 4.X (92%), Apple embedded (92%), FreeBSD 6.X (92%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/h:apple:airport_extreme cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (92%), Apple AirPort Extreme WAP (92%), FreeBSD 6.2-RELEASE (92%), OpenBSD 4.3 (92%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for oficinamovil.minetad.gob.es (193.147.89.220)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
443/tcp open ssl/http Pulse Secure VPN gateway http config
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|firewall|media device
Running (JUST GUESSING): Linux 2.6.X|3.X (86%), IPCop 2.X (86%), Tiandy embedded (86%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.4 cpe:/o:ipcop:ipcop:2 cpe:/o:linux:linux_kernel:3.2
Aggressive OS guesses: Linux 2.6.32 (86%), IPCop 2 firewall (Linux 3.4) (86%), Linux 3.2 (86%), Tiandy NVR (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: security-misc

Nmap scan report for portalextranet.minetad.gob.es (193.146.1.90)
Host is up (0.060s latency).
Other addresses for portalextranet.minetad.gob.es (not scanned): 2001:720:438:400::90
rDNS record for 193.146.1.90: externos.minetad.gob.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|WAP
Running (JUST GUESSING): OpenBSD 4.X (92%), Apple embedded (92%), FreeBSD 6.X (92%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/h:apple:airport_extreme cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (92%), Apple AirPort Extreme WAP (92%), FreeBSD 6.2-RELEASE (92%), OpenBSD 4.3 (92%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for bdlab.minetur.gob.es (192.187.18.105)
Host is up.
All 1000 scanned ports on bdlab.minetur.gob.es (192.187.18.105) are filtered
Too many fingerprints match this host to give specific OS details

Nmap scan report for evaluadd.minetur.gob.es (193.146.1.103)
Host is up.
Other addresses for evaluadd.minetur.gob.es (not scanned): 2001:720:438:400::103
All 1000 scanned ports on evaluadd.minetur.gob.es (193.146.1.103) are filtered
Too many fingerprints match this host to give specific OS details

Nmap scan report for m.minetur.gob.es (193.146.1.88)
Host is up (0.060s latency).
Other addresses for m.minetur.gob.es (not scanned): 2001:720:438:400::88
rDNS record for 193.146.1.88: m.minetur.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 7.5
443/tcp open ssl/http Microsoft IIS httpd 7.5
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|WAP
Running (JUST GUESSING): OpenBSD 4.X (92%), Apple embedded (92%), FreeBSD 6.X (92%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/h:apple:airport_extreme cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (92%), Apple AirPort Extreme WAP (92%), FreeBSD 6.2-RELEASE (92%), OpenBSD 4.3 (92%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for pasarelaclave.minetur.gob.es (193.146.1.80)
Host is up (0.060s latency).
Other addresses for pasarelaclave.minetur.gob.es (not scanned): 2001:720:438:400::80
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 7.5
443/tcp open ssl/http Microsoft IIS httpd 7.5
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|WAP
Running (JUST GUESSING): OpenBSD 4.X (92%), Apple embedded (92%), FreeBSD 6.X (92%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/h:apple:airport_extreme cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (92%), Apple AirPort Extreme WAP (92%), FreeBSD 6.2-RELEASE (92%), OpenBSD 4.3 (92%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for pasarelafirma.minetur.gob.es (193.146.1.77)
Host is up (0.060s latency).
Other addresses for pasarelafirma.minetur.gob.es (not scanned): 2001:720:438:400::77
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Microsoft IIS httpd 8.5
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|WAP
Running (JUST GUESSING): OpenBSD 4.X (92%), Apple embedded (92%), FreeBSD 6.X (92%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/h:apple:airport_extreme cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (92%), Apple AirPort Extreme WAP (92%), FreeBSD 6.2-RELEASE (92%), OpenBSD 4.3 (92%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for patr.minetur.gob.es (193.146.123.227)
Host is up.
All 1000 scanned ports on patr.minetur.gob.es (193.146.123.227) are filtered
Too many fingerprints match this host to give specific OS details

Nmap scan report for subsede.pyme.minetur.gob.es (193.147.89.230)
Host is up (0.060s latency).
Other addresses for subsede.pyme.minetur.gob.es (not scanned): 193.147.89.229
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft IIS httpd 7.5
8080/tcp closed http-proxy
Aggressive OS guesses: OpenBSD 4.0 (94%), FreeBSD 6.2-RELEASE (94%), OpenBSD 4.3 (94%), Apple AirPort Extreme WAP (92%), Microsoft Windows Server 2008 R2 SP1 (91%), Microsoft Windows Server 2008 (91%), Microsoft Windows Server 2008 R2 (91%), Microsoft Windows 7 SP1 (91%), Microsoft Windows 7 or Windows Server 2008 R2 (90%), Microsoft Windows Server 2008 or 2008 Beta 3 (90%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for reanteniza.minetur.gob.es (193.146.1.97)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
443/tcp open ssl/http Microsoft IIS httpd 7.5
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|WAP
Running (JUST GUESSING): Linux 2.6.X (97%), D-Link embedded (94%), TRENDnet embedded (94%)
OS CPE: cpe:/o:linux:linux_kernel:2.6 cpe:/h:dlink:dwl-624%2b cpe:/h:dlink:dwl-2000ap cpe:/h:trendnet:tew-432brp
Aggressive OS guesses: Linux 2.6.18 - 2.6.22 (97%), D-Link DWL-624+ or DWL-2000AP, or TRENDnet TEW-432BRP WAP (94%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for reanteniza2.minetur.gob.es (193.146.1.104)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
443/tcp open ssl/http Microsoft IIS httpd 7.5
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|WAP
Running (JUST GUESSING): Linux 2.6.X (97%), D-Link embedded (94%), TRENDnet embedded (94%)
OS CPE: cpe:/o:linux:linux_kernel:2.6 cpe:/h:dlink:dwl-624%2b cpe:/h:dlink:dwl-2000ap cpe:/h:trendnet:tew-432brp
Aggressive OS guesses: Linux 2.6.18 - 2.6.22 (97%), D-Link DWL-624+ or DWL-2000AP, or TRENDnet TEW-432BRP WAP (94%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for sede.minetur.gob.es (193.146.1.94)
Host is up (0.060s latency).
Other addresses for sede.minetur.gob.es (not scanned): 2001:720:438:400::94
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|WAP
Running (JUST GUESSING): Linux 2.6.X (97%), D-Link embedded (94%), TRENDnet embedded (94%)
OS CPE: cpe:/o:linux:linux_kernel:2.6 cpe:/h:dlink:dwl-624%2b cpe:/h:dlink:dwl-2000ap cpe:/h:trendnet:tew-432brp
Aggressive OS guesses: Linux 2.6.18 - 2.6.22 (97%), D-Link DWL-624+ or DWL-2000AP, or TRENDnet TEW-432BRP WAP (94%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; Device: load balancer; CPE: cpe:/o:microsoft:windows

Nmap scan report for sedeaplicaciones2.minetur.gob.es (193.146.1.75)
Host is up (0.060s latency).
Other addresses for sedeaplicaciones2.minetur.gob.es (not scanned): 2001:720:438:400::75
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.22 ((Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips DAV/2 mod_jk/1.2.32)
443/tcp open ssl/http Apache httpd 2.2.22 ((Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips DAV/2 mod_jk/1.2.32)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|broadband router|proxy server|webcam|terminal|WAP|specialized
Running (JUST GUESSING): Linux 2.6.X (97%), OneAccess embedded (97%), Blue Coat embedded (95%), Polycom pSOS 1.X (95%), Wyse ThinOS 5.X (95%), D-Link embedded (94%), TRENDnet embedded (94%), AVtech embedded (92%)
OS CPE: cpe:/o:linux:linux_kernel:2.6 cpe:/h:oneaccess:1641 cpe:/h:bluecoat:packetshaper cpe:/o:polycom:psos:1.0.4 cpe:/o:wyse:thinos:5.2 cpe:/h:dlink:dwl-624%2b cpe:/h:dlink:dwl-2000ap cpe:/h:trendnet:tew-432brp
Aggressive OS guesses: Linux 2.6.18 - 2.6.22 (97%), OneAccess 1641 router (97%), Blue Coat PacketShaper appliance (95%), Polycom MGC-25 videoconferencing system (pSOS 1.0.4) (95%), Wyse ThinOS 5.2 (95%), D-Link DWL-624+ or DWL-2000AP, or TRENDnet TEW-432BRP WAP (94%), AVtech Room Alert 26W environmental monitor (92%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for webpub2.igae.minhafp.gob.es (195.10.201.169)
Host is up (0.059s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
113/tcp closed ident
443/tcp open ssl/https BigIP
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAC1DE%P=x86_64-pc-linux-gnu
SF:%r(FourOhFourRequest,7E,"HTTP/1\.0\x20302\x20Found\r\nLocation:\x20http
SF:s:///vdesk/my\.acl\.php3\?errorcode=17\r\nServer:\x20BigIP\r\nConnectio
SF:n:\x20close\r\nContent-Length:\x200\r\n\r\n")%r(SIPOptions,83,"HTTP/1\.
SF:0\x20302\x20Found\r\nLocation:\x20https:///vdesk/my\.acl\.php3\?errorco
SF:de=17\r\nServer:\x20BigIP\r\nConnection:\x20Keep-Alive\r\nContent-Lengt
SF:h:\x200\r\n\r\n");
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for webpub2des.igae.minhafp.gob.es (195.10.201.184)
Host is up (0.060s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
Too many fingerprints match this host to give specific OS details

Nmap scan report for webpub2pre.igae.minhafp.gob.es (195.10.201.170)
Host is up (0.060s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/https BigIP
8443/tcp closed https-alt
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAC1DF%P=x86_64-pc-linux-gnu
SF:%r(FourOhFourRequest,7E,"HTTP/1\.0\x20302\x20Found\r\nLocation:\x20http
SF:s:///vdesk/my\.acl\.php3\?errorcode=17\r\nServer:\x20BigIP\r\nConnectio
SF:n:\x20close\r\nContent-Length:\x200\r\n\r\n")%r(SIPOptions,83,"HTTP/1\.
SF:0\x20302\x20Found\r\nLocation:\x20https:///vdesk/my\.acl\.php3\?errorco
SF:de=17\r\nServer:\x20BigIP\r\nConnection:\x20Keep-Alive\r\nContent-Lengt
SF:h:\x200\r\n\r\n");
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Failed to resolve "webpub3.igae.minhap.gob.es".
Failed to resolve "webpub3mig.igae.minhap.gob.es".
Failed to resolve "webpub4mig.igae.minhap.gob.es".
Failed to resolve "www.seap.minhap.gob.es".
Failed to resolve "desa-servicios.miteco.gob.es".
Failed to resolve "origin.miteco.gob.es".
Failed to resolve "test.servicios.miteco.gob.es".
Failed to resolve "autodiscover.mitramiss.gob.es".
Failed to resolve "correoweb.mitramiss.gob.es".
Failed to resolve "subsede.comercio.mityc.gob.es".
Failed to resolve "subsede.dgpyme.mityc.gob.es".
Failed to resolve "sede.mityc.gob.es".
Failed to resolve "sede.mscbs.gob.es".
Failed to resolve "sede.msps.gob.es".
Failed to resolve "msssi.gob.es".
Failed to resolve "aesan.msssi.gob.es".
Failed to resolve "www.aesan.msssi.gob.es".
Nmap scan report for webpub4.igae.minhafp.gob.es (195.10.201.151)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/http-proxy F5 BIG-IP load balancer http proxy
Device type: general purpose|load balancer
Running (JUST GUESSING): FreeBSD 6.X (92%), OpenBSD 4.X (87%), F5 Networks embedded (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2 cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: FreeBSD 6.2-RELEASE (92%), OpenBSD 4.0 (87%), OpenBSD 4.3 (87%), F5 BIG-IP Edge Gateway (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for webpub5.igae.minhafp.gob.es (195.10.201.149)
Host is up (0.059s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/https?
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for webpubdes.igae.minhafp.gob.es (195.10.201.176)
Host is up (0.059s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/http-proxy F5 BIG-IP load balancer http proxy
Device type: general purpose|load balancer|WAP
Running (JUST GUESSING): FreeBSD 6.X (93%), F5 Networks embedded (86%), Apple embedded (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2 cpe:/h:apple:airport_extreme
Aggressive OS guesses: FreeBSD 6.2-RELEASE (93%), F5 BIG-IP Edge Gateway (86%), Apple AirPort Extreme WAP (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for webpubpre.igae.minhafp.gob.es (195.10.201.177)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/http-proxy F5 BIG-IP load balancer http proxy
Device type: general purpose|load balancer|WAP
Running (JUST GUESSING): FreeBSD 6.X (93%), F5 Networks embedded (86%), Apple embedded (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2 cpe:/h:apple:airport_extreme
Aggressive OS guesses: FreeBSD 6.2-RELEASE (93%), F5 BIG-IP Edge Gateway (86%), Apple AirPort Extreme WAP (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for webpubpyf.igae.minhafp.gob.es (195.10.201.175)
Host is up (0.059s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/http-proxy F5 BIG-IP load balancer http proxy
Device type: general purpose|load balancer|WAP
Running (JUST GUESSING): FreeBSD 6.X (93%), F5 Networks embedded (86%), Apple embedded (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2 cpe:/h:apple:airport_extreme
Aggressive OS guesses: FreeBSD 6.2-RELEASE (93%), F5 BIG-IP Edge Gateway (86%), Apple AirPort Extreme WAP (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for www.pap.minhafp.gob.es (195.10.201.141)
Host is up (0.059s latency).
Other addresses for www.pap.minhafp.gob.es (not scanned): 2a02:9010:16:2::1111
rDNS record for 195.10.201.141: www.clasespasivas.meh.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
113/tcp closed ident
Device type: general purpose|load balancer|WAP
Running (JUST GUESSING): FreeBSD 6.X (93%), F5 Networks embedded (86%), Apple embedded (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2 cpe:/h:apple:airport_extreme
Aggressive OS guesses: FreeBSD 6.2-RELEASE (93%), F5 BIG-IP Edge Gateway (86%), Apple AirPort Extreme WAP (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for wwwpre.igae.pap.minhafp.gob.es (195.10.201.144)
Host is up (0.060s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
113/tcp closed ident
443/tcp closed https
Device type: general purpose|load balancer
Running (JUST GUESSING): FreeBSD 6.X (92%), OpenBSD 4.X (87%), F5 Networks embedded (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2 cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: FreeBSD 6.2-RELEASE (92%), OpenBSD 4.0 (87%), OpenBSD 4.3 (87%), F5 BIG-IP Edge Gateway (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for oficinaonline.pap.minhafp.gob.es (195.10.201.142)
Host is up (0.059s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/https?
Device type: general purpose|load balancer
Running (JUST GUESSING): FreeBSD 6.X (92%), OpenBSD 4.X (87%), F5 Networks embedded (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2 cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: FreeBSD 6.2-RELEASE (92%), OpenBSD 4.0 (87%), OpenBSD 4.3 (87%), F5 BIG-IP Edge Gateway (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for petete.minhafp.gob.es (5.2.24.65)
Host is up (0.076s latency).
rDNS record for 5.2.24.65: 65.24.2.5.static.ibercsm.net
Not shown: 991 filtered ports
PORT STATE SERVICE VERSION
21/tcp open ftp FileZilla ftpd
80/tcp open http Apache httpd (PHP 5.4.12)
113/tcp closed ident
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
500/tcp closed isakmp
2000/tcp open cisco-sccp?
3389/tcp open ms-wbt-server Microsoft Terminal Service
5060/tcp open sip?
12000/tcp closed cce4x
Device type: specialized|phone|general purpose
Running (JUST GUESSING): Microsoft Windows 7|Phone|XP (88%)
OS CPE: cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows cpe:/o:microsoft:windows_xp::sp3
Aggressive OS guesses: Microsoft Windows Embedded Standard 7 (88%), Microsoft Windows Phone 7.5 or 8.0 (88%), Microsoft Windows XP SP3 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Host: Bienvenido; OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for portalpre.minhafp.gob.es (193.203.200.67)
Host is up (2.5s latency).
All 1000 scanned ports on portalpre.minhafp.gob.es (193.203.200.67) are filtered
Too many fingerprints match this host to give specific OS details

Nmap scan report for sdc.minhafp.gob.es (193.203.200.150)
Host is up (0.060s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 7.5
443/tcp open ssl/http Microsoft IIS httpd 7.5
8082/tcp closed blackice-alerts
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (89%), FreeBSD 6.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (89%), OpenBSD 4.3 (87%), FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for sefp.minhafp.gob.es (185.73.174.13)
Host is up (0.061s latency).
Other addresses for sefp.minhafp.gob.es (not scanned): 2a03:44a0:300::b949:ae0d
rDNS record for 185.73.174.13: 13.red-185-73-174.customer.static.ccgg.telefonica.net
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache Tomcat/Coyote JSP engine 1.1
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: firewall|general purpose|WAP|webcam
Running (JUST GUESSING): Linux 2.6.X|2.4.X (87%), Fortinet embedded (87%), Tandberg embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6 cpe:/h:fortinet:fortianalyzer-400b cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:2.4 cpe:/h:tandberg:vcs
Aggressive OS guesses: Fortinet FortiAnalyzer-400B firewall (Linux 2.6) (87%), Linux 2.6.32 (86%), Linux 2.6.32 - 2.6.35 (86%), Linux 2.6.35 (86%), DD-WRT v24-sp1 (Linux 2.4) (85%), Tandberg VCS video conferencing system (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for Preserviciostelematicos.minhap.gob.es (193.203.200.215)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http None
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAD57A%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,3FC,"HTTP/1\.1\x20200\x20OK\r\nContent-Type:\x20text/html\r\nLas
SF:t-Modified:\x20Wed,\x2020\x20Apr\x202011\x2010:58:47\x20GMT\r\nAccept-R
SF:anges:\x20bytes\r\nETag:\x20\"654e63ec49ffcb1:0\"\r\nServer:\x20None\r\
SF:nX-Powered-By:\x20ASP\.NET\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2003:
SF:56:41\x20GMT\r\nConnection:\x20close\r\nContent-Length:\x20689\r\nSet-C
SF:ookie:\x20cookie_PRE_apps_externas=3573228042\.20480\.0000;\x20path=/;\
SF:x20Httponly\r\n\r\n<!DOCTYPE\x20html\x20PUBLIC\x20\"-//W3C//DTD\x20XHTM
SF:L\x201\.0\x20Strict//EN\"\x20\"http://www\.w3\.org/TR/xhtml1/DTD/xhtml1
SF:-strict\.dtd\">\r\n<html\x20xmlns=\"http://www\.w3\.org/1999/xhtml\">\r
SF:\n<head>\r\n<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html
SF:;\x20charset=iso-8859-1\"\x20/>\r\n<title>IIS7</title>\r\n<style\x20typ
SF:e=\"text/css\">\r\n<!--\r\nbody\x20{\r\n\tcolor:#000000;\r\n\tbackgroun
SF:d-color:#B3B3B3;\r\n\t0;\r\n}\r\n\r\n#container\x20{\r\n\tmargin
SF:-left:auto;\r\n\tmargin-right: auto;\r\n\ttext-align:center;\r\n\t}\r\n\
SF:r\na\x20img\x20{\r\n\tborder:none;\r\n}\r\n\r\n-->\r\n</style>\r\n</hea
SF:d>\r\n<body>\r\n<div\x20id=\"container\">\r\n<a\x20href=\"http://go\.mi
SF:crosoft\.com/fwlink/\?l")%r(HTTPOptions,122,"HTTP/1\.1\x20200\x20OK\r\n
SF:Allow:\x20OPTIONS,\x20TRACE,\x20GET,\x20HEAD,\x20POST\r\nServer:\x20Non
SF:e\r\nPublic:\x20OPTIONS,\x20TRACE,\x20GET,\x20HEAD,\x20POST\r\nX-Powere
SF:d-By:\x20ASP\.NET\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2003:56:42\x20
SF:GMT\r\nConnection:\x20close\r\nContent-Length:\x200\r\nSet-Cookie:\x20c
SF:ookie_PRE_apps_externas=3590005258\.20480\.0000;\x20path=/;\x20Httponly
SF:\r\n\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for Serviciostelematicos.minhap.gob.es (193.203.200.55)
Host is up (0.060s latency).
rDNS record for 193.203.200.55: icac.minhap.es
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
8082/tcp closed blackice-alerts
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (89%), FreeBSD 6.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (89%), OpenBSD 4.3 (87%), FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for buscadorcdi.minhap.gob.es (193.203.200.116)
Host is up (0.059s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
8082/tcp closed blackice-alerts
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (89%), FreeBSD 6.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (89%), OpenBSD 4.3 (87%), FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for www.catastro.minhap.gob.es (195.66.151.65)
Host is up (0.060s latency).
rDNS record for 195.66.151.65: www.catastro.meh.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd
443/tcp closed https
Device type: general purpose|WAP
Running (JUST GUESSING): Microsoft Windows 2003|XP|2000 (89%), Apple embedded (89%)
OS CPE: cpe:/o:microsoft:windows_server_2003::sp2 cpe:/h:apple:airport_extreme cpe:/o:microsoft:windows_xp cpe:/o:microsoft:windows_2000::sp4
Aggressive OS guesses: Microsoft Windows Server 2003 SP2 (89%), Apple AirPort Extreme WAP (89%), Microsoft Windows Server 2003 (88%), Microsoft Windows XP (87%), Microsoft Windows XP SP3 (87%), Microsoft Windows 2000 SP4 (86%), Microsoft Windows Server 2003 SP1 or SP2 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for cdrsede.minhap.gob.es (193.203.200.157)
Host is up (0.059s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft IIS httpd 8.0
8082/tcp closed blackice-alerts
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (89%), FreeBSD 6.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (89%), OpenBSD 4.3 (87%), FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for www.bonosocial.gob.es (193.147.89.91)
Host is up (0.060s latency).
Other addresses for www.bonosocial.gob.es (not scanned): 2001:720:438:402::91
rDNS record for 193.147.89.91: www.usuariosteleco.es
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for difusion-face.buscador.gob.es (108.177.126.121)
Host is up (0.095s latency).
Other addresses for difusion-face.buscador.gob.es (not scanned): 2a00:1450:4013:c00::79
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Google httpd
443/tcp open ssl/http Google httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.clave.gob.es (185.73.172.50)
Host is up (0.059s latency).
Other addresses for www.clave.gob.es (not scanned): 2a03:44a0:100:fffe::afc:840d
rDNS record for 185.73.172.50: 50.red-185-73-172.customer.static.ccgg.telefonica.net
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 5.0
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 5.0
2000/tcp open cisco-sccp?
5060/tcp open sip?
OS fingerprint not ideal because: maxTimingRatio (3.694000e+00) is greater than 1.4
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for consejodetransparencia.gob.es (185.73.172.38)
Host is up (0.060s latency).
rDNS record for 185.73.172.38: 38.red-185-73-172.customer.static.ccgg.telefonica.net
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 5.0
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 5.0
2000/tcp open cisco-sccp?
5060/tcp open sip?
OS fingerprint not ideal because: maxTimingRatio (3.774000e+00) is greater than 1.4
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for patrullaaguila.defensa.gob.es (193.33.2.155)
Host is up (0.059s latency).
rDNS record for 193.33.2.155: IP-193-33-2-155.mde.es
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for sitios.tecnologiaeinnovacion.defensa.gob.es (213.134.41.188)
Host is up.
rDNS record for 213.134.41.188: ih-vm-dgam-web.c.mad.interhost.com
All 1000 scanned ports on sitios.tecnologiaeinnovacion.defensa.gob.es (213.134.41.188) are filtered
Too many fingerprints match this host to give specific OS details

Nmap scan report for www.exteriores.gob.es (217.149.144.15)
Host is up (0.061s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 7.5
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 7.5
OS fingerprint not ideal because: maxTimingRatio (3.614000e+00) is greater than 1.4
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for ayuntamientodemalaga.face.gob.es (185.73.172.48)
Host is up (0.059s latency).
rDNS record for 185.73.172.48: 48.red-185-73-172.customer.static.ccgg.telefonica.net
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 5.0
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 5.0
2000/tcp open cisco-sccp?
5060/tcp open sip?
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (88%), OpenBSD 4.3 (88%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for siu.fomento.gob.es (192.148.212.29)
Host is up (0.059s latency).
rDNS record for 192.148.212.29: 29.red-192-148-212.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 7.5
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 7.5
Device type: general purpose|WAP
Running (JUST GUESSING): Microsoft Windows Vista|2008|7|8.1 (89%), AirSpan embedded (88%), OpenBSD 4.X (88%), Apple embedded (85%)
OS CPE: cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_server_2008::sp1 cpe:/o:microsoft:windows_7 cpe:/o:openbsd:openbsd:4.0 cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_8.1:r1 cpe:/h:apple:airport_extreme
Aggressive OS guesses: Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (89%), AirSpan ProST WiMAX access point (88%), Microsoft Windows Server 2008 R2 (88%), Microsoft Windows 7 (88%), Microsoft Windows 7 SP1 or Windows Server 2008 SP2 or 2008 R2 SP1 (88%), Microsoft Windows Vista SP2, Windows 7 SP1, or Windows Server 2008 (88%), OpenBSD 4.0 (88%), Microsoft Windows Server 2008 R2 SP1 (87%), Microsoft Windows Server 2008 R2 or Windows 8 (87%), Microsoft Windows Server 2008 (87%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for origin.magrama.gob.es (93.188.53.33)
Host is up (0.061s latency).
rDNS record for 93.188.53.33: www.magrama.gob.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Linux 2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.6
OS details: Linux 2.6.18 - 2.6.22
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for sig.mapama.gob.es (93.188.53.108)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy HAProxy http proxy 1.3.1 or later
443/tcp open ssl/http-proxy HAProxy http proxy 1.3.1 or later
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Linux 2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.6
OS details: Linux 2.6.18 - 2.6.22
Service Info: Device: load balancer

Nmap scan report for sede.marm.gob.es (93.188.53.80)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.32 ((Unix) DAV/2 mod_jk/1.2.41 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips)
443/tcp open ssl/http Apache httpd 2.2.32 ((Unix) DAV/2 mod_jk/1.2.41 mod_ssl/2.2.15 OpenSSL/1.0.1e-fips)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Linux 2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.6
OS details: Linux 2.6.18 - 2.6.22

Nmap scan report for www.mecd.gob.es (212.128.114.116)
Host is up (0.060s latency).
rDNS record for 212.128.114.116: 116.red-212-128-114.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
113/tcp closed ident
443/tcp open ssl/https?
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for m.redined.mecd.gob.es (212.128.114.82)
Host is up (0.060s latency).
rDNS record for 212.128.114.82: 82.red-212-128-114.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache Tomcat/Coyote JSP engine 1.1
113/tcp closed ident
8000/tcp open http Handle System Proxy Server
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (86%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.mincotur.gob.es (193.147.89.90)
Host is up (0.071s latency).
Other addresses for www.mincotur.gob.es (not scanned): 2001:720:438:402::90
rDNS record for 193.147.89.90: minetad.gob.es
Not shown: 993 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
2323/tcp closed 3d-nfsd
5002/tcp closed rfe
5405/tcp closed pcduo
6059/tcp closed X11:59
49153/tcp closed unknown
Device type: specialized|phone
Running (JUST GUESSING): Microsoft Windows 7|Phone (85%)
OS CPE: cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows
Aggressive OS guesses: Microsoft Windows Embedded Standard 7 (85%), Microsoft Windows Phone 7.5 or 8.0 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for www.idi.mineco.gob.es (193.146.133.11)
Host is up (0.060s latency).
rDNS record for 193.146.133.11: video.micinn.es
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
81/tcp open http lighttpd 1.4.26
443/tcp open ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for geoportal.minetad.gob.es (193.146.1.96)
Host is up (0.060s latency).
Other addresses for geoportal.minetad.gob.es (not scanned): 2001:720:438:400::96
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.4.10 ((Win64) mod_jk/1.2.37)
443/tcp open ssl/http Apache httpd 2.4.10 ((Win64) mod_jk/1.2.37)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: specialized|general purpose
Running (JUST GUESSING): AVtech embedded (87%), OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: AVtech Room Alert 26W environmental monitor (87%), OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for crm.minetur.gob.es (193.146.1.87)
Host is up (0.067s latency).
Not shown: 994 filtered ports
PORT STATE SERVICE VERSION
1001/tcp open tcpwrapped
5903/tcp open tcpwrapped
7002/tcp open tcpwrapped
49400/tcp open tcpwrapped
52848/tcp open tcpwrapped
57797/tcp open tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: specialized|WAP|phone
Running: iPXE 1.X, Linux 2.4.X|2.6.X, Sony Ericsson embedded
OS CPE: cpe:/o:ipxe:ipxe:1.0.0%2b cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.6.22 cpe:/h:sonyericsson:u8i_vivaz
OS details: iPXE 1.0.0+, Tomato 1.28 (Linux 2.4.20), Tomato firmware (Linux 2.6.22), Sony Ericsson U8i Vivaz mobile phone

Nmap scan report for safe.minetur.gob.es (193.146.1.106)
Host is up (0.061s latency).
rDNS record for 193.146.1.106: safe.mincotur.gob.es
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Microsoft IIS httpd 8.5
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for sedeaplicaciones.minetur.gob.es (193.146.1.88)
Host is up (0.061s latency).
Other addresses for sedeaplicaciones.minetur.gob.es (not scanned): 2001:720:438:400::88
rDNS record for 193.146.1.88: m.minetur.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 7.5
443/tcp open ssl/http Microsoft IIS httpd 7.5
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for minhafp.gob.es (193.203.200.85)
Host is up (0.061s latency).
rDNS record for 193.203.200.85: www.patrimoniodelestado.minhafp.es
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp closed https
8082/tcp closed blackice-alerts
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (87%), FreeBSD 6.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (87%), FreeBSD 6.2-RELEASE (85%), OpenBSD 4.3 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Failed to resolve "delta.mtin.gob.es".
Failed to resolve "formacion.mtin.gob.es".
Failed to resolve "gestores.garantiajuvenil.mtin.gob.es".
Failed to resolve "lve.mtin.gob.es".
Failed to resolve "mtin2.mtin.gob.es".
Failed to resolve "pre-explotacion.mtin.gob.es".
Failed to resolve "pruebaslve.mtin.gob.es".
Failed to resolve "pruebasrea.mtin.gob.es".
Failed to resolve "rea.mtin.gob.es".
Failed to resolve "sede.mtin.gob.es".
Failed to resolve "muface.gob.es".
Failed to resolve "www.Clave-dninbcert.policia.gob.es".
Failed to resolve "www.Clave-dninbrt.policia.gob.es".
Failed to resolve "presidencia.gob.es".
Failed to resolve "comunicacion.presidencia.gob.es".
Failed to resolve "dmz11.presidencia.gob.es".
Failed to resolve "dseg.presidencia.gob.es".
Failed to resolve "dsn.presidencia.gob.es".
Failed to resolve "lync.presidencia.gob.es".
Failed to resolve "or29.presidencia.gob.es".
Failed to resolve "mx0.preproduccion.presidencia.gob.es".
Failed to resolve "mx1.preproduccion.presidencia.gob.es".
Failed to resolve "mx2.preproduccion.presidencia.gob.es".
Failed to resolve "mdmsgc.sgc.presidencia.gob.es".
Failed to resolve "webmail.presidencia.gob.es".
Failed to resolve "sede.puertoalicante.gob.es".
Failed to resolve "www.redtrabaja.gob.es".
Failed to resolve "aplicaciones.rtic.gob.es".
Failed to resolve "sede.gob.es".
Failed to resolve "www2.sedecatastro.gob.es".
Failed to resolve "sedemeh.gob.es".
Failed to resolve "www.clave-dninbrt.seg-social.gob.es".
Failed to resolve "sepe.gob.es".
Failed to resolve "www.sgcmdm.gob.es".
Failed to resolve "www.spee.gob.es".
RTTVAR has grown to over 2.3 seconds, decreasing to 2.0
RTTVAR has grown to over 2.3 seconds, decreasing to 2.0
RTTVAR has grown to over 2.3 seconds, decreasing to 2.0
RTTVAR has grown to over 2.3 seconds, decreasing to 2.0
RTTVAR has grown to over 2.3 seconds, decreasing to 2.0
Nmap scan report for www.oficinavirtual.pap.minhafp.gob.es (195.10.201.141)
Host is up (0.059s latency).
rDNS record for 195.10.201.141: www.clasespasivas.meh.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
113/tcp closed ident
Device type: general purpose|load balancer
Running (JUST GUESSING): FreeBSD 6.X (92%), OpenBSD 4.X (86%), F5 Networks embedded (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2 cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: FreeBSD 6.2-RELEASE (92%), OpenBSD 4.0 (86%), OpenBSD 4.3 (85%), F5 BIG-IP Edge Gateway (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for pda.pap.minhafp.gob.es (195.10.201.149)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/https?
Device type: general purpose
Running (JUST GUESSING): FreeBSD 6.X (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for Webpub2.igae.minhap.gob.es (195.10.201.169)
Host is up (0.059s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
113/tcp closed ident
443/tcp open ssl/https BigIP
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAE623%P=x86_64-pc-linux-gnu
SF:%r(FourOhFourRequest,7E,"HTTP/1\.0\x20302\x20Found\r\nLocation:\x20http
SF:s:///vdesk/my\.acl\.php3\?errorcode=17\r\nServer:\x20BigIP\r\nConnectio
SF:n:\x20close\r\nContent-Length:\x200\r\n\r\n")%r(SIPOptions,83,"HTTP/1\.
SF:0\x20302\x20Found\r\nLocation:\x20https:///vdesk/my\.acl\.php3\?errorco
SF:de=17\r\nServer:\x20BigIP\r\nConnection:\x20Keep-Alive\r\nContent-Lengt
SF:h:\x200\r\n\r\n");
Device type: general purpose|load balancer
Running (JUST GUESSING): FreeBSD 6.X (92%), OpenBSD 4.X (87%), F5 Networks embedded (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2 cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: FreeBSD 6.2-RELEASE (92%), OpenBSD 4.0 (87%), OpenBSD 4.3 (85%), F5 BIG-IP Edge Gateway (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for Webpub2Des.igae.minhap.gob.es (195.10.201.184)
Host is up (0.060s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
Too many fingerprints match this host to give specific OS details

Nmap scan report for Webpub2Pre.igae.minhap.gob.es (195.10.201.170)
Host is up (0.060s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/https BigIP
8443/tcp closed https-alt
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAE623%P=x86_64-pc-linux-gnu
SF:%r(FourOhFourRequest,7E,"HTTP/1\.0\x20302\x20Found\r\nLocation:\x20http
SF:s:///vdesk/my\.acl\.php3\?errorcode=17\r\nServer:\x20BigIP\r\nConnectio
SF:n:\x20close\r\nContent-Length:\x200\r\n\r\n")%r(SIPOptions,83,"HTTP/1\.
SF:0\x20302\x20Found\r\nLocation:\x20https:///vdesk/my\.acl\.php3\?errorco
SF:de=17\r\nServer:\x20BigIP\r\nConnection:\x20Keep-Alive\r\nContent-Lengt
SF:h:\x200\r\n\r\n");
Device type: general purpose|load balancer
Running (JUST GUESSING): FreeBSD 6.X (92%), OpenBSD 4.X (86%), F5 Networks embedded (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2 cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: FreeBSD 6.2-RELEASE (92%), OpenBSD 4.0 (86%), OpenBSD 4.3 (85%), F5 BIG-IP Edge Gateway (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for webpub4.igae.minhap.gob.es (195.10.201.151)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/http-proxy F5 BIG-IP load balancer http proxy
Device type: general purpose|load balancer
Running (JUST GUESSING): FreeBSD 6.X (92%), OpenBSD 4.X (86%), F5 Networks embedded (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2 cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: FreeBSD 6.2-RELEASE (92%), OpenBSD 4.0 (86%), OpenBSD 4.3 (85%), F5 BIG-IP Edge Gateway (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for webpub5.igae.minhap.gob.es (195.10.201.39)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/http-proxy F5 BIG-IP load balancer http proxy
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 6.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 6.2-RELEASE (86%), OpenBSD 4.3 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for webpubDES.igae.minhap.gob.es (195.10.201.176)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/http-proxy F5 BIG-IP load balancer http proxy
Device type: general purpose|load balancer
Running (JUST GUESSING): FreeBSD 6.X (92%), OpenBSD 4.X (86%), F5 Networks embedded (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2 cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: FreeBSD 6.2-RELEASE (92%), OpenBSD 4.0 (86%), OpenBSD 4.3 (85%), F5 BIG-IP Edge Gateway (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for webpubPRE.igae.minhap.gob.es (195.10.201.177)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/http-proxy F5 BIG-IP load balancer http proxy
Device type: general purpose|load balancer
Running (JUST GUESSING): FreeBSD 6.X (92%), OpenBSD 4.X (86%), F5 Networks embedded (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2 cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: FreeBSD 6.2-RELEASE (92%), OpenBSD 4.0 (86%), OpenBSD 4.3 (85%), F5 BIG-IP Edge Gateway (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for webpubPyF.igae.minhap.gob.es (195.10.201.175)
Host is up (0.059s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/http-proxy F5 BIG-IP load balancer http proxy
Device type: general purpose|load balancer
Running (JUST GUESSING): FreeBSD 6.X (92%), OpenBSD 4.X (86%), F5 Networks embedded (85%)
OS CPE: cpe:/o:freebsd:freebsd:6.2 cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: FreeBSD 6.2-RELEASE (92%), OpenBSD 4.0 (86%), OpenBSD 4.3 (85%), F5 BIG-IP Edge Gateway (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for pdalab.pap.minhap.gob.es (195.10.201.172)
Host is up (0.060s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
Too many fingerprints match this host to give specific OS details

Nmap scan report for petete.minhap.gob.es (5.2.24.65)
Host is up (0.075s latency).
rDNS record for 5.2.24.65: 65.24.2.5.static.ibercsm.net
Not shown: 991 filtered ports
PORT STATE SERVICE VERSION
21/tcp open ftp FileZilla ftpd
80/tcp open http Apache httpd (PHP 5.4.12)
113/tcp closed ident
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
500/tcp closed isakmp
2000/tcp open cisco-sccp?
3389/tcp open ms-wbt-server Microsoft Terminal Service
5060/tcp open sip?
12000/tcp closed cce4x
Device type: specialized|phone|general purpose
Running (JUST GUESSING): Microsoft Windows 7|Phone|XP (88%)
OS CPE: cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows cpe:/o:microsoft:windows_xp::sp3
Aggressive OS guesses: Microsoft Windows Embedded Standard 7 (88%), Microsoft Windows Phone 7.5 or 8.0 (88%), Microsoft Windows XP SP3 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Host: Bienvenido; OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for preserviciostelematicos.minhap.gob.es (193.203.200.215)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http None
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAE61C%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,3FC,"HTTP/1\.1\x20200\x20OK\r\nContent-Type:\x20text/html\r\nLas
SF:t-Modified:\x20Wed,\x2020\x20Apr\x202011\x2010:58:47\x20GMT\r\nAccept-R
SF:anges:\x20bytes\r\nETag:\x20\"654e63ec49ffcb1:0\"\r\nServer:\x20None\r\
SF:nX-Powered-By:\x20ASP\.NET\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2005:
SF:07:40\x20GMT\r\nConnection:\x20close\r\nContent-Length:\x20689\r\nSet-C
SF:ookie:\x20cookie_PRE_apps_externas=3573228042\.20480\.0000;\x20path=/;\
SF:x20Httponly\r\n\r\n<!DOCTYPE\x20html\x20PUBLIC\x20\"-//W3C//DTD\x20XHTM
SF:L\x201\.0\x20Strict//EN\"\x20\"http://www\.w3\.org/TR/xhtml1/DTD/xhtml1
SF:-strict\.dtd\">\r\n<html\x20xmlns=\"http://www\.w3\.org/1999/xhtml\">\r
SF:\n<head>\r\n<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html
SF:;\x20charset=iso-8859-1\"\x20/>\r\n<title>IIS7</title>\r\n<style\x20typ
SF:e=\"text/css\">\r\n<!--\r\nbody\x20{\r\n\tcolor:#000000;\r\n\tbackgroun
SF:d-color:#B3B3B3;\r\n\t0;\r\n}\r\n\r\n#container\x20{\r\n\tmargin
SF:-left:auto;\r\n\tmargin-right: auto;\r\n\ttext-align:center;\r\n\t}\r\n\
SF:r\na\x20img\x20{\r\n\tborder:none;\r\n}\r\n\r\n-->\r\n</style>\r\n</hea
SF:d>\r\n<body>\r\n<div\x20id=\"container\">\r\n<a\x20href=\"http://go\.mi
SF:crosoft\.com/fwlink/\?l")%r(HTTPOptions,122,"HTTP/1\.1\x20200\x20OK\r\n
SF:Allow:\x20OPTIONS,\x20TRACE,\x20GET,\x20HEAD,\x20POST\r\nServer:\x20Non
SF:e\r\nPublic:\x20OPTIONS,\x20TRACE,\x20GET,\x20HEAD,\x20POST\r\nX-Powere
SF:d-By:\x20ASP\.NET\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2005:07:40\x20
SF:GMT\r\nConnection:\x20close\r\nContent-Length:\x200\r\nSet-Cookie:\x20c
SF:ookie_PRE_apps_externas=3590005258\.20480\.0000;\x20path=/;\x20Httponly
SF:\r\n\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for seap.minhap.gob.es (185.73.174.13)
Host is up (0.061s latency).
Other addresses for seap.minhap.gob.es (not scanned): 2a03:44a0:300::b949:ae0d
rDNS record for 185.73.174.13: 13.red-185-73-174.customer.static.ccgg.telefonica.net
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache Tomcat/Coyote JSP engine 1.1
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for serviciostelematicos.minhap.gob.es (193.203.200.55)
Host is up (0.059s latency).
rDNS record for 193.203.200.55: icac.minhap.es
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
8082/tcp closed blackice-alerts
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%), FreeBSD 6.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (86%), FreeBSD 6.2-RELEASE (85%), OpenBSD 4.3 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for serviciostelematicosext.minhap.gob.es (193.203.200.151)
Host is up (0.060s latency).
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
8082/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
8443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for serviciostelematicos.sgcal.minhap.gob.es (193.203.200.96)
Host is up (0.059s latency).
All 1000 scanned ports on serviciostelematicos.sgcal.minhap.gob.es (193.203.200.96) are filtered
Too many fingerprints match this host to give specific OS details

Nmap scan report for sede.mir.gob.es (212.128.101.24)
Host is up (0.061s latency).
rDNS record for 212.128.101.24: 24.red-212-128-101.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.4.6 ((Red Hat Enterprise Linux) OpenSSL/1.0.1e-fips)
443/tcp open ssl/http Apache httpd 2.2.3 ((Red Hat) DAV/2)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: storage-misc|general purpose|firewall
Running (JUST GUESSING): Linux 2.6.X|3.X (88%), Synology DiskStation Manager 5.X (88%), WatchGuard Fireware 11.X (86%)
OS CPE: cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Synology DiskStation Manager 5.1 (88%), Linux 2.6.32 (87%), Linux 2.6.39 (86%), Linux 2.6.32 or 3.10 (86%), Linux 3.10 (86%), Linux 3.4 (86%), WatchGuard Fireware 11.8 (86%), Linux 2.6.32 - 2.6.39 (85%), Linux 3.1 - 3.2 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for servicios.miteco.gob.es (93.188.49.179)
Host is up (0.061s latency).
rDNS record for 93.188.49.179: servicios.magrama.es
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http SAP WebDispatcher
90/tcp closed dnsix
100/tcp closed newacct
113/tcp closed ident
443/tcp open ssl/http SAP WebDispatcher
Device type: storage-misc|general purpose|firewall
Running (JUST GUESSING): Linux 2.6.X|3.X (91%), Synology DiskStation Manager 5.X (91%), WatchGuard Fireware 11.X (89%)
OS CPE: cpe:/o:linux:linux_kernel cpe:/a:synology:diskstation_manager:5.1 cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.10 cpe:/o:watchguard:fireware:11.8
Aggressive OS guesses: Synology DiskStation Manager 5.1 (91%), Linux 2.6.32 or 3.10 (91%), Linux 2.6.32 (89%), Linux 2.6.39 (89%), Linux 3.4 (89%), WatchGuard Fireware 11.8 (89%), Linux 2.6.32 - 2.6.39 (89%), Linux 3.10 (88%), Linux 3.1 - 3.2 (88%), Linux 2.6.38 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for wms.miteco.gob.es (93.188.53.90)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/http Apache httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|firewall|media device
Running (JUST GUESSING): Linux 2.6.X|3.X (86%), IPCop 2.X (86%), Tiandy embedded (86%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.4 cpe:/o:ipcop:ipcop:2 cpe:/o:linux:linux_kernel:3.2
Aggressive OS guesses: Linux 2.6.32 (86%), IPCop 2 firewall (Linux 3.4) (86%), Linux 3.2 (86%), Tiandy NVR (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for wmts.miteco.gob.es (93.188.53.19)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.4.25 ((Debian))
443/tcp open ssl/http Apache httpd 2.4.25 ((Debian))
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|firewall|media device
Running (JUST GUESSING): Linux 2.6.X|3.X (86%), IPCop 2.X (86%), Tiandy embedded (86%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3.4 cpe:/o:ipcop:ipcop:2 cpe:/o:linux:linux_kernel:3.2
Aggressive OS guesses: Linux 2.6.32 (86%), IPCop 2 firewall (Linux 3.4) (86%), Linux 3.2 (86%), Tiandy NVR (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.mitramiss.gob.es (54.230.14.169)
Host is up (0.087s latency).
Other addresses for www.mitramiss.gob.es (not scanned): 54.230.14.92 54.230.14.2 54.230.14.165
rDNS record for 54.230.14.169: server-54-230-14-169.ams1.r.cloudfront.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Amazon CloudFront httpd
443/tcp open ssl/http Amazon CloudFront httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: PBX
Running (JUST GUESSING): Vodavi embedded (87%)
OS CPE: cpe:/h:vodavi:xts-ip
Aggressive OS guesses: Vodavi XTS-IP PBX (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for extranjeros.mitramiss.gob.es (54.230.14.150)
Host is up (0.087s latency).
Other addresses for extranjeros.mitramiss.gob.es (not scanned): 54.230.14.18 54.230.14.43 54.230.14.237
rDNS record for 54.230.14.150: server-54-230-14-150.ams1.r.cloudfront.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Amazon CloudFront httpd
443/tcp open ssl/http Amazon CloudFront httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: PBX
Running (JUST GUESSING): Vodavi embedded (87%)
OS CPE: cpe:/h:vodavi:xts-ip
Aggressive OS guesses: Vodavi XTS-IP PBX (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.fogasa.mitramiss.gob.es (192.148.211.46)
Host is up (0.060s latency).
rDNS record for 192.148.211.46: 46.red-192-148-211.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.31 ((Unix) mod_ssl/2.2.31 OpenSSL/1.0.1r DAV/2 mod_auth_kerb/5.4 mod_cluster/1.2.6.Final mod_jk/1.2.30)
443/tcp open ssl/http Apache httpd 2.2.31 ((Unix) mod_ssl/2.2.31 OpenSSL/1.0.1r DAV/2 mod_auth_kerb/5.4 mod_cluster/1.2.6.Final mod_jk/1.2.30)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: WAP
Running (JUST GUESSING): Linux 2.4.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.4.20
Aggressive OS guesses: Tomato 1.27 - 1.28 (Linux 2.4.20) (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.mjusticia.gob.es (212.128.104.104)
Host is up (0.060s latency).
Other addresses for www.mjusticia.gob.es (not scanned): 2a00:2000:40a0:fffe::a0c:4983
rDNS record for 212.128.104.104: 104.red-212-128-104.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAE631%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,3502,"HTTP/1\.1\x20500\x20Internal\x20Server\x20Error\r\nContent
SF:-Length:\x2029513\r\nContent-Type:\x20text/html\r\n\r\n<!DOCTYPE\x20HTM
SF:L\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01\x20Transitional//EN\"\x20
SF:\"http://www\.w3c\.org/TR/1999/REC-html401-19991224/loose\.dtd\">\n<htm
SF:l>\n\x20\x20<head>\n\x20\x20\x20\x20<meta\x20http-equiv=\"Content-Type\
SF:"\x20content=\"text/html;\x20charset=UTF-8\">\n\x20\x20\x20\x20<style\x
SF:20type=\"text/css\">\n\x20\x20\x20\x20\x20\x20html,\x20body\x20{\n\x20\
SF:x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\
SF:x20padding:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20\x20Verd
SF:ana,\x20Arial,\x20sans-serif;\n\x20\x20\x20\x20\x20\x20\x20\x20font-siz
SF:e:\x2010pt;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20h1,\x20
SF:h2\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20height:\x2082px;\n\x20\x20\x20
SF:\x20\x20\x20\x20\x20\x20-999em;\n\x20\x20\x20\x20\x20\x20\x
SF:20\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x
SF:20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20}\
SF:n\x20\x20\x20\x20\x20\x20div\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20marg
SF:in:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20
SF:\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div\.header\x20{\n\x20\x20\x20\x
SF:20\x20\x20\x20\x20background:\x20url\(data:image/jpeg;base64,/9j/4AAQSk
SF:ZJRgABAQEAZABkAAD/4QAiRXhpZgAATU0AKgAAAAgAAQESAAMAAAABAAEAAAAAAAD/4Tjca
SF:HR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu\+7vyIgaWQ
SF:9Ilc1TTBNcENlaGlIenJlU3pOV")%r(HTTPOptions,3502,"HTTP/1\.1\x20500\x20In
SF:ternal\x20Server\x20Error\r\nContent-Length:\x2029513\r\nContent-Type:\
SF:x20text/html\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//W3C//DTD\x20HTM
SF:L\x204\.01\x20Transitional//EN\"\x20\"http://www\.w3c\.org/TR/1999/REC-
SF:html401-19991224/loose\.dtd\">\n<html>\n\x20\x20<head>\n\x20\x20\x20\x2
SF:0<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html;\x20charse
SF:t=UTF-8\">\n\x20\x20\x20\x20<style\x20type=\"text/css\">\n\x20\x20\x20\
SF:x20\x20\x20html,\x20body\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20\
SF:x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20
SF:\x20\x20\x20\x20\x20Verdana,\x20Arial,\x20sans-serif;\n\x20
SF:\x20\x20\x20\x20\x20\x20\x20\x2010pt;\n\x20\x20\x20\x20\x20\x
SF:20}\n\x20\x20\x20\x20\x20\x20h1,\x20h2\x20{\n\x20\x20\x20\x20\x20\x20\x
SF:20\x20height:\x2082px;\n\x20\x20\x20\x20\x20\x20\x20\x20\x2
SF:0-999em;\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x
SF:20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20margi
SF:n:\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div\x20{\n
SF:\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20
SF:\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20
SF:\x20div\.header\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20background:\x20ur
SF:l\(data:image/jpeg;base64,/9j/4AAQSkZJRgABAQEAZABkAAD/4QAiRXhpZgAATU0AK
SF:gAAAAgAAQESAAMAAAABAAEAAAAAAAD/4TjcaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4w
SF:LwA8P3hwYWNrZXQgYmVnaW49Iu\+7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOV");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for bibliotecas.mjusticia.gob.es (212.128.104.101)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache
443/tcp open ssl/https Apache
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAE635%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,3502,"HTTP/1\.1\x20500\x20Internal\x20Server\x20Error\r\nContent
SF:-Length:\x2029513\r\nContent-Type:\x20text/html\r\n\r\n<!DOCTYPE\x20HTM
SF:L\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01\x20Transitional//EN\"\x20
SF:\"http://www\.w3c\.org/TR/1999/REC-html401-19991224/loose\.dtd\">\n<htm
SF:l>\n\x20\x20<head>\n\x20\x20\x20\x20<meta\x20http-equiv=\"Content-Type\
SF:"\x20content=\"text/html;\x20charset=UTF-8\">\n\x20\x20\x20\x20<style\x
SF:20type=\"text/css\">\n\x20\x20\x20\x20\x20\x20html,\x20body\x20{\n\x20\
SF:x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\
SF:x20padding:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20\x20Verd
SF:ana,\x20Arial,\x20sans-serif;\n\x20\x20\x20\x20\x20\x20\x20\x20font-siz
SF:e:\x2010pt;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20h1,\x20
SF:h2\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20height:\x2082px;\n\x20\x20\x20
SF:\x20\x20\x20\x20\x20\x20-999em;\n\x20\x20\x20\x20\x20\x20\x
SF:20\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x
SF:20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20}\
SF:n\x20\x20\x20\x20\x20\x20div\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20marg
SF:in:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20
SF:\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div\.header\x20{\n\x20\x20\x20\x
SF:20\x20\x20\x20\x20background:\x20url\(data:image/jpeg;base64,/9j/4AAQSk
SF:ZJRgABAQEAZABkAAD/4QAiRXhpZgAATU0AKgAAAAgAAQESAAMAAAABAAEAAAAAAAD/4Tjca
SF:HR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu\+7vyIgaWQ
SF:9Ilc1TTBNcENlaGlIenJlU3pOV")%r(HTTPOptions,3502,"HTTP/1\.1\x20500\x20In
SF:ternal\x20Server\x20Error\r\nContent-Length:\x2029513\r\nContent-Type:\
SF:x20text/html\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//W3C//DTD\x20HTM
SF:L\x204\.01\x20Transitional//EN\"\x20\"http://www\.w3c\.org/TR/1999/REC-
SF:html401-19991224/loose\.dtd\">\n<html>\n\x20\x20<head>\n\x20\x20\x20\x2
SF:0<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html;\x20charse
SF:t=UTF-8\">\n\x20\x20\x20\x20<style\x20type=\"text/css\">\n\x20\x20\x20\
SF:x20\x20\x20html,\x20body\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20\
SF:x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20
SF:\x20\x20\x20\x20\x20Verdana,\x20Arial,\x20sans-serif;\n\x20
SF:\x20\x20\x20\x20\x20\x20\x20\x2010pt;\n\x20\x20\x20\x20\x20\x
SF:20}\n\x20\x20\x20\x20\x20\x20h1,\x20h2\x20{\n\x20\x20\x20\x20\x20\x20\x
SF:20\x20height:\x2082px;\n\x20\x20\x20\x20\x20\x20\x20\x20\x2
SF:0-999em;\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x
SF:20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20margi
SF:n:\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div\x20{\n
SF:\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20
SF:\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20
SF:\x20div\.header\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20background:\x20ur
SF:l\(data:image/jpeg;base64,/9j/4AAQSkZJRgABAQEAZABkAAD/4QAiRXhpZgAATU0AK
SF:gAAAAgAAQESAAMAAAABAAEAAAAAAAD/4TjcaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4w
SF:LwA8P3hwYWNrZXQgYmVnaW49Iu\+7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOV");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAE63D%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,739F,"HTTP/1\.1\x20500\x20Internal\x20Server\x20Error\r\n
SF:Content-Length:\x2029513\r\nContent-Type:\x20text/html\r\n\r\n<!DOCTYPE
SF:\x20HTML\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01\x20Transitional//E
SF:N\"\x20\"http://www\.w3c\.org/TR/1999/REC-html401-19991224/loose\.dtd\"
SF:>\n<html>\n\x20\x20<head>\n\x20\x20\x20\x20<meta\x20http-equiv=\"Conten
SF:t-Type\"\x20content=\"text/html;\x20charset=UTF-8\">\n\x20\x20\x20\x20<
SF:style\x20type=\"text/css\">\n\x20\x20\x20\x20\x20\x20html,\x20body\x20{
SF:\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x
SF:20\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20\
SF:x20Verdana,\x20Arial,\x20sans-serif;\n\x20\x20\x20\x20\x20\x20\x20\x20f
SF:ont-size:\x2010pt;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20
SF:h1,\x20h2\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20height:\x2082px;\n\x20\
SF:x20\x20\x20\x20\x20\x20\x20\x20-999em;\n\x20\x20\x20\x20\x2
SF:0\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x2
SF:00;\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x2
SF:0\x20}\n\x20\x20\x20\x20\x20\x20div\x20{\n\x20\x20\x20\x20\x20\x20\x20\
SF:x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\
SF:x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div\.header\x20{\n\x20\x2
SF:0\x20\x20\x20\x20\x20\x20background:\x20url\(data:image/jpeg;base64,/9j
SF:/4AAQSkZJRgABAQEAZABkAAD/4QAiRXhpZgAATU0AKgAAAAgAAQESAAMAAAABAAEAAAAAAA
SF:D/4TjcaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu\+7
SF:vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOV")%r(HTTPOptions,4EE8,"HTTP/1\.1\x2050
SF:0\x20Internal\x20Server\x20Error\r\nContent-Length:\x2029513\r\nContent
SF:-Type:\x20text/html\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//W3C//DTD
SF:\x20HTML\x204\.01\x20Transitional//EN\"\x20\"http://www\.w3c\.org/TR/19
SF:99/REC-html401-19991224/loose\.dtd\">\n<html>\n\x20\x20<head>\n\x20\x20
SF:\x20\x20<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html;\x2
SF:0charset=UTF-8\">\n\x20\x20\x20\x20<style\x20type=\"text/css\">\n\x20\x
SF:20\x20\x20\x20\x20html,\x20body\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20m
SF:argin:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\
SF:x20\x20\x20\x20\x20\x20\x20Verdana,\x20Arial,\x20sans-serif
SF:;\n\x20\x20\x20\x20\x20\x20\x20\x20\x2010pt;\n\x20\x20\x20\x2
SF:0\x20\x20}\n\x20\x20\x20\x20\x20\x20h1,\x20h2\x20{\n\x20\x20\x20\x20\x2
SF:0\x20\x20\x20height:\x2082px;\n\x20\x20\x20\x20\x20\x20\x20\x20text-ind
SF:ent:\x20-999em;\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x2
SF:0\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x
SF:20\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div
SF:\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\
SF:x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\
SF:x20\x20\x20div\.header\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20background
SF::\x20url\(data:image/jpeg;base64,/9j/4AAQSkZJRgABAQEAZABkAAD/4QAiRXhpZg
SF:AATU0AKgAAAAgAAQESAAMAAAABAAEAAAAAAAD/4TjcaHR0cDovL25zLmFkb2JlLmNvbS94Y
SF:XAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu\+7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOV");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for citaprevia.mjusticia.gob.es (52.211.84.185)
Host is up (0.093s latency).
rDNS record for 52.211.84.185: ec2-52-211-84-185.eu-west-1.compute.amazonaws.com
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.4.18 ((Ubuntu))
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|specialized|storage-misc
Running (JUST GUESSING): Linux 3.X (87%), Crestron 2-Series (87%), HP embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:crestron:2_series cpe:/h:hp:p2000_g3
Aggressive OS guesses: Linux 3.10 - 3.13 (87%), Crestron XPanel control system (87%), HP P2000 G3 NAS device (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for enares.mjusticia.gob.es (212.128.104.108)
Host is up (0.065s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache
443/tcp open ssl/https Apache
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAE637%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,3502,"HTTP/1\.1\x20500\x20Internal\x20Server\x20Error\r\nContent
SF:-Length:\x2029513\r\nContent-Type:\x20text/html\r\n\r\n<!DOCTYPE\x20HTM
SF:L\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01\x20Transitional//EN\"\x20
SF:\"http://www\.w3c\.org/TR/1999/REC-html401-19991224/loose\.dtd\">\n<htm
SF:l>\n\x20\x20<head>\n\x20\x20\x20\x20<meta\x20http-equiv=\"Content-Type\
SF:"\x20content=\"text/html;\x20charset=UTF-8\">\n\x20\x20\x20\x20<style\x
SF:20type=\"text/css\">\n\x20\x20\x20\x20\x20\x20html,\x20body\x20{\n\x20\
SF:x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\
SF:x20padding:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20\x20Verd
SF:ana,\x20Arial,\x20sans-serif;\n\x20\x20\x20\x20\x20\x20\x20\x20font-siz
SF:e:\x2010pt;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20h1,\x20
SF:h2\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20height:\x2082px;\n\x20\x20\x20
SF:\x20\x20\x20\x20\x20\x20-999em;\n\x20\x20\x20\x20\x20\x20\x
SF:20\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x
SF:20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20}\
SF:n\x20\x20\x20\x20\x20\x20div\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20marg
SF:in:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20
SF:\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div\.header\x20{\n\x20\x20\x20\x
SF:20\x20\x20\x20\x20background:\x20url\(data:image/jpeg;base64,/9j/4AAQSk
SF:ZJRgABAQEAZABkAAD/4QAiRXhpZgAATU0AKgAAAAgAAQESAAMAAAABAAEAAAAAAAD/4Tjca
SF:HR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu\+7vyIgaWQ
SF:9Ilc1TTBNcENlaGlIenJlU3pOV")%r(HTTPOptions,3502,"HTTP/1\.1\x20500\x20In
SF:ternal\x20Server\x20Error\r\nContent-Length:\x2029513\r\nContent-Type:\
SF:x20text/html\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//W3C//DTD\x20HTM
SF:L\x204\.01\x20Transitional//EN\"\x20\"http://www\.w3c\.org/TR/1999/REC-
SF:html401-19991224/loose\.dtd\">\n<html>\n\x20\x20<head>\n\x20\x20\x20\x2
SF:0<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html;\x20charse
SF:t=UTF-8\">\n\x20\x20\x20\x20<style\x20type=\"text/css\">\n\x20\x20\x20\
SF:x20\x20\x20html,\x20body\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20\
SF:x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20
SF:\x20\x20\x20\x20\x20Verdana,\x20Arial,\x20sans-serif;\n\x20
SF:\x20\x20\x20\x20\x20\x20\x20\x2010pt;\n\x20\x20\x20\x20\x20\x
SF:20}\n\x20\x20\x20\x20\x20\x20h1,\x20h2\x20{\n\x20\x20\x20\x20\x20\x20\x
SF:20\x20height:\x2082px;\n\x20\x20\x20\x20\x20\x20\x20\x20\x2
SF:0-999em;\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x
SF:20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20margi
SF:n:\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div\x20{\n
SF:\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20
SF:\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20
SF:\x20div\.header\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20background:\x20ur
SF:l\(data:image/jpeg;base64,/9j/4AAQSkZJRgABAQEAZABkAAD/4QAiRXhpZgAATU0AK
SF:gAAAAgAAQESAAMAAAABAAEAAAAAAAD/4TjcaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4w
SF:LwA8P3hwYWNrZXQgYmVnaW49Iu\+7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOV");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAE640%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,739F,"HTTP/1\.1\x20500\x20Internal\x20Server\x20Error\r\n
SF:Content-Length:\x2029513\r\nContent-Type:\x20text/html\r\n\r\n<!DOCTYPE
SF:\x20HTML\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01\x20Transitional//E
SF:N\"\x20\"http://www\.w3c\.org/TR/1999/REC-html401-19991224/loose\.dtd\"
SF:>\n<html>\n\x20\x20<head>\n\x20\x20\x20\x20<meta\x20http-equiv=\"Conten
SF:t-Type\"\x20content=\"text/html;\x20charset=UTF-8\">\n\x20\x20\x20\x20<
SF:style\x20type=\"text/css\">\n\x20\x20\x20\x20\x20\x20html,\x20body\x20{
SF:\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x
SF:20\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20\
SF:x20Verdana,\x20Arial,\x20sans-serif;\n\x20\x20\x20\x20\x20\x20\x20\x20f
SF:ont-size:\x2010pt;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20
SF:h1,\x20h2\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20height:\x2082px;\n\x20\
SF:x20\x20\x20\x20\x20\x20\x20\x20-999em;\n\x20\x20\x20\x20\x2
SF:0\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x2
SF:00;\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x2
SF:0\x20}\n\x20\x20\x20\x20\x20\x20div\x20{\n\x20\x20\x20\x20\x20\x20\x20\
SF:x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\
SF:x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div\.header\x20{\n\x20\x2
SF:0\x20\x20\x20\x20\x20\x20background:\x20url\(data:image/jpeg;base64,/9j
SF:/4AAQSkZJRgABAQEAZABkAAD/4QAiRXhpZgAATU0AKgAAAAgAAQESAAMAAAABAAEAAAAAAA
SF:D/4TjcaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu\+7
SF:vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOV")%r(HTTPOptions,4EE8,"HTTP/1\.1\x2050
SF:0\x20Internal\x20Server\x20Error\r\nContent-Length:\x2029513\r\nContent
SF:-Type:\x20text/html\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//W3C//DTD
SF:\x20HTML\x204\.01\x20Transitional//EN\"\x20\"http://www\.w3c\.org/TR/19
SF:99/REC-html401-19991224/loose\.dtd\">\n<html>\n\x20\x20<head>\n\x20\x20
SF:\x20\x20<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html;\x2
SF:0charset=UTF-8\">\n\x20\x20\x20\x20<style\x20type=\"text/css\">\n\x20\x
SF:20\x20\x20\x20\x20html,\x20body\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20m
SF:argin:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\
SF:x20\x20\x20\x20\x20\x20\x20Verdana,\x20Arial,\x20sans-serif
SF:;\n\x20\x20\x20\x20\x20\x20\x20\x20\x2010pt;\n\x20\x20\x20\x2
SF:0\x20\x20}\n\x20\x20\x20\x20\x20\x20h1,\x20h2\x20{\n\x20\x20\x20\x20\x2
SF:0\x20\x20\x20height:\x2082px;\n\x20\x20\x20\x20\x20\x20\x20\x20text-ind
SF:ent:\x20-999em;\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x2
SF:0\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x
SF:20\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div
SF:\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\
SF:x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\
SF:x20\x20\x20div\.header\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20background
SF::\x20url\(data:image/jpeg;base64,/9j/4AAQSkZJRgABAQEAZABkAAD/4QAiRXhpZg
SF:AATU0AKgAAAAgAAQESAAMAAAABAAEAAAAAAAD/4TjcaHR0cDovL25zLmFkb2JlLmNvbS94Y
SF:XAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu\+7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOV");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for fundosbuscador.mjusticia.gob.es (212.128.104.102)
Host is up (0.064s latency).
rDNS record for 212.128.104.102: 102.red-212-128-104.customer.static.ccgg.telefonica.net
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAE63A%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,3502,"HTTP/1\.1\x20500\x20Internal\x20Server\x20Error\r\nContent
SF:-Length:\x2029513\r\nContent-Type:\x20text/html\r\n\r\n<!DOCTYPE\x20HTM
SF:L\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01\x20Transitional//EN\"\x20
SF:\"http://www\.w3c\.org/TR/1999/REC-html401-19991224/loose\.dtd\">\n<htm
SF:l>\n\x20\x20<head>\n\x20\x20\x20\x20<meta\x20http-equiv=\"Content-Type\
SF:"\x20content=\"text/html;\x20charset=UTF-8\">\n\x20\x20\x20\x20<style\x
SF:20type=\"text/css\">\n\x20\x20\x20\x20\x20\x20html,\x20body\x20{\n\x20\
SF:x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\
SF:x20padding:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20\x20Verd
SF:ana,\x20Arial,\x20sans-serif;\n\x20\x20\x20\x20\x20\x20\x20\x20font-siz
SF:e:\x2010pt;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20h1,\x20
SF:h2\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20height:\x2082px;\n\x20\x20\x20
SF:\x20\x20\x20\x20\x20\x20-999em;\n\x20\x20\x20\x20\x20\x20\x
SF:20\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x
SF:20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20}\
SF:n\x20\x20\x20\x20\x20\x20div\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20marg
SF:in:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20
SF:\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div\.header\x20{\n\x20\x20\x20\x
SF:20\x20\x20\x20\x20background:\x20url\(data:image/jpeg;base64,/9j/4AAQSk
SF:ZJRgABAQEAZABkAAD/4QAiRXhpZgAATU0AKgAAAAgAAQESAAMAAAABAAEAAAAAAAD/4Tjca
SF:HR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu\+7vyIgaWQ
SF:9Ilc1TTBNcENlaGlIenJlU3pOV")%r(HTTPOptions,3502,"HTTP/1\.1\x20500\x20In
SF:ternal\x20Server\x20Error\r\nContent-Length:\x2029513\r\nContent-Type:\
SF:x20text/html\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//W3C//DTD\x20HTM
SF:L\x204\.01\x20Transitional//EN\"\x20\"http://www\.w3c\.org/TR/1999/REC-
SF:html401-19991224/loose\.dtd\">\n<html>\n\x20\x20<head>\n\x20\x20\x20\x2
SF:0<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html;\x20charse
SF:t=UTF-8\">\n\x20\x20\x20\x20<style\x20type=\"text/css\">\n\x20\x20\x20\
SF:x20\x20\x20html,\x20body\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20\
SF:x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20
SF:\x20\x20\x20\x20\x20Verdana,\x20Arial,\x20sans-serif;\n\x20
SF:\x20\x20\x20\x20\x20\x20\x20\x2010pt;\n\x20\x20\x20\x20\x20\x
SF:20}\n\x20\x20\x20\x20\x20\x20h1,\x20h2\x20{\n\x20\x20\x20\x20\x20\x20\x
SF:20\x20height:\x2082px;\n\x20\x20\x20\x20\x20\x20\x20\x20\x2
SF:0-999em;\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x
SF:20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20margi
SF:n:\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div\x20{\n
SF:\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20
SF:\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20
SF:\x20div\.header\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20background:\x20ur
SF:l\(data:image/jpeg;base64,/9j/4AAQSkZJRgABAQEAZABkAAD/4QAiRXhpZgAATU0AK
SF:gAAAAgAAQESAAMAAAABAAEAAAAAAAD/4TjcaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4w
SF:LwA8P3hwYWNrZXQgYmVnaW49Iu\+7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOV");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for leymemoria.mjusticia.gob.es (212.128.104.146)
Host is up (0.060s latency).
rDNS record for 212.128.104.146: 146.red-212-128-104.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache
443/tcp open ssl/https Apache
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAE63B%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,3502,"HTTP/1\.1\x20500\x20Internal\x20Server\x20Error\r\nContent
SF:-Length:\x2029513\r\nContent-Type:\x20text/html\r\n\r\n<!DOCTYPE\x20HTM
SF:L\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01\x20Transitional//EN\"\x20
SF:\"http://www\.w3c\.org/TR/1999/REC-html401-19991224/loose\.dtd\">\n<htm
SF:l>\n\x20\x20<head>\n\x20\x20\x20\x20<meta\x20http-equiv=\"Content-Type\
SF:"\x20content=\"text/html;\x20charset=UTF-8\">\n\x20\x20\x20\x20<style\x
SF:20type=\"text/css\">\n\x20\x20\x20\x20\x20\x20html,\x20body\x20{\n\x20\
SF:x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\
SF:x20padding:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20\x20Verd
SF:ana,\x20Arial,\x20sans-serif;\n\x20\x20\x20\x20\x20\x20\x20\x20font-siz
SF:e:\x2010pt;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20h1,\x20
SF:h2\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20height:\x2082px;\n\x20\x20\x20
SF:\x20\x20\x20\x20\x20\x20-999em;\n\x20\x20\x20\x20\x20\x20\x
SF:20\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x
SF:20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20}\
SF:n\x20\x20\x20\x20\x20\x20div\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20marg
SF:in:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20
SF:\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div\.header\x20{\n\x20\x20\x20\x
SF:20\x20\x20\x20\x20background:\x20url\(data:image/jpeg;base64,/9j/4AAQSk
SF:ZJRgABAQEAZABkAAD/4QAiRXhpZgAATU0AKgAAAAgAAQESAAMAAAABAAEAAAAAAAD/4Tjca
SF:HR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu\+7vyIgaWQ
SF:9Ilc1TTBNcENlaGlIenJlU3pOV")%r(HTTPOptions,3502,"HTTP/1\.1\x20500\x20In
SF:ternal\x20Server\x20Error\r\nContent-Length:\x2029513\r\nContent-Type:\
SF:x20text/html\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//W3C//DTD\x20HTM
SF:L\x204\.01\x20Transitional//EN\"\x20\"http://www\.w3c\.org/TR/1999/REC-
SF:html401-19991224/loose\.dtd\">\n<html>\n\x20\x20<head>\n\x20\x20\x20\x2
SF:0<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html;\x20charse
SF:t=UTF-8\">\n\x20\x20\x20\x20<style\x20type=\"text/css\">\n\x20\x20\x20\
SF:x20\x20\x20html,\x20body\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20\
SF:x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20
SF:\x20\x20\x20\x20\x20Verdana,\x20Arial,\x20sans-serif;\n\x20
SF:\x20\x20\x20\x20\x20\x20\x20\x2010pt;\n\x20\x20\x20\x20\x20\x
SF:20}\n\x20\x20\x20\x20\x20\x20h1,\x20h2\x20{\n\x20\x20\x20\x20\x20\x20\x
SF:20\x20height:\x2082px;\n\x20\x20\x20\x20\x20\x20\x20\x20\x2
SF:0-999em;\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x
SF:20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20margi
SF:n:\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div\x20{\n
SF:\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20
SF:\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20
SF:\x20div\.header\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20background:\x20ur
SF:l\(data:image/jpeg;base64,/9j/4AAQSkZJRgABAQEAZABkAAD/4QAiRXhpZgAATU0AK
SF:gAAAAgAAQESAAMAAAABAAEAAAAAAAD/4TjcaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4w
SF:LwA8P3hwYWNrZXQgYmVnaW49Iu\+7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOV");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAE644%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,739F,"HTTP/1\.1\x20500\x20Internal\x20Server\x20Error\r\n
SF:Content-Length:\x2029513\r\nContent-Type:\x20text/html\r\n\r\n<!DOCTYPE
SF:\x20HTML\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01\x20Transitional//E
SF:N\"\x20\"http://www\.w3c\.org/TR/1999/REC-html401-19991224/loose\.dtd\"
SF:>\n<html>\n\x20\x20<head>\n\x20\x20\x20\x20<meta\x20http-equiv=\"Conten
SF:t-Type\"\x20content=\"text/html;\x20charset=UTF-8\">\n\x20\x20\x20\x20<
SF:style\x20type=\"text/css\">\n\x20\x20\x20\x20\x20\x20html,\x20body\x20{
SF:\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x
SF:20\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20\
SF:x20Verdana,\x20Arial,\x20sans-serif;\n\x20\x20\x20\x20\x20\x20\x20\x20f
SF:ont-size:\x2010pt;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20
SF:h1,\x20h2\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20height:\x2082px;\n\x20\
SF:x20\x20\x20\x20\x20\x20\x20\x20-999em;\n\x20\x20\x20\x20\x2
SF:0\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x2
SF:00;\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x2
SF:0\x20}\n\x20\x20\x20\x20\x20\x20div\x20{\n\x20\x20\x20\x20\x20\x20\x20\
SF:x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\
SF:x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div\.header\x20{\n\x20\x2
SF:0\x20\x20\x20\x20\x20\x20background:\x20url\(data:image/jpeg;base64,/9j
SF:/4AAQSkZJRgABAQEAZABkAAD/4QAiRXhpZgAATU0AKgAAAAgAAQESAAMAAAABAAEAAAAAAA
SF:D/4TjcaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu\+7
SF:vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOV")%r(HTTPOptions,739F,"HTTP/1\.1\x2050
SF:0\x20Internal\x20Server\x20Error\r\nContent-Length:\x2029513\r\nContent
SF:-Type:\x20text/html\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//W3C//DTD
SF:\x20HTML\x204\.01\x20Transitional//EN\"\x20\"http://www\.w3c\.org/TR/19
SF:99/REC-html401-19991224/loose\.dtd\">\n<html>\n\x20\x20<head>\n\x20\x20
SF:\x20\x20<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html;\x2
SF:0charset=UTF-8\">\n\x20\x20\x20\x20<style\x20type=\"text/css\">\n\x20\x
SF:20\x20\x20\x20\x20html,\x20body\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20m
SF:argin:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\
SF:x20\x20\x20\x20\x20\x20\x20Verdana,\x20Arial,\x20sans-serif
SF:;\n\x20\x20\x20\x20\x20\x20\x20\x20\x2010pt;\n\x20\x20\x20\x2
SF:0\x20\x20}\n\x20\x20\x20\x20\x20\x20h1,\x20h2\x20{\n\x20\x20\x20\x20\x2
SF:0\x20\x20\x20height:\x2082px;\n\x20\x20\x20\x20\x20\x20\x20\x20text-ind
SF:ent:\x20-999em;\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x2
SF:0\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x
SF:20\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div
SF:\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\
SF:x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\
SF:x20\x20\x20div\.header\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20background
SF::\x20url\(data:image/jpeg;base64,/9j/4AAQSkZJRgABAQEAZABkAAD/4QAiRXhpZg
SF:AATU0AKgAAAAgAAQESAAMAAAABAAEAAAAAAAD/4TjcaHR0cDovL25zLmFkb2JlLmNvbS94Y
SF:XAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu\+7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOV");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for maper.mjusticia.gob.es (212.128.104.107)
Host is up (0.061s latency).
rDNS record for 212.128.104.107: 107.red-212-128-104.customer.static.ccgg.telefonica.net
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAE63C%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,3502,"HTTP/1\.1\x20500\x20Internal\x20Server\x20Error\r\nContent
SF:-Length:\x2029513\r\nContent-Type:\x20text/html\r\n\r\n<!DOCTYPE\x20HTM
SF:L\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01\x20Transitional//EN\"\x20
SF:\"http://www\.w3c\.org/TR/1999/REC-html401-19991224/loose\.dtd\">\n<htm
SF:l>\n\x20\x20<head>\n\x20\x20\x20\x20<meta\x20http-equiv=\"Content-Type\
SF:"\x20content=\"text/html;\x20charset=UTF-8\">\n\x20\x20\x20\x20<style\x
SF:20type=\"text/css\">\n\x20\x20\x20\x20\x20\x20html,\x20body\x20{\n\x20\
SF:x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\
SF:x20padding:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20\x20Verd
SF:ana,\x20Arial,\x20sans-serif;\n\x20\x20\x20\x20\x20\x20\x20\x20font-siz
SF:e:\x2010pt;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20h1,\x20
SF:h2\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20height:\x2082px;\n\x20\x20\x20
SF:\x20\x20\x20\x20\x20\x20-999em;\n\x20\x20\x20\x20\x20\x20\x
SF:20\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x
SF:20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20}\
SF:n\x20\x20\x20\x20\x20\x20div\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20marg
SF:in:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20
SF:\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div\.header\x20{\n\x20\x20\x20\x
SF:20\x20\x20\x20\x20background:\x20url\(data:image/jpeg;base64,/9j/4AAQSk
SF:ZJRgABAQEAZABkAAD/4QAiRXhpZgAATU0AKgAAAAgAAQESAAMAAAABAAEAAAAAAAD/4Tjca
SF:HR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu\+7vyIgaWQ
SF:9Ilc1TTBNcENlaGlIenJlU3pOV")%r(HTTPOptions,3502,"HTTP/1\.1\x20500\x20In
SF:ternal\x20Server\x20Error\r\nContent-Length:\x2029513\r\nContent-Type:\
SF:x20text/html\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//W3C//DTD\x20HTM
SF:L\x204\.01\x20Transitional//EN\"\x20\"http://www\.w3c\.org/TR/1999/REC-
SF:html401-19991224/loose\.dtd\">\n<html>\n\x20\x20<head>\n\x20\x20\x20\x2
SF:0<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html;\x20charse
SF:t=UTF-8\">\n\x20\x20\x20\x20<style\x20type=\"text/css\">\n\x20\x20\x20\
SF:x20\x20\x20html,\x20body\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20\
SF:x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20
SF:\x20\x20\x20\x20\x20Verdana,\x20Arial,\x20sans-serif;\n\x20
SF:\x20\x20\x20\x20\x20\x20\x20\x2010pt;\n\x20\x20\x20\x20\x20\x
SF:20}\n\x20\x20\x20\x20\x20\x20h1,\x20h2\x20{\n\x20\x20\x20\x20\x20\x20\x
SF:20\x20height:\x2082px;\n\x20\x20\x20\x20\x20\x20\x20\x20\x2
SF:0-999em;\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x
SF:20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20margi
SF:n:\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div\x20{\n
SF:\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20
SF:\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20
SF:\x20div\.header\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20background:\x20ur
SF:l\(data:image/jpeg;base64,/9j/4AAQSkZJRgABAQEAZABkAAD/4QAiRXhpZgAATU0AK
SF:gAAAAgAAQESAAMAAAABAAEAAAAAAAD/4TjcaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4w
SF:LwA8P3hwYWNrZXQgYmVnaW49Iu\+7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOV");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for resevi.mjusticia.gob.es (212.128.104.105)
Host is up (0.062s latency).
rDNS record for 212.128.104.105: 105.red-212-128-104.customer.static.ccgg.telefonica.net
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for sede.mjusticia.gob.es (212.128.104.103)
Host is up (0.060s latency).
Other addresses for sede.mjusticia.gob.es (not scanned): 2a00:2000:40a0:fffe::a0c:4983
rDNS record for 212.128.104.103: 103.red-212-128-104.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAE640%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,3502,"HTTP/1\.1\x20500\x20Internal\x20Server\x20Error\r\nContent
SF:-Length:\x2029513\r\nContent-Type:\x20text/html\r\n\r\n<!DOCTYPE\x20HTM
SF:L\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01\x20Transitional//EN\"\x20
SF:\"http://www\.w3c\.org/TR/1999/REC-html401-19991224/loose\.dtd\">\n<htm
SF:l>\n\x20\x20<head>\n\x20\x20\x20\x20<meta\x20http-equiv=\"Content-Type\
SF:"\x20content=\"text/html;\x20charset=UTF-8\">\n\x20\x20\x20\x20<style\x
SF:20type=\"text/css\">\n\x20\x20\x20\x20\x20\x20html,\x20body\x20{\n\x20\
SF:x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\
SF:x20padding:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20\x20Verd
SF:ana,\x20Arial,\x20sans-serif;\n\x20\x20\x20\x20\x20\x20\x20\x20font-siz
SF:e:\x2010pt;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20h1,\x20
SF:h2\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20height:\x2082px;\n\x20\x20\x20
SF:\x20\x20\x20\x20\x20\x20-999em;\n\x20\x20\x20\x20\x20\x20\x
SF:20\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x
SF:20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20}\
SF:n\x20\x20\x20\x20\x20\x20div\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20marg
SF:in:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20
SF:\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div\.header\x20{\n\x20\x20\x20\x
SF:20\x20\x20\x20\x20background:\x20url\(data:image/jpeg;base64,/9j/4AAQSk
SF:ZJRgABAQEAZABkAAD/4QAiRXhpZgAATU0AKgAAAAgAAQESAAMAAAABAAEAAAAAAAD/4Tjca
SF:HR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu\+7vyIgaWQ
SF:9Ilc1TTBNcENlaGlIenJlU3pOV")%r(HTTPOptions,3502,"HTTP/1\.1\x20500\x20In
SF:ternal\x20Server\x20Error\r\nContent-Length:\x2029513\r\nContent-Type:\
SF:x20text/html\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//W3C//DTD\x20HTM
SF:L\x204\.01\x20Transitional//EN\"\x20\"http://www\.w3c\.org/TR/1999/REC-
SF:html401-19991224/loose\.dtd\">\n<html>\n\x20\x20<head>\n\x20\x20\x20\x2
SF:0<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html;\x20charse
SF:t=UTF-8\">\n\x20\x20\x20\x20<style\x20type=\"text/css\">\n\x20\x20\x20\
SF:x20\x20\x20html,\x20body\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20\
SF:x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20
SF:\x20\x20\x20\x20\x20Verdana,\x20Arial,\x20sans-serif;\n\x20
SF:\x20\x20\x20\x20\x20\x20\x20\x2010pt;\n\x20\x20\x20\x20\x20\x
SF:20}\n\x20\x20\x20\x20\x20\x20h1,\x20h2\x20{\n\x20\x20\x20\x20\x20\x20\x
SF:20\x20height:\x2082px;\n\x20\x20\x20\x20\x20\x20\x20\x20\x2
SF:0-999em;\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x
SF:20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20margi
SF:n:\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div\x20{\n
SF:\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20
SF:\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20
SF:\x20div\.header\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20background:\x20ur
SF:l\(data:image/jpeg;base64,/9j/4AAQSkZJRgABAQEAZABkAAD/4QAiRXhpZgAATU0AK
SF:gAAAAgAAQESAAMAAAABAAEAAAAAAAD/4TjcaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4w
SF:LwA8P3hwYWNrZXQgYmVnaW49Iu\+7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOV");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for www.mpr.gob.es (212.128.109.2)
Host is up (0.061s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAE646%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,C3,"HTTP/1\.1\x20403\x20Forbidden\r\nContent-Length:\x20148\r\n\
SF:r\n<html><title>Request\x20Denied!</title><body><center><h1>Request\x20
SF:Denied!</h1><p>If\x20you\x20have\x20any\x20questions\x20contact\x20the\
SF:x20admin\.</p></center></body></html>")%r(HTTPOptions,C3,"HTTP/1\.1\x20
SF:403\x20Forbidden\r\nContent-Length:\x20148\r\n\r\n<html><title>Request\
SF:x20Denied!</title><body><center><h1>Request\x20Denied!</h1><p>If\x20you
SF:\x20have\x20any\x20questions\x20contact\x20the\x20admin\.</p></center><
SF:/body></html>")%r(FourOhFourRequest,C3,"HTTP/1\.1\x20403\x20Forbidden\r
SF:\nContent-Length:\x20148\r\n\r\n<html><title>Request\x20Denied!</title>
SF:<body><center><h1>Request\x20Denied!</h1><p>If\x20you\x20have\x20any\x2
SF:0questions\x20contact\x20the\x20admin\.</p></center></body></html>");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for estadisticasviolenciagenero.igualdad.mpr.gob.es (212.92.54.69)
Host is up (0.069s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|PBX|firewall|proxy server|WAP
Running (JUST GUESSING): Linux 2.6.X (89%), Cisco embedded (88%), Riverbed embedded (87%), ZoneAlarm embedded (87%), Ruckus embedded (87%), FreeBSD 6.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6 cpe:/h:cisco:uc320w cpe:/h:cisco:sa520 cpe:/h:riverbed:steelhead_200 cpe:/h:zonealarm:z100g cpe:/h:ruckus:7363 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: Linux 2.6.5 (89%), Cisco UC320W PBX (Linux 2.6) (88%), Linux 2.6.9 (88%), Cisco SA520 firewall (Linux 2.6) (87%), Linux 2.6.11 (87%), Linux 2.6.18 (87%), Linux 2.6.28 (87%), Linux 2.6.30 (87%), Linux 2.6.32 (87%), Linux 2.6.9 (CentOS 4.4) (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.violenciagenero.igualdad.mpr.gob.es (195.64.186.141)
Host is up (0.060s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http server-header-none
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAE644%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-header-n
SF:one\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2005:08:19\x20GMT\r\nContent
SF:-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20close\r
SF:\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>Forbidden<
SF:/H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20the\x20
SF:requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/1\.1\x2
SF:0501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nDate:\x2
SF:0Mon,\x2008\x20Oct\x202018\x2005:08:20\x20GMT\r\nContent-length:\x20148
SF:\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HE
SF:AD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Implement
SF:ed</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20requested
SF:\x20method\.\n</BODY></HTML>")%r(RTSPRequest,131,"HTTP/1\.1\x20400\x20B
SF:ad\x20request\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x
SF:20Oct\x202018\x2005:08:20\x20GMT\r\nContent-length:\x20147\r\nContent-t
SF:ype:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad
SF:\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20brow
SF:ser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20understa
SF:nd\.\n</BODY></HTML>")%r(FourOhFourRequest,1C0,"HTTP/1\.1\x20404\x20Not
SF:\x20found\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oc
SF:t\x202018\x2005:08:25\x20GMT\r\nContent-type:\x20text/html\r\nContent-l
SF:ength:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META\x20HTTP-EQUIV=
SF:\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859-1\"><TITLE>Not
SF:\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x20requested\x20
SF:object\x20does\x20not\x20exist\x20on\x20this\x20server\.\x20The\x20link
SF:\x20you\x20followed\x20is\x20either\x20outdated,\x20inaccurate,\x20or\x
SF:20the\x20server\x20has\x20been\x20instructed\x20not\x20to\x20let\x20you
SF:\x20have\x20it\.\x20")%r(Help,131,"HTTP/1\.1\x20400\x20Bad\x20request\r
SF:\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x
SF:2005:08:47\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20text/ht
SF:ml\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20request</TI
SF:TLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20sent\x20
SF:a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</BODY></
SF:HTML>");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: WAP
Running (JUST GUESSING): Linux 2.4.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.4.20
Aggressive OS guesses: Tomato 1.27 - 1.28 (Linux 2.4.20) (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.mpt.gob.es (185.73.174.22)
Host is up (0.061s latency).
rDNS record for 185.73.174.22: 22.red-185-73-174.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|firewall|WAP|proxy server|PBX
Running (JUST GUESSING): Linux 2.6.X (89%), ZoneAlarm embedded (87%), Cisco embedded (86%), Riverbed embedded (86%), Ruckus embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.9 cpe:/o:linux:linux_kernel:2.6.11 cpe:/h:zonealarm:z100g cpe:/h:cisco:sa520 cpe:/h:riverbed:steelhead_200 cpe:/o:linux:linux_kernel:2.6 cpe:/h:cisco:uc320w cpe:/h:ruckus:7363
Aggressive OS guesses: Linux 2.6.9 (89%), Linux 2.6.11 (87%), Linux 2.6.9 - 2.6.27 (87%), ZoneAlarm Z100G WAP (87%), Linux 2.6.22.1-32.fc6 (x86, SMP) (86%), Oracle Enterprise Linux 6 (Linux 2.6.32) (86%), Cisco SA520 firewall (Linux 2.6) (86%), Linux 2.6.18 (86%), Linux 2.6.28 (86%), Linux 2.6.30 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.mscbs.gob.es (195.64.186.252)
Host is up (0.061s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Servidor-Web
443/tcp open ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAE64E%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,6914,"HTTP/1\.1\x20200\x20OK\r\nServer:\x20Servidor-Web\r\nDate:
SF:\x20Mon,\x2008\x20Oct\x202018\x2005:08:29\x20GMT\r\nContent-length:\x20
SF:81958\r\nContent-type:\x20text/html\r\nLast-modified:\x20Fri,\x2005\x20
SF:Oct\x202018\x2008:34:36\x20GMT\r\nAccept-ranges:\x20bytes\r\nConnection
SF::\x20close\r\n\r\n\n\t\t\x20\n\t\t\t<!DOCTYPE\x20html>\n\t\t\x20\n\t<ht
SF:ml\x20xmlns=\"http://www\.w3\.org/1999/xhtml\"\x20xml:lang=\"es\"\x20la
SF:ng=\"es\">\n\x20\x20\x20\x20<head>\n\x20\x20\x20\x20\x20\x20\x20\x20<ti
SF:tle>Ministerio\x20de\x20Sanidad,\x20Consumo\x20y\x20Bienestar\x20Social
SF:</title>\n\x20\x20\x20\x20\x20\x20\x20\x20<meta\x20name=\"Keywords\"\x2
SF:0content=\"Ministerio\x20de\x20Sanidad,\x20Consumo\x20y\x20Bienestar\x2
SF:0Social\"/>\n\x20\x20\x20\x20\x20\x20\x20\x20<meta\x20name=\"descriptio
SF:n\"\x20content=\"Ministerio\x20de\x20Sanidad,\x20Consumo\x20y\x20Bienes
SF:tar\x20Social,\x20Ministerio\x20de\x20Sanidad,\x20Consumo\x20y\x20Biene
SF:star\x20Social\"/>\n\t\t\t\t\x20\n\t\t\t\t\t<meta\x20charset=\"UTF-8\">
SF:\x20\n\t\t\t\t\t<meta\x20http-equiv=\"X-UA-Compatible\"\x20content=\"IE
SF:=edge\">\n\t\t\t\t\t<meta\x20name=\"viewport\"\x20content=\"width=devic
SF:e-width,\x20initial-scale=1\">\n\t\t\t\t\x20\n\t\t\t\n\x20\x20\x20\x20\
SF:x20\x20\x20\x20<link\x20rel=\"stylesheet\"\x20href=\"/diseno/css/bootst
SF:rap\.min\.css\"/>\n\x20\x20\x20\x20\x20\x20\x20\x20<link\x20rel=\"s")%r
SF:(HTTPOptions,74,"HTTP/1\.1\x20200\x20OK\r\nServer:\x20Servidor-Web\r\nD
SF:ate:\x20Mon,\x2008\x20Oct\x202018\x2005:08:30\x20GMT\r\nContent-length:
SF:\x200\r\nConnection:\x20close\r\n\r\n")%r(RTSPRequest,93,"<HTML><HEAD><
SF:TITLE>Bad\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYou
SF:r\x20browser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x2
SF:0understand\.\n</BODY></HTML>")%r(FourOhFourRequest,453F,"HTTP/1\.1\x20
SF:404\x20Not\x20found\r\nServer:\x20Servidor-Web\r\nDate:\x20Mon,\x2008\x
SF:20Oct\x202018\x2005:08:35\x20GMT\r\nContent-length:\x2017575\r\nContent
SF:-type:\x20text/html\r\nConnection:\x20close\r\n\r\n\t<!DOCTYPE\x20html>
SF:\t\t\x20\t\r\n\t<html\x20xmlns=\"http://www\.w3\.org/1999/xhtml\"\x20xm
SF:l:lang=\"es\"\x20lang=\"es\">\r\n\x20\x20\x20\x20<head>\r\n\x20\x20\x20
SF:\x20\x20\x20\x20\x20<title>Ministerio\x20de\x20Sanidad,\x20Consumo\x20y
SF:\x20Bienestar\x20Social\x20-\x20Organizaci&oacute;n\x20Institucional\x2
SF:0-\x20P\xc3\xa1gina\x20404</title>\r\n\x20\x20\x20\x20\x20\x20\x20\x20<
SF:meta\x20name=\"Keywords\"\x20content=\"404\"/>\r\n\x20\x20\x20\x20\x20\
SF:x20\x20\x20<meta\x20name=\"description\"\x20content=\"P\xc3\xa1gina\x20
SF:404\"/>\r\n\t\t<meta\x20charset=\"UTF-8\">\x20\t\t\t\t\t\r\n\t\t<meta\x
SF:20http-equiv=\"X-UA-Compatible\"\x20content=\"IE=edge\">\t\t\t\t\t\r\n\
SF:t\t<meta\x20name=\"viewport\"\x20content=\"width=device-width,\x20initi
SF:al-scale=1\">\t\t\t\t\x20\t\t\t\r\n\x20\x20\x20\x20\x20\x20\x20\x20<lin
SF:k\x20rel=\"stylesheet\"\x20href=\"/diseno/css/bootstrap\.min\.css\"/>\r
SF:\n\x20\x20\x20\x20\x20\x20\x20\x20<link\x20rel=\"stylesheet\"\x20href=\
SF:"/diseno/css/ministerio-sanidad\.css\"/>\r\n\x20\x20\x20\x20\x20\x20\x2
SF:0\x20<link\x20rel=\"stylesheet\"\x20href=\"/diseno/css/jasny-bootstrap\
SF:.min\.css\"/>\r\n\x20\x20\x20\x20\x20\x20\x20\x20<link\x20rel");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for www.bemocion.mscbs.gob.es (195.64.186.245)
Host is up (0.061s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http server-header-none
443/tcp open ssl/https server-header-none
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAE657%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-header-n
SF:one\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2005:08:39\x20GMT\r\nContent
SF:-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20close\r
SF:\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>Forbidden<
SF:/H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20the\x20
SF:requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/1\.1\x2
SF:0501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nDate:\x2
SF:0Mon,\x2008\x20Oct\x202018\x2005:08:39\x20GMT\r\nContent-length:\x20148
SF:\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HE
SF:AD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Implement
SF:ed</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20requested
SF:\x20method\.\n</BODY></HTML>")%r(RTSPRequest,131,"HTTP/1\.1\x20400\x20B
SF:ad\x20request\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x
SF:20Oct\x202018\x2005:08:39\x20GMT\r\nContent-length:\x20147\r\nContent-t
SF:ype:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad
SF:\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20brow
SF:ser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20understa
SF:nd\.\n</BODY></HTML>")%r(FourOhFourRequest,1C0,"HTTP/1\.1\x20404\x20Not
SF:\x20found\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oc
SF:t\x202018\x2005:08:44\x20GMT\r\nContent-type:\x20text/html\r\nContent-l
SF:ength:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META\x20HTTP-EQUIV=
SF:\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859-1\"><TITLE>Not
SF:\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x20requested\x20
SF:object\x20does\x20not\x20exist\x20on\x20this\x20server\.\x20The\x20link
SF:\x20you\x20followed\x20is\x20either\x20outdated,\x20inaccurate,\x20or\x
SF:20the\x20server\x20has\x20been\x20instructed\x20not\x20to\x20let\x20you
SF:\x20have\x20it\.\x20")%r(Help,131,"HTTP/1\.1\x20400\x20Bad\x20request\r
SF:\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x
SF:2005:09:05\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20text/ht
SF:ml\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20request</TI
SF:TLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20sent\x20
SF:a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</BODY></
SF:HTML>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAE662%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-h
SF:eader-none\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2005:08:50\x20GMT\r\n
SF:Content-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20
SF:close\r\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>For
SF:bidden</H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20
SF:the\x20requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/
SF:1\.1\x20501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nD
SF:ate:\x20Mon,\x2008\x20Oct\x202018\x2005:08:50\x20GMT\r\nContent-length:
SF:\x20148\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<H
SF:TML><HEAD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Im
SF:plemented</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20re
SF:quested\x20method\.\n</BODY></HTML>")%r(FourOhFourRequest,1C0,"HTTP/1\.
SF:1\x20404\x20Not\x20found\r\nServer:\x20server-header-none\r\nDate:\x20M
SF:on,\x2008\x20Oct\x202018\x2005:08:51\x20GMT\r\nContent-type:\x20text/ht
SF:ml\r\nContent-length:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META
SF:\x20HTTP-EQUIV=\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859
SF:-1\"><TITLE>Not\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x
SF:20requested\x20object\x20does\x20not\x20exist\x20on\x20this\x20server\.
SF:\x20The\x20link\x20you\x20followed\x20is\x20either\x20outdated,\x20inac
SF:curate,\x20or\x20the\x20server\x20has\x20been\x20instructed\x20not\x20t
SF:o\x20let\x20you\x20have\x20it\.\x20")%r(RTSPRequest,131,"HTTP/1\.1\x204
SF:00\x20Bad\x20request\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\
SF:x2008\x20Oct\x202018\x2005:09:01\x20GMT\r\nContent-length:\x20147\r\nCo
SF:ntent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TI
SF:TLE>Bad\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\
SF:x20browser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20u
SF:nderstand\.\n</BODY></HTML>")%r(Help,131,"HTTP/1\.1\x20400\x20Bad\x20re
SF:quest\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oct\x2
SF:02018\x2005:09:17\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20
SF:text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20requ
SF:est</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20s
SF:ent\x20a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</
SF:BODY></HTML>");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: WAP
Running (JUST GUESSING): Linux 2.4.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.4.20
Aggressive OS guesses: Tomato 1.27 - 1.28 (Linux 2.4.20) (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.estilosdevidasaludable.mscbs.gob.es (195.64.186.190)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http server-header-none
443/tcp open ssl/https server-header-none
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAE67A%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-header-n
SF:one\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2005:09:14\x20GMT\r\nContent
SF:-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20close\r
SF:\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>Forbidden<
SF:/H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20the\x20
SF:requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/1\.1\x2
SF:0501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nDate:\x2
SF:0Mon,\x2008\x20Oct\x202018\x2005:09:14\x20GMT\r\nContent-length:\x20148
SF:\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HE
SF:AD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Implement
SF:ed</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20requested
SF:\x20method\.\n</BODY></HTML>")%r(RTSPRequest,131,"HTTP/1\.1\x20400\x20B
SF:ad\x20request\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x
SF:20Oct\x202018\x2005:09:14\x20GMT\r\nContent-length:\x20147\r\nContent-t
SF:ype:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad
SF:\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20brow
SF:ser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20understa
SF:nd\.\n</BODY></HTML>")%r(FourOhFourRequest,1C0,"HTTP/1\.1\x20404\x20Not
SF:\x20found\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oc
SF:t\x202018\x2005:09:19\x20GMT\r\nContent-type:\x20text/html\r\nContent-l
SF:ength:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META\x20HTTP-EQUIV=
SF:\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859-1\"><TITLE>Not
SF:\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x20requested\x20
SF:object\x20does\x20not\x20exist\x20on\x20this\x20server\.\x20The\x20link
SF:\x20you\x20followed\x20is\x20either\x20outdated,\x20inaccurate,\x20or\x
SF:20the\x20server\x20has\x20been\x20instructed\x20not\x20to\x20let\x20you
SF:\x20have\x20it\.\x20")%r(Help,131,"HTTP/1\.1\x20400\x20Bad\x20request\r
SF:\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x
SF:2005:09:40\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20text/ht
SF:ml\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20request</TI
SF:TLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20sent\x20
SF:a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</BODY></
SF:HTML>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAE682%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-h
SF:eader-none\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2005:09:22\x20GMT\r\n
SF:Content-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20
SF:close\r\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>For
SF:bidden</H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20
SF:the\x20requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/
SF:1\.1\x20501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nD
SF:ate:\x20Mon,\x2008\x20Oct\x202018\x2005:09:22\x20GMT\r\nContent-length:
SF:\x20148\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<H
SF:TML><HEAD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Im
SF:plemented</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20re
SF:quested\x20method\.\n</BODY></HTML>")%r(FourOhFourRequest,1C0,"HTTP/1\.
SF:1\x20404\x20Not\x20found\r\nServer:\x20server-header-none\r\nDate:\x20M
SF:on,\x2008\x20Oct\x202018\x2005:09:23\x20GMT\r\nContent-type:\x20text/ht
SF:ml\r\nContent-length:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META
SF:\x20HTTP-EQUIV=\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859
SF:-1\"><TITLE>Not\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x
SF:20requested\x20object\x20does\x20not\x20exist\x20on\x20this\x20server\.
SF:\x20The\x20link\x20you\x20followed\x20is\x20either\x20outdated,\x20inac
SF:curate,\x20or\x20the\x20server\x20has\x20been\x20instructed\x20not\x20t
SF:o\x20let\x20you\x20have\x20it\.\x20")%r(RTSPRequest,131,"HTTP/1\.1\x204
SF:00\x20Bad\x20request\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\
SF:x2008\x20Oct\x202018\x2005:09:33\x20GMT\r\nContent-length:\x20147\r\nCo
SF:ntent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TI
SF:TLE>Bad\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\
SF:x20browser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20u
SF:nderstand\.\n</BODY></HTML>")%r(Help,131,"HTTP/1\.1\x20400\x20Bad\x20re
SF:quest\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oct\x2
SF:02018\x2005:09:49\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20
SF:text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20requ
SF:est</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20s
SF:ent\x20a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</
SF:BODY></HTML>");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for www.pnsd.mscbs.gob.es (195.64.186.204)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http server-header-none
443/tcp open ssl/https server-header-none
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAE681%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-header-n
SF:one\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2005:09:21\x20GMT\r\nContent
SF:-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20close\r
SF:\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>Forbidden<
SF:/H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20the\x20
SF:requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/1\.1\x2
SF:0501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nDate:\x2
SF:0Mon,\x2008\x20Oct\x202018\x2005:09:21\x20GMT\r\nContent-length:\x20148
SF:\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HE
SF:AD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Implement
SF:ed</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20requested
SF:\x20method\.\n</BODY></HTML>")%r(RTSPRequest,131,"HTTP/1\.1\x20400\x20B
SF:ad\x20request\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x
SF:20Oct\x202018\x2005:09:21\x20GMT\r\nContent-length:\x20147\r\nContent-t
SF:ype:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad
SF:\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20brow
SF:ser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20understa
SF:nd\.\n</BODY></HTML>")%r(FourOhFourRequest,1C0,"HTTP/1\.1\x20404\x20Not
SF:\x20found\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oc
SF:t\x202018\x2005:09:26\x20GMT\r\nContent-type:\x20text/html\r\nContent-l
SF:ength:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META\x20HTTP-EQUIV=
SF:\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859-1\"><TITLE>Not
SF:\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x20requested\x20
SF:object\x20does\x20not\x20exist\x20on\x20this\x20server\.\x20The\x20link
SF:\x20you\x20followed\x20is\x20either\x20outdated,\x20inaccurate,\x20or\x
SF:20the\x20server\x20has\x20been\x20instructed\x20not\x20to\x20let\x20you
SF:\x20have\x20it\.\x20")%r(Help,131,"HTTP/1\.1\x20400\x20Bad\x20request\r
SF:\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x
SF:2005:09:47\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20text/ht
SF:ml\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20request</TI
SF:TLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20sent\x20
SF:a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</BODY></
SF:HTML>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAE68E%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-h
SF:eader-none\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2005:09:34\x20GMT\r\n
SF:Content-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20
SF:close\r\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>For
SF:bidden</H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20
SF:the\x20requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/
SF:1\.1\x20501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nD
SF:ate:\x20Mon,\x2008\x20Oct\x202018\x2005:09:34\x20GMT\r\nContent-length:
SF:\x20148\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<H
SF:TML><HEAD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Im
SF:plemented</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20re
SF:quested\x20method\.\n</BODY></HTML>")%r(FourOhFourRequest,1C0,"HTTP/1\.
SF:1\x20404\x20Not\x20found\r\nServer:\x20server-header-none\r\nDate:\x20M
SF:on,\x2008\x20Oct\x202018\x2005:09:35\x20GMT\r\nContent-type:\x20text/ht
SF:ml\r\nContent-length:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META
SF:\x20HTTP-EQUIV=\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859
SF:-1\"><TITLE>Not\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x
SF:20requested\x20object\x20does\x20not\x20exist\x20on\x20this\x20server\.
SF:\x20The\x20link\x20you\x20followed\x20is\x20either\x20outdated,\x20inac
SF:curate,\x20or\x20the\x20server\x20has\x20been\x20instructed\x20not\x20t
SF:o\x20let\x20you\x20have\x20it\.\x20")%r(RTSPRequest,131,"HTTP/1\.1\x204
SF:00\x20Bad\x20request\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\
SF:x2008\x20Oct\x202018\x2005:09:45\x20GMT\r\nContent-length:\x20147\r\nCo
SF:ntent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TI
SF:TLE>Bad\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\
SF:x20browser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20u
SF:nderstand\.\n</BODY></HTML>")%r(Help,131,"HTTP/1\.1\x20400\x20Bad\x20re
SF:quest\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oct\x2
SF:02018\x2005:10:01\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20
SF:text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20requ
SF:est</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20s
SF:ent\x20a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</
SF:BODY></HTML>");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for www.msssi.gob.es (195.64.187.237)
Host is up (0.061s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 8.5
443/tcp open ssl/http Microsoft IIS httpd 8.5
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012 (87%)
OS CPE: cpe:/o:microsoft:windows_server_2012:r2
Aggressive OS guesses: Microsoft Windows Server 2012 or Windows Server 2012 R2 (87%), Microsoft Windows Server 2012 (86%), Microsoft Windows Server 2012 R2 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for www.aecosan.msssi.gob.es (195.64.186.220)
Host is up (0.061s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http serve-header-none
443/tcp open ssl/https serve-header-none
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAE68F%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,187,"HTTP/1\.1\x20200\x20OK\r\nServer:\x20serve-header-none\r\nD
SF:ate:\x20Mon,\x2008\x20Oct\x202018\x2005:09:34\x20GMT\r\nContent-type:\x
SF:20text/html\r\nLast-modified:\x20Thu,\x2028\x20Jun\x202018\x2008:32:09\
SF:x20GMT\r\nContent-length:\x20154\r\nEtag:\x20\"9a-5b349d09\"\r\nAccept-
SF:ranges:\x20bytes\r\nConnection:\x20close\r\n\r\n<html>\r\n<head>\r\n<!-
SF:-\x20PRE-poducci\xf3n\x20-->\r\n<meta\x20HTTP-EQUIV=\"REFRESH\"\x20cont
SF:ent=\"0;\x20url=/\">\r\n<!--\x20PRODUCCION\x20-->\r\n<!--\x20\?\?\?\x20
SF:-->\r\n</head>\r\n<body></body>\r\n</html>")%r(HTTPOptions,135,"HTTP/1\
SF:.1\x20501\x20Not\x20Implemented\r\nServer:\x20serve-header-none\r\nDate
SF::\x20Mon,\x2008\x20Oct\x202018\x2005:09:35\x20GMT\r\nContent-length:\x2
SF:0148\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML
SF:><HEAD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Imple
SF:mented</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20reque
SF:sted\x20method\.\n</BODY></HTML>")%r(RTSPRequest,130,"HTTP/1\.1\x20400\
SF:x20Bad\x20request\r\nServer:\x20serve-header-none\r\nDate:\x20Mon,\x200
SF:8\x20Oct\x202018\x2005:09:35\x20GMT\r\nContent-length:\x20147\r\nConten
SF:t-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>
SF:Bad\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20b
SF:rowser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20under
SF:stand\.\n</BODY></HTML>")%r(FourOhFourRequest,1BF,"HTTP/1\.1\x20404\x20
SF:Not\x20found\r\nServer:\x20serve-header-none\r\nDate:\x20Mon,\x2008\x20
SF:Oct\x202018\x2005:09:40\x20GMT\r\nContent-type:\x20text/html\r\nContent
SF:-length:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META\x20HTTP-EQUI
SF:V=\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859-1\"><TITLE>N
SF:ot\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x20requested\x
SF:20object\x20does\x20not\x20exist\x20on\x20this\x20server\.\x20The\x20li
SF:nk\x20you\x20followed\x20is\x20either\x20outdated,\x20inaccurate,\x20or
SF:\x20the\x20server\x20has\x20been\x20instructed\x20not\x20to\x20let\x20y
SF:ou\x20have\x20it\.\x20");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAE697%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,187,"HTTP/1\.1\x20200\x20OK\r\nServer:\x20serve-header-no
SF:ne\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2005:09:43\x20GMT\r\nContent-
SF:type:\x20text/html\r\nLast-modified:\x20Thu,\x2028\x20Jun\x202018\x2008
SF::32:09\x20GMT\r\nContent-length:\x20154\r\nEtag:\x20\"9a-5b349d09\"\r\n
SF:Accept-ranges:\x20bytes\r\nConnection:\x20close\r\n\r\n<html>\r\n<head>
SF:\r\n<!--\x20PRE-poducci\xf3n\x20-->\r\n<meta\x20HTTP-EQUIV=\"REFRESH\"\
SF:x20content=\"0;\x20url=/\">\r\n<!--\x20PRODUCCION\x20-->\r\n<!--\x20\?\
SF:?\?\x20-->\r\n</head>\r\n<body></body>\r\n</html>")%r(HTTPOptions,135,"
SF:HTTP/1\.1\x20501\x20Not\x20Implemented\r\nServer:\x20serve-header-none\
SF:r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2005:09:43\x20GMT\r\nContent-len
SF:gth:\x20148\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r
SF:\n<HTML><HEAD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x
SF:20Implemented</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x
SF:20requested\x20method\.\n</BODY></HTML>")%r(FourOhFourRequest,1BF,"HTTP
SF:/1\.1\x20404\x20Not\x20found\r\nServer:\x20serve-header-none\r\nDate:\x
SF:20Mon,\x2008\x20Oct\x202018\x2005:09:43\x20GMT\r\nContent-type:\x20text
SF:/html\r\nContent-length:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><M
SF:ETA\x20HTTP-EQUIV=\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8
SF:859-1\"><TITLE>Not\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20Th
SF:e\x20requested\x20object\x20does\x20not\x20exist\x20on\x20this\x20serve
SF:r\.\x20The\x20link\x20you\x20followed\x20is\x20either\x20outdated,\x20i
SF:naccurate,\x20or\x20the\x20server\x20has\x20been\x20instructed\x20not\x
SF:20to\x20let\x20you\x20have\x20it\.\x20")%r(RTSPRequest,130,"HTTP/1\.1\x
SF:20400\x20Bad\x20request\r\nServer:\x20serve-header-none\r\nDate:\x20Mon
SF:,\x2008\x20Oct\x202018\x2005:09:54\x20GMT\r\nContent-length:\x20147\r\n
SF:Content-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><
SF:TITLE>Bad\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYou
SF:r\x20browser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x2
SF:0understand\.\n</BODY></HTML>");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for www.activilandia.aecosan.msssi.gob.es (195.64.187.166)
Host is up (0.060s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Servidor-Web
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAE692%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,6F51,"HTTP/1\.1\x20200\x20OK\r\nServer:\x20Servidor-Web\r\nDate:
SF:\x20Mon,\x2008\x20Oct\x202018\x2005:09:37\x20GMT\r\nContent-length:\x20
SF:35961\r\nContent-type:\x20text/html\r\nLast-modified:\x20Wed,\x2009\x20
SF:Jul\x202014\x2009:54:00\x20GMT\r\nAccept-ranges:\x20bytes\r\nX-frame-op
SF:tions:\x20Deny\r\nConnection:\x20close\r\n\r\n<!DOCTYPE\x20html>\n<!--\
SF:[if\x20lt\x20IE\x207\]>\x20\x20\x20\x20\x20\x20<html\x20lang=\"es\"\x20
SF:class=\"no-js\x20lt-ie9\x20lt-ie8\x20lt-ie7\">\x20<!\[endif\]-->\n<!--\
SF:[if\x20IE\x207\]>\x20\x20\x20\x20\x20\x20\x20\x20\x20<html\x20lang=\"es
SF:\"\x20class=\"no-js\x20lt-ie9\x20lt-ie8\">\x20<!\[endif\]-->\n<!--\[if\
SF:x20IE\x208\]>\x20\x20\x20\x20\x20\x20\x20\x20\x20<html\x20lang=\"es\"\x
SF:20class=\"no-js\x20lt-ie9\">\x20<!\[endif\]-->\n<!--\[if\x20gt\x20IE\x2
SF:08\]><!-->\x20<html\x20lang=\"es\"\x20class=\"no-js\">\x20<!--<!\[endif
SF:\]-->\n\x20\x20\x20\x20<head>\n\x20\x20\x20\x20\x20\x20\x20\x20<meta\x2
SF:0charset=\"utf-8\">\n\x20\x20\x20\x20\x20\x20\x20\x20<meta\x20http-equi
SF:v=\"X-UA-Compatible\"\x20content=\"IE=edge\">\n\x20\x20\x20\x20\x20\x20
SF:\x20\x20<title>Activilandia,\x20el\x20parque\x20tem\xc3\xa1tico\x20virt
SF:ual\x20donde\x20es\x20sano\x20divertirse</title>\n\n\x20\x20\x20\x20\x2
SF:0\x20\x20\x20<meta\x20name=\"description\"\x20content=\"Dedicado\x20a\x
SF:20la\x20alimentaci\xc3\xb3n,\x20los\x20h\xc3\xa1bitos\x20saludables\x20
SF:y\x20el\x20ocio\x20activo\x20para\x20prevenir\x20la\x20obesidad\x20i")%
SF:r(HTTPOptions,130,"HTTP/1\.1\x20501\x20Not\x20Implemented\r\nServer:\x2
SF:0Servidor-Web\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2005:09:38\x20GMT\
SF:r\nContent-length:\x20148\r\nContent-type:\x20text/html\r\nConnection:\
SF:x20close\r\n\r\n<HTML><HEAD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<
SF:BODY><H1>Not\x20Implemented</H1>\nThis\x20server\x20does\x20not\x20impl
SF:ement\x20the\x20requested\x20method\.\n</BODY></HTML>")%r(RTSPRequest,9
SF:3,"<HTML><HEAD><TITLE>Bad\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20r
SF:equest</H1>\nYour\x20browser\x20sent\x20a\x20query\x20this\x20server\x2
SF:0could\x20not\x20understand\.\n</BODY></HTML>");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for cuestionarios.msssi.gob.es (195.64.187.163)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
443/tcp open ssl/http-proxy HAProxy http proxy 1.3.1 or later
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: phone|media device|general purpose
Running (JUST GUESSING): Apple iOS 4.X|5.X|6.X|7.X|8.X|9.X (86%), Apple OS X 10.10.X (86%)
OS CPE: cpe:/o:apple:iphone_os:4 cpe:/o:apple:iphone_os:5.1.1 cpe:/o:apple:iphone_os:6 cpe:/o:apple:iphone_os:7.1.1 cpe:/o:apple:iphone_os:8.2 cpe:/o:apple:iphone_os:9 cpe:/o:apple:mac_os_x:10.10
Aggressive OS guesses: Apple iOS 4.3.1 - 4.3.5 (86%), Apple iOS 5.1.1 (86%), Apple iOS 5.1.1 - 6.1 (86%), Apple iOS 6 (86%), Apple iOS 7.1.1 (86%), Apple iOS 8.2 (Darwin 14.0.0) (86%), Apple OS X 10.10 (Yosemite) or iOS 8.3 - 9.0.1 (Darwin 14.0.0 - 15.0.0) (86%), Apple OS X 10.8 (Mountain Lion) (Darwin 12.4.0) (86%), Apple OS X 10.9 (Mavericks) (Darwin 13.0.0 - 13.2.0) (86%), Netgear WNR834Bv2 WAP (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for eciemaps.msssi.gob.es (195.64.186.35)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http server-header-none
443/tcp open ssl/https server-header-none
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAE694%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-header-n
SF:one\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2005:09:40\x20GMT\r\nContent
SF:-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20close\r
SF:\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>Forbidden<
SF:/H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20the\x20
SF:requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/1\.1\x2
SF:0501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nDate:\x2
SF:0Mon,\x2008\x20Oct\x202018\x2005:09:40\x20GMT\r\nContent-length:\x20148
SF:\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HE
SF:AD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Implement
SF:ed</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20requested
SF:\x20method\.\n</BODY></HTML>")%r(RTSPRequest,131,"HTTP/1\.1\x20400\x20B
SF:ad\x20request\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x
SF:20Oct\x202018\x2005:09:40\x20GMT\r\nContent-length:\x20147\r\nContent-t
SF:ype:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad
SF:\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20brow
SF:ser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20understa
SF:nd\.\n</BODY></HTML>")%r(FourOhFourRequest,1C0,"HTTP/1\.1\x20404\x20Not
SF:\x20found\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oc
SF:t\x202018\x2005:09:45\x20GMT\r\nContent-type:\x20text/html\r\nContent-l
SF:ength:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META\x20HTTP-EQUIV=
SF:\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859-1\"><TITLE>Not
SF:\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x20requested\x20
SF:object\x20does\x20not\x20exist\x20on\x20this\x20server\.\x20The\x20link
SF:\x20you\x20followed\x20is\x20either\x20outdated,\x20inaccurate,\x20or\x
SF:20the\x20server\x20has\x20been\x20instructed\x20not\x20to\x20let\x20you
SF:\x20have\x20it\.\x20")%r(Help,131,"HTTP/1\.1\x20400\x20Bad\x20request\r
SF:\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x
SF:2005:10:06\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20text/ht
SF:ml\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20request</TI
SF:TLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20sent\x20
SF:a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</BODY></
SF:HTML>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAE69D%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-h
SF:eader-none\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2005:09:49\x20GMT\r\n
SF:Content-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20
SF:close\r\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>For
SF:bidden</H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20
SF:the\x20requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/
SF:1\.1\x20501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nD
SF:ate:\x20Mon,\x2008\x20Oct\x202018\x2005:09:49\x20GMT\r\nContent-length:
SF:\x20148\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<H
SF:TML><HEAD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Im
SF:plemented</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20re
SF:quested\x20method\.\n</BODY></HTML>")%r(FourOhFourRequest,1C0,"HTTP/1\.
SF:1\x20404\x20Not\x20found\r\nServer:\x20server-header-none\r\nDate:\x20M
SF:on,\x2008\x20Oct\x202018\x2005:09:50\x20GMT\r\nContent-type:\x20text/ht
SF:ml\r\nContent-length:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META
SF:\x20HTTP-EQUIV=\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859
SF:-1\"><TITLE>Not\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x
SF:20requested\x20object\x20does\x20not\x20exist\x20on\x20this\x20server\.
SF:\x20The\x20link\x20you\x20followed\x20is\x20either\x20outdated,\x20inac
SF:curate,\x20or\x20the\x20server\x20has\x20been\x20instructed\x20not\x20t
SF:o\x20let\x20you\x20have\x20it\.\x20")%r(RTSPRequest,131,"HTTP/1\.1\x204
SF:00\x20Bad\x20request\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\
SF:x2008\x20Oct\x202018\x2005:10:00\x20GMT\r\nContent-length:\x20147\r\nCo
SF:ntent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TI
SF:TLE>Bad\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\
SF:x20browser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20u
SF:nderstand\.\n</BODY></HTML>")%r(Help,131,"HTTP/1\.1\x20400\x20Bad\x20re
SF:quest\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oct\x2
SF:02018\x2005:10:16\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20
SF:text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20requ
SF:est</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20s
SF:ent\x20a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</
SF:BODY></HTML>");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for mac.msssi.gob.es (195.64.186.137)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http server-header-none
443/tcp open ssl/https server-header-none
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAE69A%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-header-n
SF:one\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2005:09:45\x20GMT\r\nContent
SF:-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20close\r
SF:\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>Forbidden<
SF:/H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20the\x20
SF:requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/1\.1\x2
SF:0501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nDate:\x2
SF:0Mon,\x2008\x20Oct\x202018\x2005:09:46\x20GMT\r\nContent-length:\x20148
SF:\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HE
SF:AD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Implement
SF:ed</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20requested
SF:\x20method\.\n</BODY></HTML>")%r(RTSPRequest,131,"HTTP/1\.1\x20400\x20B
SF:ad\x20request\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x
SF:20Oct\x202018\x2005:09:46\x20GMT\r\nContent-length:\x20147\r\nContent-t
SF:ype:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad
SF:\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20brow
SF:ser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20understa
SF:nd\.\n</BODY></HTML>")%r(FourOhFourRequest,1C0,"HTTP/1\.1\x20404\x20Not
SF:\x20found\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oc
SF:t\x202018\x2005:09:51\x20GMT\r\nContent-type:\x20text/html\r\nContent-l
SF:ength:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META\x20HTTP-EQUIV=
SF:\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859-1\"><TITLE>Not
SF:\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x20requested\x20
SF:object\x20does\x20not\x20exist\x20on\x20this\x20server\.\x20The\x20link
SF:\x20you\x20followed\x20is\x20either\x20outdated,\x20inaccurate,\x20or\x
SF:20the\x20server\x20has\x20been\x20instructed\x20not\x20to\x20let\x20you
SF:\x20have\x20it\.\x20")%r(Help,131,"HTTP/1\.1\x20400\x20Bad\x20request\r
SF:\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x
SF:2005:10:11\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20text/ht
SF:ml\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20request</TI
SF:TLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20sent\x20
SF:a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</BODY></
SF:HTML>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAE6A2%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-h
SF:eader-none\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2005:09:54\x20GMT\r\n
SF:Content-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20
SF:close\r\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>For
SF:bidden</H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20
SF:the\x20requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/
SF:1\.1\x20501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nD
SF:ate:\x20Mon,\x2008\x20Oct\x202018\x2005:09:54\x20GMT\r\nContent-length:
SF:\x20148\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<H
SF:TML><HEAD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Im
SF:plemented</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20re
SF:quested\x20method\.\n</BODY></HTML>")%r(FourOhFourRequest,1C0,"HTTP/1\.
SF:1\x20404\x20Not\x20found\r\nServer:\x20server-header-none\r\nDate:\x20M
SF:on,\x2008\x20Oct\x202018\x2005:09:55\x20GMT\r\nContent-type:\x20text/ht
SF:ml\r\nContent-length:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META
SF:\x20HTTP-EQUIV=\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859
SF:-1\"><TITLE>Not\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x
SF:20requested\x20object\x20does\x20not\x20exist\x20on\x20this\x20server\.
SF:\x20The\x20link\x20you\x20followed\x20is\x20either\x20outdated,\x20inac
SF:curate,\x20or\x20the\x20server\x20has\x20been\x20instructed\x20not\x20t
SF:o\x20let\x20you\x20have\x20it\.\x20")%r(RTSPRequest,131,"HTTP/1\.1\x204
SF:00\x20Bad\x20request\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\
SF:x2008\x20Oct\x202018\x2005:10:05\x20GMT\r\nContent-length:\x20147\r\nCo
SF:ntent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TI
SF:TLE>Bad\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\
SF:x20browser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20u
SF:nderstand\.\n</BODY></HTML>")%r(Help,131,"HTTP/1\.1\x20400\x20Bad\x20re
SF:quest\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oct\x2
SF:02018\x2005:10:21\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20
SF:text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20requ
SF:est</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20s
SF:ent\x20a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</
SF:BODY></HTML>");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for pnsd.msssi.gob.es (195.64.186.103)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http server-header-none
443/tcp open ssl/https server-header-none
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAE6A6%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-header-n
SF:one\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2005:09:57\x20GMT\r\nContent
SF:-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20close\r
SF:\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>Forbidden<
SF:/H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20the\x20
SF:requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/1\.1\x2
SF:0501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nDate:\x2
SF:0Mon,\x2008\x20Oct\x202018\x2005:09:57\x20GMT\r\nContent-length:\x20148
SF:\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HE
SF:AD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Implement
SF:ed</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20requested
SF:\x20method\.\n</BODY></HTML>")%r(RTSPRequest,131,"HTTP/1\.1\x20400\x20B
SF:ad\x20request\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x
SF:20Oct\x202018\x2005:09:58\x20GMT\r\nContent-length:\x20147\r\nContent-t
SF:ype:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad
SF:\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20brow
SF:ser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20understa
SF:nd\.\n</BODY></HTML>")%r(FourOhFourRequest,1C0,"HTTP/1\.1\x20404\x20Not
SF:\x20found\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oc
SF:t\x202018\x2005:10:03\x20GMT\r\nContent-type:\x20text/html\r\nContent-l
SF:ength:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META\x20HTTP-EQUIV=
SF:\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859-1\"><TITLE>Not
SF:\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x20requested\x20
SF:object\x20does\x20not\x20exist\x20on\x20this\x20server\.\x20The\x20link
SF:\x20you\x20followed\x20is\x20either\x20outdated,\x20inaccurate,\x20or\x
SF:20the\x20server\x20has\x20been\x20instructed\x20not\x20to\x20let\x20you
SF:\x20have\x20it\.\x20")%r(Help,131,"HTTP/1\.1\x20400\x20Bad\x20request\r
SF:\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x
SF:2005:10:23\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20text/ht
SF:ml\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20request</TI
SF:TLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20sent\x20
SF:a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</BODY></
SF:HTML>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAE6AD%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-h
SF:eader-none\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2005:10:04\x20GMT\r\n
SF:Content-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20
SF:close\r\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>For
SF:bidden</H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20
SF:the\x20requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/
SF:1\.1\x20501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nD
SF:ate:\x20Mon,\x2008\x20Oct\x202018\x2005:10:05\x20GMT\r\nContent-length:
SF:\x20148\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<H
SF:TML><HEAD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Im
SF:plemented</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20re
SF:quested\x20method\.\n</BODY></HTML>")%r(FourOhFourRequest,1C0,"HTTP/1\.
SF:1\x20404\x20Not\x20found\r\nServer:\x20server-header-none\r\nDate:\x20M
SF:on,\x2008\x20Oct\x202018\x2005:10:05\x20GMT\r\nContent-type:\x20text/ht
SF:ml\r\nContent-length:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META
SF:\x20HTTP-EQUIV=\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859
SF:-1\"><TITLE>Not\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x
SF:20requested\x20object\x20does\x20not\x20exist\x20on\x20this\x20server\.
SF:\x20The\x20link\x20you\x20followed\x20is\x20either\x20outdated,\x20inac
SF:curate,\x20or\x20the\x20server\x20has\x20been\x20instructed\x20not\x20t
SF:o\x20let\x20you\x20have\x20it\.\x20")%r(RTSPRequest,131,"HTTP/1\.1\x204
SF:00\x20Bad\x20request\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\
SF:x2008\x20Oct\x202018\x2005:10:15\x20GMT\r\nContent-length:\x20147\r\nCo
SF:ntent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TI
SF:TLE>Bad\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\
SF:x20browser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20u
SF:nderstand\.\n</BODY></HTML>")%r(Help,131,"HTTP/1\.1\x20400\x20Bad\x20re
SF:quest\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oct\x2
SF:02018\x2005:10:31\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20
SF:text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20requ
SF:est</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20s
SF:ent\x20a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</
SF:BODY></HTML>");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for seat.buscador.gob.es (108.177.126.121)
Host is up (0.096s latency).
Other addresses for seat.buscador.gob.es (not scanned): 2a00:1450:4013:c07::79
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Google httpd
443/tcp open ssl/http Google httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for reclutamiento.defensa.gob.es (193.33.2.155)
Host is up (0.060s latency).
rDNS record for 193.33.2.155: IP-193-33-2-155.mde.es
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for cooperacionencifras.exteriores.gob.es (217.149.144.15)
Host is up (0.059s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 7.5
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 7.5
OS fingerprint not ideal because: maxTimingRatio (8.238000e+00) is greater than 1.4
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for difusion.face.gob.es (185.73.172.48)
Host is up (0.059s latency).
rDNS record for 185.73.172.48: 48.red-185-73-172.customer.static.ccgg.telefonica.net
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 5.0
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 5.0
2000/tcp open cisco-sccp?
5060/tcp open sip?
OS fingerprint not ideal because: maxTimingRatio (8.242000e+00) is greater than 1.4
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for facturae.gob.es (193.147.89.91)
Host is up (0.061s latency).
Other addresses for facturae.gob.es (not scanned): 2001:720:438:402::91
rDNS record for 193.147.89.91: www.usuariosteleco.es
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for firmaelectronica.gob.es (185.73.172.50)
Host is up (0.060s latency).
rDNS record for 185.73.172.50: 50.red-185-73-172.customer.static.ccgg.telefonica.net
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 5.0
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 5.0
2000/tcp open cisco-sccp?
5060/tcp open sip?
OS fingerprint not ideal because: maxTimingRatio (8.238000e+00) is greater than 1.4
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for mapa.gob.es (93.188.53.33)
Host is up (0.061s latency).
rDNS record for 93.188.53.33: www.magrama.gob.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Linux 2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.6
OS details: Linux 2.6.18 - 2.6.22
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for sigtile1.mapama.gob.es (93.188.53.108)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy HAProxy http proxy 1.3.1 or later
443/tcp open ssl/http-proxy HAProxy http proxy 1.3.1 or later
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Linux 2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.6
OS details: Linux 2.6.18 - 2.6.22
Service Info: Device: load balancer

Nmap scan report for minetad.gob.es (193.147.89.90)
Host is up (3.9s latency).
Other addresses for minetad.gob.es (not scanned): 2001:720:438:402::90
Not shown: 995 closed ports
PORT STATE SERVICE VERSION
53/tcp filtered domain
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
139/tcp filtered netbios-ssn
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
515/tcp filtered printer
Device type: specialized|phone
Running (JUST GUESSING): Microsoft Windows 7|Phone (85%)
OS CPE: cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows
Aggressive OS guesses: Microsoft Windows Embedded Standard 7 (85%), Microsoft Windows Phone 7.5 or 8.0 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for geoportal.minetur.gob.es (193.146.1.96)
Host is up (0.060s latency).
Other addresses for geoportal.minetur.gob.es (not scanned): 2001:720:438:400::96
rDNS record for 193.146.1.96: geoportal.minetad.gob.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.4.10 ((Win64) mod_jk/1.2.37)
443/tcp open ssl/http Apache httpd 2.4.10 ((Win64) mod_jk/1.2.37)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for www.minhafp.gob.es (193.203.200.85)
Host is up (0.060s latency).
rDNS record for 193.203.200.85: www.patrimoniodelestado.minhafp.es
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp closed https
8082/tcp closed blackice-alerts
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (89%), FreeBSD 6.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (89%), OpenBSD 4.3 (87%), FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for vvv.pap.minhafp.gob.es (195.10.201.141)
Host is up (0.060s latency).
rDNS record for 195.10.201.141: www.clasespasivas.meh.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
113/tcp closed ident
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 6.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (88%), OpenBSD 4.3 (88%), FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for Webpub2des.igae.minhap.gob.es (195.10.201.184)
Host is up (0.060s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
Too many fingerprints match this host to give specific OS details

Nmap scan report for Webpub2pre.igae.minhap.gob.es (195.10.201.170)
Host is up (0.059s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/https BigIP
8443/tcp closed https-alt
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAFA80%P=x86_64-pc-linux-gnu
SF:%r(FourOhFourRequest,7E,"HTTP/1\.0\x20302\x20Found\r\nLocation:\x20http
SF:s:///vdesk/my\.acl\.php3\?errorcode=17\r\nServer:\x20BigIP\r\nConnectio
SF:n:\x20close\r\nContent-Length:\x200\r\n\r\n")%r(SIPOptions,83,"HTTP/1\.
SF:0\x20302\x20Found\r\nLocation:\x20https:///vdesk/my\.acl\.php3\?errorco
SF:de=17\r\nServer:\x20BigIP\r\nConnection:\x20Keep-Alive\r\nContent-Lengt
SF:h:\x200\r\n\r\n");
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 6.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (88%), OpenBSD 4.3 (88%), FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for webpub2.igae.minhap.gob.es (195.10.201.169)
Host is up (0.059s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
113/tcp closed ident
443/tcp open ssl/https BigIP
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAFA80%P=x86_64-pc-linux-gnu
SF:%r(FourOhFourRequest,7E,"HTTP/1\.0\x20302\x20Found\r\nLocation:\x20http
SF:s:///vdesk/my\.acl\.php3\?errorcode=17\r\nServer:\x20BigIP\r\nConnectio
SF:n:\x20close\r\nContent-Length:\x200\r\n\r\n")%r(SIPOptions,83,"HTTP/1\.
SF:0\x20302\x20Found\r\nLocation:\x20https:///vdesk/my\.acl\.php3\?errorco
SF:de=17\r\nServer:\x20BigIP\r\nConnection:\x20Keep-Alive\r\nContent-Lengt
SF:h:\x200\r\n\r\n");
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 6.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (88%), OpenBSD 4.3 (88%), FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for webpubdes.igae.minhap.gob.es (195.10.201.176)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/http-proxy F5 BIG-IP load balancer http proxy
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 6.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (88%), OpenBSD 4.3 (88%), FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for webpubpre.igae.minhap.gob.es (195.10.201.177)
Host is up (0.059s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/http-proxy F5 BIG-IP load balancer http proxy
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 6.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (88%), OpenBSD 4.3 (88%), FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for webpubpyf.igae.minhap.gob.es (195.10.201.175)
Host is up (0.059s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/http-proxy F5 BIG-IP load balancer http proxy
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 6.X (86%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (88%), OpenBSD 4.3 (88%), FreeBSD 6.2-RELEASE (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: load balancer

Nmap scan report for pda.pap.minhap.gob.es (195.10.201.149)
Host is up (0.059s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/https?
OS fingerprint not ideal because: maxTimingRatio (5.824000e+00) is greater than 1.4
No OS matches for host

Nmap scan report for remediabuscador.mjusticia.gob.es (212.128.104.101)
Host is up (0.061s latency).
rDNS record for 212.128.104.101: bibliotecas.mjusticia.gob.es
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache
443/tcp open ssl/https Apache
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAFA78%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,3502,"HTTP/1\.1\x20500\x20Internal\x20Server\x20Error\r\nContent
SF:-Length:\x2029513\r\nContent-Type:\x20text/html\r\n\r\n<!DOCTYPE\x20HTM
SF:L\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01\x20Transitional//EN\"\x20
SF:\"http://www\.w3c\.org/TR/1999/REC-html401-19991224/loose\.dtd\">\n<htm
SF:l>\n\x20\x20<head>\n\x20\x20\x20\x20<meta\x20http-equiv=\"Content-Type\
SF:"\x20content=\"text/html;\x20charset=UTF-8\">\n\x20\x20\x20\x20<style\x
SF:20type=\"text/css\">\n\x20\x20\x20\x20\x20\x20html,\x20body\x20{\n\x20\
SF:x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\
SF:x20padding:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20\x20Verd
SF:ana,\x20Arial,\x20sans-serif;\n\x20\x20\x20\x20\x20\x20\x20\x20font-siz
SF:e:\x2010pt;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20h1,\x20
SF:h2\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20height:\x2082px;\n\x20\x20\x20
SF:\x20\x20\x20\x20\x20\x20-999em;\n\x20\x20\x20\x20\x20\x20\x
SF:20\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x
SF:20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20}\
SF:n\x20\x20\x20\x20\x20\x20div\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20marg
SF:in:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20
SF:\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div\.header\x20{\n\x20\x20\x20\x
SF:20\x20\x20\x20\x20background:\x20url\(data:image/jpeg;base64,/9j/4AAQSk
SF:ZJRgABAQEAZABkAAD/4QAiRXhpZgAATU0AKgAAAAgAAQESAAMAAAABAAEAAAAAAAD/4Tjca
SF:HR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu\+7vyIgaWQ
SF:9Ilc1TTBNcENlaGlIenJlU3pOV")%r(HTTPOptions,1A81,"HTTP/1\.1\x20500\x20In
SF:ternal\x20Server\x20Error\r\nContent-Length:\x2029513\r\nContent-Type:\
SF:x20text/html\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//W3C//DTD\x20HTM
SF:L\x204\.01\x20Transitional//EN\"\x20\"http://www\.w3c\.org/TR/1999/REC-
SF:html401-19991224/loose\.dtd\">\n<html>\n\x20\x20<head>\n\x20\x20\x20\x2
SF:0<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/html;\x20charse
SF:t=UTF-8\">\n\x20\x20\x20\x20<style\x20type=\"text/css\">\n\x20\x20\x20\
SF:x20\x20\x20html,\x20body\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20\
SF:x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20
SF:\x20\x20\x20\x20\x20Verdana,\x20Arial,\x20sans-serif;\n\x20
SF:\x20\x20\x20\x20\x20\x20\x20\x2010pt;\n\x20\x20\x20\x20\x20\x
SF:20}\n\x20\x20\x20\x20\x20\x20h1,\x20h2\x20{\n\x20\x20\x20\x20\x20\x20\x
SF:20\x20height:\x2082px;\n\x20\x20\x20\x20\x20\x20\x20\x20\x2
SF:0-999em;\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x
SF:20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20margi
SF:n:\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div\x20{\n
SF:\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20
SF:\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20
SF:\x20div\.header\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20background:\x20ur
SF:l\(data:image/jpeg;base64,/9j/4AAQSkZJRgABAQEAZABkAAD/4QAiRXhpZgAATU0AK
SF:gAAAAgAAQESAAMAAAABAAEAAAAAAAD/4TjcaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4w
SF:LwA8P3hwYWNrZXQgYmVnaW49Iu\+7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOV");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAFA7F%P=x86_64-pc-linux-gnu
SF:%r(HTTPOptions,4EE8,"HTTP/1\.1\x20500\x20Internal\x20Server\x20Error\r\
SF:nContent-Length:\x2029513\r\nContent-Type:\x20text/html\r\n\r\n<!DOCTYP
SF:E\x20HTML\x20PUBLIC\x20\"-//W3C//DTD\x20HTML\x204\.01\x20Transitional//
SF:EN\"\x20\"http://www\.w3c\.org/TR/1999/REC-html401-19991224/loose\.dtd\
SF:">\n<html>\n\x20\x20<head>\n\x20\x20\x20\x20<meta\x20http-equiv=\"Conte
SF:nt-Type\"\x20content=\"text/html;\x20charset=UTF-8\">\n\x20\x20\x20\x20
SF:<style\x20type=\"text/css\">\n\x20\x20\x20\x20\x20\x20html,\x20body\x20
SF:{\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\
SF:x20\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20
SF:\x20Verdana,\x20Arial,\x20sans-serif;\n\x20\x20\x20\x20\x20\x20\x20\x20
SF:\x2010pt;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x2
SF:0h1,\x20h2\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20height:\x2082px;\n\x20
SF:\x20\x20\x20\x20\x20\x20\x20\x20-999em;\n\x20\x20\x20\x20\x
SF:20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x
SF:200;\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x20\x20\x
SF:20\x20}\n\x20\x20\x20\x20\x20\x20div\x20{\n\x20\x20\x20\x20\x20\x20\x20
SF:\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20
SF:\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20div\.header\x20{\n\x20\x
SF:20\x20\x20\x20\x20\x20\x20background:\x20url\(data:image/jpeg;base64,/9
SF:j/4AAQSkZJRgABAQEAZABkAAD/4QAiRXhpZgAATU0AKgAAAAgAAQESAAMAAAABAAEAAAAAA
SF:AD/4TjcaHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu\+
SF:7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOV")%r(FourOhFourRequest,73BA,"HTTP/1\.
SF:1\x20500\x20Internal\x20Server\x20Error\r\nContent-Length:\x2029540\r\n
SF:Content-Type:\x20text/html\r\n\r\n<!DOCTYPE\x20HTML\x20PUBLIC\x20\"-//W
SF:3C//DTD\x20HTML\x204\.01\x20Transitional//EN\"\x20\"http://www\.w3c\.or
SF:g/TR/1999/REC-html401-19991224/loose\.dtd\">\n<html>\n\x20\x20<head>\n\
SF:x20\x20\x20\x20<meta\x20http-equiv=\"Content-Type\"\x20content=\"text/h
SF:tml;\x20charset=UTF-8\">\n\x20\x20\x20\x20<style\x20type=\"text/css\">\
SF:n\x20\x20\x20\x20\x20\x20html,\x20body\x20{\n\x20\x20\x20\x20\x20\x20\x
SF:20\x20\x200;\n\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x
SF:20\x20\x20\x20\x20\x20\x20\x20\x20Verdana,\x20Arial,\x20san
SF:s-serif;\n\x20\x20\x20\x20\x20\x20\x20\x20\x2010pt;\n\x20\x20
SF:\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20\x20h1,\x20h2\x20{\n\x20\x20\x20
SF:\x20\x20\x20\x20\x20height:\x2082px;\n\x20\x20\x20\x20\x20\x20\x20\x20t
SF:ext-indent:\x20-999em;\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n
SF:\x20\x20\x20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x2
SF:0\x20\x20\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x20\x20\x20\x20
SF:\x20div\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20\x200;\n\x20\x20\x
SF:20\x20\x20\x20\x20\x20padding:\x200;\n\x20\x20\x20\x20\x20\x20}\n\x20\x
SF:20\x20\x20\x20\x20div\.header\x20{\n\x20\x20\x20\x20\x20\x20\x20\x20bac
SF:kground:\x20url\(data:image/jpeg;base64,/9j/4AAQSkZJRgABAQEAZABkAAD/4QA
SF:iRXhpZgAATU0AKgAAAAgAAQESAAMAAAABAAEAAAAAAAD/4TjcaHR0cDovL25zLmFkb2JlLm
SF:NvbS94YXAvMS4wLwA8P3hwYWNrZXQgYmVnaW49Iu\+7vyIgaWQ9Ilc1TTBNcENlaGlIenJl
SF:U3pOV");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for seat.mpr.gob.es (185.73.174.13)
Host is up (0.062s latency).
Other addresses for seat.mpr.gob.es (not scanned): 2a03:44a0:300::b949:ae0d
rDNS record for 185.73.174.13: 13.red-185-73-174.customer.static.ccgg.telefonica.net
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache Tomcat/Coyote JSP engine 1.1
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|WAP|firewall|webcam
Running (JUST GUESSING): Linux 2.6.X|2.4.X (86%), Fortinet embedded (85%), Tandberg embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:2.4 cpe:/o:linux:linux_kernel:2.6 cpe:/h:fortinet:fortianalyzer-400b cpe:/h:tandberg:vcs
Aggressive OS guesses: Linux 2.6.32 (86%), Linux 2.6.32 - 2.6.35 (86%), Linux 2.6.35 (86%), DD-WRT v24-sp1 (Linux 2.4) (85%), Fortinet FortiAnalyzer-400B firewall (Linux 2.6) (85%), Tandberg VCS video conferencing system (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.ingesa.mscbs.gob.es (195.64.186.245)
Host is up (0.061s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http server-header-none
443/tcp open ssl/https server-header-none
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAFA78%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-header-n
SF:one\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2006:34:32\x20GMT\r\nContent
SF:-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20close\r
SF:\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>Forbidden<
SF:/H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20the\x20
SF:requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/1\.1\x2
SF:0501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nDate:\x2
SF:0Mon,\x2008\x20Oct\x202018\x2006:34:32\x20GMT\r\nContent-length:\x20148
SF:\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HE
SF:AD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Implement
SF:ed</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20requested
SF:\x20method\.\n</BODY></HTML>")%r(RTSPRequest,131,"HTTP/1\.1\x20400\x20B
SF:ad\x20request\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x
SF:20Oct\x202018\x2006:34:33\x20GMT\r\nContent-length:\x20147\r\nContent-t
SF:ype:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad
SF:\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20brow
SF:ser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20understa
SF:nd\.\n</BODY></HTML>")%r(FourOhFourRequest,1C0,"HTTP/1\.1\x20404\x20Not
SF:\x20found\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oc
SF:t\x202018\x2006:34:38\x20GMT\r\nContent-type:\x20text/html\r\nContent-l
SF:ength:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META\x20HTTP-EQUIV=
SF:\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859-1\"><TITLE>Not
SF:\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x20requested\x20
SF:object\x20does\x20not\x20exist\x20on\x20this\x20server\.\x20The\x20link
SF:\x20you\x20followed\x20is\x20either\x20outdated,\x20inaccurate,\x20or\x
SF:20the\x20server\x20has\x20been\x20instructed\x20not\x20to\x20let\x20you
SF:\x20have\x20it\.\x20")%r(Help,131,"HTTP/1\.1\x20400\x20Bad\x20request\r
SF:\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x
SF:2006:34:58\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20text/ht
SF:ml\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20request</TI
SF:TLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20sent\x20
SF:a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</BODY></
SF:HTML>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAFA7F%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-h
SF:eader-none\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2006:34:39\x20GMT\r\n
SF:Content-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20
SF:close\r\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>For
SF:bidden</H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20
SF:the\x20requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/
SF:1\.1\x20501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nD
SF:ate:\x20Mon,\x2008\x20Oct\x202018\x2006:34:39\x20GMT\r\nContent-length:
SF:\x20148\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<H
SF:TML><HEAD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Im
SF:plemented</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20re
SF:quested\x20method\.\n</BODY></HTML>")%r(FourOhFourRequest,1C0,"HTTP/1\.
SF:1\x20404\x20Not\x20found\r\nServer:\x20server-header-none\r\nDate:\x20M
SF:on,\x2008\x20Oct\x202018\x2006:34:40\x20GMT\r\nContent-type:\x20text/ht
SF:ml\r\nContent-length:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META
SF:\x20HTTP-EQUIV=\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859
SF:-1\"><TITLE>Not\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x
SF:20requested\x20object\x20does\x20not\x20exist\x20on\x20this\x20server\.
SF:\x20The\x20link\x20you\x20followed\x20is\x20either\x20outdated,\x20inac
SF:curate,\x20or\x20the\x20server\x20has\x20been\x20instructed\x20not\x20t
SF:o\x20let\x20you\x20have\x20it\.\x20")%r(RTSPRequest,131,"HTTP/1\.1\x204
SF:00\x20Bad\x20request\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\
SF:x2008\x20Oct\x202018\x2006:34:51\x20GMT\r\nContent-length:\x20147\r\nCo
SF:ntent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TI
SF:TLE>Bad\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\
SF:x20browser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20u
SF:nderstand\.\n</BODY></HTML>")%r(Help,131,"HTTP/1\.1\x20400\x20Bad\x20re
SF:quest\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oct\x2
SF:02018\x2006:35:06\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20
SF:text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20requ
SF:est</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20s
SF:ent\x20a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</
SF:BODY></HTML>");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: WAP
Running (JUST GUESSING): Linux 2.4.X (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.4.20
Aggressive OS guesses: Tomato 1.27 - 1.28 (Linux 2.4.20) (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.observatoriodelainfancia.mscbs.gob.es (195.64.186.190)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http server-header-none
443/tcp open ssl/https server-header-none
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAFA78%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-header-n
SF:one\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2006:34:32\x20GMT\r\nContent
SF:-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20close\r
SF:\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>Forbidden<
SF:/H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20the\x20
SF:requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/1\.1\x2
SF:0501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nDate:\x2
SF:0Mon,\x2008\x20Oct\x202018\x2006:34:32\x20GMT\r\nContent-length:\x20148
SF:\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HE
SF:AD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Implement
SF:ed</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20requested
SF:\x20method\.\n</BODY></HTML>")%r(RTSPRequest,131,"HTTP/1\.1\x20400\x20B
SF:ad\x20request\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x
SF:20Oct\x202018\x2006:34:33\x20GMT\r\nContent-length:\x20147\r\nContent-t
SF:ype:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad
SF:\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20brow
SF:ser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20understa
SF:nd\.\n</BODY></HTML>")%r(FourOhFourRequest,1C0,"HTTP/1\.1\x20404\x20Not
SF:\x20found\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oc
SF:t\x202018\x2006:34:38\x20GMT\r\nContent-type:\x20text/html\r\nContent-l
SF:ength:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META\x20HTTP-EQUIV=
SF:\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859-1\"><TITLE>Not
SF:\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x20requested\x20
SF:object\x20does\x20not\x20exist\x20on\x20this\x20server\.\x20The\x20link
SF:\x20you\x20followed\x20is\x20either\x20outdated,\x20inaccurate,\x20or\x
SF:20the\x20server\x20has\x20been\x20instructed\x20not\x20to\x20let\x20you
SF:\x20have\x20it\.\x20")%r(Help,131,"HTTP/1\.1\x20400\x20Bad\x20request\r
SF:\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x
SF:2006:34:58\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20text/ht
SF:ml\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20request</TI
SF:TLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20sent\x20
SF:a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</BODY></
SF:HTML>");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAFA7F%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,12A,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20server-h
SF:eader-none\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2006:34:39\x20GMT\r\n
SF:Content-length:\x20142\r\nContent-type:\x20text/html\r\nConnection:\x20
SF:close\r\n\r\n<HTML><HEAD><TITLE>Forbidden</TITLE></HEAD>\n<BODY><H1>For
SF:bidden</H1>\nYour\x20client\x20is\x20not\x20allowed\x20to\x20access\x20
SF:the\x20requested\x20object\.\n</BODY></HTML>")%r(HTTPOptions,136,"HTTP/
SF:1\.1\x20501\x20Not\x20Implemented\r\nServer:\x20server-header-none\r\nD
SF:ate:\x20Mon,\x2008\x20Oct\x202018\x2006:34:39\x20GMT\r\nContent-length:
SF:\x20148\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<H
SF:TML><HEAD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Im
SF:plemented</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20re
SF:quested\x20method\.\n</BODY></HTML>")%r(FourOhFourRequest,1C0,"HTTP/1\.
SF:1\x20404\x20Not\x20found\r\nServer:\x20server-header-none\r\nDate:\x20M
SF:on,\x2008\x20Oct\x202018\x2006:34:40\x20GMT\r\nContent-type:\x20text/ht
SF:ml\r\nContent-length:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META
SF:\x20HTTP-EQUIV=\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859
SF:-1\"><TITLE>Not\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x
SF:20requested\x20object\x20does\x20not\x20exist\x20on\x20this\x20server\.
SF:\x20The\x20link\x20you\x20followed\x20is\x20either\x20outdated,\x20inac
SF:curate,\x20or\x20the\x20server\x20has\x20been\x20instructed\x20not\x20t
SF:o\x20let\x20you\x20have\x20it\.\x20")%r(RTSPRequest,131,"HTTP/1\.1\x204
SF:00\x20Bad\x20request\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\
SF:x2008\x20Oct\x202018\x2006:34:51\x20GMT\r\nContent-length:\x20147\r\nCo
SF:ntent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TI
SF:TLE>Bad\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\
SF:x20browser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20u
SF:nderstand\.\n</BODY></HTML>")%r(Help,131,"HTTP/1\.1\x20400\x20Bad\x20re
SF:quest\r\nServer:\x20server-header-none\r\nDate:\x20Mon,\x2008\x20Oct\x2
SF:02018\x2006:35:07\x20GMT\r\nContent-length:\x20147\r\nContent-type:\x20
SF:text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>Bad\x20requ
SF:est</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20s
SF:ent\x20a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</
SF:BODY></HTML>");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for eletiquetadocuentamucho.aecosan.msssi.gob.es (195.64.186.220)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http serve-header-none
443/tcp open ssl/https serve-header-none
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAFA78%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,187,"HTTP/1\.1\x20200\x20OK\r\nServer:\x20serve-header-none\r\nD
SF:ate:\x20Mon,\x2008\x20Oct\x202018\x2006:34:32\x20GMT\r\nContent-type:\x
SF:20text/html\r\nLast-modified:\x20Thu,\x2028\x20Jun\x202018\x2008:32:09\
SF:x20GMT\r\nContent-length:\x20154\r\nEtag:\x20\"9a-5b349d09\"\r\nAccept-
SF:ranges:\x20bytes\r\nConnection:\x20close\r\n\r\n<html>\r\n<head>\r\n<!-
SF:-\x20PRE-poducci\xf3n\x20-->\r\n<meta\x20HTTP-EQUIV=\"REFRESH\"\x20cont
SF:ent=\"0;\x20url=/\">\r\n<!--\x20PRODUCCION\x20-->\r\n<!--\x20\?\?\?\x20
SF:-->\r\n</head>\r\n<body></body>\r\n</html>")%r(HTTPOptions,135,"HTTP/1\
SF:.1\x20501\x20Not\x20Implemented\r\nServer:\x20serve-header-none\r\nDate
SF::\x20Mon,\x2008\x20Oct\x202018\x2006:34:32\x20GMT\r\nContent-length:\x2
SF:0148\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML
SF:><HEAD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x20Imple
SF:mented</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x20reque
SF:sted\x20method\.\n</BODY></HTML>")%r(RTSPRequest,130,"HTTP/1\.1\x20400\
SF:x20Bad\x20request\r\nServer:\x20serve-header-none\r\nDate:\x20Mon,\x200
SF:8\x20Oct\x202018\x2006:34:33\x20GMT\r\nContent-length:\x20147\r\nConten
SF:t-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><TITLE>
SF:Bad\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20b
SF:rowser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x20under
SF:stand\.\n</BODY></HTML>")%r(FourOhFourRequest,1BF,"HTTP/1\.1\x20404\x20
SF:Not\x20found\r\nServer:\x20serve-header-none\r\nDate:\x20Mon,\x2008\x20
SF:Oct\x202018\x2006:34:38\x20GMT\r\nContent-type:\x20text/html\r\nContent
SF:-length:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><META\x20HTTP-EQUI
SF:V=\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8859-1\"><TITLE>N
SF:ot\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20The\x20requested\x
SF:20object\x20does\x20not\x20exist\x20on\x20this\x20server\.\x20The\x20li
SF:nk\x20you\x20followed\x20is\x20either\x20outdated,\x20inaccurate,\x20or
SF:\x20the\x20server\x20has\x20been\x20instructed\x20not\x20to\x20let\x20y
SF:ou\x20have\x20it\.\x20");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAFA7F%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,187,"HTTP/1\.1\x20200\x20OK\r\nServer:\x20serve-header-no
SF:ne\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2006:34:39\x20GMT\r\nContent-
SF:type:\x20text/html\r\nLast-modified:\x20Thu,\x2028\x20Jun\x202018\x2008
SF::32:09\x20GMT\r\nContent-length:\x20154\r\nEtag:\x20\"9a-5b349d09\"\r\n
SF:Accept-ranges:\x20bytes\r\nConnection:\x20close\r\n\r\n<html>\r\n<head>
SF:\r\n<!--\x20PRE-poducci\xf3n\x20-->\r\n<meta\x20HTTP-EQUIV=\"REFRESH\"\
SF:x20content=\"0;\x20url=/\">\r\n<!--\x20PRODUCCION\x20-->\r\n<!--\x20\?\
SF:?\?\x20-->\r\n</head>\r\n<body></body>\r\n</html>")%r(HTTPOptions,135,"
SF:HTTP/1\.1\x20501\x20Not\x20Implemented\r\nServer:\x20serve-header-none\
SF:r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2006:34:39\x20GMT\r\nContent-len
SF:gth:\x20148\r\nContent-type:\x20text/html\r\nConnection:\x20close\r\n\r
SF:\n<HTML><HEAD><TITLE>Not\x20Implemented</TITLE></HEAD>\n<BODY><H1>Not\x
SF:20Implemented</H1>\nThis\x20server\x20does\x20not\x20implement\x20the\x
SF:20requested\x20method\.\n</BODY></HTML>")%r(FourOhFourRequest,1BF,"HTTP
SF:/1\.1\x20404\x20Not\x20found\r\nServer:\x20serve-header-none\r\nDate:\x
SF:20Mon,\x2008\x20Oct\x202018\x2006:34:40\x20GMT\r\nContent-type:\x20text
SF:/html\r\nContent-length:\x20292\r\nConnection:\x20close\r\n\r\n<HEAD><M
SF:ETA\x20HTTP-EQUIV=\"Content-Type\"\x20CONTENT=\"text/html;charset=ISO-8
SF:859-1\"><TITLE>Not\x20Found</TITLE></HEAD>\n<H1>Not\x20Found</H1>\x20Th
SF:e\x20requested\x20object\x20does\x20not\x20exist\x20on\x20this\x20serve
SF:r\.\x20The\x20link\x20you\x20followed\x20is\x20either\x20outdated,\x20i
SF:naccurate,\x20or\x20the\x20server\x20has\x20been\x20instructed\x20not\x
SF:20to\x20let\x20you\x20have\x20it\.\x20")%r(RTSPRequest,130,"HTTP/1\.1\x
SF:20400\x20Bad\x20request\r\nServer:\x20serve-header-none\r\nDate:\x20Mon
SF:,\x2008\x20Oct\x202018\x2006:34:51\x20GMT\r\nContent-length:\x20147\r\n
SF:Content-type:\x20text/html\r\nConnection:\x20close\r\n\r\n<HTML><HEAD><
SF:TITLE>Bad\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYou
SF:r\x20browser\x20sent\x20a\x20query\x20this\x20server\x20could\x20not\x2
SF:0understand\.\n</BODY></HTML>");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: specialized
Running (JUST GUESSING): AVtech embedded (87%)
Aggressive OS guesses: AVtech Room Alert 26W environmental monitor (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.bemocion.msssi.gob.es (195.64.187.237)
Host is up (0.061s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 8.5
443/tcp open ssl/http Microsoft IIS httpd 8.5
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012 (87%)
OS CPE: cpe:/o:microsoft:windows_server_2012:r2
Aggressive OS guesses: Microsoft Windows Server 2012 R2 (87%), Microsoft Windows Server 2012 (86%), Microsoft Windows Server 2012 or Windows Server 2012 R2 (86%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for sede.msssi.gob.es (195.64.186.187)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http
443/tcp open ssl/https?
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAFA78%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,47,"HTTP/1\.0\x20302\x20Moved\x20Temporarily\r\nLocation:\x20htt
SF:ps://sede\.msssi\.gob\.es\r\n\r\n")%r(HTTPOptions,47,"HTTP/1\.0\x20302\
SF:x20Moved\x20Temporarily\r\nLocation:\x20https://sede\.msssi\.gob\.es\r\
SF:n\r\n")%r(FourOhFourRequest,47,"HTTP/1\.0\x20302\x20Moved\x20Temporaril
SF:y\r\nLocation:\x20https://sede\.msssi\.gob\.es\r\n\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: specialized
Running (JUST GUESSING): AVtech embedded (87%)
Aggressive OS guesses: AVtech Room Alert 26W environmental monitor (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for explotacion.mtin.gob.es (192.148.211.20)
Host is up (0.060s latency).
rDNS record for 192.148.211.20: 20.red-192-148-211.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd
443/tcp open ssl/https?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for www.testat2.mtin.gob.es (195.53.48.2)
Host is up.
rDNS record for 195.53.48.2: 2.red-195-53-48.customer.static.ccgg.telefonica.net
All 1000 scanned ports on www.testat2.mtin.gob.es (195.53.48.2) are filtered
Too many fingerprints match this host to give specific OS details

Nmap scan report for www.muface.gob.es (185.73.174.171)
Host is up (0.061s latency).
rDNS record for 185.73.174.171: 171.red-185-73-174.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.22 ((Red Hat Enterprise Web Server))
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: phone|media device|general purpose
Running (JUST GUESSING): Apple iOS 4.X|5.X|6.X|7.X|8.X|9.X (86%), Apple OS X 10.10.X (86%)
OS CPE: cpe:/o:apple:iphone_os:4 cpe:/o:apple:iphone_os:5.1.1 cpe:/o:apple:iphone_os:6 cpe:/o:apple:iphone_os:7.1.1 cpe:/o:apple:iphone_os:8.2 cpe:/o:apple:iphone_os:9 cpe:/o:apple:mac_os_x:10.10
Aggressive OS guesses: Apple iOS 4.3.1 - 4.3.5 (86%), Apple iOS 5.1.1 (86%), Apple iOS 5.1.1 - 6.1 (86%), Apple iOS 6 (86%), Apple iOS 7.1.1 (86%), Apple iOS 8.2 (Darwin 14.0.0) (86%), Apple OS X 10.10 (Yosemite) or iOS 8.3 - 9.0.1 (Darwin 14.0.0 - 15.0.0) (86%), Apple OS X 10.8 (Mountain Lion) (Darwin 12.4.0) (86%), Apple OS X 10.9 (Mavericks) (Darwin 13.0.0 - 13.2.0) (86%), Netgear WNR834Bv2 WAP (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for preegoitzaelektronikoa.nafarroa.gob.es (176.12.85.2)
Host is up (0.070s latency).
rDNS record for 176.12.85.2: presedeelectronica.navarra.es
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 6.0
1113/tcp open tcpwrapped
6699/tcp open tcpwrapped
8222/tcp open tcpwrapped
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for sedeelectronica.navarra.gob.es (176.12.84.2)
Host is up (0.070s latency).
Not shown: 992 closed ports
PORT STATE SERVICE VERSION
25/tcp filtered smtp
53/tcp filtered domain
80/tcp open http Microsoft IIS httpd 6.0
443/tcp open ssl/http Microsoft IIS httpd 6.0
465/tcp filtered smtps
515/tcp filtered printer
587/tcp filtered submission
4446/tcp open tcpwrapped
Device type: general purpose|specialized
Running (JUST GUESSING): OpenBSD 4.X (87%), AVtech embedded (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0
Aggressive OS guesses: OpenBSD 4.0 (87%), OpenBSD 4.3 (87%), AVtech Room Alert 26W environmental monitor (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for www.normadoc.gob.es (193.203.200.128)
Host is up (0.060s latency).
rDNS record for 193.203.200.128: cronicagrafica.meh.es
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
8082/tcp closed blackice-alerts
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (89%), FreeBSD 6.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (89%), OpenBSD 4.3 (87%), FreeBSD 6.2-RELEASE (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for www.oepm.gob.es (192.187.18.134)
Host is up (0.060s latency).
rDNS record for 192.187.18.134: www4.oepm.es
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http ISPConfig http control panel
113/tcp closed ident
443/tcp open ssl/http ISPConfig http control panel
Device type: general purpose|WAP|printer
Running (JUST GUESSING): Linux 2.6.X (92%), D-Link embedded (89%), TRENDnet embedded (89%), HP embedded (86%), Netgear embedded (86%)
OS CPE: cpe:/o:linux:linux_kernel:2.6 cpe:/h:dlink:dwl-624%2b cpe:/h:dlink:dwl-2000ap cpe:/h:trendnet:tew-432brp cpe:/h:netgear:wgr614v7 cpe:/o:linux:linux_kernel:2.6.22
Aggressive OS guesses: Linux 2.6.18 - 2.6.22 (92%), D-Link DWL-624+ or DWL-2000AP, or TRENDnet TEW-432BRP WAP (89%), HP PSC 2400-series Photosmart printer (86%), Netgear WGR614v7 wireless broadband router (86%), Tomato firmware (Linux 2.6.22) (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ayudas.oepm.gob.es (192.187.18.135)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/http ISPConfig http control panel
Device type: general purpose|WAP|printer
Running (JUST GUESSING): Linux 2.6.X (92%), D-Link embedded (89%), TRENDnet embedded (89%), HP embedded (86%), Netgear embedded (86%)
OS CPE: cpe:/o:linux:linux_kernel:2.6 cpe:/h:dlink:dwl-624%2b cpe:/h:dlink:dwl-2000ap cpe:/h:trendnet:tew-432brp cpe:/h:netgear:wgr614v7 cpe:/o:linux:linux_kernel:2.6.22
Aggressive OS guesses: Linux 2.6.18 - 2.6.22 (92%), D-Link DWL-624+ or DWL-2000AP, or TRENDnet TEW-432BRP WAP (89%), HP PSC 2400-series Photosmart printer (86%), Netgear WGR614v7 wireless broadband router (86%), Tomato firmware (Linux 2.6.22) (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for correoweb.oepm.gob.es (192.187.18.154)
Host is up (0.062s latency).
rDNS record for 192.187.18.154: autodiscover.oepm.es
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http ISPConfig http control panel
113/tcp closed ident
443/tcp open ssl/http ISPConfig http control panel
Device type: general purpose|WAP|printer
Running (JUST GUESSING): Linux 2.6.X (93%), D-Link embedded (90%), TRENDnet embedded (90%), HP embedded (87%)
OS CPE: cpe:/o:linux:linux_kernel:2.6 cpe:/h:dlink:dwl-624%2b cpe:/h:dlink:dwl-2000ap cpe:/h:trendnet:tew-432brp cpe:/o:linux:linux_kernel:2.6.22
Aggressive OS guesses: Linux 2.6.18 - 2.6.22 (93%), D-Link DWL-624+ or DWL-2000AP, or TRENDnet TEW-432BRP WAP (90%), HP PSC 2400-series Photosmart printer (87%), Tomato firmware (Linux 2.6.22) (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for extranet.oepm.gob.es (192.187.18.166)
Host is up (0.060s latency).
rDNS record for 192.187.18.166: 166.red-192-187-18.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/http Pulse Secure VPN gateway http config
Device type: general purpose
Running (JUST GUESSING): Linux 2.6.X (87%)
OS CPE: cpe:/o:linux:linux_kernel:2.6
Aggressive OS guesses: Linux 2.6.18 - 2.6.22 (87%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Device: security-misc

Nmap scan report for sede.oepm.gob.es (192.187.18.146)
Host is up (0.060s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/http ISPConfig http control panel
Device type: general purpose|WAP|printer
Running (JUST GUESSING): Linux 2.6.X (92%), D-Link embedded (89%), TRENDnet embedded (89%), HP embedded (86%), Netgear embedded (86%)
OS CPE: cpe:/o:linux:linux_kernel:2.6 cpe:/h:dlink:dwl-624%2b cpe:/h:dlink:dwl-2000ap cpe:/h:trendnet:tew-432brp cpe:/h:netgear:wgr614v7 cpe:/o:linux:linux_kernel:2.6.22
Aggressive OS guesses: Linux 2.6.18 - 2.6.22 (92%), D-Link DWL-624+ or DWL-2000AP, or TRENDnet TEW-432BRP WAP (89%), HP PSC 2400-series Photosmart printer (86%), Netgear WGR614v7 wireless broadband router (86%), Tomato firmware (Linux 2.6.22) (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.ordenacionjuego.gob.es (192.187.20.205)
Host is up (0.061s latency).
rDNS record for 192.187.20.205: 205.red-192-187-20.customer.static.ccgg.telefonica.net
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http-proxy F5 BIG-IP load balancer http proxy
443/tcp open ssl/http-proxy F5 BIG-IP load balancer http proxy
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host
Service Info: Device: load balancer

Nmap scan report for oscc.gob.es (195.64.187.99)
Host is up (0.061s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Servidor-Web
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAFA93%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,F3,"HTTP/1\.1\x20200\x20OK\r\nServer:\x20Servidor-Web\r\nDate:\x
SF:20Mon,\x2008\x20Oct\x202018\x2006:34:59\x20GMT\r\nContent-type:\x20text
SF:/html\r\nConnection:\x20close\r\n\r\n\r\n\r\n<html>\r\n<head>\r\n<META\
SF:x20HTTP-EQUIV=Refresh\x20CONTENT=\"0;\x20URL=/es/general/home_es\.htm\"
SF:>\r\n</head>\r\n<body>\r\n</body>\r\n</html>")%r(HTTPOptions,74,"HTTP/1
SF:\.1\x20200\x20OK\r\nServer:\x20Servidor-Web\r\nDate:\x20Mon,\x2008\x20O
SF:ct\x202018\x2006:34:59\x20GMT\r\nContent-length:\x200\r\nConnection:\x2
SF:0close\r\n\r\n")%r(RTSPRequest,93,"<HTML><HEAD><TITLE>Bad\x20request</T
SF:ITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>\nYour\x20browser\x20sent\x2
SF:0a\x20query\x20this\x20server\x20could\x20not\x20understand\.\n</BODY><
SF:/HTML>")%r(FourOhFourRequest,1BA,"HTTP/1\.1\x20404\x20Not\x20found\r\nS
SF:erver:\x20Servidor-Web\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2006:35:0
SF:4\x20GMT\r\nContent-length:\x20292\r\nContent-type:\x20text/html\r\nCon
SF:nection:\x20close\r\n\r\n<HEAD><META\x20HTTP-EQUIV=\"Content-Type\"\x20
SF:CONTENT=\"text/html;charset=ISO-8859-1\"><TITLE>Not\x20Found</TITLE></H
SF:EAD>\n<H1>Not\x20Found</H1>\x20The\x20requested\x20object\x20does\x20no
SF:t\x20exist\x20on\x20this\x20server\.\x20The\x20link\x20you\x20followed\
SF:x20is\x20either\x20outdated,\x20inaccurate,\x20or\x20the\x20server\x20h
SF:as\x20been\x20instructed\x20not\x20to\x20let\x20you\x20have\x20it\.\x20
SF:")%r(Help,93,"<HTML><HEAD><TITLE>Bad\x20request</TITLE></HEAD>\n<BODY><
SF:H1>Bad\x20request</H1>\nYour\x20browser\x20sent\x20a\x20query\x20this\x
SF:20server\x20could\x20not\x20understand\.\n</BODY></HTML>")%r(SSLSession
SF:Req,93,"<HTML><HEAD><TITLE>Bad\x20request</TITLE></HEAD>\n<BODY><H1>Bad
SF:\x20request</H1>\nYour\x20browser\x20sent\x20a\x20query\x20this\x20serv
SF:er\x20could\x20not\x20understand\.\n</BODY></HTML>")%r(TLSSessionReq,93
SF:,"<HTML><HEAD><TITLE>Bad\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20re
SF:quest</H1>\nYour\x20browser\x20sent\x20a\x20query\x20this\x20server\x20
SF:could\x20not\x20understand\.\n</BODY></HTML>")%r(LPDString,93,"<HTML><H
SF:EAD><TITLE>Bad\x20request</TITLE></HEAD>\n<BODY><H1>Bad\x20request</H1>
SF:\nYour\x20browser\x20sent\x20a\x20query\x20this\x20server\x20could\x20n
SF:ot\x20understand\.\n</BODY></HTML>");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for sede.ourense.gob.es (178.60.201.14)
Host is up (0.088s latency).
rDNS record for 178.60.201.14: 14.201.60.178.static.reverse-mundo-r.com
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache Tomcat/Coyote JSP engine 1.1
443/tcp open ssl/http Apache Tomcat/Coyote JSP engine 1.1
8080/tcp closed http-proxy
8443/tcp open https-alt?
Aggressive OS guesses: OpenWrt Kamikaze 7.09 (Linux 2.6.22) (96%), OpenWrt 0.9 - 7.09 (Linux 2.4.30 - 2.4.34) (93%), OpenWrt White Russian 0.9 (Linux 2.4.30) (93%), Asus RT-AC66U router (Linux 2.6) (89%), Asus RT-N16 WAP (Linux 2.6) (89%), Asus RT-N66U WAP (Linux 2.6) (89%), Tomato 1.28 (Linux 2.6.22) (89%), Linux 2.4.18 (89%), Lexmark X644e printer (87%), OpenBSD 4.4 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.palmasport.gob.es (195.235.121.25)
Host is up (0.087s latency).
rDNS record for 195.235.121.25: 25.red-195-235-121.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache Tomcat/Coyote JSP engine 1.1
443/tcp open ssl/http Apache Tomcat/Coyote JSP engine 1.1
5000/tcp closed upnp
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012|7|Vista|2008 (91%)
OS CPE: cpe:/o:microsoft:windows_server_2012:r2 cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_server_2008::sp1
Aggressive OS guesses: Microsoft Windows Server 2012 or Windows Server 2012 R2 (91%), Microsoft Windows Server 2012 R2 (91%), Microsoft Windows Server 2012 (89%), Microsoft Windows 7 (86%), Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (86%), Microsoft Windows Vista SP2, Windows 7 SP1, or Windows Server 2008 (85%), Microsoft Windows 7 Professional (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for www.pasaiaport.gob.es (195.53.242.57)
Host is up (0.061s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.4.18 ((Win32) PHP/5.4.45)
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: WAP|general purpose
Running (JUST GUESSING): Apple embedded (86%), Microsoft Windows 2003|XP (86%)
OS CPE: cpe:/h:apple:airport_extreme cpe:/o:microsoft:windows_server_2003 cpe:/o:microsoft:windows_xp::sp3
Aggressive OS guesses: Apple AirPort Extreme WAP (86%), Microsoft Windows Server 2003 (86%), Microsoft Windows Server 2003 SP2 (86%), Microsoft Windows XP SP3 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.pasaiaport.gob.es (194.30.117.251)
Host is up (0.068s latency).
rDNS record for 194.30.117.251: 194_30_117_251_ESCU0006.GigNu_adsl_za_bi.ips.sarenet.es
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/http Apache Tomcat/Coyote JSP engine 1.1
8080/tcp open http Apache Tomcat/Coyote JSP engine 1.1
8443/tcp open ssl/https-alt?
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose|firewall|WAP|webcam
Running (JUST GUESSING): Linux 2.6.X|2.4.X (87%), Fortinet embedded (87%), Tandberg embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:2.6 cpe:/h:fortinet:fortianalyzer-400b cpe:/o:linux:linux_kernel:2.4 cpe:/h:tandberg:vcs
Aggressive OS guesses: Linux 2.6.32 (87%), Fortinet FortiAnalyzer-400B firewall (Linux 2.6) (87%), Linux 2.6.32 - 2.6.35 (86%), Linux 2.6.35 (86%), DD-WRT v24-sp1 (Linux 2.4) (85%), Tandberg VCS video conferencing system (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for gobernanza-contratacion.patrimoniodelestado.gob.es (193.148.34.133)
Host is up (0.058s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
113/tcp closed ident
443/tcp open https
Device type: general purpose
Running (JUST GUESSING): OpenBSD 4.X (88%), FreeBSD 6.X (85%)
OS CPE: cpe:/o:openbsd:openbsd:4.0 cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: OpenBSD 4.0 (88%), FreeBSD 6.2-RELEASE (85%), OpenBSD 4.3 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for pinadeesgueva.gob.es (89.6.103.33)
Host is up (0.059s latency).
rDNS record for 89.6.103.33: static-33-103-6-89.ipcom.comunitel.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
113/tcp closed ident
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Device type: general purpose
Running (JUST GUESSING): Linux 4.X|3.X (86%)
OS CPE: cpe:/o:linux:linux_kernel:4.0 cpe:/o:linux:linux_kernel:3
Aggressive OS guesses: Linux 4.0 (86%), Linux 3.10 - 3.12 (86%), Linux 4.4 (86%), Linux 3.10 (85%), Linux 3.10 - 3.16 (85%), Linux 4.9 (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for Clave-dninbcert.policia.gob.es (195.55.116.38)
Host is up (0.061s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/gnutella LimeWire Gnutella P2P client
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for Clave-dninbrt.policia.gob.es (195.55.116.39)
Host is up (0.061s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/gnutella LimeWire Gnutella P2P client
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for sede.policia.gob.es (195.55.116.76)
Host is up (0.061s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
443/tcp open ssl/gnutella LimeWire Gnutella P2P client
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
OS fingerprint not ideal because: Missing a closed TCP port so results incomplete
No OS matches for host

Nmap scan report for sede.portcastello.gob.es (94.23.220.45)
Host is up (0.080s latency).
rDNS record for 94.23.220.45: ns323940.ip-94-23-220.eu
Not shown: 985 closed ports
PORT STATE SERVICE VERSION
21/tcp open ftp ProFTPD
22/tcp open ssh OpenSSH 6.6.1p1 Ubuntu 2ubuntu2.10 (Ubuntu Linux; protocol 2.0)
25/tcp open smtp Postfix smtpd
53/tcp open domain (unknown banner: none)
80/tcp open http Apache httpd (PleskLin)
106/tcp open pop3pw poppassd
110/tcp open pop3 Dovecot pop3d
143/tcp open imap Dovecot imapd
443/tcp open ssl/http Apache httpd
445/tcp filtered microsoft-ds
465/tcp filtered smtps
993/tcp open ssl/imap Dovecot imapd
995/tcp open ssl/pop3 Dovecot pop3d
3306/tcp open mysql MySQL 5.5.61-0ubuntu0.14.04.1-log
8443/tcp open ssl/http nginx
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port53-TCP:V=7.70%I=7%D=10/8%Time=5BBAFAB7%P=x86_64-pc-linux-gnu%r(DNSV
SF:ersionBindReqTCP,3F,"\0=\0\x06\x85\0\0\x01\0\x01\0\x01\0\0\x07version\x
SF:04bind\0\0\x10\0\x03\xc0\x0c\0\x10\0\x03\0\0\0\0\0\x05\x04none\xc0\x0c\
SF:0\x02\0\x03\0\0\0\0\0\x02\xc0\x0c");
Aggressive OS guesses: Linux 3.10 - 4.11 (95%), Linux 3.13 (94%), Linux 3.13 or 4.2 (94%), Linux 3.16 (94%), Linux 3.16 - 4.6 (94%), Linux 4.2 (94%), Linux 4.4 (94%), HP P2000 G3 NAS device (93%), Linux 3.2 - 4.9 (92%), Linux 3.18 (92%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 11 hops
Service Info: Hosts: 94.23.220.45, www.verdeatic.com, www.verdeatic.com, default-94_23_220_45; OSs: Unix, Linux; CPE: cpe:/o:linux:linux_kernel

Nmap scan report for seu.portdebarcelona.gob.es (195.77.214.142)
Host is up (0.069s latency).
Other addresses for seu.portdebarcelona.gob.es (not scanned): 88.87.203.92
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.2.10
443/tcp open ssl/http Apache httpd 2.2.10
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running: Linux 2.6.X
OS CPE: cpe:/o:linux:linux_kernel:2.6
OS details: Linux 2.6.18 - 2.6.22
Service Info: Host: seu.portdebarcelona.gob.es

Nmap scan report for sede.portovilagarcia.gob.es (109.234.64.140)
Host is up (0.058s latency).
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http
113/tcp closed ident
443/tcp open ssl/https
8080/tcp open http Microsoft IIS httpd 8.5
8443/tcp open ssl/http Microsoft IIS httpd 8.5
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.70%I=7%D=10/8%Time=5BBAFABE%P=x86_64-pc-linux-gnu%r(GetR
SF:equest,1504,"HTTP/1\.1\x20200\x20\r\nSet-Cookie:\x20JSESSIONID=68FA8711
SF:104D956DF3BBF089D52C691A;\x20Path=/;\x20HttpOnly\r\nX-Content-Type-Opti
SF:ons:\x20nosniff\r\nX-XSS-Protection:\x201;\x20mode=block\r\nCache-Contr
SF:ol:\x20no-store\r\nPragma:\x20\r\nExpires:\x200\r\nX-Frame-Options:\x20
SF:DENY\r\nContent-Type:\x20text/html;charset=UTF-8\r\nContent-Language:\x
SF:20es\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2006:35:41\x20GMT\r\nConnec
SF:tion:\x20close\r\n\r\n<!DOCTYPE\x20html>\r\n\r\n<html\x20lang=\"es\">\r
SF:\n<head>\r\n\t\r\n\t<title>Portal\x20de\x20Licitaci\xc3\xb3n\x20Electr\
SF:xc3\xb3nica\x20de\x20la\x20Autoridad\x20Portuaria\x20de\x20Vilagarc\xc3
SF:\xada\x20de\x20Arousa</title>\r\n\t<meta\x20name=\"description\"\x20con
SF:tent=\"Acceso\x20a\x20los\x20tr\xc3\xa1mites\x20publicados\x20por\x20el
SF:\x20Organismo,\x20los\x20cuales\x20se\x20pueden\x20solicitar\x20de\x20f
SF:orma\x20totalmente\x20electr\xc3\xb3nica\"\x20/>\r\n\t<meta\x20name=\"k
SF:eywords\"\x20content=\"Sede\x20Electr\xc3\xb3nica,\x20Contrataci\xc3\xb
SF:3n\x20y\x20Licitaci\xc3\xb3n\x20Electr\xc3\xb3nica\x20de\x20Pixelware\"
SF:\x20/>\r\n\t<!--\x20Web\x20Fonts\x20-->\r\n\t<link\x20rel=\"stylesheet\
SF:"\x20type=\"text/css\"\x20href=\"//fonts\.googleapis\.com/css\?family=O
SF:pen\+Sans:400,300,600&amp;subset=cyri")%r(HTTPOptions,199,"HTTP/1\.1\x2
SF:0200\x20\r\nSet-Cookie:\x20JSESSIONID=742E9E381079154CD3E89A79A6A7AF0B;
SF:\x20Path=/;\x20HttpOnly\r\nX-Content-Type-Options:\x20nosniff\r\nX-XSS-
SF:Protection:\x201;\x20mode=block\r\nCache-Control:\x20no-cache,\x20no-st
SF:ore,\x20max-age=0,\x20must-revalidate\r\nPragma:\x20no-cache\r\nExpires
SF::\x200\r\nX-Frame-Options:\x20DENY\r\nAllow:\x20GET,\x20HEAD,\x20POST,\
SF:x20PUT,\x20DELETE,\x20TRACE,\x20OPTIONS,\x20PATCH\r\nContent-Length:\x2
SF:00\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2006:35:41\x20GMT\r\nConnecti
SF:on:\x20close\r\n\r\n")%r(RTSPRequest,49,"HTTP/1\.1\x20400\x20\r\nDate:\
SF:x20Mon,\x2008\x20Oct\x202018\x2006:35:42\x20GMT\r\nConnection:\x20close
SF:\r\n\r\n")%r(X11Probe,49,"HTTP/1\.1\x20400\x20\r\nDate:\x20Mon,\x2008\x
SF:20Oct\x202018\x2006:35:42\x20GMT\r\nConnection:\x20close\r\n\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAFAC6%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,4000,"HTTP/1\.1\x20200\x20\r\nSet-Cookie:\x20JSESSIONID=F
SF:1A1C249190AE85202DCFE1B92B48D59;\x20Path=/;\x20Secure;\x20HttpOnly\r\nX
SF:-Content-Type-Options:\x20nosniff\r\nX-XSS-Protection:\x201;\x20mode=bl
SF:ock\r\nCache-Control:\x20no-store\r\nPragma:\x20\r\nExpires:\x200\r\nSt
SF:rict-Transport-Security:\x20max-age=31536000\x20;\x20includeSubDomains\
SF:r\nX-Frame-Options:\x20DENY\r\nContent-Type:\x20text/html;charset=UTF-8
SF:\r\nContent-Language:\x20es\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2006
SF::35:48\x20GMT\r\nConnection:\x20close\r\n\r\n<!DOCTYPE\x20html>\r\n\r\n
SF:<html\x20lang=\"es\">\r\n<head>\r\n\t\r\n\t<title>Portal\x20de\x20Licit
SF:aci\xc3\xb3n\x20Electr\xc3\xb3nica\x20de\x20la\x20Autoridad\x20Portuari
SF:a\x20de\x20Vilagarc\xc3\xada\x20de\x20Arousa</title>\r\n\t<meta\x20name
SF:=\"description\"\x20content=\"Acceso\x20a\x20los\x20tr\xc3\xa1mites\x20
SF:publicados\x20por\x20el\x20Organismo,\x20los\x20cuales\x20se\x20pueden\
SF:x20solicitar\x20de\x20forma\x20totalmente\x20electr\xc3\xb3nica\"\x20/>
SF:\r\n\t<meta\x20name=\"keywords\"\x20content=\"Sede\x20Electr\xc3\xb3nic
SF:a,\x20Contrataci\xc3\xb3n\x20y\x20Licitaci\xc3\xb3n\x20Electr\xc3\xb3ni
SF:ca\x20de\x20Pixelware\"\x20/>\r\n\t<!--\x20Web\x20Fonts\x20-->\r\n\t<li
SF:nk\x20rel=\"stylesheet\"\x20type=\"text/css\"\x20href")%r(HTTPOptions,1
SF:E2,"HTTP/1\.1\x20200\x20\r\nSet-Cookie:\x20JSESSIONID=7652418091D9058A8
SF:61812742263DC45;\x20Path=/;\x20Secure;\x20HttpOnly\r\nX-Content-Type-Op
SF:tions:\x20nosniff\r\nX-XSS-Protection:\x201;\x20mode=block\r\nCache-Con
SF:trol:\x20no-cache,\x20no-store,\x20max-age=0,\x20must-revalidate\r\nPra
SF:gma:\x20no-cache\r\nExpires:\x200\r\nStrict-Transport-Security:\x20max-
SF:age=31536000\x20;\x20includeSubDomains\r\nX-Frame-Options:\x20DENY\r\nA
SF:llow:\x20GET,\x20HEAD,\x20POST,\x20PUT,\x20DELETE,\x20TRACE,\x20OPTIONS
SF:,\x20PATCH\r\nContent-Length:\x200\r\nDate:\x20Mon,\x2008\x20Oct\x20201
SF:8\x2006:35:50\x20GMT\r\nConnection:\x20close\r\n\r\n")%r(FourOhFourRequ
SF:est,4000,"HTTP/1\.1\x20404\x20\r\nSet-Cookie:\x20JSESSIONID=EF48F8D377D
SF:22200D9F5A9E2C9E0B645;\x20Path=/;\x20Secure;\x20HttpOnly\r\nX-Content-T
SF:ype-Options:\x20nosniff\r\nX-XSS-Protection:\x201;\x20mode=block\r\nCac
SF:he-Control:\x20no-cache,\x20no-store,\x20max-age=0,\x20must-revalidate\
SF:r\nPragma:\x20no-cache\r\nExpires:\x200\r\nStrict-Transport-Security:\x
SF:20max-age=31536000\x20;\x20includeSubDomains\r\nX-Frame-Options:\x20DEN
SF:Y\r\nContent-Type:\x20text/html;charset=UTF-8\r\nContent-Language:\x20e
SF:s\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2006:35:50\x20GMT\r\nConnectio
SF:n:\x20close\r\n\r\n<html\x20lang=\"es\">\r\n\t<head>\r\n\t\t<!--\x20TOD
SF:O:\x20Esto\x20repite\x20el\x20tag\x20head,\x20pero\x20no\x20hay\x20form
SF:a\x20limpia\x20de\x20solucionarlo\.\x20Los\x20navegadores\x20parecen\x2
SF:0aceptarlo\x20-->\r\n\t\t\r\n\t<title>Portal\x20de\x20Licitaci\xc3\xb3n
SF:\x20Electr\xc3\xb3nica\x20de\x20la\x20Autoridad\x20Portuaria\x20de\x20V
SF:ilagarc\xc3\xada\x20de\x20Arousa</title>\r\n\t<meta\x20name=\"descripti
SF:on\"\x20content=\"Acceso\x20a\x20los\x20tr\xc3\xa1mites\x20publicados\x
SF:20por\x20el\x20Organismo,\x20los\x20cuales\x20se\x20pueden\x20solicitar
SF:\x20de\x20forma\x20totalmente\x20electr\xc3\xb3nica\"\x20/>\r\n\t<meta\
SF:x20name=\"keywords\"\x20cont");
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012 (89%)
OS CPE: cpe:/o:microsoft:windows_server_2012:r2
Aggressive OS guesses: Microsoft Windows Server 2012 or Windows Server 2012 R2 (89%), Microsoft Windows Server 2012 R2 (89%), Microsoft Windows Server 2012 (87%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for portsdebalears.gob.es (195.55.176.194)
Host is up (0.059s latency).
Not shown: 993 filtered ports
PORT STATE SERVICE VERSION
53/tcp open domain (generic dns response: NOTIMP)
80/tcp open http Apache httpd 2.2.22
113/tcp closed ident
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
2000/tcp open cisco-sccp?
5060/tcp open sip?
49157/tcp closed unknown
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port53-TCP:V=7.70%I=7%D=10/8%Time=5BBAFAC6%P=x86_64-pc-linux-gnu%r(DNSV
SF:ersionBindReqTCP,20,"\0\x1e\0\x06\x81\x05\0\x01\0\0\0\0\0\0\x07version\
SF:x04bind\0\0\x10\0\x03")%r(DNSStatusRequestTCP,E,"\0\x0c\0\0\x90\x04\0\0
SF:\0\0\0\0\0\0");
Device type: general purpose|WAP
Running (JUST GUESSING): Linux 3.X (87%), AirSpan embedded (85%)
OS CPE: cpe:/o:linux:linux_kernel:3.0
Aggressive OS guesses: Linux 3.0 (87%), Linux 3.0 or 3.5 (87%), AirSpan ProST WiMAX access point (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Host: nonvirtual.portsdebalears.com

Nmap scan report for seu.porttarragona.gob.es (195.76.195.24)
Host is up (0.072s latency).
rDNS record for 195.76.195.24: 24.red-195-76-195.customer.static.ccgg.telefonica.net
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd 2.4.7
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
8080/tcp closed http-proxy
Device type: general purpose
Running (JUST GUESSING): Linux 3.X|4.X (91%)
OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4
Aggressive OS guesses: Linux 3.11 - 4.1 (91%), Linux 3.16 (91%), Linux 4.4 (89%), Linux 3.10 - 3.16 (88%), Linux 3.13 (86%), Linux 4.0 (85%), Linux 3.2 - 3.8 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Host: seu.porttarragona.gob.es

Nmap scan report for activesync.presidencia.gob.es (212.128.110.136)
Host is up (0.061s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012|2008 (90%)
OS CPE: cpe:/o:microsoft:windows_server_2012:r2 cpe:/o:microsoft:windows_server_2008:r2:sp1
Aggressive OS guesses: Microsoft Windows Server 2012 or Windows Server 2012 R2 (90%), Microsoft Windows Server 2012 R2 (89%), Microsoft Windows Server 2012 (89%), Microsoft Windows Server 2008 R2 SP1 (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for av.presidencia.gob.es (212.128.110.216)
Host is up (0.060s latency).
Not shown: 971 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open https?
50000/tcp closed ibm-db2
50001/tcp open mc-nmf .NET Message Framing
50002/tcp open mc-nmf .NET Message Framing
50003/tcp open mc-nmf .NET Message Framing
50006/tcp closed unknown
50300/tcp closed unknown
50389/tcp closed unknown
50500/tcp closed unknown
50636/tcp closed unknown
50800/tcp closed unknown
51103/tcp closed unknown
51493/tcp closed unknown
52673/tcp closed unknown
52822/tcp closed unknown
52848/tcp closed unknown
52869/tcp closed unknown
54045/tcp closed unknown
54328/tcp closed unknown
55055/tcp closed unknown
55056/tcp closed unknown
55555/tcp closed unknown
55600/tcp closed unknown
56737/tcp closed unknown
56738/tcp closed unknown
57294/tcp closed unknown
57797/tcp closed unknown
58080/tcp closed unknown
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012 (90%)
OS CPE: cpe:/o:microsoft:windows_server_2012:r2
Aggressive OS guesses: Microsoft Windows Server 2012 or Windows Server 2012 R2 (90%), Microsoft Windows Server 2012 R2 (89%), Microsoft Windows Server 2012 (87%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for conf.presidencia.gob.es (212.128.110.215)
Host is up (0.059s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/https?
8010/tcp closed xmpp
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012 (90%)
OS CPE: cpe:/o:microsoft:windows_server_2012:r2
Aggressive OS guesses: Microsoft Windows Server 2012 or Windows Server 2012 R2 (90%), Microsoft Windows Server 2012 R2 (89%), Microsoft Windows Server 2012 (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for ems.presidencia.gob.es (212.128.110.189)
Host is up (0.060s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
Too many fingerprints match this host to give specific OS details

Nmap scan report for lucia.presidencia.gob.es (212.128.110.190)
Host is up (0.060s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
Too many fingerprints match this host to give specific OS details

Nmap scan report for oficinaremota.presidencia.gob.es (212.128.110.134)
Host is up (0.060s latency).
rDNS record for 212.128.110.134: error.presidencia.gob.es
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/https
8010/tcp closed xmpp
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAFAD5%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,A33,"HTTP/1\.0\x20200\x20true\r\nContent-Length:\x202543\
SF:r\nContent-Type:\x20text/html\r\n\r\n<!DOCTYPE\x20html>\n<html>\n<head>
SF:\n\x20\x20\x20\x20<meta\x20charset=\"utf-8\"\x20/>\n\x20\x20\x20\x20<ti
SF:tle>La\x20Moncloa\.\x20Acceso\x20remoto\x20a\x20la\x20oficina</title>\n
SF:\x20\x20\x20\x20<meta\x20http-equiv=\"X-UA-Compatible\"\x20content=\"IE
SF:=edge,chrome=1\">\n\x20\x20\x20\x20<meta\x20http-equiv=\"expires\"\x20c
SF:ontent=\"-1\">\n\x20\x20\x20\x20<meta\x20name=\"robots\"\x20content=\"n
SF:ofollow,noindex\">\n\x20\x20\x20\x20<link\x20href=\"https://escritorio\
SF:.presidencia\.gob\.es/vpn/launch_or/recursos/favicon\.ico\"\x20rel=\"sh
SF:ortcut\x20icon\"\x20type=\"image/x-icon\"\x20/>\n\x20\x20\x20\x20<meta\
SF:x20name=\"viewport\"\x20content=\"width=device-width,\x20initial-scale=
SF:1\.0,\x20maximum-scale=1\.0,\x20user-scalable=no\">\n\x20\x20\x20\x20<s
SF:tyle\x20type=\"text/css\">\n\x20\x20\x20\x20\x20\x20\x20\x20body\x20{\x
SF:20background:\x20url\(https://escritorio\.presidencia\.gob\.es/vpn/laun
SF:ch_or/recursos/imagenes/fondo-escudo\.gif\)\x20repeat-x\x20-8cm\x20-1cm
SF:\x20fixed;\x20color:\x20#387ab0;\x20\x20verdana,\x20arial,\
SF:x20helvetica,\x20sans-serif;\x20\x200%;\x20padding-top:\x200em;\
SF:x20padding-right:\x200em;\x20padding-left:\x200")%r(HTTPOptions,A33,"HT
SF:TP/1\.0\x20200\x20true\r\nContent-Length:\x202543\r\nContent-Type:\x20t
SF:ext/html\r\n\r\n<!DOCTYPE\x20html>\n<html>\n<head>\n\x20\x20\x20\x20<me
SF:ta\x20charset=\"utf-8\"\x20/>\n\x20\x20\x20\x20<title>La\x20Moncloa\.\x
SF:20Acceso\x20remoto\x20a\x20la\x20oficina</title>\n\x20\x20\x20\x20<meta
SF:\x20http-equiv=\"X-UA-Compatible\"\x20content=\"IE=edge,chrome=1\">\n\x
SF:20\x20\x20\x20<meta\x20http-equiv=\"expires\"\x20content=\"-1\">\n\x20\
SF:x20\x20\x20<meta\x20name=\"robots\"\x20content=\"nofollow,noindex\">\n\
SF:x20\x20\x20\x20<link\x20href=\"https://escritorio\.presidencia\.gob\.es
SF:/vpn/launch_or/recursos/favicon\.ico\"\x20rel=\"shortcut\x20icon\"\x20t
SF:ype=\"image/x-icon\"\x20/>\n\x20\x20\x20\x20<meta\x20name=\"viewport\"\
SF:x20content=\"width=device-width,\x20initial-scale=1\.0,\x20maximum-scal
SF:e=1\.0,\x20user-scalable=no\">\n\x20\x20\x20\x20<style\x20type=\"text/c
SF:ss\">\n\x20\x20\x20\x20\x20\x20\x20\x20body\x20{\x20background:\x20url\
SF:(https://escritorio\.presidencia\.gob\.es/vpn/launch_or/recursos/imagen
SF:es/fondo-escudo\.gif\)\x20repeat-x\x20-8cm\x20-1cm\x20fixed;\x20color:\
SF:x20#387ab0;\x20\x20verdana,\x20arial,\x20helvetica,\x20sans
SF:-serif;\x20\x200%;\x20padding-top:\x200em;\x20padding-right:\x20
SF:0em;\x20padding-left:\x200");
Device type: router|printer|WAP|general purpose|load balancer
Running (JUST GUESSING): Linksys embedded (87%), Ricoh embedded (86%), Apple embedded (86%), FreeBSD 6.X (85%), Citrix embedded (85%)
OS CPE: cpe:/h:ricoh:aficio_sp_c240sf cpe:/h:apple:airport_extreme cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: Linksys BEFSR41 EtherFast router (87%), Ricoh Aficio SP C240SF printer (86%), Apple AirPort Extreme WAP (86%), FreeBSD 6.2-RELEASE (85%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for owa.presidencia.gob.es (212.128.110.247)
Host is up (0.059s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/https?
8010/tcp closed xmpp
Device type: specialized|router|printer|WAP|general purpose|load balancer
Running (JUST GUESSING): AVtech embedded (88%), Linksys embedded (87%), Ricoh embedded (86%), Apple embedded (86%), FreeBSD 6.X (85%), Citrix embedded (85%)
OS CPE: cpe:/h:ricoh:aficio_sp_c240sf cpe:/h:apple:airport_extreme cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: AVtech Room Alert 26W environmental monitor (88%), Linksys BEFSR41 EtherFast router (87%), Ricoh Aficio SP C240SF printer (86%), Apple AirPort Extreme WAP (86%), FreeBSD 6.2-RELEASE (85%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for owaauthdseg.presidencia.gob.es (212.128.110.239)
Host is up (0.060s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/https?
8010/tcp closed xmpp
Device type: router|printer|WAP|general purpose|load balancer
Running (JUST GUESSING): Linksys embedded (87%), Ricoh embedded (86%), Apple embedded (86%), FreeBSD 6.X (85%), Citrix embedded (85%)
OS CPE: cpe:/h:ricoh:aficio_sp_c240sf cpe:/h:apple:airport_extreme cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: Linksys BEFSR41 EtherFast router (87%), Ricoh Aficio SP C240SF printer (86%), Apple AirPort Extreme WAP (86%), FreeBSD 6.2-RELEASE (85%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for owaauthdsn.presidencia.gob.es (212.128.110.232)
Host is up (0.059s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/https?
8010/tcp closed xmpp
Device type: router|printer|WAP|general purpose|load balancer
Running (JUST GUESSING): Linksys embedded (87%), Ricoh embedded (86%), Apple embedded (86%), FreeBSD 6.X (85%), Citrix embedded (85%)
OS CPE: cpe:/h:ricoh:aficio_sp_c240sf cpe:/h:apple:airport_extreme cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: Linksys BEFSR41 EtherFast router (87%), Ricoh Aficio SP C240SF printer (86%), Apple AirPort Extreme WAP (86%), FreeBSD 6.2-RELEASE (85%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for owadseg.presidencia.gob.es (212.128.110.246)
Host is up (0.059s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/https?
8010/tcp closed xmpp
Device type: router|printer|WAP|general purpose|load balancer
Running (JUST GUESSING): Linksys embedded (87%), Ricoh embedded (86%), Apple embedded (86%), FreeBSD 6.X (85%), Citrix embedded (85%)
OS CPE: cpe:/h:ricoh:aficio_sp_c240sf cpe:/h:apple:airport_extreme cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: Linksys BEFSR41 EtherFast router (87%), Ricoh Aficio SP C240SF printer (86%), Apple AirPort Extreme WAP (86%), FreeBSD 6.2-RELEASE (85%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for owadsn.presidencia.gob.es (212.128.110.233)
Host is up (0.060s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/https?
8010/tcp closed xmpp
Device type: router|printer|WAP|general purpose|load balancer
Running (JUST GUESSING): Linksys embedded (87%), Ricoh embedded (86%), Apple embedded (86%), FreeBSD 6.X (85%), Citrix embedded (85%)
OS CPE: cpe:/h:ricoh:aficio_sp_c240sf cpe:/h:apple:airport_extreme cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: Linksys BEFSR41 EtherFast router (87%), Ricoh Aficio SP C240SF printer (86%), Apple AirPort Extreme WAP (86%), FreeBSD 6.2-RELEASE (85%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for app.sgc.presidencia.gob.es (212.128.110.6)
Host is up (0.059s latency).
Not shown: 999 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
Too many fingerprints match this host to give specific OS details

Nmap scan report for streaming.sgc.presidencia.gob.es (88.2.81.63)
Host is up (0.062s latency).
rDNS record for 88.2.81.63: 63.red-88-2-81.staticip.rima-tde.net
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
22/tcp open ssh OpenSSH 7.4 (protocol 2.0)
80/tcp closed http
443/tcp open ssl/https
5555/tcp closed freeciv
49152/tcp closed unknown
1 service unrecognized despite returning data. If you know the service/version, please submit the following fingerprint at https://nmap.org/cgi-bin/submit.cgi?new-service :
SF-Port443-TCP:V=7.70%T=SSL%I=7%D=10/8%Time=5BBAFADC%P=x86_64-pc-linux-gnu
SF:%r(GetRequest,1B2,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Mon,\
SF:x2008\x20Oct\x202018\x2006:36:13\x20GMT\r\nX-Frame-Options:\x20SAMEORIG
SF:IN\r\nContent-Security-Policy:\x20default-src\x20'none';\x20script-src\
SF:x20'self'\x20'unsafe-inline'\x20'unsafe-eval';\x20connect-src\x20'self'
SF:\x20wss://\*:\*;\x20img-src\x20'self'\x20data:;\x20frame-src\x20'self';
SF:\x20font-src\x20'self';\x20object-src\x20'self';\x20style-src\x20'self'
SF:\x20'unsafe-inline'\r\nContent-Length:\x2022\r\nConnection:\x20close\r\
SF:nContent-Type:\x20text/html;\x20charset=iso-8859-1\r\n\r\nAn\x20error\x
SF:20has\x20occurred\.")%r(HTTPOptions,1B2,"HTTP/1\.1\x20400\x20Bad\x20Req
SF:uest\r\nDate:\x20Mon,\x2008\x20Oct\x202018\x2006:36:13\x20GMT\r\nX-Fram
SF:e-Options:\x20SAMEORIGIN\r\nContent-Security-Policy:\x20default-src\x20
SF:'none';\x20script-src\x20'self'\x20'unsafe-inline'\x20'unsafe-eval';\x2
SF:0connect-src\x20'self'\x20wss://\*:\*;\x20img-src\x20'self'\x20data:;\x
SF:20frame-src\x20'self';\x20font-src\x20'self';\x20object-src\x20'self';\
SF:x20style-src\x20'self'\x20'unsafe-inline'\r\nContent-Length:\x2022\r\nC
SF:onnection:\x20close\r\nContent-Type:\x20text/html;\x20charset=iso-8859-
SF:1\r\n\r\nAn\x20error\x20has\x20occurred\.")%r(FourOhFourRequest,1B2,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Mon,\x2008\x20Oct\x202018\
SF:x2006:36:14\x20GMT\r\nX-Frame-Options:\x20SAMEORIGIN\r\nContent-Securit
SF:y-Policy:\x20default-src\x20'none';\x20script-src\x20'self'\x20'unsafe-
SF:inline'\x20'unsafe-eval';\x20connect-src\x20'self'\x20wss://\*:\*;\x20i
SF:mg-src\x20'self'\x20data:;\x20frame-src\x20'self';\x20font-src\x20'self
SF:';\x20object-src\x20'self';\x20style-src\x20'self'\x20'unsafe-inline'\r
SF:\nContent-Length:\x2022\r\nConnection:\x20close\r\nContent-Type:\x20tex
SF:t/html;\x20charset=iso-8859-1\r\n\r\nAn\x20error\x20has\x20occurred\.")
SF:%r(RTSPRequest,1B2,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nDate:\x20Mon,
SF:\x2008\x20Oct\x202018\x2006:36:24\x20GMT\r\nX-Frame-Options:\x20SAMEORI
SF:GIN\r\nContent-Security-Policy:\x20default-src\x20'none';\x20script-src
SF:\x20'self'\x20'unsafe-inline'\x20'unsafe-eval';\x20connect-src\x20'self
SF:'\x20wss://\*:\*;\x20img-src\x20'self'\x20data:;\x20frame-src\x20'self'
SF:;\x20font-src\x20'self';\x20object-src\x20'self';\x20style-src\x20'self
SF:'\x20'unsafe-inline'\r\nContent-Length:\x2022\r\nConnection:\x20close\r
SF:\nContent-Type:\x20text/html;\x20charset=iso-8859-1\r\n\r\nAn\x20error\
SF:x20has\x20occurred\.");
Aggressive OS guesses: Apple iPhone mobile phone (iOS 4.3.3) (92%), Apple Mac OS X 10.7.4 (Lion) (Darwin 11.4.0) (90%), Apple iOS 7.1 or 9.3 (Darwin 14.0.0 - 15.4.0) (90%), Apple iOS 8.4 - 9.3 (Darwin 14.0.0 - 15.6.0) (90%), Apple OS X 10.10 (Yosemite) (Darwin 14.0.0) (90%), Apple OS X 10.10.2 (Yosemite) - 10.11.1 (El Capitan) or iOS 9 (Darwin 14.1.0 - 15.0.0) (90%), Apple OS X 10.10.5 (Darwin 14.5.0) (90%), Apple OS X 10.8 (Mountain Lion) (90%), Apple OS X 10.9 (Mavericks) (Darwin 13.0.0 - 13.2.0) (90%), Apple Mac OS X 10.7.4 (Lion) (Darwin 11.4.0) or Apple TV (iOS 4.3) (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for skype.presidencia.gob.es (212.128.110.214)
Host is up (0.060s latency).
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/sip Microsoft Skype for Business SIP 2015
5061/tcp open ssl/sip-tls?
5269/tcp closed xmpp-server
8010/tcp closed xmpp
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012 (89%)
OS CPE: cpe:/o:microsoft:windows_server_2012:r2
Aggressive OS guesses: Microsoft Windows Server 2012 or Windows Server 2012 R2 (89%), Microsoft Windows Server 2012 (87%), Microsoft Windows Server 2012 R2 (87%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for skypeext.presidencia.gob.es (212.128.110.138)
Host is up (0.060s latency).
rDNS record for 212.128.110.138: office.presidencia.gob.es
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 8.5
8010/tcp closed xmpp
Device type: router|printer|WAP|general purpose|load balancer
Running (JUST GUESSING): Linksys embedded (87%), Ricoh embedded (86%), Apple embedded (86%), FreeBSD 6.X (85%), Citrix embedded (85%)
OS CPE: cpe:/h:ricoh:aficio_sp_c240sf cpe:/h:apple:airport_extreme cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: Linksys BEFSR41 EtherFast router (87%), Ricoh Aficio SP C240SF printer (86%), Apple AirPort Extreme WAP (86%), FreeBSD 6.2-RELEASE (85%), Citrix NetScaler VPX load balancer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for bpms.puertoalicante.gob.es (212.145.148.235)
Host is up (0.076s latency).
Other addresses for bpms.puertoalicante.gob.es (not scanned): 62.43.192.13
rDNS record for 212.145.148.235: static-235-148-145-212.ipcom.comunitel.net
Not shown: 990 closed ports
PORT STATE SERVICE VERSION
21/tcp open ftp vsftpd 2.0.8 or later
22/tcp open tcpwrapped
23/tcp filtered telnet
25/tcp filtered smtp
80/tcp filtered http
443/tcp open ssl/http Microsoft HTTPAPI httpd 2.0 (SSDP/UPnP)
465/tcp filtered smtps
587/tcp filtered submission
3389/tcp filtered ms-wbt-server
7778/tcp filtered interwise
Device type: WAP|printer
Running (JUST GUESSING): Netgear embedded (88%), HP embedded (86%), Epson embedded (85%)
OS CPE: cpe:/h:netgear:wgr614v7 cpe:/h:epson:stylus_pro_400
Aggressive OS guesses: Netgear WGR614v7 wireless broadband router (88%), HP PSC 2400-series Photosmart printer (86%), Epson Stylus Pro 400 printer (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for sede.puertocadiz.gob.es (195.140.156.154)
Host is up (0.060s latency).
rDNS record for 195.140.156.154: alh156154.alhsys.es
Not shown: 996 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Microsoft IIS httpd 7.5
113/tcp closed ident
443/tcp open ssl/http Microsoft IIS httpd 7.5
8443/tcp open ssl/http Apache Tomcat/Coyote JSP engine 1.1
Device type: general purpose|WAP
Running (JUST GUESSING): Microsoft Windows 7|Vista|2008|8.1 (95%), AirSpan embedded (88%), Apple embedded (86%), FreeBSD 6.X (85%)
OS CPE: cpe:/o:microsoft:windows_7 cpe:/o:microsoft:windows_vista::- cpe:/o:microsoft:windows_vista::sp1 cpe:/o:microsoft:windows_server_2008::sp1 cpe:/o:microsoft:windows_8 cpe:/o:microsoft:windows_8.1:r1 cpe:/h:apple:airport_extreme cpe:/o:freebsd:freebsd:6.2
Aggressive OS guesses: Microsoft Windows 7 (95%), Microsoft Windows 7 SP1 (90%), Microsoft Windows Vista SP0 or SP1, Windows Server 2008 SP1, or Windows 7 (89%), AirSpan ProST WiMAX access point (88%), Microsoft Windows Server 2008 R2 SP1 (88%), Microsoft Windows Server 2008 R2 or Windows 8 (88%), Microsoft Windows Server 2008 (88%), Microsoft Windows Server 2008 R2 (88%), Microsoft Windows 7 or Windows Server 2008 R2 (87%), Microsoft Windows Server 2008 or 2008 Beta 3 (87%)
No exact OS matches for host (test conditions non-ideal).
Service Info: OS: Windows; CPE: cpe:/o:microsoft:windows

Nmap scan report for sede.puertocoruna.gob.es (195.53.242.28)
Host is up (0.061s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http nginx 1.12.1
443/tcp open ssl/http nginx 1.12.1
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Linux 3.X|4.X|2.6.X (90%)
OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4 cpe:/o:linux:linux_kernel:2.6
Aggressive OS guesses: Linux 3.11 - 4.1 (90%), Linux 3.2.0 (89%), Linux 3.16 (89%), Linux 4.4 (87%), Linux 2.6.18 - 2.6.22 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for sede.puertodemelilla.gob.es (46.35.121.213)
Host is up (0.084s latency).
Not shown: 997 closed ports
PORT STATE SERVICE VERSION
22/tcp open tcpwrapped
80/tcp open ssl/ssl Apache httpd (SSL-only mode)
443/tcp open ssl/ssl Apache httpd (SSL-only mode)
Device type: general purpose
Running (JUST GUESSING): Linux 3.X|4.X (87%)
OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4
Aggressive OS guesses: Linux 3.10 - 4.11 (87%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 9 hops

Nmap scan report for puertogijon.gob.es (185.76.212.193)
Host is up (0.067s latency).
Not shown: 995 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http nginx
443/tcp open ssl/http nginx
8080/tcp closed http-proxy
8443/tcp closed https-alt
9090/tcp open http Apache Tomcat/Coyote JSP engine 1.1
Device type: general purpose
Running (JUST GUESSING): Linux 3.X|4.X (90%)
OS CPE: cpe:/o:linux:linux_kernel:3.18 cpe:/o:linux:linux_kernel:4.9
Aggressive OS guesses: Linux 3.18 (90%), Linux 4.9 (89%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for puertohuelva.gob.es (104.40.179.177)
Host is up (0.095s latency).
Not shown: 997 filtered ports
PORT STATE SERVICE VERSION
80/tcp open http Apache httpd
443/tcp open ssl/http Apache httpd
843/tcp open http Apache httpd
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Device type: general purpose
Running (JUST GUESSING): Microsoft Windows 2012 (87%)
OS CPE: cpe:/o:microsoft:windows_server_2012:r2
Aggressive OS guesses: Microsoft Windows Server 2012 or Windows Server 2012 R2 (87%), Microsoft Windows Server 2012 R2 (87%), Microsoft Windows Server 2012 (86%)
No exact OS matches for host (test conditions non-ideal).

Nmap scan report for puertomalaga.gob.es (88.2.122.5)
Host is up.
rDNS record for 88.2.122.5: 5.red-88-2-122.staticip.rima-tde.net
All 1000 scanned ports on puertomalaga.gob.es (88.2.122.5) are filtered
Too many fingerprints match this host to give specific OS details