Nmap scan report for alxcdn.mbheroes.com (27.126.192.213) Host is up (0.13s latency). Other addresses for alxcdn.mbheroes.com (not scanned): 185.81.209.130 Not shown: 997 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 80/tcp open http AmazonS3 |_http-title: Site doesn't have a title (application/xml). | fingerprint-strings: | FourOhFourRequest, GetRequest, HTTPOptions: | HTTP/1.0 403 Forbidden | Content-Length: 155 | X-Block-Reason: noncdn |_ 403 Forbidden

403 Forbidden

|_http-server-header: AmazonS3 443/tcp open ssl/https AmazonS3 | fingerprint-strings: | FourOhFourRequest, GetRequest, HTTPOptions: | HTTP/1.0 403 Forbidden | Content-Length: 155 | X-Block-Reason: noncdn |_ 403 Forbidden

403 Forbidden

|_http-title: Site doesn't have a title (application/xml). |_ssl-date: TLS randomness does not represent time |_http-server-header: AmazonS3 | tls-alpn: |_ http/1.1 | ssl-cert: Subject: commonName=alxcdn.mbheroes.com | Subject Alternative Name: DNS:alxcdn.mbheroes.com | Not valid before: 2025-08-19T00:00:00 |_Not valid after: 2025-11-16T23:59:59 1935/tcp closed rtmp 2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service : ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port80-TCP:V=7.92%I=7%D=9/6%Time=68BC97A8%P=x86_64-redhat-linux-gnu%r(G SF:etRequest,E2,"HTTP/1\.0\x20403\x20Forbidden\r\nContent-Length:\x20155\r SF:\nX-Block-Reason:\x20noncdn\r\n\r\n403\x20Forbi SF:dden

403\x20Forbidden

")%r(HT SF:TPOptions,E2,"HTTP/1\.0\x20403\x20Forbidden\r\nContent-Length:\x20155\r SF:\nX-Block-Reason:\x20noncdn\r\n\r\n403\x20Forbi SF:dden

403\x20Forbidden

")%r(Fo SF:urOhFourRequest,E2,"HTTP/1\.0\x20403\x20Forbidden\r\nContent-Length:\x2 SF:0155\r\nX-Block-Reason:\x20noncdn\r\n\r\n403\x2 SF:0Forbidden

403\x20Forbidden

" SF:); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port443-TCP:V=7.92%T=SSL%I=7%D=9/6%Time=68BC97AE%P=x86_64-redhat-linux- SF:gnu%r(GetRequest,E2,"HTTP/1\.0\x20403\x20Forbidden\r\nContent-Length:\x SF:20155\r\nX-Block-Reason:\x20noncdn\r\n\r\n403\x SF:20Forbidden

403\x20Forbidden

SF:")%r(HTTPOptions,E2,"HTTP/1\.0\x20403\x20Forbidden\r\nContent-Length:\x SF:20155\r\nX-Block-Reason:\x20noncdn\r\n\r\n403\x SF:20Forbidden

403\x20Forbidden

SF:")%r(FourOhFourRequest,E2,"HTTP/1\.0\x20403\x20Forbidden\r\nContent-Len SF:gth:\x20155\r\nX-Block-Reason:\x20noncdn\r\n\r\n403\x20Forbidden

403\x20Forbidden

< SF:/HTML>"); Aggressive OS guesses: Linux 3.1 (93%), Linux 3.2 (93%), Rebranded surveillance DVR (Hikvision, Q-SEE, EYEsurv, A1Webcams, Foscam) (92%), AXIS 210A or 211 Network Camera (Linux 2.6.17) (92%), Linux 2.6.32 - 3.10 (91%), Dahua or Amcrest network video recorder (Linux) (91%), Western Digital My Cloud DL4100 NAS (Linux 3.10) (91%), Crestron XPanel control system (91%), Thecus 4200 or N5500 NAS device (Linux 2.6.33) (91%), Google Chromecast (90%) No exact OS matches for host (test conditions non-ideal). Network Distance: 13 hops TRACEROUTE (using port 1935/tcp) HOP RTT ADDRESS 1 0.35 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177) 2 1.09 ms gw.mcom-colocationamerica.com (208.64.231.81) 3 3.27 ms r1b4.n1p1400.lax.multacom.net (64.69.46.9) 4 ... 5 0.81 ms be3271.ccr41.lax04.atlas.cogentco.com (154.54.42.102) 6 0.71 ms lax-b22-link.ip.twelve99.net (80.239.160.64) 7 60.83 ms rest-bb1-link.ip.twelve99.net (62.115.137.36) 8 64.69 ms nyk-bb5-link.ip.twelve99.net (62.115.139.34) 9 146.40 ms rest-bb1-link.ip.twelve99.net (62.115.139.35) 10 139.24 ms ldn-b3-link.ip.twelve99.net (62.115.120.75) 11 132.56 ms nexusguard-ic-388727.ip.twelve99-cust.net (213.155.141.59) 12 67.28 ms nyk-bb5-link.ip.twelve99.net (62.115.139.34) 13 132.15 ms 27.126.192.213 OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 58.38 seconds