Nmap scan report for rinchem.service-now.com (149.96.27.166) Host is up (0.062s latency). rDNS record for 149.96.27.166: vip-149-96-27-166.cust.service-now.com Not shown: 980 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 25/tcp open tcpwrapped |_smtp-commands: Couldn't establish connection on port 25 80/tcp open http snow_adc |_http-server-header: snow_adc |_http-title: Did not follow redirect to https://rinchem.service-now.com/ | fingerprint-strings: | FourOhFourRequest, GetRequest, HTTPOptions: | HTTP/1.1 403 Forbidden | Server: snow_adc | Date: Mon, 07 Jul 2025 04:46:53 GMT | Content-Type: text/html | Content-Length: 149 | Connection: close | | 403 Forbidden | |

403 Forbidden

|
snow_adc
| | | RPCCheck: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Mon, 07 Jul 2025 04:46:59 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | | 400 Bad Request | |

400 Bad Request

|
snow_adc
| | | RTSPRequest, X11Probe: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Mon, 07 Jul 2025 04:46:53 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | | 400 Bad Request | |

400 Bad Request

|
snow_adc
| |_ 443/tcp open ssl/https snow_adc | http-title: ServiceNow |_Requested resource was /auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fsso-ed99118c.sso.duosecurity.com%2Fsaml2%2Fsp%2FDII6LY7J9RTRK8Z13TQ5%2Fsso%3FSAMLRequest%3DlVLLbtswEPwVgXc9KCu1RFgGFBtB1LqpaqsFkhtDrmMCEqlyKaf5%252B8q0i6SHpijAC7mzM7OzXCDvu3Rg1egOegs%252FRkAX%252FOw7jexcKcloNTMcFTLNe0DmBNtVnzcsjRI2WOOMMB0JKkSwThm9MhrHHuwO7FEJ%252BLbdlOTg3IAsjq3S4gB9hOdaqM1zJEwfa34c%252BBNE0pBgPTlQmp%252BoXhsRTQiyKCjNRTRdIjkaBDFa5V48gzcb4xCv6%252FrD5n7%252Bsdi220%252F5A521X69O7SS4MVaAn7Mke94hkKBel2R3t5pJLuheJuljAXOZz2RGYbrSSTHneUYnIDYcUR3htRVxhFqj49qVJE3SqzCZT6dNMpbNWZpEsyJ7IEFzSehaaan00%252FtxPp5ByG7btgmbL7vWExyVBHs3of8vye9g0ac4UZPlwkfEvG%252F7dsXvW%252BK%252F90qW%252F9BexG8VLnoDO%252Fmu143plHgJqq4zzysL3E2zODuCX0vP3d9N0Ij6FyXDvYcy6LnqKiktIJJ4edH98w8vfwE%253D%26RelayState%3Db18514d297aa2a90d8c2bb0e6253af7e |_ssl-date: TLS randomness does not represent time | ssl-cert: Subject: commonName=*.service-now.com/organizationName=ServiceNow, Inc./stateOrProvinceName=California/countryName=US | Subject Alternative Name: DNS:*.service-now.com, DNS:*.static.service-now.com, DNS:service-now.com, DNS:static.service-now.com | Not valid before: 2025-02-12T00:00:00 |_Not valid after: 2025-10-12T23:59:59 |_http-server-header: snow_adc | fingerprint-strings: | FourOhFourRequest: | HTTP/1.1 301 Moved Permanently | Server: snow_adc | Date: Mon, 07 Jul 2025 04:47:00 GMT | Content-Type: text/html | Content-Length: 165 | Connection: close | Location: https://www.servicenow.com | | 301 Moved Permanently | |

301 Moved Permanently

|
snow_adc
| | | GetRequest, HTTPOptions: | HTTP/1.1 301 Moved Permanently | Server: snow_adc | Date: Mon, 07 Jul 2025 04:46:59 GMT | Content-Type: text/html | Content-Length: 165 | Connection: close | Location: https://www.servicenow.com | | 301 Moved Permanently | |

301 Moved Permanently

|
snow_adc
| | | RTSPRequest: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Mon, 07 Jul 2025 04:47:05 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | | 400 Bad Request | |

400 Bad Request

|
snow_adc
| | | tor-versions: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Mon, 07 Jul 2025 04:47:00 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | | 400 Bad Request | |

400 Bad Request

|
snow_adc
| |_ |_http-trane-info: Problem with XML parsing of /evox/about | tls-alpn: | http/1.1 | http/1.0 |_ http/0.9 | http-robots.txt: 1 disallowed entry |_/ 4000/tcp open remoteanything? 4001/tcp open newoak? 4002/tcp open mlchat-proxy? 4003/tcp open pxc-splr-ft? 4004/tcp open pxc-roid? 4005/tcp open pxc-pin? 4006/tcp open pxc-spvr? 4045/tcp closed lockd 4111/tcp closed xgrid 4125/tcp closed rww 4126/tcp closed ddrepl 4129/tcp closed nuauth 4224/tcp closed xtell 4242/tcp closed vrml-multi-use 4279/tcp closed vrml-multi-use 4321/tcp closed rwhois 4343/tcp closed unicall 2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service : ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port80-TCP:V=7.92%I=7%D=7/6%Time=686B513D%P=x86_64-redhat-linux-gnu%r(G SF:etRequest,127,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20snow_adc\r\n SF:Date:\x20Mon,\x2007\x20Jul\x202025\x2004:46:53\x20GMT\r\nContent-Type:\ SF:x20text/html\r\nContent-Length:\x20149\r\nConnection:\x20close\r\n\r\n< SF:html>\r\n403\x20Forbidden\r\n\r\n

403\x20Forbidden

\r\n
snow_adc
SF:\r\n\r\n\r\n")%r(HTTPOptions,127,"HTTP/1\.1\x20403\x20For SF:bidden\r\nServer:\x20snow_adc\r\nDate:\x20Mon,\x2007\x20Jul\x202025\x20 SF:04:46:53\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20149 SF:\r\nConnection:\x20close\r\n\r\n\r\n403\x20Forbidden SF:\r\n\r\n

403\x20Forbidden

SF:\r\n
snow_adc
\r\n\r\n\r\n")%r(RTSPReq SF:uest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\n SF:Date:\x20Mon,\x2007\x20Jul\x202025\x2004:46:53\x20GMT\r\nContent-Type:\ SF:x20text/html\r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n< SF:html>\r\n400\x20Bad\x20Request\r\n\r\ SF:n

400\x20Bad\x20Request

\r\n
snow_ad SF:c
\r\n\r\n\r\n")%r(X11Probe,12D,"HTTP/1\.1\x20400 SF:\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Mon,\x2007\x20Jul SF:\x202025\x2004:46:53\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Le SF:ngth:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400\ SF:x20Bad\x20Request\r\n\r\n

400\x20Bad\x2 SF:0Request

\r\n
snow_adc
\r\n\r\n< SF:/html>\r\n")%r(FourOhFourRequest,127,"HTTP/1\.1\x20403\x20Forbidden\r\n SF:Server:\x20snow_adc\r\nDate:\x20Mon,\x2007\x20Jul\x202025\x2004:46:53\x SF:20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20149\r\nConnec SF:tion:\x20close\r\n\r\n\r\n403\x20Forbidden\r\n\r\n

403\x20Forbidden

\r\n
snow_adc\r\n\r\n\r\n")%r(RPCCheck,12D,"HTT SF:P/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Mon, SF:\x2007\x20Jul\x202025\x2004:46:59\x20GMT\r\nContent-Type:\x20text/html\ SF:r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400\x20Bad\x20Request\r\n\r\n

SF:400\x20Bad\x20Request

\r\n
snow_adc
\r\ SF:n\r\n\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port443-TCP:V=7.92%T=SSL%I=7%D=7/6%Time=686B5143%P=x86_64-redhat-linux- SF:gnu%r(GetRequest,165,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServe SF:r:\x20snow_adc\r\nDate:\x20Mon,\x2007\x20Jul\x202025\x2004:46:59\x20GMT SF:\r\nContent-Type:\x20text/html\r\nContent-Length:\x20165\r\nConnection: SF:\x20close\r\nLocation:\x20https://www\.servicenow\.com\r\n\r\n\r\ SF:n301\x20Moved\x20Permanently\r\n\r\n< SF:center>

301\x20Moved\x20Permanently

\r\n
sno SF:w_adc
\r\n\r\n\r\n")%r(HTTPOptions,165,"HTTP/1\.1 SF:\x20301\x20Moved\x20Permanently\r\nServer:\x20snow_adc\r\nDate:\x20Mon, SF:\x2007\x20Jul\x202025\x2004:46:59\x20GMT\r\nContent-Type:\x20text/html\ SF:r\nContent-Length:\x20165\r\nConnection:\x20close\r\nLocation:\x20https SF:://www\.servicenow\.com\r\n\r\n\r\n301\x20Moved\x20P SF:ermanently\r\n\r\n

301\x20Moved\x20Perm SF:anently

\r\n
snow_adc
\r\n\r\n\r\n")%r(FourOhFourRequest,165,"HTTP/1\.1\x20301\x20Moved\x20Perma SF:nently\r\nServer:\x20snow_adc\r\nDate:\x20Mon,\x2007\x20Jul\x202025\x20 SF:04:47:00\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20165 SF:\r\nConnection:\x20close\r\nLocation:\x20https://www\.servicenow\.com\r SF:\n\r\n\r\n301\x20Moved\x20Permanently SF:\r\n\r\n

301\x20Moved\x20Permanently

\r\n SF:
snow_adc
\r\n\r\n\r\n")%r(tor-version SF:s,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDat SF:e:\x20Mon,\x2007\x20Jul\x202025\x2004:47:00\x20GMT\r\nContent-Type:\x20 SF:text/html\r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400\x20Bad\x20Request\r\n\r\n

400\x20Bad\x20Request

\r\n
snow_adc\r\n\r\n\r\n")%r(RTSPRequest,12D,"HTTP/1\.1\x20400 SF:\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Mon,\x2007\x20Jul SF:\x202025\x2004:47:05\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Le SF:ngth:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400\ SF:x20Bad\x20Request\r\n\r\n

400\x20Bad\x2 SF:0Request

\r\n
snow_adc
\r\n\r\n< SF:/html>\r\n"); Aggressive OS guesses: HP P2000 G3 NAS device (91%), Linux 3.16 - 4.6 (90%), Linux 4.4 (90%), Linux 5.1 (89%), Linux 3.10 - 4.11 (88%), OpenWrt Kamikaze 7.09 (Linux 2.6.22) (88%), Linux 3.1 (88%), Linux 3.2 (88%), AXIS 210A or 211 Network Camera (Linux 2.6.17) (87%), Linux 3.13 (87%) No exact OS matches for host (test conditions non-ideal). Network Distance: 17 hops TRACEROUTE (using port 80/tcp) HOP RTT ADDRESS 1 0.19 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177) 2 0.52 ms gw.mcom-colocationamerica.com (208.64.231.81) 3 3.28 ms r1b4.n1p1400.lax.multacom.net (64.69.46.9) 4 ... 5 10.85 ms be2931.ccr31.phx01.atlas.cogentco.com (154.54.44.85) 6 19.62 ms be5471.ccr21.elp02.atlas.cogentco.com (154.54.166.57) 7 30.88 ms be3821.ccr31.dfw01.atlas.cogentco.com (154.54.165.25) 8 37.81 ms port-channel8121.ccr91.jan02.atlas.cogentco.com (154.54.40.250) 9 45.39 ms be3009.ccr41.atl01.atlas.cogentco.com (154.54.29.133) 10 61.56 ms port-channel3482.ccr91.dca04.atlas.cogentco.com (154.54.169.177) 11 63.60 ms be8413.ccr41.iad02.atlas.cogentco.com (154.54.5.218) 12 63.49 ms te0-0-0-0.agr11.iad02.atlas.cogentco.com (154.54.44.198) 13 63.87 ms te0-0-2-3.nr11.b050224-0.iad02.atlas.cogentco.com (154.24.45.178) 14 58.99 ms 38.32.106.178 15 ... 16 17 64.24 ms vip-149-96-27-166.cust.service-now.com (149.96.27.166) OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 45.23 seconds