Nmap scan report for ubergrcprod.service-now.com (149.96.251.71) Host is up (0.046s latency). rDNS record for 149.96.251.71: vip-149-96-251-71.cust.service-now.com Not shown: 980 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 25/tcp open tcpwrapped |_smtp-commands: Couldn't establish connection on port 25 80/tcp open http snow_adc | fingerprint-strings: | FourOhFourRequest: | HTTP/1.1 403 Forbidden | Server: snow_adc | Date: Fri, 01 Aug 2025 23:14:54 GMT | Content-Type: text/html | Content-Length: 149 | Connection: close | | 403 Forbidden | |

403 Forbidden

|
snow_adc
| | | GetRequest, HTTPOptions: | HTTP/1.1 403 Forbidden | Server: snow_adc | Date: Fri, 01 Aug 2025 23:14:53 GMT | Content-Type: text/html | Content-Length: 149 | Connection: close | | 403 Forbidden | |

403 Forbidden

|
snow_adc
| | | RPCCheck: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Fri, 01 Aug 2025 23:14:59 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | | 400 Bad Request | |

400 Bad Request

|
snow_adc
| | | RTSPRequest, X11Probe: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Fri, 01 Aug 2025 23:14:54 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | | 400 Bad Request | |

400 Bad Request

|
snow_adc
| |_ |_http-server-header: snow_adc |_http-title: Did not follow redirect to https://ubergrcprod.service-now.com/ 443/tcp open ssl/https snow_adc |_http-server-header: snow_adc |_ssl-date: TLS randomness does not represent time | fingerprint-strings: | FourOhFourRequest, GetRequest, HTTPOptions: | HTTP/1.1 301 Moved Permanently | Server: snow_adc | Date: Fri, 01 Aug 2025 23:15:00 GMT | Content-Type: text/html | Content-Length: 165 | Connection: close | Location: https://www.servicenow.com | | 301 Moved Permanently | |

301 Moved Permanently

|
snow_adc
| | | RTSPRequest: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Fri, 01 Aug 2025 23:15:05 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | | 400 Bad Request | |

400 Bad Request

|
snow_adc
| | | tor-versions: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Fri, 01 Aug 2025 23:15:00 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | | 400 Bad Request | |

400 Bad Request

|
snow_adc
| |_ | ssl-cert: Subject: commonName=*.service-now.com/organizationName=ServiceNow, Inc./stateOrProvinceName=California/countryName=US | Subject Alternative Name: DNS:*.service-now.com, DNS:*.static.service-now.com, DNS:service-now.com, DNS:static.service-now.com | Not valid before: 2025-02-12T00:00:00 |_Not valid after: 2025-10-12T23:59:59 | tls-alpn: | http/1.1 | http/1.0 |_ http/0.9 |_http-trane-info: Problem with XML parsing of /evox/about | http-title: eGRC |_Requested resource was /auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fuber.okta.com%2Fapp%2Fservicenow_ud%2Fexk1we4kzlix8yDqu1d8%2Fsso%2Fsaml%3FSAMLRequest%3DlVLBjtowFPyVyPfESQhpahGkFFQVabuNFtpDL5WxH6yFY2f9bGD79Q2BqruHrtqr37yZeTOeIe903rMm%252BEfzAE8B0EfnThtk10lNgjPMclTIDO8AmRds3Xy%252BY3mSst5Zb4XVJGoQwXllzcIaDB24NbijEvD14a4mj973yCgNW3B7J4YtmeB1Hht7SoTtqOHHnu8hkZZEy8GFMvxC93o5sQfPRzjve3qjGBh%252BBEnhfMhOUBx%252BanWunpdPIZMVRbT0cgiJPlonYDyzJjuuEUi0WtZkfb8oy3JXiKqQPHuflvk7zkVZiO1OVNO0yrbFAMSWI6oj%252FFlFDLAy6LnxNcnTfBqnVZxmm3zCsinLJ0kxKb%252BTqL0F9EEZqcz%252B7TS3VxCyT5tNG7df1puR4KgkuPsB%252Ff9BfgOHY4gDPZnPxkrZ6N29bPltW%252Fx3tWT%252BD%252Foz%252BlLlptmzi%252F%252FVsrVaieeo0dqeFg64H27yLsBYT8f9341kSTa%252BKBnvRiiDjivdSOkAkdD5Tff1V57%252FAg%253D%253D%26RelayState%3Dhttps%253A%252F%252Fubergrcprod.service-now.com%252Fnavpage.do | http-robots.txt: 1 disallowed entry |_/ 4000/tcp open remoteanything? 4001/tcp open newoak? 4002/tcp open mlchat-proxy? 4003/tcp open pxc-splr-ft? 4004/tcp closed pxc-roid 4005/tcp closed pxc-pin 4006/tcp closed pxc-spvr 4045/tcp closed lockd 4111/tcp closed xgrid 4125/tcp closed rww 4126/tcp closed ddrepl 4129/tcp closed nuauth 4224/tcp closed xtell 4242/tcp closed vrml-multi-use 4279/tcp closed vrml-multi-use 4321/tcp closed rwhois 4343/tcp closed unicall 2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service : ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port80-TCP:V=7.92%I=7%D=8/1%Time=688D4A6D%P=x86_64-redhat-linux-gnu%r(G SF:etRequest,127,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20snow_adc\r\n SF:Date:\x20Fri,\x2001\x20Aug\x202025\x2023:14:53\x20GMT\r\nContent-Type:\ SF:x20text/html\r\nContent-Length:\x20149\r\nConnection:\x20close\r\n\r\n< SF:html>\r\n403\x20Forbidden\r\n\r\n

403\x20Forbidden

\r\n
snow_adc
SF:\r\n\r\n\r\n")%r(HTTPOptions,127,"HTTP/1\.1\x20403\x20For SF:bidden\r\nServer:\x20snow_adc\r\nDate:\x20Fri,\x2001\x20Aug\x202025\x20 SF:23:14:53\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20149 SF:\r\nConnection:\x20close\r\n\r\n\r\n403\x20Forbidden SF:\r\n\r\n

403\x20Forbidden

SF:\r\n
snow_adc
\r\n\r\n\r\n")%r(RTSPReq SF:uest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\n SF:Date:\x20Fri,\x2001\x20Aug\x202025\x2023:14:54\x20GMT\r\nContent-Type:\ SF:x20text/html\r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n< SF:html>\r\n400\x20Bad\x20Request\r\n\r\ SF:n

400\x20Bad\x20Request

\r\n
snow_ad SF:c
\r\n\r\n\r\n")%r(X11Probe,12D,"HTTP/1\.1\x20400 SF:\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Fri,\x2001\x20Aug SF:\x202025\x2023:14:54\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Le SF:ngth:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400\ SF:x20Bad\x20Request\r\n\r\n

400\x20Bad\x2 SF:0Request

\r\n
snow_adc
\r\n\r\n< SF:/html>\r\n")%r(FourOhFourRequest,127,"HTTP/1\.1\x20403\x20Forbidden\r\n SF:Server:\x20snow_adc\r\nDate:\x20Fri,\x2001\x20Aug\x202025\x2023:14:54\x SF:20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20149\r\nConnec SF:tion:\x20close\r\n\r\n\r\n403\x20Forbidden\r\n\r\n

403\x20Forbidden

\r\n
snow_adc\r\n\r\n\r\n")%r(RPCCheck,12D,"HTT SF:P/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Fri, SF:\x2001\x20Aug\x202025\x2023:14:59\x20GMT\r\nContent-Type:\x20text/html\ SF:r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400\x20Bad\x20Request\r\n\r\n

SF:400\x20Bad\x20Request

\r\n
snow_adc
\r\ SF:n\r\n\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port443-TCP:V=7.92%T=SSL%I=7%D=8/1%Time=688D4A73%P=x86_64-redhat-linux- SF:gnu%r(GetRequest,165,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServe SF:r:\x20snow_adc\r\nDate:\x20Fri,\x2001\x20Aug\x202025\x2023:15:00\x20GMT SF:\r\nContent-Type:\x20text/html\r\nContent-Length:\x20165\r\nConnection: SF:\x20close\r\nLocation:\x20https://www\.servicenow\.com\r\n\r\n\r\ SF:n301\x20Moved\x20Permanently\r\n\r\n< SF:center>

301\x20Moved\x20Permanently

\r\n
sno SF:w_adc
\r\n\r\n\r\n")%r(HTTPOptions,165,"HTTP/1\.1 SF:\x20301\x20Moved\x20Permanently\r\nServer:\x20snow_adc\r\nDate:\x20Fri, SF:\x2001\x20Aug\x202025\x2023:15:00\x20GMT\r\nContent-Type:\x20text/html\ SF:r\nContent-Length:\x20165\r\nConnection:\x20close\r\nLocation:\x20https SF:://www\.servicenow\.com\r\n\r\n\r\n301\x20Moved\x20P SF:ermanently\r\n\r\n

301\x20Moved\x20Perm SF:anently

\r\n
snow_adc
\r\n\r\n\r\n")%r(FourOhFourRequest,165,"HTTP/1\.1\x20301\x20Moved\x20Perma SF:nently\r\nServer:\x20snow_adc\r\nDate:\x20Fri,\x2001\x20Aug\x202025\x20 SF:23:15:00\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20165 SF:\r\nConnection:\x20close\r\nLocation:\x20https://www\.servicenow\.com\r SF:\n\r\n\r\n301\x20Moved\x20Permanently SF:\r\n\r\n

301\x20Moved\x20Permanently

\r\n SF:
snow_adc
\r\n\r\n\r\n")%r(tor-version SF:s,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDat SF:e:\x20Fri,\x2001\x20Aug\x202025\x2023:15:00\x20GMT\r\nContent-Type:\x20 SF:text/html\r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400\x20Bad\x20Request\r\n\r\n

400\x20Bad\x20Request

\r\n
snow_adc\r\n\r\n\r\n")%r(RTSPRequest,12D,"HTTP/1\.1\x20400 SF:\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Fri,\x2001\x20Aug SF:\x202025\x2023:15:05\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Le SF:ngth:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400\ SF:x20Bad\x20Request\r\n\r\n

400\x20Bad\x2 SF:0Request

\r\n
snow_adc
\r\n\r\n< SF:/html>\r\n"); Aggressive OS guesses: HP P2000 G3 NAS device (91%), Linux 3.16 - 4.6 (89%), Linux 5.1 (89%), Linux 4.4 (88%), Linux 3.10 - 4.11 (88%), OpenWrt Kamikaze 7.09 (Linux 2.6.22) (88%), Linux 3.1 (88%), Linux 3.2 (88%), AXIS 210A or 211 Network Camera (Linux 2.6.17) (87%), Linux 3.13 (87%) No exact OS matches for host (test conditions non-ideal). Network Distance: 15 hops TRACEROUTE (using port 4129/tcp) HOP RTT ADDRESS 1 0.22 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177) 2 0.54 ms gw.mcom-colocationamerica.com (208.64.231.81) 3 0.69 ms r1b4.n1p1400.lax.multacom.net (64.69.46.9) 4 ... 5 30.09 ms be3097.ccr81.sjc13.atlas.cogentco.com (154.54.40.157) 6 13.13 ms be3096.ccr21.sfo01.atlas.cogentco.com (154.54.40.42) 7 30.03 ms be2075.ccr21.sea02.atlas.cogentco.com (154.54.0.234) 8 35.54 ms 38.142.50.226 9 ... 10 51.47 ms 142.124.126.81 11 51.05 ms 64.230.76.35 12 45.38 ms 64.230.76.137 13 44.25 ms 207.35.9.170 14 ... 15 45.96 ms vip-149-96-251-71.cust.service-now.com (149.96.251.71) OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 47.60 seconds