Ports
Durée
Date
IP
Nmap scan report for jwithelp.service-now.com (149.96.246.114) Host is up (0.046s latency). rDNS record for 149.96.246.114: vip-149-96-246-114.cust.service-now.com Not shown: 980 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 25/tcp open tcpwrapped |_smtp-commands: Couldn't establish connection on port 25 80/tcp open http snow_adc |_http-server-header: snow_adc | fingerprint-strings: | FourOhFourRequest, GetRequest, HTTPOptions: | HTTP/1.1 403 Forbidden | Server: snow_adc | Date: Sun, 24 Nov 2024 06:28:55 GMT | Content-Type: text/html | Content-Length: 149 | Connection: close | <html> | <head><title>403 Forbidden</title></head> | <body> | <center><h1>403 Forbidden</h1></center> | <hr><center>snow_adc</center> | </body> | </html> | RPCCheck: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Sun, 24 Nov 2024 06:29:00 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | <html> | <head><title>400 Bad Request</title></head> | <body> | <center><h1>400 Bad Request</h1></center> | <hr><center>snow_adc</center> | </body> | </html> | RTSPRequest, X11Probe: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Sun, 24 Nov 2024 06:28:55 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | <html> | <head><title>400 Bad Request</title></head> | <body> | <center><h1>400 Bad Request</h1></center> | <hr><center>snow_adc</center> | </body> |_ </html> |_http-title: Did not follow redirect to https://jwithelp.service-now.com/ 443/tcp open ssl/https snow_adc | ssl-cert: Subject: commonName=*.service-now.com/organizationName=ServiceNow, Inc./stateOrProvinceName=California/countryName=US | Subject Alternative Name: DNS:*.service-now.com, DNS:service-now.com, DNS:*.static.service-now.com | Not valid before: 2024-08-14T04:56:46 |_Not valid after: 2025-05-13T04:56:45 |_ssl-date: TLS randomness does not represent time |_http-server-header: snow_adc | fingerprint-strings: | FourOhFourRequest, GetRequest, HTTPOptions: | HTTP/1.1 301 Moved Permanently | Server: snow_adc | Date: Sun, 24 Nov 2024 06:29:01 GMT | Content-Type: text/html | Content-Length: 165 | Connection: close | Location: https://www.servicenow.com | <html> | <head><title>301 Moved Permanently</title></head> | <body> | <center><h1>301 Moved Permanently</h1></center> | <hr><center>snow_adc</center> | </body> | </html> | RTSPRequest: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Sun, 24 Nov 2024 06:29:07 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | <html> | <head><title>400 Bad Request</title></head> | <body> | <center><h1>400 Bad Request</h1></center> | <hr><center>snow_adc</center> | </body> | </html> | tor-versions: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Sun, 24 Nov 2024 06:29:02 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | <html> | <head><title>400 Bad Request</title></head> | <body> | <center><h1>400 Bad Request</h1></center> | <hr><center>snow_adc</center> | </body> |_ </html> |_http-trane-info: Problem with XML parsing of /evox/about | http-robots.txt: 1 disallowed entry |_/ | http-title: ServiceNow (JWITHelp) |_Requested resource was /auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fjeldwen.okta.com%2Fapp%2Fservicenow_ud%2Fexknw2mo1dn5Z3exf0x7%2Fsso%2Fsaml%3FSAMLRequest%3DlVLBjtMwFPyVyPfEibNtFaupFFohKi1LtC0c9oK88cvWrGMHP6cpf0%252FqFlEOLOLqN29m3oyXKDrNel4N%252FmAe4fsA6KNTpw3yy6QkgzPcClTIjegAuW%252F4rvp4z1mS8t5ZbxurSVQhgvPKmrU1OHTgduCOqoHPj%252FclOXjfI6f026j8AXSf4GUYGzsmje2oEcdevEAiLYk2kwVlxJnrZhO0HMEk9tWLsCH6nl5ZJpKvg6RwejUj62wmzewph1ObnhYU0dLzISR6b10D4cyStEIjkGi7KcnuYZ0Xs1bkswae8yJbsMVcpsCyHObzWV7kop2AWAtEdYTfq4gDbA16YXxJWMru4iyL2d0%252BnXNWcJYmeVY8kai%252BBvROGanMy9tpPl9AyD%252Fs93Vcf9rtA8FRSXAPE%252Fo%252Fg%252FwCDkOIEzdZLUOfPBh3txW%252F7Un86pWs%252FiW%252BpLcSV8Gen51vN7XVqvkRVVrbce1A%252BOka7wYIxXTC%252F91FlmThRcm4DVAOnVC6ktIBIqGrq%252B6fn3j1Ew%253D%253D%26RelayState%3Dhttps%253A%252F%252Fjwithelp.service-now.com%252Fnavpage.do | tls-alpn: | http/1.1 | http/1.0 |_ http/0.9 4000/tcp open remoteanything? 4001/tcp open newoak? 4002/tcp open mlchat-proxy? 4003/tcp open pxc-splr-ft? 4004/tcp closed pxc-roid 4005/tcp closed pxc-pin 4006/tcp closed pxc-spvr 4045/tcp closed lockd 4111/tcp closed xgrid 4125/tcp closed rww 4126/tcp closed ddrepl 4129/tcp closed nuauth 4224/tcp closed xtell 4242/tcp closed vrml-multi-use 4279/tcp closed vrml-multi-use 4321/tcp closed rwhois 4343/tcp closed unicall 2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service : ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port80-TCP:V=7.92%I=7%D=11/23%Time=6742C7A7%P=x86_64-redhat-linux-gnu%r SF:(GetRequest,127,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20snow_adc\r SF:\nDate:\x20Sun,\x2024\x20Nov\x202024\x2006:28:55\x20GMT\r\nContent-Type SF::\x20text/html\r\nContent-Length:\x20149\r\nConnection:\x20close\r\n\r\ SF:n<html>\r\n<head><title>403\x20Forbidden</title></head>\r\n<body>\r\n<c SF:enter><h1>403\x20Forbidden</h1></center>\r\n<hr><center>snow_adc</cente SF:r>\r\n</body>\r\n</html>\r\n")%r(HTTPOptions,127,"HTTP/1\.1\x20403\x20F SF:orbidden\r\nServer:\x20snow_adc\r\nDate:\x20Sun,\x2024\x20Nov\x202024\x SF:2006:28:55\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x201 SF:49\r\nConnection:\x20close\r\n\r\n<html>\r\n<head><title>403\x20Forbidd SF:en</title></head>\r\n<body>\r\n<center><h1>403\x20Forbidden</h1></cente SF:r>\r\n<hr><center>snow_adc</center>\r\n</body>\r\n</html>\r\n")%r(RTSPR SF:equest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r SF:\nDate:\x20Sun,\x2024\x20Nov\x202024\x2006:28:55\x20GMT\r\nContent-Type SF::\x20text/html\r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\ SF:n<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\ SF:r\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>snow_ SF:adc</center>\r\n</body>\r\n</html>\r\n")%r(X11Probe,12D,"HTTP/1\.1\x204 SF:00\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Sun,\x2024\x20N SF:ov\x202024\x2006:28:55\x20GMT\r\nContent-Type:\x20text/html\r\nContent- SF:Length:\x20153\r\nConnection:\x20close\r\n\r\n<html>\r\n<head><title>40 SF:0\x20Bad\x20Request</title></head>\r\n<body>\r\n<center><h1>400\x20Bad\ SF:x20Request</h1></center>\r\n<hr><center>snow_adc</center>\r\n</body>\r\ SF:n</html>\r\n")%r(FourOhFourRequest,127,"HTTP/1\.1\x20403\x20Forbidden\r SF:\nServer:\x20snow_adc\r\nDate:\x20Sun,\x2024\x20Nov\x202024\x2006:28:55 SF:\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20149\r\nConn SF:ection:\x20close\r\n\r\n<html>\r\n<head><title>403\x20Forbidden</title> SF:</head>\r\n<body>\r\n<center><h1>403\x20Forbidden</h1></center>\r\n<hr> SF:<center>snow_adc</center>\r\n</body>\r\n</html>\r\n")%r(RPCCheck,12D,"H SF:TTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Su SF:n,\x2024\x20Nov\x202024\x2006:29:00\x20GMT\r\nContent-Type:\x20text/htm SF:l\r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n<html>\r\n<h SF:ead><title>400\x20Bad\x20Request</title></head>\r\n<body>\r\n<center><h SF:1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>snow_adc</center>\ SF:r\n</body>\r\n</html>\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port443-TCP:V=7.92%T=SSL%I=7%D=11/23%Time=6742C7AD%P=x86_64-redhat-linu SF:x-gnu%r(GetRequest,165,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nSer SF:ver:\x20snow_adc\r\nDate:\x20Sun,\x2024\x20Nov\x202024\x2006:29:01\x20G SF:MT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20165\r\nConnectio SF:n:\x20close\r\nLocation:\x20https://www\.servicenow\.com\r\n\r\n<html>\ SF:r\n<head><title>301\x20Moved\x20Permanently</title></head>\r\n<body>\r\ SF:n<center><h1>301\x20Moved\x20Permanently</h1></center>\r\n<hr><center>s SF:now_adc</center>\r\n</body>\r\n</html>\r\n")%r(HTTPOptions,165,"HTTP/1\ SF:.1\x20301\x20Moved\x20Permanently\r\nServer:\x20snow_adc\r\nDate:\x20Su SF:n,\x2024\x20Nov\x202024\x2006:29:01\x20GMT\r\nContent-Type:\x20text/htm SF:l\r\nContent-Length:\x20165\r\nConnection:\x20close\r\nLocation:\x20htt SF:ps://www\.servicenow\.com\r\n\r\n<html>\r\n<head><title>301\x20Moved\x2 SF:0Permanently</title></head>\r\n<body>\r\n<center><h1>301\x20Moved\x20Pe SF:rmanently</h1></center>\r\n<hr><center>snow_adc</center>\r\n</body>\r\n SF:</html>\r\n")%r(FourOhFourRequest,165,"HTTP/1\.1\x20301\x20Moved\x20Per SF:manently\r\nServer:\x20snow_adc\r\nDate:\x20Sun,\x2024\x20Nov\x202024\x SF:2006:29:01\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x201 SF:65\r\nConnection:\x20close\r\nLocation:\x20https://www\.servicenow\.com SF:\r\n\r\n<html>\r\n<head><title>301\x20Moved\x20Permanently</title></hea SF:d>\r\n<body>\r\n<center><h1>301\x20Moved\x20Permanently</h1></center>\r SF:\n<hr><center>snow_adc</center>\r\n</body>\r\n</html>\r\n")%r(tor-versi SF:ons,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nD SF:ate:\x20Sun,\x2024\x20Nov\x202024\x2006:29:02\x20GMT\r\nContent-Type:\x SF:20text/html\r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n<h SF:tml>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\r\n SF:<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>snow_adc SF:</center>\r\n</body>\r\n</html>\r\n")%r(RTSPRequest,12D,"HTTP/1\.1\x204 SF:00\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Sun,\x2024\x20N SF:ov\x202024\x2006:29:07\x20GMT\r\nContent-Type:\x20text/html\r\nContent- SF:Length:\x20153\r\nConnection:\x20close\r\n\r\n<html>\r\n<head><title>40 SF:0\x20Bad\x20Request</title></head>\r\n<body>\r\n<center><h1>400\x20Bad\ SF:x20Request</h1></center>\r\n<hr><center>snow_adc</center>\r\n</body>\r\ SF:n</html>\r\n"); Aggressive OS guesses: HP P2000 G3 NAS device (91%), Linux 3.16 - 4.6 (90%), Linux 5.1 (90%), Linux 4.4 (90%), Linux 4.10 (89%), Linux 3.10 - 4.11 (88%), Linux 3.13 (88%), Linux 3.13 or 4.2 (88%), Asus RT-AC66U WAP (88%), Linux 3.1 (88%) No exact OS matches for host (test conditions non-ideal). Network Distance: 15 hops TRACEROUTE (using port 80/tcp) HOP RTT ADDRESS 1 0.20 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177) 2 0.70 ms gw.mcom-colocationamerica.com (208.64.231.81) 3 3.10 ms r2b4.n1.p1401.lax.multacom.net (64.69.46.11) 4 ... 5 13.11 ms be3176.ccr21.sjc01.atlas.cogentco.com (154.54.31.190) 6 13.92 ms be3178.ccr21.sfo01.atlas.cogentco.com (154.54.43.69) 7 31.02 ms be2075.ccr21.sea02.atlas.cogentco.com (154.54.0.234) 8 31.57 ms 38.142.50.226 9 ... 10 55.45 ms 142.124.126.83 11 53.42 ms 64.230.76.37 12 49.47 ms 64.230.76.139 13 47.98 ms 207.35.9.170 14 ... 15 46.63 ms vip-149-96-246-114.cust.service-now.com (149.96.246.114) OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 42.73 seconds