Ports
Duration
Date
IP
Nmap scan report for wolseley.service-now.com (149.96.224.209) Host is up (0.096s latency). rDNS record for 149.96.224.209: vip-149-96-224-209.cust.service-now.com Not shown: 980 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 25/tcp open tcpwrapped |_smtp-commands: Couldn't establish connection on port 25 80/tcp open http snow_adc |_http-server-header: snow_adc | fingerprint-strings: | FourOhFourRequest, GetRequest, HTTPOptions: | HTTP/1.1 403 Forbidden | Server: snow_adc | Date: Wed, 03 Jul 2024 12:22:55 GMT | Content-Type: text/html | Content-Length: 149 | Connection: close | <html> | <head><title>403 Forbidden</title></head> | <body> | <center><h1>403 Forbidden</h1></center> | <hr><center>snow_adc</center> | </body> | </html> | RPCCheck: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Wed, 03 Jul 2024 12:23:01 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | <html> | <head><title>400 Bad Request</title></head> | <body> | <center><h1>400 Bad Request</h1></center> | <hr><center>snow_adc</center> | </body> | </html> | RTSPRequest, X11Probe: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Wed, 03 Jul 2024 12:22:55 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | <html> | <head><title>400 Bad Request</title></head> | <body> | <center><h1>400 Bad Request</h1></center> | <hr><center>snow_adc</center> | </body> |_ </html> |_http-title: Did not follow redirect to https://wolseley.service-now.com/ 443/tcp open ssl/https snow_adc | tls-nextprotoneg: |_ http/1.1 |_http-server-header: snow_adc |_ssl-date: TLS randomness does not represent time | tls-alpn: |_ http/1.1 | ssl-cert: Subject: commonName=*.service-now.com/organizationName=ServiceNow, Inc./stateOrProvinceName=California/countryName=US | Subject Alternative Name: DNS:*.service-now.com, DNS:service-now.com, DNS:*.static.service-now.com | Not valid before: 2024-01-23T23:50:11 |_Not valid after: 2024-11-12T23:50:10 | fingerprint-strings: | FourOhFourRequest: | HTTP/1.1 301 Moved Permanently | Server: snow_adc | Date: Wed, 03 Jul 2024 12:23:02 GMT | Content-Type: text/html | Content-Length: 165 | Connection: close | Location: https://www.servicenow.com | <html> | <head><title>301 Moved Permanently</title></head> | <body> | <center><h1>301 Moved Permanently</h1></center> | <hr><center>snow_adc</center> | </body> | </html> | GetRequest, HTTPOptions: | HTTP/1.1 301 Moved Permanently | Server: snow_adc | Date: Wed, 03 Jul 2024 12:23:01 GMT | Content-Type: text/html | Content-Length: 165 | Connection: close | Location: https://www.servicenow.com | <html> | <head><title>301 Moved Permanently</title></head> | <body> | <center><h1>301 Moved Permanently</h1></center> | <hr><center>snow_adc</center> | </body> | </html> | RTSPRequest: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Wed, 03 Jul 2024 12:23:08 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | <html> | <head><title>400 Bad Request</title></head> | <body> | <center><h1>400 Bad Request</h1></center> | <hr><center>snow_adc</center> | </body> | </html> | tor-versions: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Wed, 03 Jul 2024 12:23:02 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | <html> | <head><title>400 Bad Request</title></head> | <body> | <center><h1>400 Bad Request</h1></center> | <hr><center>snow_adc</center> | </body> |_ </html> | http-robots.txt: 1 disallowed entry |_/ |_http-trane-info: Problem with XML parsing of /evox/about | http-title: ServiceNow |_Requested resource was /auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Flogin.microsoftonline.com%2F3c2f8435-994c-4552-8fe8-2aec2d0822e4%2Fsaml2%3FSAMLRequest%3DlVJNb%252BIwEP0rke%252F5MiEYiyBRULVIbTcqbA97M86EWnLsrMeB9t9vali1e9hWe%252FW8N%252B9jvEDRadrz1eCfzSP8GgB99NJpg%252FwyqcjgDLcCFXIjOkDuJd%252Bt7u84TTLeO%252ButtJpEK0RwXlmztgaHDtwO3ElJ%252BPF4V5Fn73vkaXq2GkHDa4KXYWzsOZG2S4049eIISWNJtBktKCPedr0ztT0qk3RKOou29dZoZSBQJ5K2rJhM4%252Fm8kHExndKYtcBiKkDSJmOUQpGGLCS6tU5CiFqRVoxeSLTdVGT3sC6pZBmdNTRnzTyns6LMKUzLgpWHXJYHMQKxFojqBO9UxAG2Br0wviI0o0WczeJsss8ppxNOy4Tl7CeJ6mtJN8o0yhw%252Fb%252FRwASH%252Ftt%252FXcf19tw8LTqoB9zCi%252F7PMJ3AYihx3k%252BUi9MCDcffxzJ97En9uS5ZfiS%252FSjxJXwZ6%252FOd9uaquVfI1WWtvz2oHwYxrvBgiH6YT%252Ft4s8ycOLauI2QPlgsAepWgUNSZdX2b%252F%252F8fI3%26RelayState%3Dhttps%253A%252F%252Fwolseley.service-now.com%252Fnavpage.do 4000/tcp open remoteanything? 4001/tcp open newoak? 4002/tcp open mlchat-proxy? 4003/tcp open pxc-splr-ft? 4004/tcp closed pxc-roid 4005/tcp closed pxc-pin 4006/tcp closed pxc-spvr 4045/tcp closed lockd 4111/tcp closed xgrid 4125/tcp closed rww 4126/tcp closed ddrepl 4129/tcp closed nuauth 4224/tcp closed xtell 4242/tcp closed vrml-multi-use 4279/tcp closed vrml-multi-use 4321/tcp closed rwhois 4343/tcp closed unicall 2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service : ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port80-TCP:V=7.92%I=7%D=7/3%Time=6685429E%P=x86_64-redhat-linux-gnu%r(G SF:etRequest,127,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20snow_adc\r\n SF:Date:\x20Wed,\x2003\x20Jul\x202024\x2012:22:55\x20GMT\r\nContent-Type:\ SF:x20text/html\r\nContent-Length:\x20149\r\nConnection:\x20close\r\n\r\n< SF:html>\r\n<head><title>403\x20Forbidden</title></head>\r\n<body>\r\n<cen SF:ter><h1>403\x20Forbidden</h1></center>\r\n<hr><center>snow_adc</center> SF:\r\n</body>\r\n</html>\r\n")%r(HTTPOptions,127,"HTTP/1\.1\x20403\x20For SF:bidden\r\nServer:\x20snow_adc\r\nDate:\x20Wed,\x2003\x20Jul\x202024\x20 SF:12:22:55\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20149 SF:\r\nConnection:\x20close\r\n\r\n<html>\r\n<head><title>403\x20Forbidden SF:</title></head>\r\n<body>\r\n<center><h1>403\x20Forbidden</h1></center> SF:\r\n<hr><center>snow_adc</center>\r\n</body>\r\n</html>\r\n")%r(RTSPReq SF:uest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\n SF:Date:\x20Wed,\x2003\x20Jul\x202024\x2012:22:55\x20GMT\r\nContent-Type:\ SF:x20text/html\r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n< SF:html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\r\ SF:n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>snow_ad SF:c</center>\r\n</body>\r\n</html>\r\n")%r(X11Probe,12D,"HTTP/1\.1\x20400 SF:\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Wed,\x2003\x20Jul SF:\x202024\x2012:22:55\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Le SF:ngth:\x20153\r\nConnection:\x20close\r\n\r\n<html>\r\n<head><title>400\ SF:x20Bad\x20Request</title></head>\r\n<body>\r\n<center><h1>400\x20Bad\x2 SF:0Request</h1></center>\r\n<hr><center>snow_adc</center>\r\n</body>\r\n< SF:/html>\r\n")%r(FourOhFourRequest,127,"HTTP/1\.1\x20403\x20Forbidden\r\n SF:Server:\x20snow_adc\r\nDate:\x20Wed,\x2003\x20Jul\x202024\x2012:22:55\x SF:20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20149\r\nConnec SF:tion:\x20close\r\n\r\n<html>\r\n<head><title>403\x20Forbidden</title></ SF:head>\r\n<body>\r\n<center><h1>403\x20Forbidden</h1></center>\r\n<hr><c SF:enter>snow_adc</center>\r\n</body>\r\n</html>\r\n")%r(RPCCheck,12D,"HTT SF:P/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Wed, SF:\x2003\x20Jul\x202024\x2012:23:01\x20GMT\r\nContent-Type:\x20text/html\ SF:r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n<html>\r\n<hea SF:d><title>400\x20Bad\x20Request</title></head>\r\n<body>\r\n<center><h1> SF:400\x20Bad\x20Request</h1></center>\r\n<hr><center>snow_adc</center>\r\ SF:n</body>\r\n</html>\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port443-TCP:V=7.92%T=SSL%I=7%D=7/3%Time=668542A5%P=x86_64-redhat-linux- SF:gnu%r(GetRequest,165,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServe SF:r:\x20snow_adc\r\nDate:\x20Wed,\x2003\x20Jul\x202024\x2012:23:01\x20GMT SF:\r\nContent-Type:\x20text/html\r\nContent-Length:\x20165\r\nConnection: SF:\x20close\r\nLocation:\x20https://www\.servicenow\.com\r\n\r\n<html>\r\ SF:n<head><title>301\x20Moved\x20Permanently</title></head>\r\n<body>\r\n< SF:center><h1>301\x20Moved\x20Permanently</h1></center>\r\n<hr><center>sno SF:w_adc</center>\r\n</body>\r\n</html>\r\n")%r(HTTPOptions,165,"HTTP/1\.1 SF:\x20301\x20Moved\x20Permanently\r\nServer:\x20snow_adc\r\nDate:\x20Wed, SF:\x2003\x20Jul\x202024\x2012:23:01\x20GMT\r\nContent-Type:\x20text/html\ SF:r\nContent-Length:\x20165\r\nConnection:\x20close\r\nLocation:\x20https SF:://www\.servicenow\.com\r\n\r\n<html>\r\n<head><title>301\x20Moved\x20P SF:ermanently</title></head>\r\n<body>\r\n<center><h1>301\x20Moved\x20Perm SF:anently</h1></center>\r\n<hr><center>snow_adc</center>\r\n</body>\r\n</ SF:html>\r\n")%r(FourOhFourRequest,165,"HTTP/1\.1\x20301\x20Moved\x20Perma SF:nently\r\nServer:\x20snow_adc\r\nDate:\x20Wed,\x2003\x20Jul\x202024\x20 SF:12:23:02\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20165 SF:\r\nConnection:\x20close\r\nLocation:\x20https://www\.servicenow\.com\r SF:\n\r\n<html>\r\n<head><title>301\x20Moved\x20Permanently</title></head> SF:\r\n<body>\r\n<center><h1>301\x20Moved\x20Permanently</h1></center>\r\n SF:<hr><center>snow_adc</center>\r\n</body>\r\n</html>\r\n")%r(tor-version SF:s,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDat SF:e:\x20Wed,\x2003\x20Jul\x202024\x2012:23:02\x20GMT\r\nContent-Type:\x20 SF:text/html\r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n<htm SF:l>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\r\n<c SF:enter><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>snow_adc</ SF:center>\r\n</body>\r\n</html>\r\n")%r(RTSPRequest,12D,"HTTP/1\.1\x20400 SF:\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Wed,\x2003\x20Jul SF:\x202024\x2012:23:08\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Le SF:ngth:\x20153\r\nConnection:\x20close\r\n\r\n<html>\r\n<head><title>400\ SF:x20Bad\x20Request</title></head>\r\n<body>\r\n<center><h1>400\x20Bad\x2 SF:0Request</h1></center>\r\n<hr><center>snow_adc</center>\r\n</body>\r\n< SF:/html>\r\n"); Aggressive OS guesses: Linux 3.2 - 4.9 (92%), HP P2000 G3 NAS device (91%), Linux 3.16 - 4.6 (91%), Linux 2.6.32 - 3.13 (91%), Linux 4.4 (89%), Linux 2.6.23 - 2.6.38 (89%), Linux 3.2 - 3.8 (89%), Linux 3.10 - 4.11 (89%), Linux 5.1 (89%), Asus RT-AC66U WAP (89%) No exact OS matches for host (test conditions non-ideal). Network Distance: 15 hops TRACEROUTE (using port 4125/tcp) HOP RTT ADDRESS 1 0.23 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177) 2 0.56 ms gw.mcom-colocationamerica.com (208.64.231.81) 3 0.78 ms r2b4.n1.p1401.lax.multacom.net (64.69.46.11) 4 0.47 ms ce-1-4-2.a04.lsanca07.us.bb.gin.ntt.net (128.241.15.73) 5 4.05 ms ae-16.r24.lsanca07.us.bb.gin.ntt.net (129.250.3.78) 6 32.94 ms ae-3.r22.dllstx14.us.bb.gin.ntt.net (129.250.7.68) 7 32.93 ms ae-3.r26.dllstx14.us.bb.gin.ntt.net (129.250.3.246) 8 52.96 ms ae-5.r22.chcgil09.us.bb.gin.ntt.net (129.250.4.153) 9 51.91 ms ae-0.a05.chcgil09.us.bb.gin.ntt.net (129.250.4.88) 10 52.01 ms ae-0.telus.chcgil09.us.bb.gin.ntt.net (168.143.191.131) 11 ... 14 15 92.55 ms vip-149-96-224-209.cust.service-now.com (149.96.224.209) OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 51.11 seconds address (1 host up) scanned in 50.94 seconds