Nmap scan report for boisestateproduction.service-now.com (149.96.251.59) Host is up (0.047s latency). rDNS record for 149.96.251.59: vip-149-96-251-59.cust.service-now.com Not shown: 997 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 25/tcp open tcpwrapped |_smtp-commands: Couldn't establish connection on port 25 80/tcp open http snow_adc | fingerprint-strings: | FourOhFourRequest: | HTTP/1.1 403 Forbidden | Server: snow_adc | Date: Tue, 09 Sep 2025 23:36:52 GMT | Content-Type: text/html | Content-Length: 149 | Connection: close | | 403 Forbidden | |

403 Forbidden

|
snow_adc
| | | GetRequest, HTTPOptions: | HTTP/1.1 403 Forbidden | Server: snow_adc | Date: Tue, 09 Sep 2025 23:36:51 GMT | Content-Type: text/html | Content-Length: 149 | Connection: close | | 403 Forbidden | |

403 Forbidden

|
snow_adc
| | | RPCCheck: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Tue, 09 Sep 2025 23:36:57 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | | 400 Bad Request | |

400 Bad Request

|
snow_adc
| | | RTSPRequest, X11Probe: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Tue, 09 Sep 2025 23:36:51 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | | 400 Bad Request | |

400 Bad Request

|
snow_adc
| |_ |_http-title: Did not follow redirect to https://boisestateproduction.service-now.com/ |_http-server-header: snow_adc 443/tcp open ssl/https snow_adc | fingerprint-strings: | FourOhFourRequest, HTTPOptions: | HTTP/1.1 301 Moved Permanently | Server: snow_adc | Date: Tue, 09 Sep 2025 23:36:58 GMT | Content-Type: text/html | Content-Length: 165 | Connection: close | Location: https://www.servicenow.com | | 301 Moved Permanently | |

301 Moved Permanently

|
snow_adc
| | | GetRequest: | HTTP/1.1 301 Moved Permanently | Server: snow_adc | Date: Tue, 09 Sep 2025 23:36:57 GMT | Content-Type: text/html | Content-Length: 165 | Connection: close | Location: https://www.servicenow.com | | 301 Moved Permanently | |

301 Moved Permanently

|
snow_adc
| | | RTSPRequest: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Tue, 09 Sep 2025 23:37:03 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | | 400 Bad Request | |

400 Bad Request

|
snow_adc
| | | tor-versions: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Tue, 09 Sep 2025 23:36:58 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | | 400 Bad Request | |

400 Bad Request

|
snow_adc
| |_ |_http-trane-info: Problem with XML parsing of /evox/about | http-robots.txt: 1 disallowed entry |_/ | http-title: BSU Service Management |_Requested resource was /auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fweblogin.boisestate.edu%2Fadfs%2Fls%2F%3FSAMLRequest%3DpZJRT8IwFIX%252FytJ3NhjioGEkE2IkQVwY%252BuBb195hk66dvR3ov7cMDPqgiTHpU%252Fvdc%252B69p1NktYobmrXuRW%252FgtQV0wVutNNLTS0paq6lhKJFqVgNSx2mR3a9oHPZpY40z3CgSZIhgnTR6bjS2NdgC7F5yeNysUvLiXIM0ikoj0RswB75QtPzIh3gCe9ocQm7qSLN9w3YQCkOChaelZkfuonKAUpmd1OFFLgTRRkxUGCmMSHBrLIdupJRUTCGQYLlISbGe9znnYjJmV1VyNQAQFRcsHiajcTmCcZKUHsScIco9XEoRW1hqb6RdSuJ%252BPOr1J%252F5s4yEdJnRwHU7Gw2cS5Odl3EgtpN79vrnyBCG9227zXv5QbDuBvRRg157%252Bx9KewGK3MO9DZtMuR9oNYb9G%252B3t%252F7DNPMvtLI9Poq93ZvKHHiZaL3CjJ34NMKXOYW%252FBCKXG2hS6wmrmfOxqEg%252B5Gil7VoRRqJlUmhAVEEs3Ovt8%252F8uwD%26RelayState%3Dhttps%253A%252F%252Fboisestateproduction.service-now.com%252Fnavpage.do | tls-alpn: | http/1.1 | http/1.0 |_ http/0.9 |_http-server-header: snow_adc | ssl-cert: Subject: commonName=*.service-now.com/organizationName=ServiceNow, Inc./stateOrProvinceName=California/countryName=US | Subject Alternative Name: DNS:*.service-now.com, DNS:*.static.service-now.com, DNS:service-now.com, DNS:static.service-now.com | Not valid before: 2025-02-12T00:00:00 |_Not valid after: 2025-10-12T23:59:59 |_ssl-date: TLS randomness does not represent time 2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service : ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port80-TCP:V=7.92%I=7%D=9/9%Time=68C0BA13%P=x86_64-redhat-linux-gnu%r(G SF:etRequest,127,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20snow_adc\r\n SF:Date:\x20Tue,\x2009\x20Sep\x202025\x2023:36:51\x20GMT\r\nContent-Type:\ SF:x20text/html\r\nContent-Length:\x20149\r\nConnection:\x20close\r\n\r\n< SF:html>\r\n403\x20Forbidden\r\n\r\n

403\x20Forbidden

\r\n
snow_adc
SF:\r\n\r\n\r\n")%r(HTTPOptions,127,"HTTP/1\.1\x20403\x20For SF:bidden\r\nServer:\x20snow_adc\r\nDate:\x20Tue,\x2009\x20Sep\x202025\x20 SF:23:36:51\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20149 SF:\r\nConnection:\x20close\r\n\r\n\r\n403\x20Forbidden SF:\r\n\r\n

403\x20Forbidden

SF:\r\n
snow_adc
\r\n\r\n\r\n")%r(RTSPReq SF:uest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\n SF:Date:\x20Tue,\x2009\x20Sep\x202025\x2023:36:51\x20GMT\r\nContent-Type:\ SF:x20text/html\r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n< SF:html>\r\n400\x20Bad\x20Request\r\n\r\ SF:n

400\x20Bad\x20Request

\r\n
snow_ad SF:c
\r\n\r\n\r\n")%r(X11Probe,12D,"HTTP/1\.1\x20400 SF:\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Tue,\x2009\x20Sep SF:\x202025\x2023:36:51\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Le SF:ngth:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400\ SF:x20Bad\x20Request\r\n\r\n

400\x20Bad\x2 SF:0Request

\r\n
snow_adc
\r\n\r\n< SF:/html>\r\n")%r(FourOhFourRequest,127,"HTTP/1\.1\x20403\x20Forbidden\r\n SF:Server:\x20snow_adc\r\nDate:\x20Tue,\x2009\x20Sep\x202025\x2023:36:52\x SF:20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20149\r\nConnec SF:tion:\x20close\r\n\r\n\r\n403\x20Forbidden\r\n\r\n

403\x20Forbidden

\r\n
snow_adc\r\n\r\n\r\n")%r(RPCCheck,12D,"HTT SF:P/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Tue, SF:\x2009\x20Sep\x202025\x2023:36:57\x20GMT\r\nContent-Type:\x20text/html\ SF:r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400\x20Bad\x20Request\r\n\r\n

SF:400\x20Bad\x20Request

\r\n
snow_adc
\r\ SF:n\r\n\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port443-TCP:V=7.92%T=SSL%I=7%D=9/9%Time=68C0BA19%P=x86_64-redhat-linux- SF:gnu%r(GetRequest,165,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServe SF:r:\x20snow_adc\r\nDate:\x20Tue,\x2009\x20Sep\x202025\x2023:36:57\x20GMT SF:\r\nContent-Type:\x20text/html\r\nContent-Length:\x20165\r\nConnection: SF:\x20close\r\nLocation:\x20https://www\.servicenow\.com\r\n\r\n\r\ SF:n301\x20Moved\x20Permanently\r\n\r\n< SF:center>

301\x20Moved\x20Permanently

\r\n
sno SF:w_adc
\r\n\r\n\r\n")%r(HTTPOptions,165,"HTTP/1\.1 SF:\x20301\x20Moved\x20Permanently\r\nServer:\x20snow_adc\r\nDate:\x20Tue, SF:\x2009\x20Sep\x202025\x2023:36:58\x20GMT\r\nContent-Type:\x20text/html\ SF:r\nContent-Length:\x20165\r\nConnection:\x20close\r\nLocation:\x20https SF:://www\.servicenow\.com\r\n\r\n\r\n301\x20Moved\x20P SF:ermanently\r\n\r\n

301\x20Moved\x20Perm SF:anently

\r\n
snow_adc
\r\n\r\n\r\n")%r(FourOhFourRequest,165,"HTTP/1\.1\x20301\x20Moved\x20Perma SF:nently\r\nServer:\x20snow_adc\r\nDate:\x20Tue,\x2009\x20Sep\x202025\x20 SF:23:36:58\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20165 SF:\r\nConnection:\x20close\r\nLocation:\x20https://www\.servicenow\.com\r SF:\n\r\n\r\n301\x20Moved\x20Permanently SF:\r\n\r\n

301\x20Moved\x20Permanently

\r\n SF:
snow_adc
\r\n\r\n\r\n")%r(tor-version SF:s,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDat SF:e:\x20Tue,\x2009\x20Sep\x202025\x2023:36:58\x20GMT\r\nContent-Type:\x20 SF:text/html\r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400\x20Bad\x20Request\r\n\r\n

400\x20Bad\x20Request

\r\n
snow_adc\r\n\r\n\r\n")%r(RTSPRequest,12D,"HTTP/1\.1\x20400 SF:\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Tue,\x2009\x20Sep SF:\x202025\x2023:37:03\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Le SF:ngth:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400\ SF:x20Bad\x20Request\r\n\r\n

400\x20Bad\x2 SF:0Request

\r\n
snow_adc
\r\n\r\n< SF:/html>\r\n"); Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Aggressive OS guesses: Linux 4.10 (92%), Crestron XPanel control system (90%), Linux 3.16 (89%), ASUS RT-N56U WAP (Linux 3.4) (87%), Linux 3.1 (87%), Linux 3.2 (87%), HP P2000 G3 NAS device (87%), AXIS 210A or 211 Network Camera (Linux 2.6.17) (87%), Linux 3.10 - 4.11 (86%), Linux 3.12 (86%) No exact OS matches for host (test conditions non-ideal). Network Distance: 15 hops TRACEROUTE (using port 25/tcp) HOP RTT ADDRESS 1 0.19 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177) 2 5.90 ms gw.mcom-colocationamerica.com (208.64.231.81) 3 0.79 ms r1b4.n1p1400.lax.multacom.net (64.69.46.9) 4 ... 5 12.15 ms be3097.ccr81.sjc13.atlas.cogentco.com (154.54.40.157) 6 12.75 ms be3096.ccr21.sfo01.atlas.cogentco.com (154.54.40.42) 7 29.79 ms be2075.ccr21.sea02.atlas.cogentco.com (154.54.0.234) 8 31.41 ms 38.142.50.226 9 ... 10 48.69 ms 142.124.126.83 11 48.07 ms 64.230.76.37 12 45.16 ms 64.230.76.139 13 47.14 ms 207.35.9.170 14 ... 15 48.26 ms vip-149-96-251-59.cust.service-now.com (149.96.251.59) OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 42.64 seconds