Nmap scan report for sunbelt.service-now.com (148.139.17.228)
Host is up (0.14s latency).
rDNS record for 148.139.17.228: vip-148-139-17-228.cust.service-now.com
Not shown: 997 filtered tcp ports (no-response)
PORT STATE SERVICE VERSION
25/tcp open tcpwrapped
|_smtp-commands: Couldn't establish connection on port 25
80/tcp open http snow_adc
|_http-server-header: snow_adc
| fingerprint-strings:
| FourOhFourRequest:
| HTTP/1.1 403 Forbidden
| Server: snow_adc
| Date: Thu, 11 Sep 2025 23:02:59 GMT
| Content-Type: text/html
| Content-Length: 149
| Connection: close
|
| 403 Forbidden
|
| 403 Forbidden
|
snow_adc
|
|
| GetRequest, HTTPOptions:
| HTTP/1.1 403 Forbidden
| Server: snow_adc
| Date: Thu, 11 Sep 2025 23:02:58 GMT
| Content-Type: text/html
| Content-Length: 149
| Connection: close
|
| 403 Forbidden
|
| 403 Forbidden
|
snow_adc
|
|
| RPCCheck:
| HTTP/1.1 400 Bad Request
| Server: snow_adc
| Date: Thu, 11 Sep 2025 23:03:04 GMT
| Content-Type: text/html
| Content-Length: 153
| Connection: close
|
| 400 Bad Request
|
| 400 Bad Request
|
snow_adc
|
|
| RTSPRequest:
| HTTP/1.1 400 Bad Request
| Server: snow_adc
| Date: Thu, 11 Sep 2025 23:02:58 GMT
| Content-Type: text/html
| Content-Length: 153
| Connection: close
|
| 400 Bad Request
|
| 400 Bad Request
|
snow_adc
|
|
| X11Probe:
| HTTP/1.1 400 Bad Request
| Server: snow_adc
| Date: Thu, 11 Sep 2025 23:02:59 GMT
| Content-Type: text/html
| Content-Length: 153
| Connection: close
|
| 400 Bad Request
|
| 400 Bad Request
|
snow_adc
|
|_
|_http-title: Did not follow redirect to https://sunbelt.service-now.com/
443/tcp open ssl/https snow_adc
|_http-server-header: snow_adc
|_ssl-date: TLS randomness does not represent time
| tls-alpn:
| http/1.1
| http/1.0
|_ http/0.9
| ssl-cert: Subject: commonName=*.service-now.com/organizationName=ServiceNow, Inc./stateOrProvinceName=California/countryName=US
| Subject Alternative Name: DNS:*.service-now.com, DNS:*.static.service-now.com, DNS:service-now.com, DNS:static.service-now.com
| Not valid before: 2025-02-12T00:00:00
|_Not valid after: 2025-10-12T23:59:59
| fingerprint-strings:
| FourOhFourRequest:
| HTTP/1.1 301 Moved Permanently
| Server: snow_adc
| Date: Thu, 11 Sep 2025 23:03:07 GMT
| Content-Type: text/html
| Content-Length: 165
| Connection: close
| Location: https://www.servicenow.com
|
| 301 Moved Permanently
|
| 301 Moved Permanently
|
snow_adc
|
|
| GetRequest, HTTPOptions:
| HTTP/1.1 301 Moved Permanently
| Server: snow_adc
| Date: Thu, 11 Sep 2025 23:03:06 GMT
| Content-Type: text/html
| Content-Length: 165
| Connection: close
| Location: https://www.servicenow.com
|
| 301 Moved Permanently
|
| 301 Moved Permanently
|
snow_adc
|
|
| RTSPRequest:
| HTTP/1.1 400 Bad Request
| Server: snow_adc
| Date: Thu, 11 Sep 2025 23:03:13 GMT
| Content-Type: text/html
| Content-Length: 153
| Connection: close
|
| 400 Bad Request
|
| 400 Bad Request
|
snow_adc
|
|
| tor-versions:
| HTTP/1.1 400 Bad Request
| Server: snow_adc
| Date: Thu, 11 Sep 2025 23:03:07 GMT
| Content-Type: text/html
| Content-Length: 153
| Connection: close
|
| 400 Bad Request
|
| 400 Bad Request
|
snow_adc
|
|_
|_http-trane-info: Problem with XML parsing of /evox/about
| http-robots.txt: 1 disallowed entry
|_/
| http-title: IT Hub
|_Requested resource was /auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fokta.sunbeltrentals.co.uk%2Fapp%2Faplant_sunbeltrentalsithub_1%2Fexkblk7jj2kluDndx0i7%2Fsso%2Fsaml%3FSAMLRequest%3DlVLLbtswEPwVgXe9YwsiLAOqjaIG0lSI3R56CWhxFTOiSJVLOu7fl5YdJDk0RQ%252B6cGd2Zme0QDbIbKS1swd1D78coA1Og1RIL5OKOKOoZiiQKjYAUtvSbf31lmZRQkejrW61JEGNCMYKrVZaoRvAbMEcRQvf728rcrB2RBrH6NQepI3wMguVfo5aPcSKHUf2CBHXJFh7B0Kx86pXou4ti65sA8oyiZ4YuT5m4%252Bg%252FyZR9eD8X9uD2D2kMp34v%252B%252BLpKeulWyt%252BSkQRI%252Br4fB8JPmvTwnR9RTpPAxJs1hXZ3q0440k352yWl2VbZvNynnc37KZoizxPGO88EBuGKI7wSkV0sFFovZ%252BKZEk2C5MyTNNdltMkp3kRzZLsJwmaa26fhOJCPX4c8v4CQvplt2vC5tt2Ny04Cg7mzqP%252FL98fYHDK1q8my8XUMp18m7fFf2yJvbRNlv%252FQXsRvFa56Iz373qwbLUX7O6il1M8rA8z6W6xxMNUyMPt3E2mUTi%252BCh90EpTAwIWvODSCSeHnVff9nL%252F8A%26RelayState%3Dhttps%253A%252F%252Fsunbelt.service-now.com%252Fnavpage.do
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.92%I=7%D=9/11%Time=68C35521%P=x86_64-redhat-linux-gnu%r(
SF:GetRequest,127,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20snow_adc\r\
SF:nDate:\x20Thu,\x2011\x20Sep\x202025\x2023:02:58\x20GMT\r\nContent-Type:
SF:\x20text/html\r\nContent-Length:\x20149\r\nConnection:\x20close\r\n\r\n
SF:\r\n403\x20Forbidden\r\n\r\n403\x20Forbidden
\r\n
snow_adc\r\n\r\n\r\n")%r(HTTPOptions,127,"HTTP/1\.1\x20403\x20Fo
SF:rbidden\r\nServer:\x20snow_adc\r\nDate:\x20Thu,\x2011\x20Sep\x202025\x2
SF:023:02:58\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x2014
SF:9\r\nConnection:\x20close\r\n\r\n\r\n403\x20Forbidde
SF:n\r\n\r\n403\x20Forbidden
\r\n
snow_adc\r\n\r\n\r\n")%r(RTSPRe
SF:quest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\
SF:nDate:\x20Thu,\x2011\x20Sep\x202025\x2023:02:58\x20GMT\r\nContent-Type:
SF:\x20text/html\r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n
SF:\r\n400\x20Bad\x20Request\r\n\r
SF:\n400\x20Bad\x20Request
\r\n
snow_a
SF:dc\r\n\r\n\r\n")%r(X11Probe,12D,"HTTP/1\.1\x2040
SF:0\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Thu,\x2011\x20Se
SF:p\x202025\x2023:02:59\x20GMT\r\nContent-Type:\x20text/html\r\nContent-L
SF:ength:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400
SF:\x20Bad\x20Request\r\n\r\n400\x20Bad\x
SF:20Request
\r\n
snow_adc\r\n\r\n
SF:\r\n")%r(FourOhFourRequest,127,"HTTP/1\.1\x20403\x20Forbidden\r\
SF:nServer:\x20snow_adc\r\nDate:\x20Thu,\x2011\x20Sep\x202025\x2023:02:59\
SF:x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20149\r\nConne
SF:ction:\x20close\r\n\r\n\r\n403\x20Forbidden<
SF:/head>\r\n\r\n403\x20Forbidden
\r\n
<
SF:center>snow_adc\r\n\r\n\r\n")%r(RPCCheck,12D,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Thu
SF:,\x2011\x20Sep\x202025\x2023:03:04\x20GMT\r\nContent-Type:\x20text/html
SF:\r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400\x20Bad\x20Request\r\n\r\n400\x20Bad\x20Request
\r\n
snow_adc\r
SF:\n\r\n\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.92%T=SSL%I=7%D=9/11%Time=68C35529%P=x86_64-redhat-linux
SF:-gnu%r(GetRequest,165,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServ
SF:er:\x20snow_adc\r\nDate:\x20Thu,\x2011\x20Sep\x202025\x2023:03:06\x20GM
SF:T\r\nContent-Type:\x20text/html\r\nContent-Length:\x20165\r\nConnection
SF::\x20close\r\nLocation:\x20https://www\.servicenow\.com\r\n\r\n\r
SF:\n301\x20Moved\x20Permanently\r\n\r\n
SF:301\x20Moved\x20Permanently
\r\n
sn
SF:ow_adc\r\n\r\n\r\n")%r(HTTPOptions,165,"HTTP/1\.
SF:1\x20301\x20Moved\x20Permanently\r\nServer:\x20snow_adc\r\nDate:\x20Thu
SF:,\x2011\x20Sep\x202025\x2023:03:06\x20GMT\r\nContent-Type:\x20text/html
SF:\r\nContent-Length:\x20165\r\nConnection:\x20close\r\nLocation:\x20http
SF:s://www\.servicenow\.com\r\n\r\n\r\n301\x20Moved\x20
SF:Permanently\r\n\r\n301\x20Moved\x20Per
SF:manently
\r\n
snow_adc\r\n\r\n<
SF:/html>\r\n")%r(FourOhFourRequest,165,"HTTP/1\.1\x20301\x20Moved\x20Perm
SF:anently\r\nServer:\x20snow_adc\r\nDate:\x20Thu,\x2011\x20Sep\x202025\x2
SF:023:03:07\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x2016
SF:5\r\nConnection:\x20close\r\nLocation:\x20https://www\.servicenow\.com\
SF:r\n\r\n\r\n301\x20Moved\x20Permanently\r\n\r\n301\x20Moved\x20Permanently
\r\
SF:n
snow_adc\r\n\r\n\r\n")%r(tor-versio
SF:ns,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDa
SF:te:\x20Thu,\x2011\x20Sep\x202025\x2023:03:07\x20GMT\r\nContent-Type:\x2
SF:0text/html\r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400\x20Bad\x20Request\r\n\r\n<
SF:center>400\x20Bad\x20Request
\r\n
snow_adc<
SF:/center>\r\n\r\n\r\n")%r(RTSPRequest,12D,"HTTP/1\.1\x2040
SF:0\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Thu,\x2011\x20Se
SF:p\x202025\x2023:03:13\x20GMT\r\nContent-Type:\x20text/html\r\nContent-L
SF:ength:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400
SF:\x20Bad\x20Request\r\n\r\n400\x20Bad\x
SF:20Request
\r\n
snow_adc\r\n\r\n
SF:\r\n");
Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port
Aggressive OS guesses: Crestron XPanel control system (90%), Linux 3.16 (89%), ASUS RT-N56U WAP (Linux 3.4) (87%), Linux 3.1 (87%), Linux 3.2 (87%), HP P2000 G3 NAS device (87%), AXIS 210A or 211 Network Camera (Linux 2.6.17) (87%), Android 4.1.1 (86%), Linux 3.10 - 4.11 (86%), Linux 3.12 (86%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 9 hops
TRACEROUTE (using port 443/tcp)
HOP RTT ADDRESS
1 0.20 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177)
2 0.59 ms gw.mcom-colocationamerica.com (208.64.231.81)
3 0.70 ms r2b4.n1.p1401.lax.multacom.net (64.69.46.11)
4 0.33 ms 206.72.211.182.any2ix.coresite.com (206.72.211.182)
5 ...
6 138.70 ms 213.86.140.214
7 ... 8
9 138.39 ms vip-148-139-17-228.cust.service-now.com (148.139.17.228)
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 60.43 seconds