Nmap scan report for events.servicenow.com (35.166.8.156) Host is up (0.028s latency). Other addresses for events.servicenow.com (not scanned): 44.242.80.81 54.212.127.230 52.26.137.82 rDNS record for 35.166.8.156: ec2-35-166-8-156.us-west-2.compute.amazonaws.com Not shown: 998 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 80/tcp open http awselb/2.0 |_http-title: Did not follow redirect to https://events.servicenow.com:443/ | fingerprint-strings: | FourOhFourRequest: | HTTP/1.1 301 Moved Permanently | Server: awselb/2.0 | Date: Wed, 10 Sep 2025 11:36:53 GMT | Content-Type: text/html | Content-Length: 134 | Connection: close | Location: https://prd-west2-1-ingress1-768115290.us-west-2.elb.amazonaws.com:443/nice%20ports%2C/Tri%6Eity.txt%2ebak | | 301 Moved Permanently | |

301 Moved Permanently

| | | GetRequest, HTTPOptions: | HTTP/1.1 301 Moved Permanently | Server: awselb/2.0 | Date: Wed, 10 Sep 2025 11:36:53 GMT | Content-Type: text/html | Content-Length: 134 | Connection: close | Location: https://prd-west2-1-ingress1-768115290.us-west-2.elb.amazonaws.com:443/ | | 301 Moved Permanently | |

301 Moved Permanently

| | | RTSPRequest: | | 400 Bad Request | |

400 Bad Request

| | | X11Probe: | HTTP/1.1 400 Bad Request | Server: awselb/2.0 | Date: Wed, 10 Sep 2025 11:36:53 GMT | Content-Type: text/html | Content-Length: 122 | Connection: close | | 400 Bad Request | |

400 Bad Request

| |_ |_http-server-header: awselb/2.0 443/tcp open ssl/https envoy | fingerprint-strings: | DNSStatusRequestTCP, DNSVersionBindReqTCP, RPCCheck: | HTTP/1.1 400 Bad Request | Server: awselb/2.0 | Date: Wed, 10 Sep 2025 11:37:05 GMT | Content-Type: text/html | Content-Length: 122 | Connection: close | | 400 Bad Request | |

400 Bad Request

| | | FourOhFourRequest, GetRequest, HTTPOptions: | HTTP/1.1 404 Not Found | Date: Wed, 10 Sep 2025 11:36:59 GMT | Content-Length: 0 | Connection: close | vary: Accept-Encoding | server: envoy | RTSPRequest: | | 400 Bad Request | |

400 Bad Request

| | | tor-versions: | HTTP/1.1 400 Bad Request | Server: awselb/2.0 | Date: Wed, 10 Sep 2025 11:37:00 GMT | Content-Type: text/html | Content-Length: 122 | Connection: close | | 400 Bad Request | |

400 Bad Request

| |_ |_http-title: Site doesn't have a title (text/html;charset=utf-8). | ssl-cert: Subject: commonName=events.servicenow.com | Subject Alternative Name: DNS:events.servicenow.com, DNS:reg.servicenow.com | Not valid before: 2025-01-21T00:00:00 |_Not valid after: 2026-02-19T23:59:59 |_http-server-header: envoy 2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service : ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port80-TCP:V=7.92%I=7%D=9/10%Time=68C162D5%P=x86_64-redhat-linux-gnu%r( SF:GetRequest,175,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServer:\x20 SF:awselb/2\.0\r\nDate:\x20Wed,\x2010\x20Sep\x202025\x2011:36:53\x20GMT\r\ SF:nContent-Type:\x20text/html\r\nContent-Length:\x20134\r\nConnection:\x2 SF:0close\r\nLocation:\x20https://prd-west2-1-ingress1-768115290\.us-west- SF:2\.elb\.amazonaws\.com:443/\r\n\r\n\r\n301\x20Moved\ SF:x20Permanently\r\n\r\n

301\x20Moved\x20 SF:Permanently

\r\n\r\n\r\n")%r(HTTPOptions,175 SF:,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServer:\x20awselb/2\.0\r\ SF:nDate:\x20Wed,\x2010\x20Sep\x202025\x2011:36:53\x20GMT\r\nContent-Type: SF:\x20text/html\r\nContent-Length:\x20134\r\nConnection:\x20close\r\nLoca SF:tion:\x20https://prd-west2-1-ingress1-768115290\.us-west-2\.elb\.amazon SF:aws\.com:443/\r\n\r\n\r\n301\x20Moved\x20Permanently SF:\r\n\r\n

301\x20Moved\x20Permanently

\r\n\r\n\r\n")%r(RTSPRequest,7A,"\r\n400\x20Bad\x20Request\r\n\r\n

400\x20Bad\x20Request

\r\n\r\n\r\n")%r(X11P SF:robe,110,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20awselb/2\.0\ SF:r\nDate:\x20Wed,\x2010\x20Sep\x202025\x2011:36:53\x20GMT\r\nContent-Typ SF:e:\x20text/html\r\nContent-Length:\x20122\r\nConnection:\x20close\r\n\r SF:\n\r\n400\x20Bad\x20Request\r\n SF:\r\n

400\x20Bad\x20Request

\r\n\r\n\r\n")%r(FourOhFourRequest,198,"HTTP/1\.1\x20301\x20Moved\x20Permanen SF:tly\r\nServer:\x20awselb/2\.0\r\nDate:\x20Wed,\x2010\x20Sep\x202025\x20 SF:11:36:53\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20134 SF:\r\nConnection:\x20close\r\nLocation:\x20https://prd-west2-1-ingress1-7 SF:68115290\.us-west-2\.elb\.amazonaws\.com:443/nice%20ports%2C/Tri%6Eity\ SF:.txt%2ebak\r\n\r\n\r\n301\x20Moved\x20Permanently</t SF:itle></head>\r\n<body>\r\n<center><h1>301\x20Moved\x20Permanently</h1>< SF:/center>\r\n</body>\r\n</html>\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port443-TCP:V=7.92%T=SSL%I=7%D=9/10%Time=68C162DB%P=x86_64-redhat-linux SF:-gnu%r(GetRequest,8B,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Wed, SF:\x2010\x20Sep\x202025\x2011:36:59\x20GMT\r\nContent-Length:\x200\r\nCon SF:nection:\x20close\r\nvary:\x20Accept-Encoding\r\nserver:\x20envoy\r\n\r SF:\n")%r(HTTPOptions,8B,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate:\x20Wed SF:,\x2010\x20Sep\x202025\x2011:36:59\x20GMT\r\nContent-Length:\x200\r\nCo SF:nnection:\x20close\r\nvary:\x20Accept-Encoding\r\nserver:\x20envoy\r\n\ SF:r\n")%r(FourOhFourRequest,8B,"HTTP/1\.1\x20404\x20Not\x20Found\r\nDate: SF:\x20Wed,\x2010\x20Sep\x202025\x2011:36:59\x20GMT\r\nContent-Length:\x20 SF:0\r\nConnection:\x20close\r\nvary:\x20Accept-Encoding\r\nserver:\x20env SF:oy\r\n\r\n")%r(tor-versions,110,"HTTP/1\.1\x20400\x20Bad\x20Request\r\n SF:Server:\x20awselb/2\.0\r\nDate:\x20Wed,\x2010\x20Sep\x202025\x2011:37:0 SF:0\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20122\r\nCon SF:nection:\x20close\r\n\r\n<html>\r\n<head><title>400\x20Bad\x20Request</ SF:title></head>\r\n<body>\r\n<center><h1>400\x20Bad\x20Request</h1></cent SF:er>\r\n</body>\r\n</html>\r\n")%r(RTSPRequest,7A,"<html>\r\n<head><titl SF:e>400\x20Bad\x20Request\r\n\r\n

400\x20 SF:Bad\x20Request

\r\n\r\n\r\n")%r(RPCCheck,110 SF:,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20awselb/2\.0\r\nDate: SF:\x20Wed,\x2010\x20Sep\x202025\x2011:37:05\x20GMT\r\nContent-Type:\x20te SF:xt/html\r\nContent-Length:\x20122\r\nConnection:\x20close\r\n\r\n SF:\r\n400\x20Bad\x20Request\r\n\r\n

400\x20Bad\x20Request

\r\n\r\n\r\n") SF:%r(DNSVersionBindReqTCP,110,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServ SF:er:\x20awselb/2\.0\r\nDate:\x20Wed,\x2010\x20Sep\x202025\x2011:37:05\x2 SF:0GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20122\r\nConnect SF:ion:\x20close\r\n\r\n\r\n400\x20Bad\x20Request</titl SF:e></head>\r\n<body>\r\n<center><h1>400\x20Bad\x20Request</h1></center>\ SF:r\n</body>\r\n</html>\r\n")%r(DNSStatusRequestTCP,110,"HTTP/1\.1\x20400 SF:\x20Bad\x20Request\r\nServer:\x20awselb/2\.0\r\nDate:\x20Wed,\x2010\x20 SF:Sep\x202025\x2011:37:05\x20GMT\r\nContent-Type:\x20text/html\r\nContent SF:-Length:\x20122\r\nConnection:\x20close\r\n\r\n<html>\r\n<head><title>4 SF:00\x20Bad\x20Request\r\n\r\n

400\x20Bad SF:\x20Request

\r\n\r\n\r\n"); Warning: OSScan results may be unreliable because we could not find at least 1 open and 1 closed port Device type: general purpose Running (JUST GUESSING): Linux 2.6.X|3.X|4.X (90%) OS CPE: cpe:/o:linux:linux_kernel:2.6.32 cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4 Aggressive OS guesses: Linux 2.6.32 (90%), Linux 3.2 - 4.9 (90%), Linux 2.6.32 - 3.10 (89%), Linux 2.6.32 - 3.13 (89%), Linux 3.10 - 3.13 (88%) No exact OS matches for host (test conditions non-ideal). Network Distance: 11 hops TRACEROUTE (using port 80/tcp) HOP RTT ADDRESS 1 0.20 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177) 2 0.50 ms gw.mcom-colocationamerica.com (208.64.231.81) 3 0.80 ms r2b4.n1.p1401.lax.multacom.net (64.69.46.11) 4 0.31 ms 206.72.211.146.any2ix.coresite.com (206.72.211.146) 5 ... 10 11 28.07 ms ec2-35-166-8-156.us-west-2.compute.amazonaws.com (35.166.8.156) OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 37.08 seconds