Nmap scan report for marriott.service-now.com (149.96.22.54)
Host is up (0.060s latency).
rDNS record for 149.96.22.54: vip-149-96-22-54.cust.service-now.com
Not shown: 980 filtered tcp ports (no-response)
PORT STATE SERVICE VERSION
25/tcp open tcpwrapped
|_smtp-commands: Couldn't establish connection on port 25
80/tcp open http snow_adc
|_http-title: Did not follow redirect to https://marriott.service-now.com/
| fingerprint-strings:
| FourOhFourRequest:
| HTTP/1.1 403 Forbidden
| Server: snow_adc
| Date: Thu, 11 Sep 2025 00:32:53 GMT
| Content-Type: text/html
| Content-Length: 149
| Connection: close
|
| 403 Forbidden
|
| 403 Forbidden
|
snow_adc
|
|
| GetRequest, HTTPOptions:
| HTTP/1.1 403 Forbidden
| Server: snow_adc
| Date: Thu, 11 Sep 2025 00:32:52 GMT
| Content-Type: text/html
| Content-Length: 149
| Connection: close
|
| 403 Forbidden
|
| 403 Forbidden
|
snow_adc
|
|
| RPCCheck:
| HTTP/1.1 400 Bad Request
| Server: snow_adc
| Date: Thu, 11 Sep 2025 00:32:58 GMT
| Content-Type: text/html
| Content-Length: 153
| Connection: close
|
| 400 Bad Request
|
| 400 Bad Request
|
snow_adc
|
|
| RTSPRequest:
| HTTP/1.1 400 Bad Request
| Server: snow_adc
| Date: Thu, 11 Sep 2025 00:32:52 GMT
| Content-Type: text/html
| Content-Length: 153
| Connection: close
|
| 400 Bad Request
|
| 400 Bad Request
|
snow_adc
|
|
| X11Probe:
| HTTP/1.1 400 Bad Request
| Server: snow_adc
| Date: Thu, 11 Sep 2025 00:32:53 GMT
| Content-Type: text/html
| Content-Length: 153
| Connection: close
|
| 400 Bad Request
|
| 400 Bad Request
|
snow_adc
|
|_
|_http-server-header: snow_adc
443/tcp open ssl/https snow_adc
|_ssl-date: TLS randomness does not represent time
| fingerprint-strings:
| FourOhFourRequest, HTTPOptions:
| HTTP/1.1 301 Moved Permanently
| Server: snow_adc
| Date: Thu, 11 Sep 2025 00:32:59 GMT
| Content-Type: text/html
| Content-Length: 165
| Connection: close
| Location: https://www.servicenow.com
|
| 301 Moved Permanently
|
| 301 Moved Permanently
|
snow_adc
|
|
| GetRequest:
| HTTP/1.1 301 Moved Permanently
| Server: snow_adc
| Date: Thu, 11 Sep 2025 00:32:58 GMT
| Content-Type: text/html
| Content-Length: 165
| Connection: close
| Location: https://www.servicenow.com
|
| 301 Moved Permanently
|
| 301 Moved Permanently
|
snow_adc
|
|
| RTSPRequest:
| HTTP/1.1 400 Bad Request
| Server: snow_adc
| Date: Thu, 11 Sep 2025 00:33:05 GMT
| Content-Type: text/html
| Content-Length: 153
| Connection: close
|
| 400 Bad Request
|
| 400 Bad Request
|
snow_adc
|
|
| tor-versions:
| HTTP/1.1 400 Bad Request
| Server: snow_adc
| Date: Thu, 11 Sep 2025 00:32:59 GMT
| Content-Type: text/html
| Content-Length: 153
| Connection: close
|
| 400 Bad Request
|
| 400 Bad Request
|
snow_adc
|
|_
| tls-alpn:
| http/1.1
| http/1.0
|_ http/0.9
|_http-server-header: snow_adc
|_http-trane-info: Problem with XML parsing of /evox/about
| http-title: Marriott ServiceNow
|_Requested resource was /auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fextranet.marriott.com%2F2FAmarrsso%2Fidp%2FstartSSO.ping%3FPartnerSpId%3Dhttps%3A%2F%2Fmarriott.service-now.com%26SAMLRequest%3DnVNNb9swDP0rhu7xV9KmEeIUnoNiAbrWiL0ddilkmWkF2JImykn27yc7H81hTbEdRT6Sj49Pc2RtE2uadvZNruFXB2i9fdtIpIdMQjojqWIokErWAlLLaZF%252Be6SxH1JtlFVcNcRLEcFYoWSmJHYtmALMVnD4vn5MyJu1GmkQtMwYoaz18ZAcSbXzuWoDybaavYJfK%252BItHQUhWd%252FrvRL21jAJ1j%252B36Mvih7R%252FI6pA1DpAy4wtimdfC%252Fl6n7uHdDz0qk4%252BI0C8B2U4DCokxJoOiLdaJqR4ymZVFFW30w3ArArZzRTCqp5ObuMK%252BB2bTMYOiDlDFFtIyIY12JcidrCSjo%252B0CYnD%252BGYUzkZRVIYhHY9pHPt3UfSTePlRvi9C1o7yda2rAwjp17LMR%252FlzUQ4NtqIG8%252BTQ%252FyjzDzA4SOx6k8V8uDYdiJtLA1znxE5XJ4vPhs%252BDyxHHgZr2zFfLXDWC%252F%252FbSplG7zACzcLqCu0vL7McsIj8aIqIebQYo7dzglz5EgvOUo7OhHi7sLGqdobxMtZoZgb0KsGfcnnW4hGWN23INm%252F9S5SqMU973duHeQDtl6t4QwB3P0rkdtTL2JNvfGC2OyQ%252F2e09f%252Fu7FHw%253D%253D%26RelayState%3Dhttps%253A%252F%252Fmarriott.service-now.com%252Fnavpage.do%26SigAlg%3Dhttp%253A%252F%252Fwww.w3.org%252F2000%252F09%252Fxmldsig%2523rsa-sha1%26Signature%3DGICrgVVYY6GDd%252FGGniAMNOjlJNi0PoHEpRzrK1bkHcqRjFE4DSmCdRmOu7BbBB1buVe%252FdqVzMg90v0pBgJ48tJB11FBXVoq02eyXPXhyBNVZtOXT2sc8F7Tjrwb9ObQJLZLCb3eDKDAZzFolAbuiOXPo0ro71PMHf43YsVxQqXkopqFwLEZEzqvSeE9D2UIZB4aDS2CfrEYU8DkOembOA6kx6r%252BjWALx5DhH8Glkbsx6HQvJoDUCFP9nCrrKsQUsWi33TgtHSKoTVHb5tolrC7UA8y0y9gP8Ay%252FOJ0uNomRG2IPY52ShsdNUBh2X4zX6gSZOCZ8q2WxMzCjmwwP%252FOg%253D%253D
| http-robots.txt: 1 disallowed entry
|_/
| ssl-cert: Subject: commonName=*.service-now.com/organizationName=ServiceNow, Inc./stateOrProvinceName=California/countryName=US
| Subject Alternative Name: DNS:*.service-now.com, DNS:*.static.service-now.com, DNS:service-now.com, DNS:static.service-now.com
| Not valid before: 2025-02-12T00:00:00
|_Not valid after: 2025-10-12T23:59:59
4000/tcp open remoteanything?
4001/tcp open newoak?
4002/tcp open mlchat-proxy?
4003/tcp open pxc-splr-ft?
4004/tcp open pxc-roid?
4005/tcp open pxc-pin?
4006/tcp open pxc-spvr?
4045/tcp closed lockd
4111/tcp closed xgrid
4125/tcp closed rww
4126/tcp closed ddrepl
4129/tcp closed nuauth
4224/tcp closed xtell
4242/tcp closed vrml-multi-use
4279/tcp closed vrml-multi-use
4321/tcp closed rwhois
4343/tcp closed unicall
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.92%I=7%D=9/10%Time=68C218B4%P=x86_64-redhat-linux-gnu%r(
SF:GetRequest,127,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20snow_adc\r\
SF:nDate:\x20Thu,\x2011\x20Sep\x202025\x2000:32:52\x20GMT\r\nContent-Type:
SF:\x20text/html\r\nContent-Length:\x20149\r\nConnection:\x20close\r\n\r\n
SF:\r\n403\x20Forbidden\r\n\r\n403\x20Forbidden
\r\n
snow_adc\r\n\r\n\r\n")%r(HTTPOptions,127,"HTTP/1\.1\x20403\x20Fo
SF:rbidden\r\nServer:\x20snow_adc\r\nDate:\x20Thu,\x2011\x20Sep\x202025\x2
SF:000:32:52\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x2014
SF:9\r\nConnection:\x20close\r\n\r\n\r\n403\x20Forbidde
SF:n\r\n\r\n403\x20Forbidden
\r\n
snow_adc\r\n\r\n\r\n")%r(RTSPRe
SF:quest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\
SF:nDate:\x20Thu,\x2011\x20Sep\x202025\x2000:32:52\x20GMT\r\nContent-Type:
SF:\x20text/html\r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n
SF:\r\n400\x20Bad\x20Request\r\n\r
SF:\n400\x20Bad\x20Request
\r\n
snow_a
SF:dc\r\n\r\n\r\n")%r(X11Probe,12D,"HTTP/1\.1\x2040
SF:0\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Thu,\x2011\x20Se
SF:p\x202025\x2000:32:53\x20GMT\r\nContent-Type:\x20text/html\r\nContent-L
SF:ength:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400
SF:\x20Bad\x20Request\r\n\r\n400\x20Bad\x
SF:20Request
\r\n
snow_adc\r\n\r\n
SF:\r\n")%r(FourOhFourRequest,127,"HTTP/1\.1\x20403\x20Forbidden\r\
SF:nServer:\x20snow_adc\r\nDate:\x20Thu,\x2011\x20Sep\x202025\x2000:32:53\
SF:x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20149\r\nConne
SF:ction:\x20close\r\n\r\n\r\n403\x20Forbidden<
SF:/head>\r\n\r\n403\x20Forbidden
\r\n
<
SF:center>snow_adc\r\n\r\n\r\n")%r(RPCCheck,12D,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Thu
SF:,\x2011\x20Sep\x202025\x2000:32:58\x20GMT\r\nContent-Type:\x20text/html
SF:\r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400\x20Bad\x20Request\r\n\r\n400\x20Bad\x20Request
\r\n
snow_adc\r
SF:\n\r\n\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.92%T=SSL%I=7%D=9/10%Time=68C218BA%P=x86_64-redhat-linux
SF:-gnu%r(GetRequest,165,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServ
SF:er:\x20snow_adc\r\nDate:\x20Thu,\x2011\x20Sep\x202025\x2000:32:58\x20GM
SF:T\r\nContent-Type:\x20text/html\r\nContent-Length:\x20165\r\nConnection
SF::\x20close\r\nLocation:\x20https://www\.servicenow\.com\r\n\r\n\r
SF:\n301\x20Moved\x20Permanently\r\n\r\n
SF:301\x20Moved\x20Permanently
\r\n
sn
SF:ow_adc\r\n\r\n\r\n")%r(HTTPOptions,165,"HTTP/1\.
SF:1\x20301\x20Moved\x20Permanently\r\nServer:\x20snow_adc\r\nDate:\x20Thu
SF:,\x2011\x20Sep\x202025\x2000:32:59\x20GMT\r\nContent-Type:\x20text/html
SF:\r\nContent-Length:\x20165\r\nConnection:\x20close\r\nLocation:\x20http
SF:s://www\.servicenow\.com\r\n\r\n\r\n301\x20Moved\x20
SF:Permanently\r\n\r\n301\x20Moved\x20Per
SF:manently
\r\n
snow_adc\r\n\r\n<
SF:/html>\r\n")%r(FourOhFourRequest,165,"HTTP/1\.1\x20301\x20Moved\x20Perm
SF:anently\r\nServer:\x20snow_adc\r\nDate:\x20Thu,\x2011\x20Sep\x202025\x2
SF:000:32:59\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x2016
SF:5\r\nConnection:\x20close\r\nLocation:\x20https://www\.servicenow\.com\
SF:r\n\r\n\r\n301\x20Moved\x20Permanently\r\n\r\n301\x20Moved\x20Permanently
\r\
SF:n
snow_adc\r\n\r\n\r\n")%r(tor-versio
SF:ns,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDa
SF:te:\x20Thu,\x2011\x20Sep\x202025\x2000:32:59\x20GMT\r\nContent-Type:\x2
SF:0text/html\r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400\x20Bad\x20Request\r\n\r\n<
SF:center>400\x20Bad\x20Request
\r\n
snow_adc<
SF:/center>\r\n\r\n\r\n")%r(RTSPRequest,12D,"HTTP/1\.1\x2040
SF:0\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Thu,\x2011\x20Se
SF:p\x202025\x2000:33:05\x20GMT\r\nContent-Type:\x20text/html\r\nContent-L
SF:ength:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400
SF:\x20Bad\x20Request\r\n\r\n400\x20Bad\x
SF:20Request
\r\n
snow_adc\r\n\r\n
SF:\r\n");
Aggressive OS guesses: Linux 4.10 (92%), HP P2000 G3 NAS device (91%), Linux 3.16 - 4.6 (90%), Linux 5.1 (90%), Linux 4.4 (90%), Linux 3.10 - 4.11 (88%), Linux 3.13 (88%), Linux 3.13 or 4.2 (88%), Linux 4.2 (88%), Asus RT-AC66U WAP (88%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 14 hops
TRACEROUTE (using port 4343/tcp)
HOP RTT ADDRESS
1 0.22 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177)
2 4.60 ms gw.mcom-colocationamerica.com (208.64.231.81)
3 0.69 ms r2b4.n1.p1401.lax.multacom.net (64.69.46.11)
4 0.37 ms ce-1-4-2.a04.lsanca07.us.bb.gin.ntt.net (128.241.15.73)
5 0.74 ms ae-3.r26.lsanca07.us.bb.gin.ntt.net (129.250.3.130)
6 0.57 ms ae-0.a03.lsanca20.us.bb.gin.ntt.net (129.250.3.94)
7 0.60 ms ae-0.security-services.lsanca20.us.bb.gin.ntt.net (129.250.194.86)
8 ... 9
10 61.25 ms 156.154.221.0
11 59.48 ms 156.154.255.161
12 ... 13
14 59.49 ms vip-149-96-22-54.cust.service-now.com (149.96.22.54)
OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 48.07 seconds