Nmap scan report for wms4.sdpondemand.manageengine.com (204.141.43.156) Host is up (0.030s latency). Not shown: 997 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 80/tcp open http ZGS | fingerprint-strings: | FourOhFourRequest: | HTTP/1.1 400 Bad Request | Server: ZGS | Date: Mon, 15 Sep 2025 08:12:54 GMT | Content-Type: text/html | Content-Length: 122 | Connection: close | zproxy: domain_not_configured | | 400 Bad Request | |

400 Bad Request

| | | GetRequest, HTTPOptions, RTSPRequest, X11Probe: | HTTP/1.1 400 Bad Request | Server: ZGS | Date: Mon, 15 Sep 2025 08:12:53 GMT | Content-Type: text/html | Content-Length: 122 | Connection: close | zproxy: domain_not_configured | | 400 Bad Request | |

400 Bad Request

| | | RPCCheck: | HTTP/1.1 400 Bad Request | Server: ZGS | Date: Mon, 15 Sep 2025 08:12:59 GMT | Content-Type: text/html | Content-Length: 122 | Connection: close | zproxy: domain_not_configured | | 400 Bad Request | |

400 Bad Request

| |_ |_http-title: Did not follow redirect to https://wms4.sdpondemand.manageengine.com/ |_http-server-header: ZGS 113/tcp closed ident 443/tcp open ssl/https ZGS |_http-title: WMS Persistent Connection Server - AWS | fingerprint-strings: | FourOhFourRequest: | HTTP/1.1 400 Bad Request | Server: ZGS | Date: Mon, 15 Sep 2025 08:13:00 GMT | Content-Type: text/html | Content-Length: 122 | Connection: close | Strict-Transport-Security: max-age=64072000; includeSubDomains; preload | zproxy: domain_not_configured | | 400 Bad Request | |

400 Bad Request

| | | GetRequest, HTTPOptions: | HTTP/1.1 400 Bad Request | Server: ZGS | Date: Mon, 15 Sep 2025 08:12:59 GMT | Content-Type: text/html | Content-Length: 122 | Connection: close | Strict-Transport-Security: max-age=64072000; includeSubDomains; preload | zproxy: domain_not_configured | | 400 Bad Request | |

400 Bad Request

| | | RTSPRequest: | HTTP/1.1 400 Bad Request | Server: ZGS | Date: Mon, 15 Sep 2025 08:13:05 GMT | Content-Type: text/html | Content-Length: 122 | Connection: close | Strict-Transport-Security: max-age=64072000; includeSubDomains; preload | | 400 Bad Request | |

400 Bad Request

| | | tor-versions: | HTTP/1.1 400 Bad Request | Server: ZGS | Date: Mon, 15 Sep 2025 08:13:00 GMT | Content-Type: text/html | Content-Length: 122 | Connection: close | Strict-Transport-Security: max-age=64072000; includeSubDomains; preload | | 400 Bad Request | |

400 Bad Request

| |_ | ssl-cert: Subject: commonName=*.sdpondemand.manageengine.com | Subject Alternative Name: DNS:*.sdpondemand.manageengine.com, DNS:sdpondemand.manageengine.com | Not valid before: 2025-08-27T02:56:37 |_Not valid after: 2025-11-25T02:56:36 | tls-alpn: | http/1.1 | http/1.0 |_ http/0.9 |_ssl-date: TLS randomness does not represent time |_http-server-header: ZGS 2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service : ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port80-TCP:V=7.92%I=7%D=9/15%Time=68C7CA85%P=x86_64-redhat-linux-gnu%r( SF:GetRequest,128,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20ZGS\r\ SF:nDate:\x20Mon,\x2015\x20Sep\x202025\x2008:12:53\x20GMT\r\nContent-Type: SF:\x20text/html\r\nContent-Length:\x20122\r\nConnection:\x20close\r\nzpro SF:xy:\x20domain_not_configured\r\n\r\n\r\n400\x20Bad\x SF:20Request\r\n\r\n

400\x20Bad\x20Request SF:

\r\n\r\n\r\n")%r(HTTPOptions,128,"HTTP/1\.1 SF:\x20400\x20Bad\x20Request\r\nServer:\x20ZGS\r\nDate:\x20Mon,\x2015\x20S SF:ep\x202025\x2008:12:53\x20GMT\r\nContent-Type:\x20text/html\r\nContent- SF:Length:\x20122\r\nConnection:\x20close\r\nzproxy:\x20domain_not_configu SF:red\r\n\r\n\r\n400\x20Bad\x20Request\ SF:r\n\r\n

400\x20Bad\x20Request

\r\n SF:\r\n\r\n")%r(RTSPRequest,128,"HTTP/1\.1\x20400\x20Bad\x20Request SF:\r\nServer:\x20ZGS\r\nDate:\x20Mon,\x2015\x20Sep\x202025\x2008:12:53\x2 SF:0GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20122\r\nConnect SF:ion:\x20close\r\nzproxy:\x20domain_not_configured\r\n\r\n\r\n400\x20Bad\x20Request\r\n\r\n

SF:400\x20Bad\x20Request

\r\n\r\n\r\n")%r(X11Pr SF:obe,128,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20ZGS\r\nDate:\ SF:x20Mon,\x2015\x20Sep\x202025\x2008:12:53\x20GMT\r\nContent-Type:\x20tex SF:t/html\r\nContent-Length:\x20122\r\nConnection:\x20close\r\nzproxy:\x20 SF:domain_not_configured\r\n\r\n\r\n400\x20Bad\x20Reque SF:st\r\n\r\n

400\x20Bad\x20Request

\r\n\r\n\r\n")%r(FourOhFourRequest,128,"HTTP/1\.1\ SF:x20400\x20Bad\x20Request\r\nServer:\x20ZGS\r\nDate:\x20Mon,\x2015\x20Se SF:p\x202025\x2008:12:54\x20GMT\r\nContent-Type:\x20text/html\r\nContent-L SF:ength:\x20122\r\nConnection:\x20close\r\nzproxy:\x20domain_not_configur SF:ed\r\n\r\n\r\n400\x20Bad\x20Request\r SF:\n\r\n

400\x20Bad\x20Request

\r\n\ SF:r\n\r\n")%r(RPCCheck,128,"HTTP/1\.1\x20400\x20Bad\x20Request\r\n SF:Server:\x20ZGS\r\nDate:\x20Mon,\x2015\x20Sep\x202025\x2008:12:59\x20GMT SF:\r\nContent-Type:\x20text/html\r\nContent-Length:\x20122\r\nConnection: SF:\x20close\r\nzproxy:\x20domain_not_configured\r\n\r\n\r\n400\x20Bad\x20Request\r\n\r\n

400\ SF:x20Bad\x20Request

\r\n\r\n\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port443-TCP:V=7.92%T=SSL%I=7%D=9/15%Time=68C7CA8B%P=x86_64-redhat-linux SF:-gnu%r(GetRequest,171,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x2 SF:0ZGS\r\nDate:\x20Mon,\x2015\x20Sep\x202025\x2008:12:59\x20GMT\r\nConten SF:t-Type:\x20text/html\r\nContent-Length:\x20122\r\nConnection:\x20close\ SF:r\nStrict-Transport-Security:\x20max-age=64072000;\x20includeSubDomains SF:;\x20preload\r\nzproxy:\x20domain_not_configured\r\n\r\n\r\n400\x20Bad\x20Request\r\n\r\n

4 SF:00\x20Bad\x20Request

\r\n\r\n\r\n")%r(HTTPOp SF:tions,171,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20ZGS\r\nDate SF::\x20Mon,\x2015\x20Sep\x202025\x2008:12:59\x20GMT\r\nContent-Type:\x20t SF:ext/html\r\nContent-Length:\x20122\r\nConnection:\x20close\r\nStrict-Tr SF:ansport-Security:\x20max-age=64072000;\x20includeSubDomains;\x20preload SF:\r\nzproxy:\x20domain_not_configured\r\n\r\n\r\n400\ SF:x20Bad\x20Request\r\n\r\n

400\x20Bad\x2 SF:0Request

\r\n\r\n\r\n")%r(FourOhFourRequest, SF:171,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20ZGS\r\nDate:\x20M SF:on,\x2015\x20Sep\x202025\x2008:13:00\x20GMT\r\nContent-Type:\x20text/ht SF:ml\r\nContent-Length:\x20122\r\nConnection:\x20close\r\nStrict-Transpor SF:t-Security:\x20max-age=64072000;\x20includeSubDomains;\x20preload\r\nzp SF:roxy:\x20domain_not_configured\r\n\r\n\r\n400\x20Bad SF:\x20Request\r\n\r\n

400\x20Bad\x20Reque SF:st

\r\n\r\n\r\n")%r(tor-versions,152,"HTTP/1 SF:\.1\x20400\x20Bad\x20Request\r\nServer:\x20ZGS\r\nDate:\x20Mon,\x2015\x SF:20Sep\x202025\x2008:13:00\x20GMT\r\nContent-Type:\x20text/html\r\nConte SF:nt-Length:\x20122\r\nConnection:\x20close\r\nStrict-Transport-Security: SF:\x20max-age=64072000;\x20includeSubDomains;\x20preload\r\n\r\n\r\ SF:n400\x20Bad\x20Request\r\n\r\n

400\x20Bad\x20Request

\r\n\r\n\r\n")%r( SF:RTSPRequest,152,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20ZGS\r SF:\nDate:\x20Mon,\x2015\x20Sep\x202025\x2008:13:05\x20GMT\r\nContent-Type SF::\x20text/html\r\nContent-Length:\x20122\r\nConnection:\x20close\r\nStr SF:ict-Transport-Security:\x20max-age=64072000;\x20includeSubDomains;\x20p SF:reload\r\n\r\n\r\n400\x20Bad\x20Request\r\n\r\n

400\x20Bad\x20Request

\r\n\r\n\r\n"); Device type: general purpose|phone Running (JUST GUESSING): FreeBSD 11.X (87%), Google Android 5.X (85%) OS CPE: cpe:/o:freebsd:freebsd:11.0 cpe:/o:google:android:5.0.1 Aggressive OS guesses: FreeBSD 11.0-STABLE or 11.0-RELEASE (87%), FreeBSD 11.0-RELEASE (86%), FreeBSD 11.2-STABLE (86%), Android 5.0.1 (85%) No exact OS matches for host (test conditions non-ideal). Network Distance: 11 hops TRACEROUTE (using port 113/tcp) HOP RTT ADDRESS 1 0.19 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177) 2 0.62 ms gw.mcom-colocationamerica.com (208.64.231.81) 3 0.79 ms r2b4.n1.p1401.lax.multacom.net (64.69.46.11) 4 0.67 ms ce-1-4-2.a04.lsanca07.us.bb.gin.ntt.net (128.241.15.73) 5 0.57 ms ae-1.r27.lsanca07.us.bb.gin.ntt.net (129.250.3.242) 6 7.55 ms ae-17.r26.snjsca04.us.bb.gin.ntt.net (129.250.4.239) 7 8.80 ms ae-0.r27.snjsca04.us.bb.gin.ntt.net (129.250.5.225) 8 27.39 ms ae-6.r27.sttlwa01.us.bb.gin.ntt.net (129.250.3.125) 9 25.49 ms ae-25.a02.sttlwa01.us.bb.gin.ntt.net (129.250.2.145) 10 29.53 ms xe-2-5-3-1.a02.sttlwa01.us.ce.gin.ntt.net (168.143.191.5) 11 31.45 ms 204.141.43.156 OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 34.50 seconds