Nmap scan report for support.tierpoint.com (149.96.41.225) Host is up (0.036s latency). rDNS record for 149.96.41.225: vip-149-96-41-225.cust.service-now.com Not shown: 980 filtered tcp ports (no-response) PORT STATE SERVICE VERSION 25/tcp open tcpwrapped |_smtp-commands: Couldn't establish connection on port 25 80/tcp open http snow_adc |_http-title: Did not follow redirect to https://support.tierpoint.com/ | fingerprint-strings: | FourOhFourRequest, GetRequest, HTTPOptions: | HTTP/1.1 403 Forbidden | Server: snow_adc | Date: Tue, 09 Sep 2025 01:08:55 GMT | Content-Type: text/html | Content-Length: 149 | Connection: close | | 403 Forbidden | |

403 Forbidden

|
snow_adc
| | | RPCCheck: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Tue, 09 Sep 2025 01:09:00 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | | 400 Bad Request | |

400 Bad Request

|
snow_adc
| | | RTSPRequest, X11Probe: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Tue, 09 Sep 2025 01:08:55 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | | 400 Bad Request | |

400 Bad Request

|
snow_adc
| |_ |_http-server-header: snow_adc 443/tcp open ssl/https snow_adc |_http-trane-info: Problem with XML parsing of /evox/about | ssl-cert: Subject: commonName=support.tierpoint.com | Subject Alternative Name: DNS:support.tierpoint.com | Not valid before: 2025-07-15T08:31:11 |_Not valid after: 2025-10-13T08:31:10 | tls-alpn: | http/1.1 | http/1.0 |_ http/0.9 |_ssl-date: TLS randomness does not represent time | fingerprint-strings: | FourOhFourRequest: | HTTP/1.1 301 Moved Permanently | Server: snow_adc | Date: Tue, 09 Sep 2025 01:09:02 GMT | Content-Type: text/html | Content-Length: 165 | Connection: close | Location: https://www.servicenow.com | | 301 Moved Permanently | |

301 Moved Permanently

|
snow_adc
| | | GetRequest, HTTPOptions: | HTTP/1.1 301 Moved Permanently | Server: snow_adc | Date: Tue, 09 Sep 2025 01:09:01 GMT | Content-Type: text/html | Content-Length: 165 | Connection: close | Location: https://www.servicenow.com | | 301 Moved Permanently | |

301 Moved Permanently

|
snow_adc
| | | RTSPRequest: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Tue, 09 Sep 2025 01:09:07 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | | 400 Bad Request | |

400 Bad Request

|
snow_adc
| | | tor-versions: | HTTP/1.1 400 Bad Request | Server: snow_adc | Date: Tue, 09 Sep 2025 01:09:02 GMT | Content-Type: text/html | Content-Length: 153 | Connection: close | | 400 Bad Request | |

400 Bad Request

|
snow_adc
| |_ | http-robots.txt: 1 disallowed entry |_/ | http-title: Service Portal - TierPoint IT Service Portal |_Requested resource was /sp/?id=landing |_http-server-header: snow_adc 4000/tcp open remoteanything? 4001/tcp open newoak? 4002/tcp open mlchat-proxy? 4003/tcp open pxc-splr-ft? 4004/tcp open pxc-roid? 4005/tcp open pxc-pin? 4006/tcp open pxc-spvr? 4045/tcp closed lockd 4111/tcp closed xgrid 4125/tcp closed rww 4126/tcp closed ddrepl 4129/tcp closed nuauth 4224/tcp closed xtell 4242/tcp closed vrml-multi-use 4279/tcp closed vrml-multi-use 4321/tcp closed rwhois 4343/tcp closed unicall 2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service : ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port80-TCP:V=7.92%I=7%D=9/8%Time=68BF7E27%P=x86_64-redhat-linux-gnu%r(G SF:etRequest,127,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20snow_adc\r\n SF:Date:\x20Tue,\x2009\x20Sep\x202025\x2001:08:55\x20GMT\r\nContent-Type:\ SF:x20text/html\r\nContent-Length:\x20149\r\nConnection:\x20close\r\n\r\n< SF:html>\r\n403\x20Forbidden\r\n\r\n

403\x20Forbidden

\r\n
snow_adc
SF:\r\n\r\n\r\n")%r(HTTPOptions,127,"HTTP/1\.1\x20403\x20For SF:bidden\r\nServer:\x20snow_adc\r\nDate:\x20Tue,\x2009\x20Sep\x202025\x20 SF:01:08:55\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20149 SF:\r\nConnection:\x20close\r\n\r\n\r\n403\x20Forbidden SF:\r\n\r\n

403\x20Forbidden

SF:\r\n
snow_adc
\r\n\r\n\r\n")%r(RTSPReq SF:uest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\n SF:Date:\x20Tue,\x2009\x20Sep\x202025\x2001:08:55\x20GMT\r\nContent-Type:\ SF:x20text/html\r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n< SF:html>\r\n400\x20Bad\x20Request\r\n\r\ SF:n

400\x20Bad\x20Request

\r\n
snow_ad SF:c
\r\n\r\n\r\n")%r(X11Probe,12D,"HTTP/1\.1\x20400 SF:\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Tue,\x2009\x20Sep SF:\x202025\x2001:08:55\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Le SF:ngth:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400\ SF:x20Bad\x20Request\r\n\r\n

400\x20Bad\x2 SF:0Request

\r\n
snow_adc
\r\n\r\n< SF:/html>\r\n")%r(FourOhFourRequest,127,"HTTP/1\.1\x20403\x20Forbidden\r\n SF:Server:\x20snow_adc\r\nDate:\x20Tue,\x2009\x20Sep\x202025\x2001:08:55\x SF:20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20149\r\nConnec SF:tion:\x20close\r\n\r\n\r\n403\x20Forbidden\r\n\r\n

403\x20Forbidden

\r\n
snow_adc\r\n\r\n\r\n")%r(RPCCheck,12D,"HTT SF:P/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Tue, SF:\x2009\x20Sep\x202025\x2001:09:00\x20GMT\r\nContent-Type:\x20text/html\ SF:r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400\x20Bad\x20Request\r\n\r\n

SF:400\x20Bad\x20Request

\r\n
snow_adc
\r\ SF:n\r\n\r\n"); ==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)============== SF-Port443-TCP:V=7.92%T=SSL%I=7%D=9/8%Time=68BF7E2D%P=x86_64-redhat-linux- SF:gnu%r(GetRequest,165,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServe SF:r:\x20snow_adc\r\nDate:\x20Tue,\x2009\x20Sep\x202025\x2001:09:01\x20GMT SF:\r\nContent-Type:\x20text/html\r\nContent-Length:\x20165\r\nConnection: SF:\x20close\r\nLocation:\x20https://www\.servicenow\.com\r\n\r\n\r\ SF:n301\x20Moved\x20Permanently\r\n\r\n< SF:center>

301\x20Moved\x20Permanently

\r\n
sno SF:w_adc
\r\n\r\n\r\n")%r(HTTPOptions,165,"HTTP/1\.1 SF:\x20301\x20Moved\x20Permanently\r\nServer:\x20snow_adc\r\nDate:\x20Tue, SF:\x2009\x20Sep\x202025\x2001:09:01\x20GMT\r\nContent-Type:\x20text/html\ SF:r\nContent-Length:\x20165\r\nConnection:\x20close\r\nLocation:\x20https SF:://www\.servicenow\.com\r\n\r\n\r\n301\x20Moved\x20P SF:ermanently\r\n\r\n

301\x20Moved\x20Perm SF:anently

\r\n
snow_adc
\r\n\r\n\r\n")%r(FourOhFourRequest,165,"HTTP/1\.1\x20301\x20Moved\x20Perma SF:nently\r\nServer:\x20snow_adc\r\nDate:\x20Tue,\x2009\x20Sep\x202025\x20 SF:01:09:02\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20165 SF:\r\nConnection:\x20close\r\nLocation:\x20https://www\.servicenow\.com\r SF:\n\r\n\r\n301\x20Moved\x20Permanently SF:\r\n\r\n

301\x20Moved\x20Permanently

\r\n SF:
snow_adc
\r\n\r\n\r\n")%r(tor-version SF:s,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDat SF:e:\x20Tue,\x2009\x20Sep\x202025\x2001:09:02\x20GMT\r\nContent-Type:\x20 SF:text/html\r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400\x20Bad\x20Request\r\n\r\n

400\x20Bad\x20Request

\r\n
snow_adc\r\n\r\n\r\n")%r(RTSPRequest,12D,"HTTP/1\.1\x20400 SF:\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Tue,\x2009\x20Sep SF:\x202025\x2001:09:07\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Le SF:ngth:\x20153\r\nConnection:\x20close\r\n\r\n\r\n400\ SF:x20Bad\x20Request\r\n\r\n

400\x20Bad\x2 SF:0Request

\r\n
snow_adc
\r\n\r\n< SF:/html>\r\n"); Aggressive OS guesses: Linux 5.1 (93%), Linux 3.10 - 4.11 (92%), HP P2000 G3 NAS device (91%), Linux 3.2 - 4.9 (91%), Linux 3.16 - 4.6 (90%), Linux 2.6.32 (90%), Infomir MAG-250 set-top box (90%), Ubiquiti AirMax NanoStation WAP (Linux 2.6.32) (90%), Linux 2.6.32 - 3.13 (89%), Linux 3.3 (89%) No exact OS matches for host (test conditions non-ideal). Network Distance: 12 hops TRACEROUTE (using port 4321/tcp) HOP RTT ADDRESS 1 0.19 ms 208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177) 2 0.47 ms gw.mcom-colocationamerica.com (208.64.231.81) 3 0.70 ms r2b4.n1.p1401.lax.multacom.net (64.69.46.11) 4 0.56 ms ce-1-4-2.a04.lsanca07.us.bb.gin.ntt.net (128.241.15.73) 5 0.71 ms ae-1.r27.lsanca07.us.bb.gin.ntt.net (129.250.3.242) 6 0.64 ms ae-1.a02.lsanca20.us.bb.gin.ntt.net (129.250.2.114) 7 2.45 ms ae-0.att.lsanca20.us.bb.gin.ntt.net (129.250.9.90) 8 11.07 ms 32.130.90.120 9 ... 11 12 28.62 ms vip-149-96-41-225.cust.service-now.com (149.96.41.225) OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ . Nmap done: 1 IP address (1 host up) scanned in 49.45 seconds