marriott.service-now.com

149.96.22.54

Summary

Ports

20

Duration

48sec

Date

2025-09-10

149.96.22.54

Report

Scan OS information and Traceroute (nmap -A marriott.service-now.com)

Nmap scan report for marriott.service-now.com (149.96.22.54)
Host is up (0.060s latency).
rDNS record for 149.96.22.54: vip-149-96-22-54.cust.service-now.com
Not shown: 980 filtered tcp ports (no-response)
PORT     STATE  SERVICE         VERSION
25/tcp   open   tcpwrapped
|_smtp-commands: Couldn't establish connection on port 25
80/tcp   open   http            snow_adc
|_http-title: Did not follow redirect to https://marriott.service-now.com/
| fingerprint-strings: 
|   FourOhFourRequest: 
|     HTTP/1.1 403 Forbidden
|     Server: snow_adc
|     Date: Thu, 11 Sep 2025 00:32:53 GMT
|     Content-Type: text/html
|     Content-Length: 149
|     Connection: close
|     <html>
|     <head><title>403 Forbidden</title></head>
|     <body>
|     <center><h1>403 Forbidden</h1></center>
|     <hr><center>snow_adc</center>
|     </body>
|     </html>
|   GetRequest, HTTPOptions: 
|     HTTP/1.1 403 Forbidden
|     Server: snow_adc
|     Date: Thu, 11 Sep 2025 00:32:52 GMT
|     Content-Type: text/html
|     Content-Length: 149
|     Connection: close
|     <html>
|     <head><title>403 Forbidden</title></head>
|     <body>
|     <center><h1>403 Forbidden</h1></center>
|     <hr><center>snow_adc</center>
|     </body>
|     </html>
|   RPCCheck: 
|     HTTP/1.1 400 Bad Request
|     Server: snow_adc
|     Date: Thu, 11 Sep 2025 00:32:58 GMT
|     Content-Type: text/html
|     Content-Length: 153
|     Connection: close
|     <html>
|     <head><title>400 Bad Request</title></head>
|     <body>
|     <center><h1>400 Bad Request</h1></center>
|     <hr><center>snow_adc</center>
|     </body>
|     </html>
|   RTSPRequest: 
|     HTTP/1.1 400 Bad Request
|     Server: snow_adc
|     Date: Thu, 11 Sep 2025 00:32:52 GMT
|     Content-Type: text/html
|     Content-Length: 153
|     Connection: close
|     <html>
|     <head><title>400 Bad Request</title></head>
|     <body>
|     <center><h1>400 Bad Request</h1></center>
|     <hr><center>snow_adc</center>
|     </body>
|     </html>
|   X11Probe: 
|     HTTP/1.1 400 Bad Request
|     Server: snow_adc
|     Date: Thu, 11 Sep 2025 00:32:53 GMT
|     Content-Type: text/html
|     Content-Length: 153
|     Connection: close
|     <html>
|     <head><title>400 Bad Request</title></head>
|     <body>
|     <center><h1>400 Bad Request</h1></center>
|     <hr><center>snow_adc</center>
|     </body>
|_    </html>
|_http-server-header: snow_adc
443/tcp  open   ssl/https       snow_adc
|_ssl-date: TLS randomness does not represent time
| fingerprint-strings: 
|   FourOhFourRequest, HTTPOptions: 
|     HTTP/1.1 301 Moved Permanently
|     Server: snow_adc
|     Date: Thu, 11 Sep 2025 00:32:59 GMT
|     Content-Type: text/html
|     Content-Length: 165
|     Connection: close
|     Location: https://www.servicenow.com
|     <html>
|     <head><title>301 Moved Permanently</title></head>
|     <body>
|     <center><h1>301 Moved Permanently</h1></center>
|     <hr><center>snow_adc</center>
|     </body>
|     </html>
|   GetRequest: 
|     HTTP/1.1 301 Moved Permanently
|     Server: snow_adc
|     Date: Thu, 11 Sep 2025 00:32:58 GMT
|     Content-Type: text/html
|     Content-Length: 165
|     Connection: close
|     Location: https://www.servicenow.com
|     <html>
|     <head><title>301 Moved Permanently</title></head>
|     <body>
|     <center><h1>301 Moved Permanently</h1></center>
|     <hr><center>snow_adc</center>
|     </body>
|     </html>
|   RTSPRequest: 
|     HTTP/1.1 400 Bad Request
|     Server: snow_adc
|     Date: Thu, 11 Sep 2025 00:33:05 GMT
|     Content-Type: text/html
|     Content-Length: 153
|     Connection: close
|     <html>
|     <head><title>400 Bad Request</title></head>
|     <body>
|     <center><h1>400 Bad Request</h1></center>
|     <hr><center>snow_adc</center>
|     </body>
|     </html>
|   tor-versions: 
|     HTTP/1.1 400 Bad Request
|     Server: snow_adc
|     Date: Thu, 11 Sep 2025 00:32:59 GMT
|     Content-Type: text/html
|     Content-Length: 153
|     Connection: close
|     <html>
|     <head><title>400 Bad Request</title></head>
|     <body>
|     <center><h1>400 Bad Request</h1></center>
|     <hr><center>snow_adc</center>
|     </body>
|_    </html>
| tls-alpn: 
|   http/1.1
|   http/1.0
|_  http/0.9
|_http-server-header: snow_adc
|_http-trane-info: Problem with XML parsing of /evox/about
| http-title: Marriott ServiceNow
|_Requested resource was /auth_redirect.do?sysparm_stack=no&sysparm_url=https%3A%2F%2Fextranet.marriott.com%2F2FAmarrsso%2Fidp%2FstartSSO.ping%3FPartnerSpId%3Dhttps%3A%2F%2Fmarriott.service-now.com%26SAMLRequest%3DnVNNb9swDP0rhu7xV9KmEeIUnoNiAbrWiL0ddilkmWkF2JImykn27yc7H81hTbEdRT6Sj49Pc2RtE2uadvZNruFXB2i9fdtIpIdMQjojqWIokErWAlLLaZF%252Be6SxH1JtlFVcNcRLEcFYoWSmJHYtmALMVnD4vn5MyJu1GmkQtMwYoaz18ZAcSbXzuWoDybaavYJfK%252BItHQUhWd%252FrvRL21jAJ1j%252B36Mvih7R%252FI6pA1DpAy4wtimdfC%252Fl6n7uHdDz0qk4%252BI0C8B2U4DCokxJoOiLdaJqR4ymZVFFW30w3ArArZzRTCqp5ObuMK%252BB2bTMYOiDlDFFtIyIY12JcidrCSjo%252B0CYnD%252BGYUzkZRVIYhHY9pHPt3UfSTePlRvi9C1o7yda2rAwjp17LMR%252FlzUQ4NtqIG8%252BTQ%252FyjzDzA4SOx6k8V8uDYdiJtLA1znxE5XJ4vPhs%252BDyxHHgZr2zFfLXDWC%252F%252FbSplG7zACzcLqCu0vL7McsIj8aIqIebQYo7dzglz5EgvOUo7OhHi7sLGqdobxMtZoZgb0KsGfcnnW4hGWN23INm%252F9S5SqMU973duHeQDtl6t4QwB3P0rkdtTL2JNvfGC2OyQ%252F2e09f%252Fu7FHw%253D%253D%26RelayState%3Dhttps%253A%252F%252Fmarriott.service-now.com%252Fnavpage.do%26SigAlg%3Dhttp%253A%252F%252Fwww.w3.org%252F2000%252F09%252Fxmldsig%2523rsa-sha1%26Signature%3DGICrgVVYY6GDd%252FGGniAMNOjlJNi0PoHEpRzrK1bkHcqRjFE4DSmCdRmOu7BbBB1buVe%252FdqVzMg90v0pBgJ48tJB11FBXVoq02eyXPXhyBNVZtOXT2sc8F7Tjrwb9ObQJLZLCb3eDKDAZzFolAbuiOXPo0ro71PMHf43YsVxQqXkopqFwLEZEzqvSeE9D2UIZB4aDS2CfrEYU8DkOembOA6kx6r%252BjWALx5DhH8Glkbsx6HQvJoDUCFP9nCrrKsQUsWi33TgtHSKoTVHb5tolrC7UA8y0y9gP8Ay%252FOJ0uNomRG2IPY52ShsdNUBh2X4zX6gSZOCZ8q2WxMzCjmwwP%252FOg%253D%253D
| http-robots.txt: 1 disallowed entry 
|_/
| ssl-cert: Subject: commonName=*.service-now.com/organizationName=ServiceNow, Inc./stateOrProvinceName=California/countryName=US
| Subject Alternative Name: DNS:*.service-now.com, DNS:*.static.service-now.com, DNS:service-now.com, DNS:static.service-now.com
| Not valid before: 2025-02-12T00:00:00
|_Not valid after:  2025-10-12T23:59:59
4000/tcp open   remoteanything?
4001/tcp open   newoak?
4002/tcp open   mlchat-proxy?
4003/tcp open   pxc-splr-ft?
4004/tcp open   pxc-roid?
4005/tcp open   pxc-pin?
4006/tcp open   pxc-spvr?
4045/tcp closed lockd
4111/tcp closed xgrid
4125/tcp closed rww
4126/tcp closed ddrepl
4129/tcp closed nuauth
4224/tcp closed xtell
4242/tcp closed vrml-multi-use
4279/tcp closed vrml-multi-use
4321/tcp closed rwhois
4343/tcp closed unicall
2 services unrecognized despite returning data. If you know the service/version, please submit the following fingerprints at https://nmap.org/cgi-bin/submit.cgi?new-service :
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port80-TCP:V=7.92%I=7%D=9/10%Time=68C218B4%P=x86_64-redhat-linux-gnu%r(
SF:GetRequest,127,"HTTP/1\.1\x20403\x20Forbidden\r\nServer:\x20snow_adc\r\
SF:nDate:\x20Thu,\x2011\x20Sep\x202025\x2000:32:52\x20GMT\r\nContent-Type:
SF:\x20text/html\r\nContent-Length:\x20149\r\nConnection:\x20close\r\n\r\n
SF:<html>\r\n<head><title>403\x20Forbidden</title></head>\r\n<body>\r\n<ce
SF:nter><h1>403\x20Forbidden</h1></center>\r\n<hr><center>snow_adc</center
SF:>\r\n</body>\r\n</html>\r\n")%r(HTTPOptions,127,"HTTP/1\.1\x20403\x20Fo
SF:rbidden\r\nServer:\x20snow_adc\r\nDate:\x20Thu,\x2011\x20Sep\x202025\x2
SF:000:32:52\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x2014
SF:9\r\nConnection:\x20close\r\n\r\n<html>\r\n<head><title>403\x20Forbidde
SF:n</title></head>\r\n<body>\r\n<center><h1>403\x20Forbidden</h1></center
SF:>\r\n<hr><center>snow_adc</center>\r\n</body>\r\n</html>\r\n")%r(RTSPRe
SF:quest,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\
SF:nDate:\x20Thu,\x2011\x20Sep\x202025\x2000:32:52\x20GMT\r\nContent-Type:
SF:\x20text/html\r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n
SF:<html>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\r
SF:\n<center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>snow_a
SF:dc</center>\r\n</body>\r\n</html>\r\n")%r(X11Probe,12D,"HTTP/1\.1\x2040
SF:0\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Thu,\x2011\x20Se
SF:p\x202025\x2000:32:53\x20GMT\r\nContent-Type:\x20text/html\r\nContent-L
SF:ength:\x20153\r\nConnection:\x20close\r\n\r\n<html>\r\n<head><title>400
SF:\x20Bad\x20Request</title></head>\r\n<body>\r\n<center><h1>400\x20Bad\x
SF:20Request</h1></center>\r\n<hr><center>snow_adc</center>\r\n</body>\r\n
SF:</html>\r\n")%r(FourOhFourRequest,127,"HTTP/1\.1\x20403\x20Forbidden\r\
SF:nServer:\x20snow_adc\r\nDate:\x20Thu,\x2011\x20Sep\x202025\x2000:32:53\
SF:x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x20149\r\nConne
SF:ction:\x20close\r\n\r\n<html>\r\n<head><title>403\x20Forbidden</title><
SF:/head>\r\n<body>\r\n<center><h1>403\x20Forbidden</h1></center>\r\n<hr><
SF:center>snow_adc</center>\r\n</body>\r\n</html>\r\n")%r(RPCCheck,12D,"HT
SF:TP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Thu
SF:,\x2011\x20Sep\x202025\x2000:32:58\x20GMT\r\nContent-Type:\x20text/html
SF:\r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n<html>\r\n<he
SF:ad><title>400\x20Bad\x20Request</title></head>\r\n<body>\r\n<center><h1
SF:>400\x20Bad\x20Request</h1></center>\r\n<hr><center>snow_adc</center>\r
SF:\n</body>\r\n</html>\r\n");
==============NEXT SERVICE FINGERPRINT (SUBMIT INDIVIDUALLY)==============
SF-Port443-TCP:V=7.92%T=SSL%I=7%D=9/10%Time=68C218BA%P=x86_64-redhat-linux
SF:-gnu%r(GetRequest,165,"HTTP/1\.1\x20301\x20Moved\x20Permanently\r\nServ
SF:er:\x20snow_adc\r\nDate:\x20Thu,\x2011\x20Sep\x202025\x2000:32:58\x20GM
SF:T\r\nContent-Type:\x20text/html\r\nContent-Length:\x20165\r\nConnection
SF::\x20close\r\nLocation:\x20https://www\.servicenow\.com\r\n\r\n<html>\r
SF:\n<head><title>301\x20Moved\x20Permanently</title></head>\r\n<body>\r\n
SF:<center><h1>301\x20Moved\x20Permanently</h1></center>\r\n<hr><center>sn
SF:ow_adc</center>\r\n</body>\r\n</html>\r\n")%r(HTTPOptions,165,"HTTP/1\.
SF:1\x20301\x20Moved\x20Permanently\r\nServer:\x20snow_adc\r\nDate:\x20Thu
SF:,\x2011\x20Sep\x202025\x2000:32:59\x20GMT\r\nContent-Type:\x20text/html
SF:\r\nContent-Length:\x20165\r\nConnection:\x20close\r\nLocation:\x20http
SF:s://www\.servicenow\.com\r\n\r\n<html>\r\n<head><title>301\x20Moved\x20
SF:Permanently</title></head>\r\n<body>\r\n<center><h1>301\x20Moved\x20Per
SF:manently</h1></center>\r\n<hr><center>snow_adc</center>\r\n</body>\r\n<
SF:/html>\r\n")%r(FourOhFourRequest,165,"HTTP/1\.1\x20301\x20Moved\x20Perm
SF:anently\r\nServer:\x20snow_adc\r\nDate:\x20Thu,\x2011\x20Sep\x202025\x2
SF:000:32:59\x20GMT\r\nContent-Type:\x20text/html\r\nContent-Length:\x2016
SF:5\r\nConnection:\x20close\r\nLocation:\x20https://www\.servicenow\.com\
SF:r\n\r\n<html>\r\n<head><title>301\x20Moved\x20Permanently</title></head
SF:>\r\n<body>\r\n<center><h1>301\x20Moved\x20Permanently</h1></center>\r\
SF:n<hr><center>snow_adc</center>\r\n</body>\r\n</html>\r\n")%r(tor-versio
SF:ns,12D,"HTTP/1\.1\x20400\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDa
SF:te:\x20Thu,\x2011\x20Sep\x202025\x2000:32:59\x20GMT\r\nContent-Type:\x2
SF:0text/html\r\nContent-Length:\x20153\r\nConnection:\x20close\r\n\r\n<ht
SF:ml>\r\n<head><title>400\x20Bad\x20Request</title></head>\r\n<body>\r\n<
SF:center><h1>400\x20Bad\x20Request</h1></center>\r\n<hr><center>snow_adc<
SF:/center>\r\n</body>\r\n</html>\r\n")%r(RTSPRequest,12D,"HTTP/1\.1\x2040
SF:0\x20Bad\x20Request\r\nServer:\x20snow_adc\r\nDate:\x20Thu,\x2011\x20Se
SF:p\x202025\x2000:33:05\x20GMT\r\nContent-Type:\x20text/html\r\nContent-L
SF:ength:\x20153\r\nConnection:\x20close\r\n\r\n<html>\r\n<head><title>400
SF:\x20Bad\x20Request</title></head>\r\n<body>\r\n<center><h1>400\x20Bad\x
SF:20Request</h1></center>\r\n<hr><center>snow_adc</center>\r\n</body>\r\n
SF:</html>\r\n");
Aggressive OS guesses: Linux 4.10 (92%), HP P2000 G3 NAS device (91%), Linux 3.16 - 4.6 (90%), Linux 5.1 (90%), Linux 4.4 (90%), Linux 3.10 - 4.11 (88%), Linux 3.13 (88%), Linux 3.13 or 4.2 (88%), Linux 4.2 (88%), Asus RT-AC66U WAP (88%)
No exact OS matches for host (test conditions non-ideal).
Network Distance: 14 hops

TRACEROUTE (using port 4343/tcp)
HOP RTT      ADDRESS
1   0.22 ms  208.76.251.177.rdns.ColocationAmerica.com (208.76.251.177)
2   4.60 ms  gw.mcom-colocationamerica.com (208.64.231.81)
3   0.69 ms  r2b4.n1.p1401.lax.multacom.net (64.69.46.11)
4   0.37 ms  ce-1-4-2.a04.lsanca07.us.bb.gin.ntt.net (128.241.15.73)
5   0.74 ms  ae-3.r26.lsanca07.us.bb.gin.ntt.net (129.250.3.130)
6   0.57 ms  ae-0.a03.lsanca20.us.bb.gin.ntt.net (129.250.3.94)
7   0.60 ms  ae-0.security-services.lsanca20.us.bb.gin.ntt.net (129.250.194.86)
8   ... 9
10  61.25 ms 156.154.221.0
11  59.48 ms 156.154.255.161
12  ... 13
14  59.49 ms vip-149-96-22-54.cust.service-now.com (149.96.22.54)

OS and Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 48.07 seconds

Color Scheme

Online Port scanner - portscanner, nmap, unicornscan | Product Hunt

Detailed report
Pricing

Detailed report

Target

marriott.service-now.com

Target IP

149.96.22.54

Host status

Target Country

United States of America

Free scan

Get professional level ($45.00/year)

Free scan

Get professional level ($45.00/year)

Method

Scan OS information and Traceroute

Scan status

Identified 20 ports

Run command

nmap -A marriott.service-now.com

Scan date

10 Sep 2025 20:33

API - Scan ID

6683da773dbc3780dfc05f9dafb756ca96c5fea1

Scan duration

48sec

Copy scan report

Download report

Remove scan result

Total scans

About 2 times

Scan more

Use Nikto Tool

Pricing

REGISTERED

Features

5 scans/day

Daily API Calls - 20 request

Save log

Public scan

OSINT scan

Unlisted scan

Private scan

No Ads

Remove after scan

Remove scan result

Additional methods for scan

This option is suitable for beginners who want to check if their host has any open ports accessible from the outside.

$0.00
Lifetime

PROFESSIONAL

Features

10 000 scans/day

Daily API Calls - 100 000 request

Save log

Public scan

OSINT scan

Unlisted scan

Private scan

No Ads

Remove after scan

Remove scan result

Additional methods for scan

This option is best for professionals who need to test their host's open ports from an external source.

$7.50 $3.75/Month
Billed Annually @ $45.00 - 50% discount

Get Professional

Scan report for "marriott.service-now.com"

marriott.service-now.com

149.96.22.54

Summary

20

48sec

2025-09-10

149.96.22.54

Report

Color Scheme

Detailed report

Pricing

REGISTERED

$0.00Lifetime

$0.00

PROFESSIONAL

$7.50 $3.75/MonthBilled Annually @ $45.00 - 50% discount

$7.50 $3.75/Month

$0.00
Lifetime

$7.50 $3.75/Month
Billed Annually @ $45.00 - 50% discount