The remote service is a netsaint-statd daemon, a system monitoring tool designed to be integrated with Netsaint, although it can also be used without that. 

Netsaint is not maintained any more, the project evolved to Nagios.

An RSP agent is running on this port.  RSP is an agent-based system management and monitoring tool from Draconis Software.

A QNX qconn service is running on this host. 

QNX plans to add some authentication to qconn.  Meanwhile, qconn should be used only in development phase. 

Through this service, it is possible to upload and execute arbitrary code on the host.  An attacker can use this service to take complete control of the affected device.

The QNX pdebug remote debugging service is running on this host. pdebug should only be used only in development phase.

Through this service, it is possible to upload and execute arbitrary code on the host, read or modify memory, stop running processes, etc. 

An attacker can use this service to take complete control of the affected device.

The remote service is the D-link Click 'n Connect Daemon (DCCD), a remote networking service provided on some D-link networking devices that allows a remote client to view and configure the D-link device.

eyeMax DVR Server is running on this port.  This service controls network cameras, typically for a CCTV network.

Beanstalkd, a messaging server, is running on the remote host.

The remote host is a Lexmark printer.

By querying the device information page, this plugin attempts to identify the model, and various other key software versions such as kernel, engine, base installed on the remote Lexmark device.

A Tenable PVS Proxy service was detected on the remote host.

The remote host is running a Windows Media Service server, a media streaming server.

The remote service supports version 2 of the Internet Cache Protocol (ICP), used for communicating between web caches.

The remote service supports the Hyper Text Caching Protocol (HTCP), used for discovering HTTP caches and cached data, managing sets of HTTP caches, and monitoring cache activity.

The remote service supports the STUN (Session Traversal Utilities for NAT) protocol as described in RFC 5389. STUN helps client software behind a NAT router discover the external public address and the behavior of the router.

Note that an earlier version of the protocol used a different acronym
- 'Simple Traversal of User Datagram Protocol (UDP) Through Network Address Translators (NATs)' - as specified in RFC 3489.

The remote host is an Alert Standard Format (ASF) aware device that can be controlled remotely using Remote Management and Control Protocol (RMCP).

ASF is a DMTF standard that provides a remote control and alerting interface between management consoles and ASF-aware hosts.

RMCP is a network protocol used by a management console to remotely control an ASF-aware host.  RMCP Security-Extensions Protocol (RSP), a security-enhanced version of RMCP, provides authentication and integrity when sending RMCP messages.

The remote service appears to be a Logitech Touch Mouse Server, a remote control application that allows a remote client to control the keyboard and mouse functions of the server. 

Note that version 1.0 of this service does not implement any sort of access control, which could be exploited by an unauthenticated, remote attacker to execute arbitrary programs or otherwise control the server remotely.

The remote web server has been fingerprinted as one embedded in IBM Remote Supervisor Adapter (RSA) cards.

The remote service supports the X-format Communications Protocol (XCP), commonly used to monitor Eaton-/Powerware-branded UPSes.

The remote device is a D-Link router.  These devices route packets and may provide port forwarding, DMZ configuration and other networking services.

The remote service supports the Home Network Administration Protocol (HNAP), a SOAP-based protocol that provides a common interface for administrative control of networked devices.

The remote service is Node Manager, a utility included with Oracle WebLogic Server and used to remotely start and stop Administration Server and Managed Server instances.

The remote service is running the DB Manager component of Altiris Deployment Solution.  This service is used to remotely manage the Altiris database.

The remote service is used by Squeezebox Server (formerly known as SlimServer and SqueezeCenter) to communicate with associated streaming audio players.

The remote service implements the UDP discovery protocol used by Squeezebox Server (formerly known as SlimServer and SqueezeCenter) to discover other streaming audio servers in the network.

The remote service is a commandline interface for Squeezebox Server (formerly known as SlimServer and SqueezeCenter), a streaming audio server from Logitech to support their range of audio receivers.

Unisys Business Information Server (BIS), a highly scalable, multimode, enterprise-level, rapid-application development and information access tool, is listening on the remote host.

The remote host is an Apple TV, a digital media receiver.

The remote web server implements Strict Transport Security. However, it does not respect all the requirements of the STS draft standard.

The remote web server implements Strict Transport Security (STS).
The goal of STS is to make sure that a user does not accidentally downgrade the security of his or her browser.

All unencrypted HTTP connections are redirected to HTTPS.  The browser is expected to treat all cookies as 'secure' and to close the connection in the event of potentially insecure situations.

The Lotus Domino console is running on this port. 

A dedicated client software uses this console port to reconfigure the Domino server.  Credentials are needed for that operation.

The remote host is a Cisco Adaptive Security Appliance (ASA) running an SSL VPN server.

The remote host appears to be running an sslh daemon.  sslh is a multiplexing service that can accept SSH or SSL connections on the same port, such as 443 from inside a corporate firewall.

Dopewars is a text-based drug dealing game.  A dopewars server was detected on the remote host.

The remote host is running Citrix Licensing Service.

The remote host is running Wyse Device Manager HAgent service.

The remote host is running Novell Privileged User Manager Daemon.

The remote host is running EMC Replication Manager Server.

The remote host is running EMC Replication Manager Client.

The web server on this port responds to HTTP/1.1 requests and appears to ignore HTTP/1.0 requests, which is unusual.

The remote host is an HP LaserJet printer.

The remote host is running ZENworks Remote Management Agent.  This program allows a system to be managed remotely by an administrator.

The remote host is running a Samhain server (yule).  Samhain is a host-based intrusion detection system that also provides centralized logging and management.

According to its web server, the remote host is a Thecus NAS (Network- Attached Storage) device, which provides file-based data storage to hosts across a network.

This machine answered to a multicast UPnP NOTIFY packet by trying to fetch the XML description that Nessus advertised.

Nessus was able to extract some information about the UPnP-enabled device by querying this web server. Services may also be reachable through SOAP requests.

The remote device answered an SSDP M-SEARCH request. Therefore, it supports 'Universal Plug and Play' (UPnP). This protocol provides automatic configuration and device discovery. It is primarily intended for home networks. An attacker could potentially leverage this to discover your network architecture.

The remote host is running RepliStor, a data recovery, backup and data protection service from EMC.

The remote service implements HDHomeRun's control service.  HDHomeRun is a device for streaming digital TV signals over a network, and its control service provides a way for software to manage the device, not only programs it streams but also its firmware.

The remote service implements HDHomeRun's discovery service. HDHomeRun is a device for streaming digital TV signals over a network, and its discovery service allows software such as Windows Media Center or MythTV to locate such devices.

The remote service is a Cron Scheduler for CA Unicenter applications, that is used to launch programs at specified times.

The remote service encrypts communications using SSL/TLS, requests a client certificate, and may require a valid certificate in order to establish a connection to the underlying service.

ID	Name	Severity
49779	netsaint-statd Daemon Detection	info
49689	RSP Detection	info
48354	Unprotected QNX qconn Service	critical
48353	QNX pdebug Service Detection	critical
47605	D-link Click 'n Connect Daemon Detection	info
47135	eyeMax DVR Server Detection	info
46883	Beanstalkd Detection	info
46311	Lexmark Printer Detection	info
46212	Tenable PVS Proxy Detection	info
46016	Windows Media Service Server Detection	info
45609	Internet Cache Protocol (ICP) Version 2 Detection	info
45608	Hyper Text Caching Protocol (HTCP) Detection	info
45580	STUN Detection	info
45555	Alert Standard Format / Remote Management and Control Protocol Detection	info
45436	Logitech Touch Mouse Server Detection	info
45356	IBM Remote Supervisor Adapter Detection (HTTP)	info
44329	X-format Communications Protocol (XCP) Detection	info
44319	D-Link Router Detection	info
44318	HNAP Detection	info
44315	Oracle WebLogic Server Node Manager Detection	info
43831	Altiris Deployment Solution Server DB Manager Detection	info
42933	Squeezebox Server Detection	info
42932	SqueezeCenter Discovery Service Detection	info
42931	Squeezebox Server CLI Detection	info
42843	Unisys Business Information Server Detection	info
42825	Apple TV Detection	info
42823	Non-compliant Strict Transport Security (STS)	info
42822	Strict Transport Security (STS) Detection	info
42818	Lotus Domino Console Detection	info
42796	CISCO ASA SSL VPN Detection	info
42476	sslh Detection	info
42058	Dopewars Server Detection	info
40876	Citrix Licensing Service Detection	info
40861	Wyse Device Manager HAgent Service Detection	info
40853	Novell Privileged User Manager Daemon Detection	info
40851	EMC Replication Manager Server Detection	info
40850	EMC Replication Manager Client Detection	info
40405	Web Server Detection (HTTP/1.1)	info
36128	HP LaserJet Printer Detection	info
36088	ZENworks Remote Management Agent Detection	info
35951	Samhain Server (yule) Detection	info
35820	Thecus NAS Device Detection	info
35713	Scan for UPnP hosts (multicast)	info
35712	Web Server UPnP Detection	info
35711	Universal Plug and Play (UPnP) Protocol Detection	info
35462	EMC RepliStor Detection	info
35360	HDHomeRun Control Service Detection	info
35359	HDHomeRun Discovery Service Detection	info
35309	CA Unicenter Cron Scheduler Detection	info
35297	SSL Service Requests Client Certificate	info

Detections

Analytics

Service detection Family for Nessus

info

info

critical

critical

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info