The remote service supports the Home Network Administration Protocol (HNAP), a SOAP-based protocol that provides a common interface for administrative control of networked devices.

The remote service is Node Manager, a utility included with Oracle WebLogic Server and used to remotely start and stop Administration Server and Managed Server instances.

The remote service is running the DB Manager component of Altiris Deployment Solution.  This service is used to remotely manage the Altiris database.

The remote service is used by Squeezebox Server (formerly known as SlimServer and SqueezeCenter) to communicate with associated streaming audio players.

The remote service implements the UDP discovery protocol used by Squeezebox Server (formerly known as SlimServer and SqueezeCenter) to discover other streaming audio servers in the network.

The remote service is a commandline interface for Squeezebox Server (formerly known as SlimServer and SqueezeCenter), a streaming audio server from Logitech to support their range of audio receivers.

Unisys Business Information Server (BIS), a highly scalable, multimode, enterprise-level, rapid-application development and information access tool, is listening on the remote host.

The remote host is an Apple TV, a digital media receiver.

The remote web server implements Strict Transport Security. However, it does not respect all the requirements of the STS draft standard.

The remote web server implements Strict Transport Security (STS).
The goal of STS is to make sure that a user does not accidentally downgrade the security of his or her browser.

All unencrypted HTTP connections are redirected to HTTPS.  The browser is expected to treat all cookies as 'secure' and to close the connection in the event of potentially insecure situations.

The Lotus Domino console is running on this port. 

A dedicated client software uses this console port to reconfigure the Domino server.  Credentials are needed for that operation.

The remote host is a Cisco Adaptive Security Appliance (ASA) running an SSL VPN server.

The remote host appears to be running an sslh daemon.  sslh is a multiplexing service that can accept SSH or SSL connections on the same port, such as 443 from inside a corporate firewall.

Dopewars is a text-based drug dealing game.  A dopewars server was detected on the remote host.

The remote host is running Citrix Licensing Service.

The remote host is running Wyse Device Manager HAgent service.

The remote host is running Novell Privileged User Manager Daemon.

The remote host is running EMC Replication Manager Server.

The remote host is running EMC Replication Manager Client.

The web server on this port responds to HTTP/1.1 requests and appears to ignore HTTP/1.0 requests, which is unusual.

The remote host is an HP LaserJet printer.

The remote host is running ZENworks Remote Management Agent.  This program allows a system to be managed remotely by an administrator.

The remote host is running a Samhain server (yule).  Samhain is a host-based intrusion detection system that also provides centralized logging and management.

According to its web server, the remote host is a Thecus NAS (Network- Attached Storage) device, which provides file-based data storage to hosts across a network.

This machine answered to a multicast UPnP NOTIFY packet by trying to fetch the XML description that Nessus advertised.

Nessus was able to extract some information about the UPnP-enabled device by querying this web server. Services may also be reachable through SOAP requests.

The remote device answered an SSDP M-SEARCH request. Therefore, it supports 'Universal Plug and Play' (UPnP). This protocol provides automatic configuration and device discovery. It is primarily intended for home networks. An attacker could potentially leverage this to discover your network architecture.

The remote host is running RepliStor, a data recovery, backup and data protection service from EMC.

The remote service implements HDHomeRun's control service.  HDHomeRun is a device for streaming digital TV signals over a network, and its control service provides a way for software to manage the device, not only programs it streams but also its firmware.

The remote service implements HDHomeRun's discovery service. HDHomeRun is a device for streaming digital TV signals over a network, and its discovery service allows software such as Windows Media Center or MythTV to locate such devices.

The remote service is a Cron Scheduler for CA Unicenter applications, that is used to launch programs at specified times.

The remote service encrypts communications using SSL/TLS, requests a client certificate, and may require a valid certificate in order to establish a connection to the underlying service.

The remote host is running Yosemite Backup, a commercial backup solution for Windows, Linux, and Novell NetWare and targetting small-to-medium sized businesses.

The remote host is running Condor, an open source software framework for distributed job scheduling.

The remote service supports the HTTP CONNECT method for tunneling connections through an HTTP connection.

The remote service is a Perspectives Network Notary Server. Perspectives is a framework to authenticate public keys for various network services, and a Network Notary monitors and records the public keys used by various network services.

The remote host is running echoServer, which which allows peer-to-peer or client-server applications to connect to one another as a series of outbound connections, which may be helpful in avoiding problems caused by firewalls and NAT'ing routers.

The remote host is running Zebedee in server mode, which allows for securely tunneling TCP and UDP connections to arbitrary hosts and ports through this port.

An IRC bouncer (aka BNC) is running on this port.  It proxies communications between IRC clients and servers.  This may be done to allow clients without direct network access to connect to servers or to hide client addresses. 

Legimate use of such proxies is rare.  They are often installed by attackers in order to avoid detection while controlling a 'botnet'.

ezbounce, an IRC bouncer, is running on this port.  It proxies communications between IRC clients and servers.  This may be done to allow clients without direct network access to connect to servers or to hide client addresses. 

Legimate use of such proxies is rare.  They are often installed by attackers in order to avoid detection while controlling a 'botnet'.

BNC, an IRC bouncer from The BNC Project, is running on this port.  It proxies communications between IRC clients and servers.  This may be done to allow clients without direct network access to connect to servers or to hide client addresses. 

Legimate use of such proxies is rare.  They are often installed by attackers in order to avoid detection while controlling a 'botnet'.

The remote service is a LANDesk QIP Server, one of the components of LANDesk Management Suite.

The remote host is running Kyocera Mita's Scanner File Utility, an agent that runs on Windows hosts and allows Kyocera Mita multi- function devices to scan to a user's desktop.

This service is unknown to Nessus.  It appears to send a Microsoft Windows executable when a connection to it is established.  This may be evidence of some malware that are known to propagate in this manner.

The remote service is a Remote Control Service, one of the components of LANDesk Management Suite installed on managed clients for communicating with the administrative console.

Openlink Virtuoso Server, a hybrid database server available as a commercial as well as an open source product is running on the remote host.

The remote server supports Microsoft's .NET NegotiateStream protocol, which provides a lightweight authentication and security mechanism between a client and a server when the client or server needs direct access to the TCP stream.

The remote service is an ASP Server, part of Sun Java System Active Server Pages or an older variant such as Chili!Soft ASP, which provides a web server with ASP (Active Server Pages) functionality.

The remote host is running Microsoft Dynamics GP Distributed Process Manager. Dynamics GP is a business accounting and management software solution from Microsoft.

The remote host is running a EMC AlphaStor Device Manager service.
AlphaStor is a tape backup management and library sharing for EMC NetWorker.

ID	Name	Severity
44318	HNAP Detection	info
44315	Oracle WebLogic Server Node Manager Detection	info
43831	Altiris Deployment Solution Server DB Manager Detection	info
42933	Squeezebox Server Detection	info
42932	SqueezeCenter Discovery Service Detection	info
42931	Squeezebox Server CLI Detection	info
42843	Unisys Business Information Server Detection	info
42825	Apple TV Detection	info
42823	Non-compliant Strict Transport Security (STS)	info
42822	Strict Transport Security (STS) Detection	info
42818	Lotus Domino Console Detection	info
42796	CISCO ASA SSL VPN Detection	info
42476	sslh Detection	info
42058	Dopewars Server Detection	info
40876	Citrix Licensing Service Detection	info
40861	Wyse Device Manager HAgent Service Detection	info
40853	Novell Privileged User Manager Daemon Detection	info
40851	EMC Replication Manager Server Detection	info
40850	EMC Replication Manager Client Detection	info
40405	Web Server Detection (HTTP/1.1)	info
36128	HP LaserJet Printer Detection	info
36088	ZENworks Remote Management Agent Detection	info
35951	Samhain Server (yule) Detection	info
35820	Thecus NAS Device Detection	info
35713	Scan for UPnP hosts (multicast)	info
35712	Web Server UPnP Detection	info
35711	Universal Plug and Play (UPnP) Protocol Detection	info
35462	EMC RepliStor Detection	info
35360	HDHomeRun Control Service Detection	info
35359	HDHomeRun Discovery Service Detection	info
35309	CA Unicenter Cron Scheduler Detection	info
35297	SSL Service Requests Client Certificate	info
34756	Yosemite Backup Service Driver Detection	info
34693	Condor Service Detection	info
34473	HTTP CONNECT Proxy Detection	info
34447	Network Notary Server Detection	info
34369	echoServer Detection	info
34364	Zebedee Server Detection	info
34238	IRC Bouncer (BNC) Detection	info
34237	ezbounce Detection	info
34236	BNC Detection	info
34235	LANDesk QIP Server Detection	info
34117	Kyocera Mita Scanner File Utility Detection	info
33950	MS Executable Detection	critical
33745	LANDesk Remote Control Service Detection	info
33588	Openlink Virtuoso Server Detection	info
33482	.NET NegotiateStream Server Detection	info
33438	Sun Java System ASP Server Detection	info
33392	Microsoft Dynamics GP Distributed Process Manager Detection	info
33283	EMC AlphaStor Device Manager Detection	info

Detections

Analytics

Service detection Family for Nessus

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

critical

info

info

info

info

info

info