The remote service is a Cron Scheduler for CA Unicenter applications, that is used to launch programs at specified times.

The remote service encrypts communications using SSL/TLS, requests a client certificate, and may require a valid certificate in order to establish a connection to the underlying service.

The remote host is running Yosemite Backup, a commercial backup solution for Windows, Linux, and Novell NetWare and targetting small-to-medium sized businesses.

The remote host is running Condor, an open source software framework for distributed job scheduling.

The remote service supports the HTTP CONNECT method for tunneling connections through an HTTP connection.

The remote service is a Perspectives Network Notary Server. Perspectives is a framework to authenticate public keys for various network services, and a Network Notary monitors and records the public keys used by various network services.

The remote host is running echoServer, which which allows peer-to-peer or client-server applications to connect to one another as a series of outbound connections, which may be helpful in avoiding problems caused by firewalls and NAT'ing routers.

The remote host is running Zebedee in server mode, which allows for securely tunneling TCP and UDP connections to arbitrary hosts and ports through this port.

An IRC bouncer (aka BNC) is running on this port.  It proxies communications between IRC clients and servers.  This may be done to allow clients without direct network access to connect to servers or to hide client addresses. 

Legimate use of such proxies is rare.  They are often installed by attackers in order to avoid detection while controlling a 'botnet'.

ezbounce, an IRC bouncer, is running on this port.  It proxies communications between IRC clients and servers.  This may be done to allow clients without direct network access to connect to servers or to hide client addresses. 

Legimate use of such proxies is rare.  They are often installed by attackers in order to avoid detection while controlling a 'botnet'.

BNC, an IRC bouncer from The BNC Project, is running on this port.  It proxies communications between IRC clients and servers.  This may be done to allow clients without direct network access to connect to servers or to hide client addresses. 

Legimate use of such proxies is rare.  They are often installed by attackers in order to avoid detection while controlling a 'botnet'.

The remote service is a LANDesk QIP Server, one of the components of LANDesk Management Suite.

The remote host is running Kyocera Mita's Scanner File Utility, an agent that runs on Windows hosts and allows Kyocera Mita multi- function devices to scan to a user's desktop.

This service is unknown to Nessus.  It appears to send a Microsoft Windows executable when a connection to it is established.  This may be evidence of some malware that are known to propagate in this manner.

The remote service is a Remote Control Service, one of the components of LANDesk Management Suite installed on managed clients for communicating with the administrative console.

Openlink Virtuoso Server, a hybrid database server available as a commercial as well as an open source product is running on the remote host.

The remote server supports Microsoft's .NET NegotiateStream protocol, which provides a lightweight authentication and security mechanism between a client and a server when the client or server needs direct access to the TCP stream.

The remote service is an ASP Server, part of Sun Java System Active Server Pages or an older variant such as Chili!Soft ASP, which provides a web server with ASP (Active Server Pages) functionality.

The remote host is running Microsoft Dynamics GP Distributed Process Manager. Dynamics GP is a business accounting and management software solution from Microsoft.

The remote host is running a EMC AlphaStor Device Manager service.
AlphaStor is a tape backup management and library sharing for EMC NetWorker.

The remote host is running a EMC AlphaStor Library Manager service.
AlphaStor is a tape backup management and library sharing for EMC NetWorker.

The remote host is running a Call of Duty game server.

The remote service is a LISa server (LAN Information Server), which provides a list of nearby hosts, like a 'network neighborhood', but based solely on TCP/IP.

The remote service is the HTTP Gateway Service component of Computer Associates' Secure Content Manager, which is used to filter web traffic.

The remote service supports the Multi Directory Access Protocol (MDAP), which is used to multicast commands to certain types of network devices, such as Thompson ADSL modems.

McAfee Common Management Agent (CMA), a component of McAfee's ePolicy Orchestrator (ePO) system security management solution, is running on the remote host.

Symantec pcAnywhere Access Server supports managing multiple pcAnywhere servers thorugh a centralized access point.

The remote host is running a Veritas Scheduler Service.  Symantec Storage Foundation for Windows is a commercial storage and volume management solution from Symantec, and the Scheduler Service is used to schedule backup jobs.

The remote service is a MobiLink server, a component of the Sybase SQL Anywhere package used for two-way data synchronization.

The remote service is a SQL Anywhere Broadcast Repeater, which allows SQL Anywhere clients to find SQL Anywhere database servers running on other subnets and through firewalls.

The remote host supports the use of anonymous SSL ciphers. While this enables an administrator to set up a service that encrypts traffic without having to generate and configure SSL certificates, it offers no way to verify the remote host's identity and renders the service vulnerable to a man-in-the-middle attack.

Note: This is considerably easier to exploit if the attacker is on the same physical network.

The remote service is an XSTUNT server.  XSTUNT is a variation on STUNT (Simple Traversal of UDP Through NATs and TCP too), which extends STUN to include TCP functionality.

The remote service is File Transfer, a peer-to-peer file transfer tool. 

Note that, as of version 1.2f at least, the application has no support for authenticating access so anyone who can access the port can potentially retrieve or upload files.

The remote service is an Acronis Agent, a component of Acronis TrueImage that allows for managing backup and restore operations on the remote host.

The remote service is a PC-Link Server, used for streaming videos, music, and pictures to a KiSS player, and this port is used by a player when searching for a PC-Link server.

The remote service is a PC-Link Server, used for streaming videos, music, and pictures to a KiSS player.

According to its banner, the remote SSH server is the SSF derivative.

SSF had been written to be compliant with restrictive laws on cryptography in some European countries, France especially. 

These regulations have been softened and OpenSSH received a formal authorisation from the French administration in 2002 and the development of SSF has been discontinued.

SSF is based on an old version of OpenSSH and it implements an old version of the protocol. As it is not maintained any more, it might be vulnerable to dangerous flaws.

The remote target is running GNUNet.
GNUnet is an anonymous peer-to-peer network.

The remote service supports the Remote Applications Programming Interfaces (RAPI) protocol and is used by the host to manage connections from Windows Mobile / Windows CE devices.

The remote service is an IBM WebSphere MQ Listener, responsible for detecting connections from incoming MQ channels and routing them to a queue manager.

The remote service is a Versant connection services daemon, a component of the Versant Object Database software responsible for managing connections to the database.

The remote host is running a Borland StarTeam Server.  StarTeam is a commercial software configuration and change management tool.

The remote service supports the Short Message Peer-to-Peer (SMPP) protocol, a messaging protocol designed for exchanging a high volume of SMS messages.

The remote service supports Real Time Messaging Protocol (RTMP), a proprietary protocol used by Flash Player for streaming real-time audio, video, and objects using a binary connection.

According to one of its service banners, the remote host is running MikroTik RouterOS, a specialized Linux-based operating system that allows Intel-class PCs to act as a network router or access point.

The remote service supports the line printer daemon (lpd) protocol, which is widely-used by print servers.

The remote service is the LPD Monitoring Server port used for remote print queue management by WinComLPD Total, a commercial Line Printer Daemon application for Windows.

The remote service is a VNC viewer in listen mode, allowing VNC servers to initiate reverse connections back to the client running on the remote host.

ID	Name	Severity
35309	CA Unicenter Cron Scheduler Detection	info
35297	SSL Service Requests Client Certificate	info
34756	Yosemite Backup Service Driver Detection	info
34693	Condor Service Detection	info
34473	HTTP CONNECT Proxy Detection	info
34447	Network Notary Server Detection	info
34369	echoServer Detection	info
34364	Zebedee Server Detection	info
34238	IRC Bouncer (BNC) Detection	info
34237	ezbounce Detection	info
34236	BNC Detection	info
34235	LANDesk QIP Server Detection	info
34117	Kyocera Mita Scanner File Utility Detection	info
33950	MS Executable Detection	critical
33745	LANDesk Remote Control Service Detection	info
33588	Openlink Virtuoso Server Detection	info
33482	.NET NegotiateStream Server Detection	info
33438	Sun Java System ASP Server Detection	info
33392	Microsoft Dynamics GP Distributed Process Manager Detection	info
33283	EMC AlphaStor Device Manager Detection	info
33280	EMC AlphaStor Library Manager Detection	info
33275	Call Of Duty Server Detection	info
33200	LISa Detection	info
33140	CA Secure Content Manager HTTP Gateway Service Detection	info
32399	MDAP Service Detection	info
32397	McAfee Common Management Agent Detection	info
32133	Symantec pcAnywhere Access Server Detection	info
31861	Symantec Storage Foundation Scheduler Service Detection	info
31718	MobiLink Server Detection	info
31717	SQL Anywhere Broadcast Repeater Detection	info
31705	SSL Anonymous Cipher Suites Supported	medium
31679	XSTUNT Server Detection	info
31660	File Transfer (P2P) Detection	info
31645	Acronis Agent Detection (UDP)	info
31644	Acronis Agent Detection (TCP)	info
31465	KiSS PC-Link Server Detection (UDP)	info
31464	KiSS PC-Link Server Detection (TCP)	info
31421	SSH (SSF Derivative) Detection	low
31420	GNUnet Detection (Client Interface)	info
31412	RAPI Manager Detection	info
31411	IBM WebSphere MQ Listener Detection	info
31409	Versant Connection Services Daemon Detection	info
31355	StarTeam Server Detection	info
31132	SMPP Server Detection	info
31097	RTMP Server Detection	info
30212	MikroTik RouterOS Detection	info
30207	LPD Detection	info
30185	WinComLPD LPD Monitoring Server Detection	info
30150	VNCviewer in Listen Mode Detection	info
30122	XOT Detection	info

Detections

Analytics

Service detection Family for Nessus

info

info

info

info

info

info

info

info

info

info

info

info

info

critical

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

info

medium

info

info

info

info

info

info

low

info

info

info

info

info

info

info

info

info

info

info

info