Saturday, August 21, 2021

Question on port services named "garcon", "bitcoin", "bigbrother", ... Need help understanding 'nmap' output.

I'm currently learning and practicing online.

When scanning for ports on a particular server, loads and loads of different services came out in the output (see below). I recognize most of the usual ones, but what are all these other services for? Some services are named "garcon", "bitcoin", "bigbrother", etc. What are those?

Would this indicate that this server is not being properly managed? Looks like a mess... Is this a red flag? Looking for opinions on this output.

Host is up (0.22s latency). Not shown: 719 filtered tcp ports (no-response) PORT STATE SERVICE 25/tcp open smtp 53/tcp open domain 80/tcp open http 81/tcp open hosts2-ns 82/tcp open xfer 83/tcp open mit-ml-dev 84/tcp open ctf 85/tcp open mit-ml-dev 88/tcp open kerberos-sec 89/tcp open su-mit-tg 90/tcp open dnsix 99/tcp open metagram 100/tcp open newacct 389/tcp open ldap 443/tcp open https 444/tcp open snpp 500/tcp open isakmp 554/tcp open rtsp 555/tcp open dsf 587/tcp open submission 631/tcp open ipp 636/tcp open ldapssl 777/tcp open multiling-http 800/tcp open mdbs_daemon 801/tcp open device 843/tcp open unknown 880/tcp open unknown 888/tcp open accessbuilder 990/tcp open ftps 995/tcp open pop3s 999/tcp open garcon 1000/tcp open cadlock 1002/tcp open windows-icfw 1024/tcp open kdm 1025/tcp open NFS-or-IIS 1028/tcp open unknown 1080/tcp open socks 1111/tcp open lmsocialserver 1174/tcp open fnet-remote-ui 1175/tcp open dossier 1183/tcp open llsurfup-http 1185/tcp open catchpole 1186/tcp open mysql-cluster 1187/tcp open alias 1192/tcp open caids-sensor 1198/tcp open cajo-discovery 1199/tcp open dmidi 1234/tcp open hotline 1433/tcp open ms-sql-s 1443/tcp open ies-lm 1455/tcp open esl-lm 1494/tcp open citrix-ica 1521/tcp open oracle 1700/tcp open mps-raft 1935/tcp open rtmp 1971/tcp open netop-school 1972/tcp open intersys-cache 1974/tcp open drp 1984/tcp open bigbrother 2000/tcp open cisco-sccp 2001/tcp open dc 2006/tcp open invokator 2020/tcp open xinupageserver 2022/tcp open down 2048/tcp open dls-monitor 2049/tcp open nfs 2065/tcp open dlsrpn 2068/tcp open avocentkvm 2100/tcp open amiganetfs 2107/tcp open msmq-mgmt 2121/tcp open ccproxy-ftp 2196/tcp open unknown 2200/tcp open ici 2222/tcp open EtherNetIP-1 2557/tcp open nicetec-mgmt 3000/tcp open ppp 3001/tcp open nessus 3003/tcp open cgms 3005/tcp open deslogin 3006/tcp open deslogind 3007/tcp open lotusmtap 3011/tcp open trusted-web 3013/tcp open gilatskysurfer 3017/tcp open event_listener 3030/tcp open arepa-cas 3052/tcp open powerchute 3071/tcp open csd-mgmt-port 3077/tcp open orbix-loc-ssl 3306/tcp open mysql 3333/tcp open dec-notes 3389/tcp open ms-wbt-server 3404/tcp open unknown 3551/tcp open apcupsd 3580/tcp open nati-svrloc 4000/tcp open remoteanything 4001/tcp open newoak 4002/tcp open mlchat-proxy 4343/tcp open unicall 4443/tcp open pharos 4444/tcp open krb524 4445/tcp open upnotifyp 4449/tcp open privatewire 4848/tcp open appserv-http 5000/tcp open upnp 5001/tcp open commplex-link 5002/tcp open rfe 5003/tcp open filemaker 5004/tcp open avt-profile-1 5009/tcp open airport-admin 5050/tcp open mmcc 5051/tcp open ida-agent 5060/tcp open sip 5061/tcp open sip-tls 5080/tcp open onscreen 5100/tcp open admd 5120/tcp open barracuda-bbs 5222/tcp open xmpp-client 5225/tcp open hp-server 5226/tcp open hp-status 5269/tcp open xmpp-server 5280/tcp open xmpp-bosh 5440/tcp open unknown 5500/tcp open hotline 5544/tcp open unknown 5555/tcp open freeciv 5800/tcp open vnc-http 5900/tcp open vnc 5901/tcp open vnc-1 5902/tcp open vnc-2 5903/tcp open vnc-3 5904/tcp open unknown 5906/tcp open unknown 5907/tcp open unknown 5910/tcp open cm 5911/tcp open cpdlc 5915/tcp open unknown 5987/tcp open wbem-rmi 5988/tcp open wbem-http 5989/tcp open wbem-https 5998/tcp open ncd-diag 5999/tcp open ncd-conf 6000/tcp open X11 6001/tcp open X11:1 6002/tcp open X11:2 6003/tcp open X11:3 6004/tcp open X11:4 6005/tcp open X11:5 6006/tcp open X11:6 6007/tcp open X11:7 6009/tcp open X11:9 6100/tcp open synchronet-db 6510/tcp open mcer-port 6543/tcp open mythtv 6565/tcp open unknown 6580/tcp open parsec-master 6666/tcp open irc 6699/tcp open napster 6779/tcp open unknown 6789/tcp open ibm-db2-admin 7000/tcp open afs3-fileserver 7001/tcp open afs3-callback 7002/tcp open afs3-prserver 7004/tcp open afs3-kaserver 7007/tcp open afs3-bos 7070/tcp open realserver 7100/tcp open font-service 7201/tcp open dlip 7443/tcp open oracleas-https 7777/tcp open cbt 7778/tcp open interwise 7999/tcp open irdmi2 8000/tcp open http-alt 8001/tcp open vcom-tunnel 8002/tcp open teradataordbms 8007/tcp open ajp12 8008/tcp open http 8009/tcp open ajp13 8010/tcp open xmpp 8011/tcp open unknown 8021/tcp open ftp-proxy 8022/tcp open oa-system 8031/tcp open unknown 8042/tcp open fs-agent 8045/tcp open unknown 8080/tcp open http-proxy 8081/tcp open blackice-icecap 8082/tcp open blackice-alerts 8083/tcp open us-srv 8084/tcp open websnp 8085/tcp open unknown 8086/tcp open d-s-n 8087/tcp open simplifymedia 8088/tcp open radan-http 8089/tcp open unknown 8090/tcp open opsmessaging 8093/tcp open unknown 8099/tcp open unknown 8100/tcp open xprint-server 8180/tcp open unknown 8181/tcp open intermapper 8192/tcp open sophos 8193/tcp open sophos 8194/tcp open sophos 8200/tcp open trivnet1 8222/tcp open unknown 8300/tcp open tmi 8333/tcp open bitcoin 8383/tcp open m2mservices 8402/tcp open abarsd 8443/tcp open https-alt 8500/tcp open fmtp 8600/tcp open asterix 8701/tcp open unknown 8800/tcp open sunwebadmin 8873/tcp open dxspider 8888/tcp open sun-answerbook 8899/tcp open ospf-lite 9000/tcp open cslistener 9001/tcp open tor-orport 9002/tcp open dynamid 9003/tcp open unknown 9009/tcp open pichat 9010/tcp open sdr 9011/tcp open d-star 9040/tcp open tor-trans 9050/tcp open tor-socks 9071/tcp open unknown 9080/tcp open glrpc 9081/tcp open cisco-aqos 9090/tcp open zeus-admin 9091/tcp open xmltec-xmlmail 9099/tcp open unknown 9100/tcp open jetdirect 9101/tcp open jetdirect 9102/tcp open jetdirect 9103/tcp open jetdirect 9110/tcp open unknown 9111/tcp open DragonIDSConsole 9200/tcp open wap-wsp 9207/tcp open wap-vcal-s 9220/tcp open unknown 9500/tcp open ismserver 9943/tcp open unknown 9998/tcp open distinct32 9999/tcp open abyss 10000/tcp open snet-sensor-mgmt 10001/tcp open scp-config 10002/tcp open documentum 10003/tcp open documentum_s 10004/tcp open emcrmirccd 10009/tcp open swdtp-sv 10010/tcp open rxapi 10012/tcp open unknown 10024/tcp open unknown 10025/tcp open unknown 10082/tcp open amandaidx 11110/tcp open sgi-soap 12174/tcp open unknown 12265/tcp open unknown 12345/tcp open netbus 15002/tcp open onep-tls 16000/tcp open fmsas 16001/tcp open fmsascon 16012/tcp open unknown 16016/tcp open unknown 16018/tcp open unknown 16080/tcp open osxwebadmin 18040/tcp open unknown 18101/tcp open unknown 20000/tcp open dnp 30000/tcp open ndmps 31337/tcp open Elite 50000/tcp open ibm-db2 50001/tcp open unknown 50002/tcp open iiimsf 50003/tcp open unknown 50006/tcp open unknown 50500/tcp open unknown 55055/tcp open unknown 55555/tcp open unknown 60443/tcp open unknown 

No comments:

Post a Comment