Report This report lists the most vulnerable host machines, based on the number of open ports found. Generated on Generated by 6/3/2011 2:27:16 PM calin Advanced Settings Report items Target Entire Network Grouped by Sorted by 'Computer' - Ascending AND '' - Ascending 'Port Number' - Ascending Reviewed by Reviewed Date Signature
BACKUP1 135 139 162 445 514 554 1080 2002 DCE endpoint resolution Simple Network Management Protocol Trap (SNMPTRAP) Microsoft-DS Active Directory, Windows shares Shell Real Time Streaming Protocol (RTSP) SOCKS proxy Duddie, Senna Spy Generator, Sensive Yes 123 137 138 Network Time Protocol (NTP) NetBIOS NetBIOS Datagram Service Page: 2 of 19
161 162 500 514 1434 1900 3702 4500 5004 5005 5355 Simple Network Management Protocol (SNMP) Simple Network Management Protocol Trap (SNMPTRAP) Internet Security Association and Key Management Protocol (ISAKMP) Syslog Microsoft SQL Server database management system Monitor Microsoft SSDP Enables discovery of UPnP devices Web Services Dynamic Discovery (WS-Discovery), used by various components of Windows Vista IPsec NAT traversal (RFC 3947) RTP (Real-time Transport Protocol) media data (RFC 3551, RFC 4571) RTP (Real-time Transport Protocol) control protocol (RFC 3551, RFC 4571) LLMNR - Link-Local Multicast Name Resolution FILESERVER 53 88 Domain Name System (DNS) Kerberos - authentication system Page: 3 of 19
88 Kerberos - authentication system 111 Sun Remote Procedure Call 135 DCE endpoint resolution 139 389 Lightweight Directory Access Protocol (LDAP) 445 Microsoft-DS Active Directory, Windows shares 464 Kerberos Change/Set password 593 HTTP RPC Ep Map, Remote procedure call over Hypertext Transfer Protocol 636 Lightweight Directory Access Protocol over TLS/SSL (LDAPS) 902 VMware Authentication, If this service is not installed beware could be trojan: Net-Devil, Pest 1039 tcpsvcs, If this service is not installed beware could be trojan: Dosh 1047 InetInfo, If this service is not installed beware could be trojan: RemoteNC 2049 NFS => Network File System 3268 msft-gc, Microsoft Global Catalog (LDAP service which contains data from Active Directory forests) Page: 4 of 19
3268 PCI DSS Port Requirement Type 11.2 - Vulnerable Hosts Based on Open msft-gc, Microsoft Global Catalog (LDAP service which contains data from Active Directory forests) 3269 msft-gc-ssl, Microsoft Global Catalog over SSL (similar to port 3268, LDAP over SSL) 3389 Terminal Services 53 67 68 88 111 123 137 138 389 464 500 Domain Name System (DNS) Bootstrap Protocol (BOOTP) Server; also used by Dynamic Host Configuration Protocol (DHCP) Bootstrap Protocol (BOOTP) Client; also used by Dynamic Host Configuration Protocol (DHCP) Kerberos 5 Sun Remote Procedure Call Network Time Protocol (NTP) NetBIOS NetBIOS Datagram Service Lightweight Directory Access Protocol (LDAP) Kerberos Change/Set password Internet Security Association and Key Management Protocol (ISAKMP) Page: 5 of 19
500 Internet Security Association and Key Management Protocol (ISAKMP) 2049 shilp 2104 zephyr-hm Project Athena Zephyr tification Service hostmanager 4500 IPsec NAT traversal (RFC 3947) 5355 LLMNR - Link-Local Multicast Name Resolution JAKE04 135 139 445 1027 1039 1081 3389 DCE endpoint resolution Microsoft-DS Active Directory, Windows shares Inetinfo, If this service is not installed beware could be trojan: Clandestine, DataSpy and others tcpsvcs, If this service is not installed beware could be trojan: Dosh WinHole Yes Terminal Services Page: 6 of 19
123 137 138 500 1900 2104 3702 4500 5355 Network Time Protocol (NTP) NetBIOS NetBIOS Datagram Service Internet Security Association and Key Management Protocol (ISAKMP) Microsoft SSDP Enables discovery of UPnP devices zephyr-hm Project Athena Zephyr tification Service hostmanager Web Services Dynamic Discovery (WS-Discovery), used by various components of Windows Vista IPsec NAT traversal (RFC 3947) LLMNR - Link-Local Multicast Name Resolution METEO 80 Service 135 139 Hypertext Transfer Protocol (HTTP) HTTP (Hyper Text Transfer Protocol) DCE endpoint resolution Page: 7 of 19
PCI DSS 139 Requirement 11.2 - Vulnerable Hosts Based on Open 445 Microsoft-DS Active Directory, Windows shares 1433 Microsoft SQL Server database management system Server 2002 Duddie, Senna Spy Generator, Sensive Yes 3389 Terminal Services 50551 R0xr4t Yes 123 137 138 500 1434 1900 2104 3702 Network Time Protocol (NTP) NetBIOS NetBIOS Datagram Service Internet Security Association and Key Management Protocol (ISAKMP) Microsoft SQL Server database management system Monitor Microsoft SSDP Enables discovery of UPnP devices zephyr-hm Project Athena Zephyr tification Service hostmanager Web Services Dynamic Discovery (WS-Discovery), used by various components of Windows Vista Page: 8 of 19
3702 Web Services Dynamic Discovery (WS-Discovery), used by various components of Windows Vista 4500 IPsec NAT traversal (RFC 3947) 5355 LLMNR - Link-Local Multicast Name Resolution MIRA 80 Service 135 139 443 445 2002 3389 Hypertext Transfer Protocol (HTTP) HTTP (Hyper Text Transfer Protocol) DCE endpoint resolution Hypertext Transfer Protocol over TLS/SSL (HTTPS) Microsoft-DS Active Directory, Windows shares Duddie, Senna Spy Generator, Sensive Yes Terminal Services 123 137 Network Time Protocol (NTP) Page: 9 of 19
137 138 NetBIOS NetBIOS Datagram Service 500 Internet Security Association and Key Management Protocol (ISAKMP) 1434 Microsoft SQL Server database management system Monitor 1900 Microsoft SSDP Enables discovery of UPnP devices 2104 zephyr-hm Project Athena Zephyr tification Service hostmanager 3702 Web Services Dynamic Discovery (WS-Discovery), used by various components of Windows Vista 4500 IPsec NAT traversal (RFC 3947) 5353 Multicast DNS (MDNS) 5355 LLMNR - Link-Local Multicast Name Resolution NODE1 25 Service 53 80 Service Simple Mail Transfer Protocol (SMTP) SMTP (Simple Mail Transfer Protocol) Domain Name System (DNS) Hypertext Transfer Protocol (HTTP) HTTP (Hyper Text Transfer Protocol) Page: 10 of 19