File unusual-port
Script types:
Categories:
safe
Download: http://nmap.org/svn/scripts/unusual-port.nse
User Summary
Compares the detected service on a port against the expected service for that port number (e.g. ssh on 22, http on 80) and reports deviations. The script requires that a version scan has been run in order to be able to discover what service is actually running on each port.
Example Usage
nmap --script unusual-port <ip>
Script Output
23/tcp open ssh OpenSSH 5.8p1 Debian 7ubuntu1 (protocol 2.0) |_unusual-port: ssh unexpected on port tcp/23 25/tcp open smtp Postfix smtpd
Requires
Author: Patrik Karlsson
License: Same as Nmap--See http://nmap.org/book/man-legal.html