# NetVisor Service Definitions This document lists all services that NetVisor can automatically discover and identify. ## AdBlock
Logo Name Description Discovery Pattern
Adguard Home Adguard Home Network-wide ad and tracker blocking All of: (All of: (53/udp is open, 53/tcp is open), Endpoint response body from :80/ contains "AdGuard Home")
Pi-Hole Pi-Hole Network-wide ad blocking DNS service All of: (Any of: (53/udp is open, 53/tcp is open), Endpoint response body from :80/admin contains "pi-hole")
pfBlockerNG pfBlockerNG PfSense package for DNS/IP blocking All of: (All of: (53/tcp is open, 53/udp is open), Endpoint response body from :80/pfblockerng contains "pfblockerng")
## Backup
Logo Name Description Discovery Pattern
BackRest BackRest Web UI and orchestrator for Restic Endpoint response body from :9898/ contains "BackRest"
Bacula Bacula Network backup solution 9101/tcp is open
Duplicati Duplicati Cross-platform backup client with encryption Endpoint response body from :8200/ngax/index.html contains "Duplicati"
Proxmox Backup Server Proxmox Backup Server Encrypted, incremental and deduplicated backups for Proxmox VMs, LXCs, and hosts Any of: (Endpoint response body from :8007/ contains "proxmox-backup-gui", 8007/tcp is open)
Restic Restic Fast and secure backup program All of: (8000/tcp is open, Endpoint response body from :80/ contains "restic")
Syncthing Syncthing Continuous file synchronization service All of: (Endpoint response body from :80/ contains "Syncthing", 22000/tcp is open)
Veeam Veeam Backup and replication 9392/tcp is open
## Collaboration
Logo Name Description Discovery Pattern
Confluence Confluence Team collaboration wiki Endpoint response body from :8090/ contains "confluence"
Jira Jira Project management platform Endpoint response status is between 200 and 300, and response body from :8080/rest/api/2/serverInfo contains "jira"
Mattermost Mattermost Team messaging platform Endpoint response body from :8065/api/v4/system/ping contains ""
Radicale Radicale Free and Open-Source CalDAV and CardDAV Server Endpoint response body from :5232/.web/ contains "Radicale Web Interface"
## Communication
Logo Name Description Discovery Pattern
Asterisk Asterisk PBX and VoIP server Endpoint response body from :8088/httpstatus contains "asterisk"
FreePBX FreePBX PBX web interface All of: (Endpoint response body from :80/ contains "freepbx", 5060/tcp is open)
Jitsi Meet Jitsi Meet Video conferencing Endpoint response body from :8443/ contains "jitsilogo.png"
## DNS
Logo Name Description Discovery Pattern
— Bind9 Berkeley Internet Name Domain DNS server All of: (53/udp is open, 8053/tcp is open)
— Dns Server A generic Dns server Any of: (53/tcp is open, 53/udp is open)
PowerDNS PowerDNS Authoritative DNS server with API All of: (53/udp is open, 53/tcp is open, 8081/tcp is open)
Unbound DNS Unbound DNS Recursive DNS resolver with control interface All of: (53/udp is open, 8953/tcp is open)
## Dashboard
Logo Name Description Discovery Pattern
Glance Glance A self-hosted dashboard that puts all your feeds in one place Endpoint response body from :8080/manifest.json contains "Glance"
Homarr Homarr A sleek, modern dashboard 7575/tcp is open
Homepage Homepage A self-hosted dashboard for your homelab Endpoint response body from :3000/site.webmanifest contains "Homepage"
— Jump A self-hosted startpage and real-time status page Endpoint response body from :8123/ contains "Jump"
LinkStack LinkStack A highly customizable link sharing platform All of: (Endpoint response from has header "set-cookie" with value "linkstack_session", Endpoint response body from :8080/ contains "LinkStack")
Proxmox Datacenter Manager Proxmox Datacenter Manager A single pane of glass for managing clustered & non-clustered Proxmox nodes Endpoint response body from :8443/ contains "pdm-ui_bundle.js"
WGDashboard WGDashboard Wireguard dashboard for visualizing and managing wireguard clients and server All of: (10086/tcp is open, Not (Subnet is type VpnTunnel))
## Database
Logo Name Description Discovery Pattern
Cassandra Cassandra Distributed NoSQL database 9042/tcp is open
CouchDB CouchDB NoSQL document database Endpoint response body from :5984/ contains "couchdb"
Elasticsearch Elasticsearch Distributed search and analytics engine Endpoint response body from :9200/ contains "lucene"
InfluxDB InfluxDB Time series database 8086/tcp is open
MariaDB MariaDB MySQL-compatible relational database No match pattern provided
Microsoft SQL Server Microsoft SQL Server Microsoft relational database 1433/tcp is open
MongoDB MongoDB NoSQL document database 27017/tcp is open
MySQL MySQL Open-source relational database 3306/tcp is open
Oracle Database Oracle Database Enterprise relational database 1521/tcp is open
PostgreSQL PostgreSQL Open-source relational database 5432/tcp is open
Redis Redis In-memory data store and cache 6379/tcp is open
## Development
Logo Name Description Discovery Pattern
AWX AWX Ansible automation platform Endpoint response status is between 200 and 300, and response body from :80/api/v2/ contains "awx"
ArgoCD ArgoCD GitOps continuous delivery Endpoint response body from :8080/api/version contains "argocd"
Bamboo Bamboo CI/CD server Endpoint response body from :8085/ contains "bamboo"
Bitbucket Server Bitbucket Server Git repository management Endpoint response body from :7990/ contains "bitbucket"
Drone Drone Container-native CI platform All of: (Endpoint response body from :80/ contains "drone", Endpoint response body from :80/api/user contains "")
GitHub GitHub Self-hosted GitHub No match pattern provided
GitLab GitLab DevOps platform All of: (Endpoint response from has header "content-security-policy" with value "gitlab", Endpoint response body from :80/ contains "gitlab")
Jenkins Jenkins Automation server for CI/CD Endpoint response body from :8080/ contains "jenkins.io"
Ollama Ollama An easy way to get up and running with LLMs. Endpoint response body from :11434/ contains "Ollama is running"
Spinnaker Spinnaker Multi-cloud CD platform No match pattern provided
TeamCity TeamCity CI/CD server Endpoint response body from :8111/ contains "teamcity"
## FileSharing
Logo Name Description Discovery Pattern
ownCloud ownCloud File sync and share Endpoint response body from :80/status.php contains "owncloud"
## HomeAutomation
Logo Name Description Discovery Pattern
Domoticz Domoticz Home automation system Endpoint response body from :8080/json.htm contains "domoticz"
ESPHome ESPHome ESP device management 6052/tcp is open
Grocy Grocy Web-based self-hosted groceries & household management solution Any of: (Endpoint response body from :80/ contains "grocy.css", Endpoint response body from :443/ contains "grocy.css")
Home Assistant Home Assistant Open-source home automation platform Endpoint response body from :8123/ contains "home assistant"
Lubelogger Lubelogger Vehicle Maintenance Records and Fuel Mileage Tracker Endpoint response body from :8080/ contains "Garage - LubeLogger"
Mealie Mealie A self-hosted recipe manager and meal planner All of: (Endpoint response body from :9000/ contains "Mealie", Endpoint response body from :9000/ contains "recipe")
Z-Wave JS Z-Wave JS Z-Wave controller server Endpoint response body from :8091/health contains ""
Zigbee2MQTT Zigbee2MQTT Zigbee to MQTT bridge Endpoint response body from :8080/ contains "Zigbee2MQTT WindFront"
openHAB openHAB Home automation platform Endpoint response body from :8080/rest/ contains "openhab"
## IdentityAndAccess
Logo Name Description Discovery Pattern
Active Directory Active Directory Microsoft directory service All of: (389/tcp is open, 445/tcp is open, 88/tcp is open)
Authentik Authentik A self-hosted, open source identity provider Any of: (Endpoint response body from :9000/ contains "window.authentik", Endpoint response body from :9443/ contains "window.authentik")
Bitwarden Bitwarden Password manager Endpoint response body from :80/api/config contains "bitwarden"
FreeIPA FreeIPA Identity management system Endpoint response status is between 200 and 300, and response body from :80/ipa/ui contains ""
— Kerberos Kerberos authentication service 88/tcp is open
Keycloak Keycloak Identity and access management Endpoint response body from :8080/ contains "/keycloak/"
Open LDAP Open LDAP Generic LDAP directory service Any of: (389/tcp is open, 636/tcp is open)
Pocket ID Pocket ID A Simple OIDC provider that uses passkeys for authentication Endpoint response body from :1411/app.webmanifest contains "Pocket ID"
Vault Vault Secrets management Endpoint response body from :8200/v1/sys/health contains "vault"
Vaultwarden Vaultwarden Self-hosted Bitwarden-compatible server, written in Rust Endpoint response body from :8000/manifest.json contains "Vaultwarden Web"
## IoT
Logo Name Description Discovery Pattern
Amazon Echo Amazon Echo Amazon Echo smart speaker All of: (MAC Address belongs to Amazon Technologies Inc., 40317/tcp is open)
Chromecast Chromecast Google Chromecast streaming device All of: (MAC Address belongs to Google, Inc., 8008/tcp is open, 8009/tcp is open)
Google Home Google Home Google Home smart speaker or display All of: (Any of: (MAC Address belongs to Nest Labs Inc., MAC Address belongs to Google, Inc.), All of: (8008/tcp is open, 8009/tcp is open))
— IoT A generic IoT Service No match pattern provided
Nest Protect Nest Protect Google Nest smoke and CO detector All of: (Any of: (MAC Address belongs to Nest Labs Inc., MAC Address belongs to Google, Inc.), 11095/tcp is open)
Nest Thermostat Nest Thermostat Google Nest smart thermostat All of: (Any of: (MAC Address belongs to Nest Labs Inc., MAC Address belongs to Google, Inc.), 9543/tcp is open)
Philips Hue Bridge Philips Hue Bridge Philips Hue Bridge for lighting control All of: (MAC Address belongs to Philips Lighting BV, Endpoint response body from :80/ contains "hue")
— RTSP Camera Camera with RTSP Streaming 554/tcp is open
Ring Doorbell Ring Doorbell Ring video doorbell or security camera All of: (MAC Address belongs to Amazon Technologies Inc., Any of: (8557/tcp is open, 9998/tcp is open, 19302/tcp is open, 9999/tcp is open))
Roku Media Player Roku Media Player Roku streaming device or TV All of: (MAC Address belongs to Roku, Inc, 8060/tcp is open)
Sonos Speaker Sonos Speaker Sonos wireless speaker system All of: (MAC Address belongs to Sonos, Inc., Any of: (445/tcp is open, 3445/tcp is open, 1400/tcp is open, 1410/tcp is open, 1843/tcp is open, 3400/tcp is open, 3401/tcp is open, 3500/tcp is open))
Tasmota Tasmota ESP device firmware No match pattern provided
## Media
Logo Name Description Discovery Pattern
AudioBookShelf AudioBookShelf Self-hosted audiobook and podcast server. 13378/tcp is open
Autobrr Autobrr The modern autodl-irssi replacement. 7474/tcp is open
Bazarr Bazarr A companion application to Sonarr and Radarr that manages and downloads subtitles 6767/tcp is open
Cleanuparr Cleanuparr Torrent cleanup tool for Sonarr and Radarr 11011/tcp is open
Emby Emby Personal media server with streaming capabilities Endpoint response body from :8096/emby/System/Info/Public contains "Emby"
Huntarr Huntarr Finds missing media and upgrades your existing content. 9705/tcp is open
Immich Immich Self-hosted photo and video management solution Endpoint response body from :2283/photos contains "Immich"
Jellyfin Jellyfin Free media server for personal streaming Endpoint response body from :80/System/Info/Public contains "Jellyfin"
Jellyseerr Jellyseerr Open source software application for managing requests for your media library. Endpoint response body from :5055/ contains "Jellyseerr"
Jellystat Jellystat Open source software application for managing requests for your media library. All of: (Endpoint response body from :3000/ contains "Jellystat", Endpoint response body from :3000/ contains "Jellyfin stats for the masses")
Karakeep Karakeep The Bookmark Everything App Endpoint response body from :3000/manifest.json contains "Karakeep"
Komga Komga A media server for your comics, mangas, BDs, magazines and eBooks. Endpoint response body from :25600/ contains "Komga"
Lidarr Lidarr A music collection manager for Usenet and BitTorrent users. Endpoint response body from :8686/Content/manifest.json contains "Lidarr"
Memos Memos An open-source, self-hosted note-taking service. Endpoint response body from :5230/explore contains "Memos"
Overseerr Overseerr Open source software application for managing requests for your media library. All of: (Endpoint response body from :5055/site.webmanifest contains "Overseerr", Not (Endpoint response body from :5055/ contains "Jellyseerr"))
Plex Media Server Plex Media Server Media server for streaming personal content Any of: (Endpoint response body from :32400/web/index.html contains "Plex", Endpoint response status is between 401 and 401, and response from :32400 has header "X-Plex-Protocol" with value "1.0")
Prowlarr Prowlarr The Ultimate Indexer Manager. Endpoint response body from :3232/Content/Images/Icons/manifest.json contains "Prowlarr"
Radarr Radarr A movie collection manager for Usenet and BitTorrent users. Endpoint response body from :7878/Content/manifest.json contains "Radarr"
SABnzbd SABnzbd A NZB Files Downloader. Endpoint response body from :8080/Content/manifest.json contains "SABnzbd"
Slskd Slskd A modern client-server application for the Soulseek file-sharing network All of: (Endpoint response body from :5030/ contains "slskd", Endpoint response body from :5030/api/v0/session/enabled contains "true")
Sonarr Sonarr A TV collection manager for Usenet and BitTorrent users. Endpoint response body from :8989/Content/manifest.json contains "Sonarr"
Tautulli Tautulli Monitor, view analytics, and receive notifications about your Plex Media Server. Endpoint response body from :8181/ contains "Tautulli"
Wizarr Wizarr User invitation and management system for Jellyfin, Plex, Emby etc Endpoint response body from :5690/static/manifest.json contains "Wizarr"
qBittorrent qBittorrent Cross-platform open-source BitTorrent client Any of: (Endpoint response body from :8080/ contains "qBittorrent logo", Endpoint response body from :8090/ contains "qBittorrent logo")
## MessageQueue
Logo Name Description Discovery Pattern
— AMQP Advanced Message Queuing Protocol Any of: (5672/tcp is open, 5671/tcp is open)
ActiveMQ ActiveMQ Message broker Endpoint response body from :8161/admin contains "activemq"
Kafka Kafka Event streaming platform 9092/tcp is open
MQTT MQTT Generic MQTT broker Any of: (1883/tcp is open, 8883/tcp is open)
NATS NATS Cloud-native messaging system Endpoint response body from :8222/varz contains ""
Ntfy Ntfy Simple HTTP-based pub-sub notification service Any of: (Endpoint response body from :80/ contains "ntfy web", Endpoint response body from :2856/ contains "ntfy web")
RabbitMQ RabbitMQ Message broker Endpoint response body from :15672/ contains "rabbitmq"
## Mobile
Logo Name Description Discovery Pattern
— Client A generic client device that initiates connections to services No match pattern provided
## Monitoring
Logo Name Description Discovery Pattern
APC APC APC Network-Connected UPS Endpoint response body from :80/ contains "Schneider Electric"
CoolerControl CoolerControl Monitor temperatures, fan speeds, and power in real time. Endpoint response body from :11987/ contains "CoolerControl"
Elastic APM Elastic APM Application performance monitoring Endpoint response body from :8200/ contains "apm"
Gatus Gatus Automated developer-oriented status page Endpoint response body from :8080/manifest.json contains "Gatus"
Glances Glances An open-source system cross-platform monitoring tool. Endpoint response body from :61208/ contains "Glances"
Grafana Grafana Analytics and monitoring visualization platform Endpoint response body from :80/ contains "grafana.com"
Graylog Graylog Security Information and Event Management (SIEM) solution and log analytics platform All of: (Endpoint response from has header "content-security-policy" with value "graylog", Endpoint response body from :9000/ contains "Graylog")
Icinga Icinga Infrastructure monitoring Endpoint response body from :5665/v1 contains "icinga"
Jaeger Jaeger Distributed tracing system Endpoint response body from :16686/ contains "jaeger"
NUT NUT Network UPS Tools 3493/tcp is open
Nagios Nagios Infrastructure monitoring Endpoint response body from :80/nagios contains "nagios"
Netdata Netdata Real-time performance monitoring Endpoint response body from :19999/api/v1/info contains "netdata"
PeaNUT PeaNUT A tiny dashboard for Network UPS Tools Endpoint response body from :3000/api/v1/info contains "peanut"
Prometheus Prometheus Time-series monitoring and alerting system Any of: (Endpoint response body from :80/metrics contains "Prometheus", Endpoint response body from :80/graph contains "Prometheus")
Pulse Pulse Proxmox node/cluster/VM/LXC monitor Endpoint response body from :7655/ contains "Pulse"
Sensu Sensu Monitoring framework Endpoint response body from :4567/health contains "sensu"
Sentry Sentry Error tracking platform Endpoint response body from :9000/api/0/ contains "sentry"
Splunk Splunk Data analytics platform Endpoint response body from :8000/ contains "splunk"
UptimeKuma UptimeKuma Self-hosted uptime monitoring tool Endpoint response body from :80/ contains "Uptime Kuma"
Wazuh Wazuh Security platform Endpoint response body from :55000/ contains "wazuh"
Zabbix Zabbix Enterprise monitoring solution Endpoint response body from :80/zabbix contains "zabbix"
— Zipkin Distributed tracing system Endpoint response body from :9411/api/v2/services contains ""
## Netvisor
Logo Name Description Discovery Pattern
NetVisor Daemon API NetVisor Daemon API NetVisor Daemon API for network scanning Endpoint response body from :60073/api/health contains "netvisor"
NetVisor Server API NetVisor Server API NetVisor Server API for network management Endpoint response body from :60072/api/health contains "netvisor"
## NetworkAccess
Logo Name Description Discovery Pattern
— Access Point A generic wireless access point for WiFi connectivity No match pattern provided
Eero Gateway Eero Gateway Eero device providing routing and gateway services All of: (MAC Address belongs to eero Inc, Host IP is a gateway in daemon's routing tables, or ends in .1 or .254.)
Eero Repeater Eero Repeater Eero device providing mesh network services All of: (MAC Address belongs to eero Inc, Not (Host IP is a gateway in daemon's routing tables, or ends in .1 or .254.))
Fios Extender Fios Extender Fios device providing mesh networking services All of: (Endpoint response body from :80/#/login/ contains "fios", Not (Host IP is a gateway in daemon's routing tables, or ends in .1 or .254.))
Fios Gateway Fios Gateway Fios device providing routing and gateway services All of: (Endpoint response body from :80/#/login/ contains "fios", Host IP is a gateway in daemon's routing tables, or ends in .1 or .254.)
Google Nest repeater Google Nest repeater Google Nest Wifi repeater All of: (Any of: (MAC Address belongs to Nest Labs Inc., MAC Address belongs to Google, Inc.), Not (Host IP is a gateway in daemon's routing tables, or ends in .1 or .254.), Endpoint response body from :80/ contains "Nest Wifi")
Google Nest router Google Nest router Google Nest Wifi router All of: (Any of: (MAC Address belongs to Nest Labs Inc., MAC Address belongs to Google, Inc.), Host IP is a gateway in daemon's routing tables, or ends in .1 or .254., Endpoint response body from :80/ contains "Nest Wifi")
TP-Link EAP TP-Link EAP TP-Link EAP wireless access point All of: (MAC Address belongs to TP-LINK TECHNOLOGIES CO.,LTD, Endpoint response body from :80/ contains "tp-link")
UniFi Controller UniFi Controller Ubiquiti UniFi network controller Endpoint response body from :8443/manage contains "UniFi"
Unifi Access Point Unifi Access Point Ubiquiti UniFi wireless access point All of: (MAC Address belongs to Ubiquiti Networks Inc, Endpoint response body from :80/ contains "Unifi")
## NetworkCore
Logo Name Description Discovery Pattern
— Dhcp Server A generic Dhcp server 67/udp is open
— Gateway A generic gateway All of: (Host IP is a gateway in daemon's routing tables, or ends in .1 or .254., A custom match pattern evaluated at runtime)
— NTP Server Network Time Protocol server 123/udp is open
— Remote Desktop Remote Desktop Protocol (RDP) 3389/tcp is open
— SNMP Simple Network Management Protocol 161/udp is open
— SSH Secure Shell remote access 22/tcp is open
— Switch Generic network switch for local area networking All of: (Not (Host IP is a gateway in daemon's routing tables, or ends in .1 or .254.), All of: (80/tcp is open, 23/tcp is open))
— Telnet Telnet remote access 23/tcp is open
## NetworkSecurity
Logo Name Description Discovery Pattern
CrowdSec CrowdSec Crowdsourced protection against malicious IPs Endpoint response status is between 401 and 401, and response body from :8080/v1/allowlists contains "cookie token is empty"
— Firewall Generic network security appliance No match pattern provided
Fortinet Fortinet Fortinet security appliance Endpoint response body from :80/login contains "fortinet"
OPNsense OPNsense Open-source firewall and routing platform All of: (Any of: (Endpoint response body from :80/ contains "opnsense", Endpoint response body from :443/ contains "opnsense"), Any of: (53/tcp is open, 53/udp is open, 22/tcp is open, 123/udp is open, 67/udp is open))
pfSense pfSense Open-source firewall and router platform All of: (22/tcp is open, Endpoint response body from :80/ contains "pfsense")
## OpenPorts
Logo Name Description Discovery Pattern
— Unclaimed Open Ports Unclaimed open ports. Reassign to the correct service if known. A custom match pattern evaluated at runtime
## Printer
Logo Name Description Discovery Pattern
CUPS CUPS Common Unix Printing System All of: (631/tcp is open, Endpoint response body from :80/ contains "CUPS")
Hp Printer Hp Printer An HP Printer All of: (Any of: (Endpoint response body from :80 contains "LaserJet", Endpoint response body from :80 contains "DeskJet", Endpoint response body from :80 contains "OfficeJet", Endpoint response body from :8080 contains "LaserJet", Endpoint response body from :8080 contains "DeskJet", Endpoint response body from :8080 contains "OfficeJet"), Any of: (631/tcp is open, 515/tcp is open, 515/udp is open))
— Print Server A generic printing service Any of: (631/tcp is open, 515/tcp is open, 515/udp is open)
## ReverseProxy
Logo Name Description Discovery Pattern
Caddy Caddy Lightweight & versatile reverse proxy, web & file server Endpoint response body from :2019/reverse_proxy/upstreams contains "num_requests"
Cloudflared Cloudflared Cloudflare tunnel daemon Endpoint response body from :80/metrics contains "cloudflared"
HAProxy HAProxy Load balancer and proxy Endpoint response body from :8404/stats contains "haproxy"
Kong Kong API gateway Endpoint response body from :8001/ contains "kong"
Nginx Proxy Manager Nginx Proxy Manager Web-based Nginx proxy management interface Endpoint response body from :80 contains "nginx proxy manager"
Traefik Traefik Modern reverse proxy and load balancer Endpoint response body from :80/dashboard contains "traefik"
Tyk Tyk API gateway Endpoint response status is between 200 and 300, and response body from :8080/hello contains "tyk"
## Storage
Logo Name Description Discovery Pattern
Ceph Ceph Distributed storage Endpoint response body from :8080/ contains "ceph dashboard"
— FTP Server Generic FTP file sharing service 21/tcp is open
FileZilla Server FileZilla Server FTP server All of: (21/tcp is open, 14147/tcp is open)
MinIO MinIO Object storage Endpoint response status is between 200 and 300, and response body from :9000/minio/health/live contains ""
— NFS Generic network file system 2049/tcp is open
Netbootxyz Netbootxyz PXE Boot Server Endpoint response body from :61208/ contains "Netbootxyz"
OpenMediaVault OpenMediaVault Debian-based NAS solution All of: (445/tcp is open, Endpoint response body from :80/ contains "openmediavault")
QNAP NAS QNAP NAS QNAP network attached storage system All of: (21/tcp is open, Any of: (Endpoint response body from :80/ contains "QNAP", Endpoint response body from :8080/ contains "QNAP"))
— Samba Generic SMB file server 445/tcp is open
Seafile Seafile File hosting platform Endpoint response body from :8000/api2/ping contains "seafile"
Synology DSM Synology DSM Synology DiskStation Manager NAS system All of: (Endpoint response body from :80/ contains "synology", 21/tcp is open)
TrueNAS TrueNAS Open-source network attached storage system All of: (445/tcp is open, Endpoint response body from :80/ contains "TrueNAS")
## VPN
Logo Name Description Discovery Pattern
OpenVPN OpenVPN OpenVPN server 1194/udp is open
WireGuard WireGuard WireGuard VPN 51820/udp is open
## Virtualization
Logo Name Description Discovery Pattern
Docker Docker Docker No match pattern provided
Docker Container Docker Container A generic docker container All of: (Service is running in a docker container, A custom match pattern evaluated at runtime)
Docker Swarm Docker Swarm Docker native clustering and orchestration All of: (2377/tcp is open, 7946/tcp is open)
Kubernetes Kubernetes Container orchestration platform All of: (6443/tcp is open, Any of: (10250/tcp is open, 10259/tcp is open, 10257/tcp is open, 10256/tcp is open))
Nomad Nomad Workload orchestration Endpoint response body from :4646/v1/status/leader contains ""
OpenShift OpenShift Enterprise Kubernetes Endpoint response body from :6443/healthz contains "openshift"
Portainer Portainer Container management web interface Any of: (Endpoint response body from :9443/#!/auth contains "portainer.io", Endpoint response body from :9000/ contains "portainer.io")
Proxmox VE Proxmox VE Open-source virtualization management platform Any of: (Endpoint response body from :8006/ contains "proxmox", 8006/tcp is open)
Rancher Rancher Kubernetes management Endpoint response body from :80/v3 contains "rancher"
## Web
Logo Name Description Discovery Pattern
Actual Budget Actual Budget A local-first personal finance app Endpoint response body from :5006/manifest.webmanifest contains "@actual-app/web"
BigBlueButton BigBlueButton Web conferencing system Endpoint response status is between 200 and 300, and response body from :80/bigbluebutton/api contains ""
Discourse Discourse Discussion platform Endpoint response body from :80/srv/status contains "discourse"
FreshRSS FreshRSS A free, self-hostable news aggregator Endpoint response body from :80/themes/manifest.json contains "FreshRSS feed aggregator"
Ghost Ghost Publishing platform Endpoint response body from :2368/ contains "ghost"
Jotty Jotty A simple, self-hosted app for your checklists and notes Endpoint response body from :3000/site.webmanifest contains "jotty"
MeTube MeTube Self-hosted YouTube downloader Endpoint response body from :8081/manifest.webmanifest contains "MeTube"
NextCloud NextCloud Self-hosted cloud storage and collaboration platform Endpoint response body from :80/core/css/server.css contains "Nextcloud GmbH"
Open WebUI Open WebUI Open, extensible, user-friendly interface for AI Endpoint response body from :8080/manifest.json contains "Open WebUI"
Paperless-NGX Paperless-NGX Community-supported document management system Endpoint response body from :8000/static/frontend/en-US/manifest.webmanifest contains "Paperless-ngx"
Rocket.Chat Rocket.Chat Team communication platform Endpoint response body from :3000/api/info contains "rocket"
— SIP Server Session initiation protocol Any of: (5060/tcp is open, 5061/tcp is open)
Tomcat Tomcat Java servlet container Endpoint response body from :8080/ contains "apache tomcat"
— Web Service A generic web service No match pattern provided
WordPress WordPress Content management system Endpoint response body from :80/ contains "wp-content"
## Workstation
Logo Name Description Discovery Pattern
— Workstation Desktop computer for productivity work All of: (3389/tcp is open, 445/tcp is open)