archived-netvisor/docs/SERVICES.md

NetVisor Service Definitions

This document lists all services that NetVisor can automatically discover and identify.

AdBlock

Logo	Name	Description	Discovery Pattern
	Adguard Home	Network-wide ad and tracker blocking	All of: (All of: (53/udp is open, 53/tcp is open), Endpoint response body from :80/ contains "AdGuard Home")
	Pi-Hole	Network-wide ad blocking DNS service	All of: (Any of: (53/udp is open, 53/tcp is open), Endpoint response body from :80/admin contains "pi-hole")
	pfBlockerNG	PfSense package for DNS/IP blocking	All of: (All of: (53/tcp is open, 53/udp is open), Endpoint response body from :80/pfblockerng contains "pfblockerng")

Backup

Logo	Name	Description	Discovery Pattern
	BackRest	Web UI and orchestrator for Restic	Endpoint response body from :9898/ contains "BackRest"
	Bacula	Network backup solution	9101/tcp is open
	Duplicati	Cross-platform backup client with encryption	Endpoint response body from :8200/ngax/index.html contains "Duplicati"
	Proxmox Backup Server	Encrypted, incremental and deduplicated backups for Proxmox VMs, LXCs, and hosts	Any of: (Endpoint response body from :8007/ contains "proxmox-backup-gui", 8007/tcp is open)
	Restic	Fast and secure backup program	All of: (8000/tcp is open, Endpoint response body from :80/ contains "restic")
	Syncthing	Continuous file synchronization service	All of: (Endpoint response body from :80/ contains "Syncthing", 22000/tcp is open)
	Veeam	Backup and replication	9392/tcp is open

Collaboration

Logo	Name	Description	Discovery Pattern
	Confluence	Team collaboration wiki	Endpoint response body from :8090/ contains "confluence"
	Jira	Project management platform	Endpoint response status is between 200 and 300, and response body from :8080/rest/api/2/serverInfo contains "jira"
	Mattermost	Team messaging platform	Endpoint response body from :8065/api/v4/system/ping contains ""
	Radicale	Free and Open-Source CalDAV and CardDAV Server	Endpoint response body from :5232/.web/ contains "Radicale Web Interface"

Communication

Logo	Name	Description	Discovery Pattern
	Asterisk	PBX and VoIP server	Endpoint response body from :8088/httpstatus contains "asterisk"
	FreePBX	PBX web interface	All of: (Endpoint response body from :80/ contains "freepbx", 5060/tcp is open)
	Jitsi Meet	Video conferencing	Endpoint response body from :8443/ contains "jitsilogo.png"

DNS

Logo	Name	Description	Discovery Pattern
—	Bind9	Berkeley Internet Name Domain DNS server	All of: (53/udp is open, 8053/tcp is open)
—	Dns Server	A generic Dns server	Any of: (53/tcp is open, 53/udp is open)
	PowerDNS	Authoritative DNS server with API	All of: (53/udp is open, 53/tcp is open, 8081/tcp is open)
	Unbound DNS	Recursive DNS resolver with control interface	All of: (53/udp is open, 8953/tcp is open)

Dashboard

Logo	Name	Description	Discovery Pattern
	Glance	A self-hosted dashboard that puts all your feeds in one place	Endpoint response body from :8080/manifest.json contains "Glance"
	Homarr	A sleek, modern dashboard	7575/tcp is open
	Homepage	A self-hosted dashboard for your homelab	Endpoint response body from :3000/site.webmanifest contains "Homepage"
—	Jump	A self-hosted startpage and real-time status page	Endpoint response body from :8123/ contains "Jump"
	LinkStack	A highly customizable link sharing platform	All of: (Endpoint response from has header "set-cookie" with value "linkstack_session", Endpoint response body from :8080/ contains "LinkStack")
	Proxmox Datacenter Manager	A single pane of glass for managing clustered & non-clustered Proxmox nodes	Endpoint response body from :8443/ contains "pdm-ui_bundle.js"
	WGDashboard	Wireguard dashboard for visualizing and managing wireguard clients and server	All of: (10086/tcp is open, Not (Subnet is type VpnTunnel))

Database

Logo	Name	Description	Discovery Pattern
	Cassandra	Distributed NoSQL database	9042/tcp is open
	CouchDB	NoSQL document database	Endpoint response body from :5984/ contains "couchdb"
	Elasticsearch	Distributed search and analytics engine	Endpoint response body from :9200/ contains "lucene"
	InfluxDB	Time series database	8086/tcp is open
	MariaDB	MySQL-compatible relational database	No match pattern provided
	Microsoft SQL Server	Microsoft relational database	1433/tcp is open
	MongoDB	NoSQL document database	27017/tcp is open
	MySQL	Open-source relational database	3306/tcp is open
	Oracle Database	Enterprise relational database	1521/tcp is open
	PostgreSQL	Open-source relational database	5432/tcp is open
	Redis	In-memory data store and cache	6379/tcp is open

Development

Logo	Name	Description	Discovery Pattern
	AWX	Ansible automation platform	Endpoint response status is between 200 and 300, and response body from :80/api/v2/ contains "awx"
	ArgoCD	GitOps continuous delivery	Endpoint response body from :8080/api/version contains "argocd"
	Bamboo	CI/CD server	Endpoint response body from :8085/ contains "bamboo"
	Bitbucket Server	Git repository management	Endpoint response body from :7990/ contains "bitbucket"
	Drone	Container-native CI platform	All of: (Endpoint response body from :80/ contains "drone", Endpoint response body from :80/api/user contains "")
	GitHub	Self-hosted GitHub	No match pattern provided
	GitLab	DevOps platform	All of: (Endpoint response from has header "content-security-policy" with value "gitlab", Endpoint response body from :80/ contains "gitlab")
	Jenkins	Automation server for CI/CD	Endpoint response body from :8080/ contains "jenkins.io"
	Ollama	An easy way to get up and running with LLMs.	Endpoint response body from :11434/ contains "Ollama is running"
	Spinnaker	Multi-cloud CD platform	No match pattern provided
	TeamCity	CI/CD server	Endpoint response body from :8111/ contains "teamcity"

FileSharing

Logo	Name	Description	Discovery Pattern
	ownCloud	File sync and share	Endpoint response body from :80/status.php contains "owncloud"

HomeAutomation

Logo	Name	Description	Discovery Pattern
	Domoticz	Home automation system	Endpoint response body from :8080/json.htm contains "domoticz"
	ESPHome	ESP device management	6052/tcp is open
	Grocy	Web-based self-hosted groceries & household management solution	Any of: (Endpoint response body from :80/ contains "grocy.css", Endpoint response body from :443/ contains "grocy.css")
	Home Assistant	Open-source home automation platform	Endpoint response body from :8123/ contains "home assistant"
	Lubelogger	Vehicle Maintenance Records and Fuel Mileage Tracker	Endpoint response body from :8080/ contains "Garage - LubeLogger"
	Mealie	A self-hosted recipe manager and meal planner	All of: (Endpoint response body from :9000/ contains "Mealie", Endpoint response body from :9000/ contains "recipe")
	Z-Wave JS	Z-Wave controller server	Endpoint response body from :8091/health contains ""
	Zigbee2MQTT	Zigbee to MQTT bridge	Endpoint response body from :8080/ contains "Zigbee2MQTT WindFront"
	openHAB	Home automation platform	Endpoint response body from :8080/rest/ contains "openhab"

IdentityAndAccess

Logo	Name	Description	Discovery Pattern
	Active Directory	Microsoft directory service	All of: (389/tcp is open, 445/tcp is open, 88/tcp is open)
	Authentik	A self-hosted, open source identity provider	Any of: (Endpoint response body from :9000/ contains "window.authentik", Endpoint response body from :9443/ contains "window.authentik")
	Bitwarden	Password manager	Endpoint response body from :80/api/config contains "bitwarden"
	FreeIPA	Identity management system	Endpoint response status is between 200 and 300, and response body from :80/ipa/ui contains ""
—	Kerberos	Kerberos authentication service	88/tcp is open
	Keycloak	Identity and access management	Endpoint response body from :8080/ contains "/keycloak/"
	Open LDAP	Generic LDAP directory service	Any of: (389/tcp is open, 636/tcp is open)
	Pocket ID	A Simple OIDC provider that uses passkeys for authentication	Endpoint response body from :1411/app.webmanifest contains "Pocket ID"
	Vault	Secrets management	Endpoint response body from :8200/v1/sys/health contains "vault"
	Vaultwarden	Self-hosted Bitwarden-compatible server, written in Rust	Endpoint response body from :8000/manifest.json contains "Vaultwarden Web"

IoT

Logo	Name	Description	Discovery Pattern
	Amazon Echo	Amazon Echo smart speaker	All of: (MAC Address belongs to Amazon Technologies Inc., 40317/tcp is open)
	Chromecast	Google Chromecast streaming device	All of: (MAC Address belongs to Google, Inc., 8008/tcp is open, 8009/tcp is open)
	Google Home	Google Home smart speaker or display	All of: (Any of: (MAC Address belongs to Nest Labs Inc., MAC Address belongs to Google, Inc.), All of: (8008/tcp is open, 8009/tcp is open))
—	IoT	A generic IoT Service	No match pattern provided
	Nest Protect	Google Nest smoke and CO detector	All of: (Any of: (MAC Address belongs to Nest Labs Inc., MAC Address belongs to Google, Inc.), 11095/tcp is open)
	Nest Thermostat	Google Nest smart thermostat	All of: (Any of: (MAC Address belongs to Nest Labs Inc., MAC Address belongs to Google, Inc.), 9543/tcp is open)
	Philips Hue Bridge	Philips Hue Bridge for lighting control	All of: (MAC Address belongs to Philips Lighting BV, Endpoint response body from :80/ contains "hue")
—	RTSP Camera	Camera with RTSP Streaming	554/tcp is open
	Ring Doorbell	Ring video doorbell or security camera	All of: (MAC Address belongs to Amazon Technologies Inc., Any of: (8557/tcp is open, 9998/tcp is open, 19302/tcp is open, 9999/tcp is open))
	Roku Media Player	Roku streaming device or TV	All of: (MAC Address belongs to Roku, Inc, 8060/tcp is open)
	Sonos Speaker	Sonos wireless speaker system	All of: (MAC Address belongs to Sonos, Inc., Any of: (445/tcp is open, 3445/tcp is open, 1400/tcp is open, 1410/tcp is open, 1843/tcp is open, 3400/tcp is open, 3401/tcp is open, 3500/tcp is open))
	Tasmota	ESP device firmware	No match pattern provided

Media

Logo	Name	Description	Discovery Pattern
	AudioBookShelf	Self-hosted audiobook and podcast server.	13378/tcp is open
	Autobrr	The modern autodl-irssi replacement.	7474/tcp is open
	Bazarr	A companion application to Sonarr and Radarr that manages and downloads subtitles	6767/tcp is open
	Cleanuparr	Torrent cleanup tool for Sonarr and Radarr	11011/tcp is open
	Emby	Personal media server with streaming capabilities	Endpoint response body from :8096/emby/System/Info/Public contains "Emby"
	Huntarr	Finds missing media and upgrades your existing content.	9705/tcp is open
	Immich	Self-hosted photo and video management solution	Endpoint response body from :2283/photos contains "Immich"
	Jellyfin	Free media server for personal streaming	Endpoint response body from :80/System/Info/Public contains "Jellyfin"
	Jellyseerr	Open source software application for managing requests for your media library.	Endpoint response body from :5055/ contains "Jellyseerr"
	Jellystat	Open source software application for managing requests for your media library.	All of: (Endpoint response body from :3000/ contains "Jellystat", Endpoint response body from :3000/ contains "Jellyfin stats for the masses")
	Karakeep	The Bookmark Everything App	Endpoint response body from :3000/manifest.json contains "Karakeep"
	Komga	A media server for your comics, mangas, BDs, magazines and eBooks.	Endpoint response body from :25600/ contains "Komga"
	Lidarr	A music collection manager for Usenet and BitTorrent users.	Endpoint response body from :8686/Content/manifest.json contains "Lidarr"
	Memos	An open-source, self-hosted note-taking service.	Endpoint response body from :5230/explore contains "Memos"
	Overseerr	Open source software application for managing requests for your media library.	All of: (Endpoint response body from :5055/site.webmanifest contains "Overseerr", Not (Endpoint response body from :5055/ contains "Jellyseerr"))
	Plex Media Server	Media server for streaming personal content	Any of: (Endpoint response body from :32400/web/index.html contains "Plex", Endpoint response status is between 401 and 401, and response from :32400 has header "X-Plex-Protocol" with value "1.0")
	Prowlarr	The Ultimate Indexer Manager.	Endpoint response body from :3232/Content/Images/Icons/manifest.json contains "Prowlarr"
	Radarr	A movie collection manager for Usenet and BitTorrent users.	Endpoint response body from :7878/Content/manifest.json contains "Radarr"
	SABnzbd	A NZB Files Downloader.	Endpoint response body from :8080/Content/manifest.json contains "SABnzbd"
	Slskd	A modern client-server application for the Soulseek file-sharing network	All of: (Endpoint response body from :5030/ contains "slskd", Endpoint response body from :5030/api/v0/session/enabled contains "true")
	Sonarr	A TV collection manager for Usenet and BitTorrent users.	Endpoint response body from :8989/Content/manifest.json contains "Sonarr"
	Tautulli	Monitor, view analytics, and receive notifications about your Plex Media Server.	Endpoint response body from :8181/ contains "Tautulli"
	Wizarr	User invitation and management system for Jellyfin, Plex, Emby etc	Endpoint response body from :5690/static/manifest.json contains "Wizarr"
	qBittorrent	Cross-platform open-source BitTorrent client	Any of: (Endpoint response body from :8080/ contains "qBittorrent logo", Endpoint response body from :8090/ contains "qBittorrent logo")

MessageQueue

Logo	Name	Description	Discovery Pattern
—	AMQP	Advanced Message Queuing Protocol	Any of: (5672/tcp is open, 5671/tcp is open)
	ActiveMQ	Message broker	Endpoint response body from :8161/admin contains "activemq"
	Kafka	Event streaming platform	9092/tcp is open
	MQTT	Generic MQTT broker	Any of: (1883/tcp is open, 8883/tcp is open)
	NATS	Cloud-native messaging system	Endpoint response body from :8222/varz contains ""
	Ntfy	Simple HTTP-based pub-sub notification service	Any of: (Endpoint response body from :80/ contains "ntfy web", Endpoint response body from :2856/ contains "ntfy web")
	RabbitMQ	Message broker	Endpoint response body from :15672/ contains "rabbitmq"

Mobile

Logo	Name	Description	Discovery Pattern
—	Client	A generic client device that initiates connections to services	No match pattern provided

Monitoring

Logo	Name	Description	Discovery Pattern
	APC	APC Network-Connected UPS	Endpoint response body from :80/ contains "Schneider Electric"
	CoolerControl	Monitor temperatures, fan speeds, and power in real time.	Endpoint response body from :11987/ contains "CoolerControl"
	Elastic APM	Application performance monitoring	Endpoint response body from :8200/ contains "apm"
	Gatus	Automated developer-oriented status page	Endpoint response body from :8080/manifest.json contains "Gatus"
	Glances	An open-source system cross-platform monitoring tool.	Endpoint response body from :61208/ contains "Glances"
	Grafana	Analytics and monitoring visualization platform	Endpoint response body from :80/ contains "grafana.com"
	Graylog	Security Information and Event Management (SIEM) solution and log analytics platform	All of: (Endpoint response from has header "content-security-policy" with value "graylog", Endpoint response body from :9000/ contains "Graylog")
	Icinga	Infrastructure monitoring	Endpoint response body from :5665/v1 contains "icinga"
	Jaeger	Distributed tracing system	Endpoint response body from :16686/ contains "jaeger"
	NUT	Network UPS Tools	3493/tcp is open
	Nagios	Infrastructure monitoring	Endpoint response body from :80/nagios contains "nagios"
	Netdata	Real-time performance monitoring	Endpoint response body from :19999/api/v1/info contains "netdata"
	PeaNUT	A tiny dashboard for Network UPS Tools	Endpoint response body from :3000/api/v1/info contains "peanut"
	Prometheus	Time-series monitoring and alerting system	Any of: (Endpoint response body from :80/metrics contains "Prometheus", Endpoint response body from :80/graph contains "Prometheus")
	Pulse	Proxmox node/cluster/VM/LXC monitor	Endpoint response body from :7655/ contains "Pulse"
	Sensu	Monitoring framework	Endpoint response body from :4567/health contains "sensu"
	Sentry	Error tracking platform	Endpoint response body from :9000/api/0/ contains "sentry"
	Splunk	Data analytics platform	Endpoint response body from :8000/ contains "splunk"
	UptimeKuma	Self-hosted uptime monitoring tool	Endpoint response body from :80/ contains "Uptime Kuma"
	Wazuh	Security platform	Endpoint response body from :55000/ contains "wazuh"
	Zabbix	Enterprise monitoring solution	Endpoint response body from :80/zabbix contains "zabbix"
—	Zipkin	Distributed tracing system	Endpoint response body from :9411/api/v2/services contains ""

Netvisor

Logo	Name	Description	Discovery Pattern
	NetVisor Daemon API	NetVisor Daemon API for network scanning	Endpoint response body from :60073/api/health contains "netvisor"
	NetVisor Server API	NetVisor Server API for network management	Endpoint response body from :60072/api/health contains "netvisor"

NetworkAccess

Logo	Name	Description	Discovery Pattern
—	Access Point	A generic wireless access point for WiFi connectivity	No match pattern provided
	Eero Gateway	Eero device providing routing and gateway services	All of: (MAC Address belongs to eero Inc, Host IP is a gateway in daemon's routing tables, or ends in .1 or .254.)
	Eero Repeater	Eero device providing mesh network services	All of: (MAC Address belongs to eero Inc, Not (Host IP is a gateway in daemon's routing tables, or ends in .1 or .254.))
	Fios Extender	Fios device providing mesh networking services	All of: (Endpoint response body from :80/#/login/ contains "fios", Not (Host IP is a gateway in daemon's routing tables, or ends in .1 or .254.))
	Fios Gateway	Fios device providing routing and gateway services	All of: (Endpoint response body from :80/#/login/ contains "fios", Host IP is a gateway in daemon's routing tables, or ends in .1 or .254.)
	Google Nest repeater	Google Nest Wifi repeater	All of: (Any of: (MAC Address belongs to Nest Labs Inc., MAC Address belongs to Google, Inc.), Not (Host IP is a gateway in daemon's routing tables, or ends in .1 or .254.), Endpoint response body from :80/ contains "Nest Wifi")
	Google Nest router	Google Nest Wifi router	All of: (Any of: (MAC Address belongs to Nest Labs Inc., MAC Address belongs to Google, Inc.), Host IP is a gateway in daemon's routing tables, or ends in .1 or .254., Endpoint response body from :80/ contains "Nest Wifi")
	TP-Link EAP	TP-Link EAP wireless access point	All of: (MAC Address belongs to TP-LINK TECHNOLOGIES CO.,LTD, Endpoint response body from :80/ contains "tp-link")
	UniFi Controller	Ubiquiti UniFi network controller	Endpoint response body from :8443/manage contains "UniFi"
	Unifi Access Point	Ubiquiti UniFi wireless access point	All of: (MAC Address belongs to Ubiquiti Networks Inc, Endpoint response body from :80/ contains "Unifi")

NetworkCore

Logo	Name	Description	Discovery Pattern
—	Dhcp Server	A generic Dhcp server	67/udp is open
—	Gateway	A generic gateway	All of: (Host IP is a gateway in daemon's routing tables, or ends in .1 or .254., A custom match pattern evaluated at runtime)
—	NTP Server	Network Time Protocol server	123/udp is open
—	Remote Desktop	Remote Desktop Protocol (RDP)	3389/tcp is open
—	SNMP	Simple Network Management Protocol	161/udp is open
—	SSH	Secure Shell remote access	22/tcp is open
—	Switch	Generic network switch for local area networking	All of: (Not (Host IP is a gateway in daemon's routing tables, or ends in .1 or .254.), All of: (80/tcp is open, 23/tcp is open))
—	Telnet	Telnet remote access	23/tcp is open

NetworkSecurity

Logo	Name	Description	Discovery Pattern
	CrowdSec	Crowdsourced protection against malicious IPs	Endpoint response status is between 401 and 401, and response body from :8080/v1/allowlists contains "cookie token is empty"
—	Firewall	Generic network security appliance	No match pattern provided
	Fortinet	Fortinet security appliance	Endpoint response body from :80/login contains "fortinet"
	OPNsense	Open-source firewall and routing platform	All of: (Any of: (Endpoint response body from :80/ contains "opnsense", Endpoint response body from :443/ contains "opnsense"), Any of: (53/tcp is open, 53/udp is open, 22/tcp is open, 123/udp is open, 67/udp is open))
	pfSense	Open-source firewall and router platform	All of: (22/tcp is open, Endpoint response body from :80/ contains "pfsense")

OpenPorts

Logo	Name	Description	Discovery Pattern
—	Unclaimed Open Ports	Unclaimed open ports. Reassign to the correct service if known.	A custom match pattern evaluated at runtime

Printer

Logo	Name	Description	Discovery Pattern
	CUPS	Common Unix Printing System	All of: (631/tcp is open, Endpoint response body from :80/ contains "CUPS")
	Hp Printer	An HP Printer	All of: (Any of: (Endpoint response body from :80 contains "LaserJet", Endpoint response body from :80 contains "DeskJet", Endpoint response body from :80 contains "OfficeJet", Endpoint response body from :8080 contains "LaserJet", Endpoint response body from :8080 contains "DeskJet", Endpoint response body from :8080 contains "OfficeJet"), Any of: (631/tcp is open, 515/tcp is open, 515/udp is open))
—	Print Server	A generic printing service	Any of: (631/tcp is open, 515/tcp is open, 515/udp is open)

ReverseProxy

Logo	Name	Description	Discovery Pattern
	Caddy	Lightweight & versatile reverse proxy, web & file server	Endpoint response body from :2019/reverse_proxy/upstreams contains "num_requests"
	Cloudflared	Cloudflare tunnel daemon	Endpoint response body from :80/metrics contains "cloudflared"
	HAProxy	Load balancer and proxy	Endpoint response body from :8404/stats contains "haproxy"
	Kong	API gateway	Endpoint response body from :8001/ contains "kong"
	Nginx Proxy Manager	Web-based Nginx proxy management interface	Endpoint response body from :80 contains "nginx proxy manager"
	Traefik	Modern reverse proxy and load balancer	Endpoint response body from :80/dashboard contains "traefik"
	Tyk	API gateway	Endpoint response status is between 200 and 300, and response body from :8080/hello contains "tyk"

Storage

Logo	Name	Description	Discovery Pattern
	Ceph	Distributed storage	Endpoint response body from :8080/ contains "ceph dashboard"
—	FTP Server	Generic FTP file sharing service	21/tcp is open
	FileZilla Server	FTP server	All of: (21/tcp is open, 14147/tcp is open)
	MinIO	Object storage	Endpoint response status is between 200 and 300, and response body from :9000/minio/health/live contains ""
—	NFS	Generic network file system	2049/tcp is open
	Netbootxyz	PXE Boot Server	Endpoint response body from :61208/ contains "Netbootxyz"
	OpenMediaVault	Debian-based NAS solution	All of: (445/tcp is open, Endpoint response body from :80/ contains "openmediavault")
	QNAP NAS	QNAP network attached storage system	All of: (21/tcp is open, Any of: (Endpoint response body from :80/ contains "QNAP", Endpoint response body from :8080/ contains "QNAP"))
—	Samba	Generic SMB file server	445/tcp is open
	Seafile	File hosting platform	Endpoint response body from :8000/api2/ping contains "seafile"
	Synology DSM	Synology DiskStation Manager NAS system	All of: (Endpoint response body from :80/ contains "synology", 21/tcp is open)
	TrueNAS	Open-source network attached storage system	All of: (445/tcp is open, Endpoint response body from :80/ contains "TrueNAS")

VPN

Logo	Name	Description	Discovery Pattern
	OpenVPN	OpenVPN server	1194/udp is open
	WireGuard	WireGuard VPN	51820/udp is open

Virtualization

Logo	Name	Description	Discovery Pattern
	Docker	Docker	No match pattern provided
	Docker Container	A generic docker container	All of: (Service is running in a docker container, A custom match pattern evaluated at runtime)
	Docker Swarm	Docker native clustering and orchestration	All of: (2377/tcp is open, 7946/tcp is open)
	Kubernetes	Container orchestration platform	All of: (6443/tcp is open, Any of: (10250/tcp is open, 10259/tcp is open, 10257/tcp is open, 10256/tcp is open))
	Nomad	Workload orchestration	Endpoint response body from :4646/v1/status/leader contains ""
	OpenShift	Enterprise Kubernetes	Endpoint response body from :6443/healthz contains "openshift"
	Portainer	Container management web interface	Any of: (Endpoint response body from :9443/#!/auth contains "portainer.io", Endpoint response body from :9000/ contains "portainer.io")
	Proxmox VE	Open-source virtualization management platform	Any of: (Endpoint response body from :8006/ contains "proxmox", 8006/tcp is open)
	Rancher	Kubernetes management	Endpoint response body from :80/v3 contains "rancher"

Web

Logo	Name	Description	Discovery Pattern
	Actual Budget	A local-first personal finance app	Endpoint response body from :5006/manifest.webmanifest contains "@actual-app/web"
	BigBlueButton	Web conferencing system	Endpoint response status is between 200 and 300, and response body from :80/bigbluebutton/api contains ""
	Discourse	Discussion platform	Endpoint response body from :80/srv/status contains "discourse"
	FreshRSS	A free, self-hostable news aggregator	Endpoint response body from :80/themes/manifest.json contains "FreshRSS feed aggregator"
	Ghost	Publishing platform	Endpoint response body from :2368/ contains "ghost"
	Jotty	A simple, self-hosted app for your checklists and notes	Endpoint response body from :3000/site.webmanifest contains "jotty"
	MeTube	Self-hosted YouTube downloader	Endpoint response body from :8081/manifest.webmanifest contains "MeTube"
	NextCloud	Self-hosted cloud storage and collaboration platform	Endpoint response body from :80/core/css/server.css contains "Nextcloud GmbH"
	Open WebUI	Open, extensible, user-friendly interface for AI	Endpoint response body from :8080/manifest.json contains "Open WebUI"
	Paperless-NGX	Community-supported document management system	Endpoint response body from :8000/static/frontend/en-US/manifest.webmanifest contains "Paperless-ngx"
	Rocket.Chat	Team communication platform	Endpoint response body from :3000/api/info contains "rocket"
—	SIP Server	Session initiation protocol	Any of: (5060/tcp is open, 5061/tcp is open)
	Tomcat	Java servlet container	Endpoint response body from :8080/ contains "apache tomcat"
—	Web Service	A generic web service	No match pattern provided
	WordPress	Content management system	Endpoint response body from :80/ contains "wp-content"

Workstation

Logo	Name	Description	Discovery Pattern
—	Workstation	Desktop computer for productivity work	All of: (3389/tcp is open, 445/tcp is open)