Admin Panel and RDP detection
04 September 2022
I really wanted to have automated tagging for hosts running Admin panels (also known as web hosting control panels). But since detection of these wasn't good enough yet, that had to be improved first.
As you might have noticed, the popular Admin panels Plesk, DirectAdmin and cPanel are quite well found now. If a host is running one of these, an Admin panel tag will be automatically added to the host.
There have been some other detection improvements of which the most notable one is RDP. If a host with the the Remote Desktop Protocol port (3389) open is found, the scanner node will try to connect to confirm it and try to determine the RDP software, the software version and the hostname.
You can find out if you have RDP open to the internet with this query:
index=hosts ports=3389