Port 911NCA over OpenSSH
Network Console on Acid (NCA) over OpenSSH provides a way to redirect local TTY consoles over secure SSH tunnels, enabling remote system management while leveraging encrypted communications for enhanced security..
- transport
- tcp
- in transit
- encrypted
- assignment
- unofficial
- risk
- 4/10
- lookups
- 7,085
single transport
payload protected on the wire
used by convention
caution
rank 721 of 993 · top 73%
Technical Details
what runs on :911Overview: Network Console on Acid (NCA) is a tool designed for remote system administration by forwarding terminal (TTY) connections. When combined with OpenSSH, it allows administrators to access a machine’s local console securely over a network.
Technical Workflow: The local TTY interface of a system is redirected via an OpenSSH channel on port 911, which acts as the communication conduit. The encrypted SSH tunnel encapsulates plaintext terminal sessions, preventing unauthorized interception during transmission. This setup facilitates administrative actions, troubleshooting, and management from remote locations.
Deployment Considerations: Using port 911 for NCA over OpenSSH typically requires both client and server configurations, including proper SSH key management and access permissions. It is often implemented on internal networks for managing headless or recovery mode systems, providing flexibility with minimal hardware interfaces.
Security Information
exposure of :911risk score
4/ 10caution
worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.
security averages 3.8 across 216 ports — this one sits 0.2 above.
in transit
encrypted
payloads are protected on the wire
assignment
unofficial
used by convention, not registered — what answers here varies by deployment
reachable over
tcp
every listening transport is another surface to filter at the edge
security overview
Common Vulnerabilities:
- Weak or default SSH credentials can be exploited to gain unauthorized access.
- Outdated OpenSSH versions may be susceptible to exploits like buffer overflows or side-channel attacks.
- Open port 911 can be discovered via port scanning, potentially revealing the remote console service to attackers.
Common Mitigations:
- Enforce strong SSH authentication methods, such as key-based login and disabling password access.
- Regularly update OpenSSH and underlying systems to patch known vulnerabilities.
- Implement firewall rules to restrict access to port 911 from trusted IP ranges only.
- Monitor connection attempts and use intrusion detection systems to identify malicious activities targeting administrative interfaces.
Related Ports
the 8 most looked-up other ports in security — 216 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :8881 | Atlasz Secure Server | TCP | Web Services | caution | 67.6k |
| :443 | HTTPS | TCPtls | Web Services | caution | 65.9k |
| :8291 | Winbox MikroTik Admin | TCP | Security | caution | 62.9k |
| :3268 | Microsoft Global Catalog (GC) | TCPUDP | Security | caution | 54.6k |
| :135 | Microsoft EPMAP | TCPUDP | Security | caution | 51.9k |
| :3128 | Squid Proxy HTTP | TCP | Web Services | caution | 45.8k |
| :8080 | HTTP Alternate | TCPtls | Web Services | caution | 44.9k |
| :7000 | Vuze HTTPS Tracker | TCPtls | Security | caution | 28.9k |
risk mix of the 8 listed
- caution100%
3 of 8 encrypted