Summary
The remote web server is the Cobalt Administration web server.
This web server enables attackers to configure your Cobalt server if they gain access to a valid authentication username and password.
Solution
Disable the Cobalt Administration web server if
you do not use it, or block inbound connections to this port.