?? why do you look for disabled services. Your discovery rule does this rule match with your monitored host?