Threat Level: green Handler on Duty: Deborah Hale

SANS ISC: TCP/UDP Port Activity - SANS Internet Storm Center TCP/UDP Port Activity


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Sources
Targets
[show ascii data]


   

Port Information
Protocol Service Name
tcp Millenium [trojan] Millenium
udp dnp DNP
UDP [ICS] DNP3 [ICS] DNP3
TCP [ICS] DNP3 [ICS] DNP3
[get complete service list]
User Comments
Submitted By Date
Comment
2012-09-12 13:17:33
This port is also used for communications in SCADA systems
Steve 2010-01-05 14:45:06
I have large amounts of UDP traffic on port 20000 that is being identified and Mariposa C&C traffic
Randy 2008-12-11 01:21:34
Port 20000 and 20001 are used as standard ports by Autonomy (http://www.autonomy.com/)for its DiSH service.
Mark FAbro 2008-12-11 01:18:50
Has anyone REALLY spent time recently doing analysy on the traffic? Abeline still has this tracking as in the top 10.
2007-12-07 16:02:31
This is the default port used by Usermin. Older versions are vulnerable to the same arbitrary file disclosure bug as Webmin; consult BID 18744 (CVE-2006-3392).
2007-02-12 12:19:37
I use this port for bittorrent, so packet analysis is needed.
Sean McBride and Ray Fink 2007-01-10 20:02:26
Port 20000 is also the default port for Usermin servers
Add a comment
CVE Links
CVE # Description