Thinking...
[get complete service list]
Top of page
Port Information
Protocol Service Name
tcp callbook callbook
tcp cisco-sccp Cisco SCCP
udp callbook callbook
tcp SennaSpyTrojanGenerator [trojan] Senna Spy Trojan Generator
tcp RemoteExplorer2000 [trojan] Remote Explorer 2000
tcp Last2000 [trojan] Last 2000
tcp InsaneNetwork [trojan] Insane Network
tcp DerSpherDerSpaeher [trojan] Der Späher / Der Spaeher
tcp DerSpäher [trojan] Der Späher / Der Spaeher
udp cisco-sccp Cisco SCCp
Top IPs Scanning
Today Yesterday
43.132.118.58 (555)43.132.118.58 (2794)
146.88.240.144 (291)152.32.188.207 (432)
52.14.58.0 (237)146.88.240.143 (420)
165.227.201.126 (50)165.227.201.126 (152)
205.209.110.138 (24)172.105.216.226 (120)
206.168.34.40 (22)45.142.154.98 (111)
66.132.153.124 (16)100.27.42.168 (83)
199.45.154.115 (15)100.27.42.247 (82)
156.225.0.24 (14)199.45.155.67 (58)
167.94.138.164 (14)152.32.202.244 (54)
Port diary mentions
URL
Port 2000 spike; New IIS PCT exploit?; Following the bouncing MS patches
Top of page
User Comments
Submitted By Date
Comment
2015-11-08 03:30:42
Looks like YouDao or 163.com (which owns YouDao) uses port 2000 for an unknown piece of software
Crispin Harris 2010-10-27 18:37:05
According the Wikipedia, this was also used for Cisco Skinny (SCCP) VoIP services
2007-01-10 17:30:56
steckvaughn.harcourtachieve.com uses port 2000 for their GED server/workstation
SkitZZ 2004-11-09 18:02:45
don't know if your aware or not but a week or so ago there was a buffer-overflow vulnerability found in ShixxNOTE 6.net http://www.securityfocus.com/bid/11409/info/ which runs on port 2000.
George Ascione, LightHouse Hosting 2004-11-09 18:02:39
We recently evaluated a copy of RemotelyAnywhere. That software service listens on port 2000 by default. I don't know of anything in particular that may link the increase to this but RemotelyAnywhere when installed with the defaults will be out there listening on this port.
Gary Weichbrodt 2004-11-09 18:02:29
P2P Radio uses this port as well. http://p2p-radio.sourceforge.net/
Top of page
CVE Links
CVE # Description
Top of page