|
Port 30101 Details
known port assignments and vulnerabilities
threat/application/port search:
| Port(s) |
Protocol |
Service |
Details |
Source |
| 30101 |
tcp |
trojan |
[trojan] NetSphere |
Trojans
|
| 30101 |
tcp |
NetSphere |
[trojan] NetSphere |
SANS
|
| 30101 |
tcp |
threat |
RAT: NetSphere An FTP service is run at TCP port 30101 in order to download the keylogger files and recorded WAV files. |
Bekkoame
|
| 30101-30259 |
tcp,udp |
|
Unassigned |
IANA
|
| 30100-30103 |
tcp |
trojan |
NetSphere trojan uses these ports.
30100 tcp - the main port that NetSphere connects to.
30101-30103 tcp - NetSphere runs FTP services on these ports, used to transfer various files (e.g. keylog files).
NetSphere infects only Windows 9x systems. A server program called nssx.exe is placed in the C:\Windows\System directory, a "NSSX" value is added to the Run hive of the registry to launch the server.
Port 30100 is IANA registered for Remote Window Protocol (TCP/SCTP) |
SG
|
|
5 records found
|