whatportis.com
suggest an edit →

Port 20000DNP3

DNP3 (Distributed Network Protocol) is a robust communication protocol widely used in SCADA (Supervisory Control and Data Acquisition) systems to enable reliable data exchange between control equipment such as Remote Terminal Units (RTUs) and Intelligent Electronic Devices (IEDs). Designed for electrical and utility automation sectors, DNP3 ensures efficient and dependable device interoperability across complex supervisory networks..

inNetwork ServicesSystemIoT
transport
unknown

single transport

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
4/10

caution

lookups
13,550

rank 268 of 993 · top 27%

1 other service is registered on port 20000. compare all 2 →

Technical Details

what runs on :20000

DNP3, or Distributed Network Protocol version 3, is a layered communication protocol predominantly employed in process automation systems within the electric utility industry. It facilitates the transfer of data between control centers and field devices including RTUs, IEDs, and Master Stations. Its design emphasizes reliability, even over unreliable or noisy communication channels, supporting both serial and IP-based transport layers.

The protocol accommodates event-driven reporting and time synchronization, contributing to efficient bandwidth usage and accurate control operations. It supports multiple object groups and variations, enabling flexible message definitions according to the needs of utility applications. DNP3 can be deployed over various physical layers, such as RS-232, RS-485, or Ethernet, making it adaptable to new and legacy environments.

DNP3 is structured according to layered architecture principles, incorporating link, transport, application, and physical layers. This modular architecture enhances interoperability while streamlining data acquisition processes. It can operate in both unsolicited response and polling modes, allowing for timely status updates from field devices to control centers.

Security Information

exposure of :20000

risk score

4/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

network services averages 3.9 across 604 ports — this one sits 0.1 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

unknown

every listening transport is another surface to filter at the edge

security overview

Common security vulnerabilities associated with DNP3 include:

  • Susceptibility to replay, injection, and man-in-the-middle attacks due to lack of native encryption and authentication in the original protocol.
  • Potential for attackers to extract sensitive operational data or manipulate control commands.
  • Exploits that may cause denial-of-service, leading to operational disruptions in critical infrastructure.

Common mitigation strategies involve:

  • Implementing DNP3 Secure Authentication (DNP3-SA), which adds robust authentication and message integrity mechanisms to mitigate impersonation and tampering.
  • Deploying firewall rules and network segmentation to limit unauthorized access to SCADA networks.
  • Using VPNs or encryption (such as TLS) for secure channel establishment over IP networks.
  • Regularly monitoring and auditing network traffic, combined with secure device configuration and timely patch management.

Related Ports

all 604 in network services →

the 8 most looked-up other ports in network services — 604 ports carry that label.

portservicerisk
:9080Groove RPCcaution
:6543Jetnetcaution
:5938TeamViewercaution
:8291Winbox MikroTik Admincaution
:3233WhiskerControl Protocolcaution
:3268Microsoft Global Catalog (GC)caution
:135Microsoft EPMAPcaution
:3128Tatsoft Default HTTP Proxycaution

risk mix of the 8 listed

  • caution100%

0 of 8 encrypted