whatportis.com
suggest an edit →

Port 20000Usermin User Tool

Usermin is a web-based interface that allows users to manage various aspects of their UNIX/Linux accounts. It provides functionalities like changing passwords, managing email filters, viewing emails, and editing files through an easy-to-use GUI accessible via web browsers..

inWeb ServicesSystem
transport
unknown

single transport

in transit
cleartext

payload readable on path

assignment
unofficial

used by convention

risk
4/10

caution

lookups
8,930

rank 553 of 993 · top 56%

1 other service is registered on port 20000. compare all 2 →

Technical Details

what runs on :20000

  • Usermin Overview: Usermin is a component of the Webmin suite, specifically targeting normal UNIX/Linux users instead of system administrators. Running primarily as a standalone web server (using Perl), it listens on port 20000 by default. Usermin offers modules for email management, file editing, password changes, and more, providing users autonomy over their accounts without direct shell access.

  • Default Port & Protocols: Usermin generally operates over HTTP on port 20000. It is configured to allow or enforce HTTPS for secure communication, though by default it might not be encrypted. The tool doesn't rely on TCP or UDP transport layer services in the strict sense; it uses SSL over HTTP protocols embedded in its own web server stack.

  • Deployment Details: Usermin is designed for simple deployment, often bundled with Webmin or installed separately. Access is managed through the UNIX/Linux PAM or shadow password files, integrating seamlessly without extra backend services. Customizable modules enable extensions and granular control for various site-specific needs.

Security Information

exposure of :20000

risk score

4/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

web services averages 3.9 across 112 ports — this one sits 0.1 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

unofficial

used by convention, not registered — what answers here varies by deployment

reachable over

unknown

every listening transport is another surface to filter at the edge

security overview

  • Common Vulnerabilities:

    • Use of unencrypted HTTP by default, which may expose credentials.
    • Weak authentication policies can be targeted by brute force attacks.
    • Vulnerabilities in Perl CGI scripts may lead to command injections or privilege escalations.
    • Insecure configurations might expose sensitive user data or grant inappropriate permissions.

  • Mitigations:

    • Enforce HTTPS using valid SSL certificates to secure communication.
    • Implement strong password policies and account lockout mechanisms.
    • Regularly update Usermin and dependent libraries to patch known vulnerabilities.
    • Limit Usermin access via firewall rules and restrict to trusted IP addresses.
    • Disable unused modules and review configuration files to apply the principle of least privilege.

Related Ports

all 112 in web services →

the 8 most looked-up other ports in web services — 112 ports carry that label.

portservicerisk
:8888Sun Answerbook & Alt HTTPcaution
:8000Intel Remote Desktop / Alternate HTTP Portsafe
:8888NewsEDGEcaution
:8888HTTP Alternative Portcaution
:8888GNUmp3d Streaming HTTPcaution
:9080Groove RPCcaution
:8881Atlasz Secure Servercaution
:80HTTPcaution

risk mix of the 8 listed

  • safe13%
  • caution88%

0 of 8 encrypted