Internet-Security raven logo internet-security.com

UDP 1025

ProtocolUDP
Port1025
LabelsTeradata database management system (Teradata) server

Synopsis

  • UDP port 1025 is commonly seen used by ONC/SunRPC services dynamically assigned via rpcbind/portmapper on Unix-like systems.
  • In real deployments (e.g., Solaris and older Linux/NFS setups), NFS’s rpc.mountd has frequently been observed listening on UDP 1025 when allocated by rpcbind.
  • The NFS Network Status Monitor daemon, rpc.statd, is also often found bound to UDP 1025 in the field under similar dynamic assignment.
  • Numerous ops reports and scans from Solaris 8/9 and early Linux nfs-utils installations document mountd/statd appearing specifically at UDP 1025 when static ports were not configured.
  • Security note: attackers have historically scanned and targeted UDP 1025 because NFS rpc.mountd and rpc.statd on that port have had remotely exploitable vulnerabilities, leading to compromises.

Observed activity

Last 30 days Detailed chart

More information