10000/tcp - Network Data Management Protocol (NDMP)
Protocol information
The Network Data Management Protocol (NDMP) coordinates backup and recovery between network-attached storage (NAS) and backup systems. Its architecture separates control from the data path, allowing backup data to move directly between an NDMP data server and a tape or backup data server instead of passing through the application that controls the job. This avoids turning the controlling backup application into the data-transfer bottleneck and reduces the processing and network load placed on it.[4] IANA registers the service name ndmp on port 10000 for both TCP and UDP; the Nmap discovery scripts below target the TCP service.[1][2]
Default port: 10000/TCP
PORT STATE SERVICE REASON VERSION
10000/tcp open ndmp syn-ack Symantec/Veritas Backup Exec ndmpEnumeration
Nmap’s ndmp-version and ndmp-fs-info scripts are in the default, discovery, and safe categories. They can identify the NDMP version and, when the service permits it, list remote file systems.[2][3]
nmap -n -sV --script "ndmp-fs-info or ndmp-version" -p 10000 <IP>Shodan
port:10000 ndmp