Open NAT-PMP Report

LAST UPDATED: 2022-08-29

This report identifies hosts that have the NAT Port Mapping Protocol (NAT-PMP) running and accessible on the Internet.

These services have the potential to expose information about a client’s network on which this service is accessible. Information on this vulnerability can be found here.

For more details behind the scan methodology and a daily update of global NAT-PMP scan statistics please visit our dedicated NAT-PMP scan page.

For more information on our scanning efforts, check out our Internet scanning summary page.

Filename(s): scan_nat_pmp

Fields

  • timestamp
    Time that the IP was probed in UTC+0
  • ip
    The IP address of the device in question
  • protocol
    Protocol that the NAT-PMP response came on (usually UDP)
  • port
    Port that the NAT-PMP response came from
  • hostname
    Reverse DNS name of the device in question
  • tag
    Will always be nat-pmp
  • asn
    ASN of where the device in question resides
  • geo
    Country where the device in question resides
  • region
    State / Province / Administrative region where the device in question resides
  • city
    City in which the device in question resides
  • naics
    North American Industry Classification System Code
  • sic
    Standard Industrial Classification System Code
  • version
    Version Code sent in response
  • opcode
    Operation Code sent in response
  • uptime
    Amount of time in seconds since the device was reset
  • external_ip
    The IPv4 address the device thinks is its external address
  • response_size
    Response size in bytes
  • amplification
    Amplification factor (This amplification is is based solely on the payload size sent and payload size received)

Sample

"timestamp","ip","protocol","port","hostname","tag","version","asn","geo","region","city","naics","sic","opcode","uptime","external_ip","sector","response_size","amplification"
"2010-02-10 00:00:00",192.168.0.1,udp,5351,node01.example.com,nat-pmp,0,64512,ZZ,Region,City,0,0,128,366835715,192.168.0.1,,12,6.00
"2010-02-10 00:00:01",192.168.0.2,udp,5351,node02.example.com,nat-pmp,0,64512,ZZ,Region,City,0,0,128,4012716,192.168.0.2,,12,6.00
"2010-02-10 00:00:02",192.168.0.3,udp,5351,node03.example.com,nat-pmp,0,64512,ZZ,Region,City,0,0,128,4104677,192.168.0.3,"Communications, Service Provider, and Hosting Service",12,6.00

Our 130 Report Types

« Back to Network Reporting