# WHATPORT(10001)

## NAME

port 10001 — scp-config / Ubiquiti discovery — Registered as scp-config; on UDP it is Ubiquiti's device-discovery responder, a known amplification reflector.

Protocol: TCP/UDP  
IANA registry

## DESCRIPTION

IANA registers 10001 on both transports as scp-config ("SCP Configuration"), which you will rarely encounter. The listener that matters is on UDP: Ubiquiti's discovery protocol, which UniFi and airMAX devices answer with their model, firmware, MAC, and hostname. It is a documented DDoS reflector at roughly 7x amplification, with about 127,000 exposed reflectors counted in 2020. On TCP, 10001 shows up mostly as a raw serial-over-Ethernet port on device servers and as a generic alternate application port; Nmap sees TCP 10001 open on about 0.13% of hosts.

## EXPOSURE

**Do not expose.** The UDP responder both enumerates your hardware and hands attackers an amplifier — firewall it at the edge. Raw serial redirectors on TCP 10001 typically have no authentication at all.

## CHECK

```sh
sudo nmap -sU -sV -p 10001 TARGET
```

## SEE ALSO

- iana — [IANA port registry — 10001 (scp-config)](https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=10001) (iana.org)
- source — [AMP-Research — UDP 10001 Ubiquiti discovery amplification](https://github.com/Phenomite/AMP-Research/blob/master/Port%2010001%20-%20Ubiquiti/README.md) (github.com)

---

HTML: <https://whatport.net/10001/> · JSON: <https://whatport.net/10001.json> · full dataset: <https://whatport.net/ports.json>