{
  "port": 3052,
  "protocol": "both",
  "service": "APC PowerChute (apc-3052)",
  "oneLiner": "APC's UPS shutdown channel — PowerChute Network Shutdown talking to a UPS Network Management Card.",
  "whatItIs": "IANA registers 3052 as `apc-3052` to American Power Conversion, and APC/Schneider use it for PowerChute Network Shutdown: the UPS Network Management Card sends the agent a UDP packet on 3052 roughly every 25 seconds, and the loss of those packets is what triggers a graceful shutdown. Schneider's own port list for PCNS is TCP 80, 443, 3052 and 6547 plus UDP 3052. On a scan, 3052 means a server running the PowerChute agent or an APC management card, usually in a rack somewhere on a facilities network.",
  "exposure": {
    "verdict": "never",
    "note": "It is a power-control signalling path — anything that can forge traffic to it is adjacent to shutting servers down. Keep UPS management and PowerChute agents on a management VLAN."
  },
  "checkCommand": "nc -vz TARGET 3052",
  "links": [
    {
      "title": "Schneider Electric — What ports are utilized by PowerChute Network Shutdown and how are they secured?",
      "url": "https://www.se.com/us/en/faqs/FA373363/",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}