Webmin/Virtualmin web admin panel; also the start of the usual RTP media range in Asterisk (10000-20000).
Webmin/Virtualmin web admin panel; also the start of the usual RTP media range in Asterisk (10000-20000).
Expose only to trusted sources. Webmin runs as root; a backdoored release (CVE-2019-15107) and other RCEs were mass-exploited. Restrict to admin IPs or a VPN.
sudo ss -tlnp 'sport = :10000'sudo lsof -nP -i :10000sudo netstat -tlnp | grep ':10000 'netstat -ano | findstr :10000Get-NetTCPConnection -LocalPort 10000 -State Listen | Select LocalAddress,OwningProcessnc -vz -w 5 HOST 10000Test-NetConnection HOST -Port 10000Replace 203.0.113.10 with the address or network you trust. With ufw, make sure the default incoming policy is deny.
sudo ufw allow from 203.0.113.10 to any port 10000 proto tcpsudo iptables -A INPUT -p tcp --dport 10000 -s 203.0.113.10 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 10000 -j DROPsudo nft add rule inet filter input ip saddr 203.0.113.10 tcp dport 10000 accept
sudo nft add rule inet filter input tcp dport 10000 dropNew-NetFirewallRule -DisplayName 'TCP 10000 trusted' -Direction Inbound -Protocol TCP -LocalPort 10000 -RemoteAddress 203.0.113.10 -Action AllowAll port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.