topic APP-ID: Xunlei TCP 33221 in General Topics

APP-ID: Xunlei TCP 33221

dcaballero — Thu, 09 Mar 2023 17:28:59 GMT

Hello, has anyone encountered this application "xunlei" appearing in the traffic logs using destination port TCP 33221? This port is also used by Cortex XDR. Wondering if this is malicious or benign. Appreciate your comments. Thank you.

Re: APP-ID: Xunlei TCP 33221

kiwi — Mon, 13 Mar 2023 08:46:58 GMT

Hi @dcaballero ,

xunlei uses tcp/udp dynamic ports.

Are you getting threat logs ?

You could grab the pcap and file it with support for analysis.

Kind regards,

-Kiwi.

Re: APP-ID: Xunlei TCP 33221

RoneyRajan123 — Wed, 29 Jan 2025 15:42:47 GMT

Hi Dcaballero

in our environment also we start seeing “xunlei” this application. Did you get any updates for this?

@dcaballero @kiwi