Port 2745Bagle worm backdoor
TCP 2745 is associated with the Bagle/Beagle worm backdoor; the IANA assignment is Urbisnet.
- transport
- tcp · udp
- in transit
- cleartext
- assignment
- official
- risk
- 8/10
- lookups
- 0
2 transports registered
payload readable on path
registered with iana
risk
rank 993 of 4,242 · top 23%
also known as urbisnet, Beagle backdoor
Technical Details
what runs on :2745The IANA registry lists URBISNET on both TCP and UDP 2745, but does not document a protocol or handshake. TCP 2745 is also known as a port used by Bagle/Beagle worm variants for backdoor access; this is malware behavior, not a standardized service, and its wire protocol and capabilities can vary by variant. No corresponding UDP behavior is established here.
Security Information
exposure of :2745risk score
8/ 10risk
treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.
security averages 3.1 across 347 ports — this one sits 4.9 above.
in transit
cleartext
credentials and payloads are readable by anyone on path
assignment
official
registered with iana for this service — scanners fingerprint it by number
reachable over
tcp · udp
udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite
security overview
Treat an unexpected TCP listener on 2745 as suspicious and investigate the host for malware rather than assuming it is a legitimate Urbisnet service. A Bagle/Beagle backdoor can expose a compromised system to remote control; do not expose such a listener to the internet, and isolate and remediate an affected host.
Related Ports
the 8 most looked-up other ports in security — 347 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :8881 | Atlasz Secure Server | TCP | Web Services | caution | 67.6k |
| :443 | HTTPS | TCPtls | Web Services | caution | 65.9k |
| :8291 | Winbox MikroTik Admin | TCP | Security | caution | 62.9k |
| :3268 | Microsoft Global Catalog (GC) | TCPUDP | Security | caution | 54.6k |
| :135 | Microsoft EPMAP | TCPUDP | Security | caution | 51.9k |
| :3128 | Squid Proxy HTTP | TCP | Web Services | caution | 45.8k |
| :8080 | HTTP Alternate | TCP | Web Services | caution | 44.9k |
| :7000 | Vuze HTTPS Tracker | TCPtls | Security | caution | 28.9k |
risk mix of the 8 listed
- caution100%
2 of 8 encrypted