whatportis.com

Port 313372 services

2 entries are registered on port 31337. It is a registered port (1024–49151) — IANA records an assignee, but nothing stops other software from listening here, which is why the number carries more than one entry.

entries
2

services registered on this number

transport
tcp · udp

2 transports in use

in transit
0/2

entries encrypted on the wire

worst risk
7/10

1 of 2 iana-registered

Services on this port

ranked by lookups
portservicerisk
:31337Back Orifice RATcaution
:31337ELDIM Secure File Upload Proxyrisk

01Back Orifice RATtcp · unofficial · risk 4/10

Back Orifice is a notorious remote administration tool released in the late 1990s, primarily known for its exploitation as a Trojan horse. It allows remote control of a Windows system, often without the user’s knowledge or consent, enabling malicious actors to access files, monitor user activity, and manipulate system configurations. Due to its ease of deployment and stealthy capabilities, it has historically been a popular choice for attackers targeting vulnerable systems.

port 31337 as Back Orifice RAT →
filed underSecurityRemote AccessFile Transfer

Which one is on your host

ask the machine, not the registry

The registry says what 31337 is registered to. What is listening on it right now is decided by the host, and only the host can be asked. Each of these prints the process behind the socket.

linux
ss -ltnp | grep ':31337\b'
macos
lsof -nP -iTCP:31337 -sTCP:LISTEN
windows
netstat -ano | findstr :31337

On Linux and Windows the process name comes back with the socket; on macOS lsof needs sudo to name a process that isn't yours. Match what it prints against the 2 entries above.

A port number is not a service. Anything may listen on 31337 — what you actually met is decided by the host, not the registry. If a service is missing here, it belongs in the registry.

contribute an entry