Port 31337ELDIM Secure File Upload Proxy
UDP 31337 is historically associated with Back Orifice remote-control malware; IANA also assigns TCP and UDP to ELDIM's secure upload proxy.
- transport
- tcp · udp
- in transit
- cleartext
- assignment
- official
- risk
- 7/10
- lookups
- 0
2 transports registered
payload readable on path
registered with iana
risk
rank 993 of 6,521 · top 15%
also known as Back Orifice, BO
1 other service is registered on port 31337. compare all 2 →
Technical Details
what runs on :31337The registry assigns both TCP and UDP to eldim, described as a secure file upload proxy. No widely documented handshake, framing, or default configuration for this particular service is established, so do not infer a specific wire protocol from the assignment alone. In real-world port identification, UDP 31337 is best known as the default port for the original Back Orifice remote-administration tool; that is a separate use, not the IANA-assigned eldim service. Back Orifice communicates over UDP datagrams, while the IANA assignment also includes TCP.
Security Information
exposure of :31337risk score
7/ 10risk
treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.
security averages 2.9 across 444 ports — this one sits 4.1 above.
in transit
cleartext
credentials and payloads are readable by anyone on path
assignment
official
registered with iana for this service — scanners fingerprint it by number
reachable over
tcp · udp
udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite
security overview
If UDP 31337 is serving Back Orifice, it may provide an attacker with remote administrative control of the host; investigate the process and traffic rather than assuming the port number identifies the service. Do not expose an unknown upload proxy or remote-administration listener to the public internet without verifying its identity, authentication, and protections. The assigned service is not commonly observed open in Nmap's scan data, and no service-specific vulnerabilities are established here.
Related Ports
the 8 most looked-up other ports in security — 444 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :8881 | Atlasz Secure Server | TCP | Web Services | caution | 67.6k |
| :443 | HTTPS | TCPtls | Web Services | caution | 65.9k |
| :8291 | Winbox MikroTik Admin | TCP | Security | caution | 62.9k |
| :3268 | Microsoft Global Catalog (GC) | TCPUDP | Security | caution | 54.6k |
| :135 | Microsoft EPMAP | TCPUDP | Security | caution | 51.9k |
| :3128 | Squid Proxy HTTP | TCP | Web Services | caution | 45.8k |
| :8080 | HTTP Alternate | TCP | Web Services | caution | 44.9k |
| :7000 | Vuze HTTPS Tracker | TCPtls | Security | caution | 28.9k |
risk mix of the 8 listed
- caution100%
2 of 8 encrypted