Port 31337ELDIM Secure File Upload Proxy

UDP 31337 is historically associated with Back Orifice remote-control malware; IANA also assigns TCP and UDP to ELDIM's secure upload proxy.

transport
tcp · udp

2 transports registered

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
7/10

risk

lookups
0

rank 993 of 6,521 · top 15%

also known as Back Orifice, BO

1 other service is registered on port 31337. compare all 2 →

Technical Details

what runs on :31337

The registry assigns both TCP and UDP to eldim, described as a secure file upload proxy. No widely documented handshake, framing, or default configuration for this particular service is established, so do not infer a specific wire protocol from the assignment alone. In real-world port identification, UDP 31337 is best known as the default port for the original Back Orifice remote-administration tool; that is a separate use, not the IANA-assigned eldim service. Back Orifice communicates over UDP datagrams, while the IANA assignment also includes TCP.

Security Information

exposure of :31337

risk score

7/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

security averages 2.9 across 444 ports — this one sits 4.1 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

If UDP 31337 is serving Back Orifice, it may provide an attacker with remote administrative control of the host; investigate the process and traffic rather than assuming the port number identifies the service. Do not expose an unknown upload proxy or remote-administration listener to the public internet without verifying its identity, authentication, and protections. The assigned service is not commonly observed open in Nmap's scan data, and no service-specific vulnerabilities are established here.

the 8 most looked-up other ports in security — 444 ports carry that label.

risk mix of the 8 listed

  • caution100%

2 of 8 encrypted