Leetspeak for "eleet" — the traditional backdoor port, and since registered to the eldim upload proxy.
31337 spells ELEET in leetspeak, which is why a generation of backdoors and joke services chose it; Nmap still names 31337/udp BackOrifice after the Cult of the Dead Cow remote-administration tool and names 31337/tcp "Elite". IANA has since registered both the TCP and UDP entries to eldim, an open-source file-upload proxy that encrypts uploads before pushing them to object storage. The number also lands inside Kubernetes' default NodePort range, so clusters allocate it by accident. In short: nothing legitimate listens here by convention, and an unexplained 31337 is worth identifying rather than assuming.
Expose with care
eldim is designed to face the internet over HTTPS, so the port itself is not the problem — but an unexpected 31337 on a host you did not configure is an incident-response question, not a firewall question.
$ nc -vz -w 3 TARGET 31337Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.