Internet-Security raven logo internet-security.com

TCP 1081

ProtocolTCP
Port1081
Labels

Synopsis

  • V2Ray and Xray-core: their default/sample configurations run a local HTTP proxy on TCP 1081 (with a SOCKS5 proxy on 1080); widely used by clients like v2rayN, V2RayNG, and NekoRay.
  • sing-box (SagerNet): common example configs expose a local HTTP inbound on 1081 while keeping SOCKS on 1080.
  • Trojan-Go: many real-world configs mirror the V2Ray convention, placing the local HTTP proxy on 1081 and SOCKS on 1080.
  • Attackers frequently scan TCP 1081 for misconfigured or open HTTP proxies to relay traffic or evade attribution.

Observed activity

Last 30 days Detailed chart

More information