TCP 1801
Synopsis
- TCP port 1801 is assigned to Microsoft Message Queuing (MSMQ).
- Windows systems with the MSMQ feature (e.g., Windows Server with MSMQ Server) listen on 1801 for direct TCP message traffic between queues.
- Enterprise software that uses MSMQ therefore uses 1801 on their Windows hosts, such as Microsoft BizTalk Server when using the MSMQ adapter and the SolarWinds Orion Platform components that require MSMQ for job processing.
- Associated exploitation: MSMQ has had critical vulnerabilities reachable on TCP 1801, notably CVE-2023-21554 (“QueueJumper”), enabling unauthenticated remote code execution via crafted packets when MSMQ is exposed to the network.
Observed activity
Last 30 days
Detailed chart