TCP 9151
Synopsis
- TCP port 9151 is most commonly used by Tor as its ControlPort, especially in the Tor Browser Bundle.
- Tor Browser (Windows/macOS/Linux) runs a local tor process that listens on 127.0.0.1:9151 for control commands (while the SOCKS proxy is on 9150).
- Applications can reuse Tor Browser’s Tor instance by talking to this control port; for example, OnionShare can be configured to “Use Tor Browser” and connect via 9151.
- The port is intended to be local-only; if misconfigured and exposed without authentication, attackers could remotely control the Tor process, but this is a configuration error rather than a normal use.
Observed activity
Last 30 days
Detailed chart