Port 2812 sits in the registered port range (1024-49151). These ports are allocated by IANA to specific services after an application is submitted—but port 2812 has never been formally claimed. It shows up in the IANA registry as unassigned.
That doesn't mean it's empty.
The Unofficial Tenant: Monit
Monit is a lightweight, open-source process monitoring daemon for Unix systems. It watches over running processes, files, directories, and system resources. If a process dies, Monit restarts it. If disk usage spikes past a threshold, Monit sends an alert. It's the quiet caretaker of many Linux servers that would otherwise go unattended.
Monit ships with a built-in HTTP web interface. Its default port: 2812.
Out of the box, the Monit configuration looks like this:
Which means: web interface on port 2812, username admin, password monit. Most installations change these defaults. Some do not. Port 2812 has a long history of being accidentally exposed to the Internet with credentials unchanged.
If you see port 2812 open on a server you didn't configure, check whether Monit is running before assuming something unusual is happening.
What the Registered Range Means
Ports in the registered range (1024-49151) are meant to be reserved for specific services via IANA registration. The well-known ports (0-1023) require root privileges to bind on most Unix systems; registered ports do not. Any process can listen on 2812 without elevated permissions.
This makes the registered range a common home for:
- Application-specific web interfaces (like Monit's)
- Development servers
- Internal tooling
- Services that haven't bothered to register with IANA
IANA registration is voluntary for most purposes. Nothing stops software from using an unassigned port, and nothing guarantees that software using a "registered" port won't conflict with something else.
Security Note
Monit's web interface, if exposed beyond localhost, can reveal process states, restart services, and—with default credentials—hand an attacker administrative control over your server monitoring system. The tool designed to protect your processes becomes a vulnerability if left open.
If you run Monit, bind it to 127.0.0.1 or use a reverse proxy with authentication in front of it.
How to Check What's Listening
If Monit is running, you'll see something like:
Related Ports
- 2813: Also unassigned, sometimes used in Monit cluster configurations
- 2849: M/Monit (the commercial companion to Monit for managing multiple Monit instances)
- 9090: Prometheus, another popular system monitoring tool
Frequently Asked Questions
War diese Seite hilfreich?