From: Jamie Riden (jamesr@europe.com)
Date: Fri Dec 22 2006 - 14:14:28 EST
On 22/12/06, Lee Lawson <leejlawson@gmail.com> wrote:
> Right, let's get this clear now. The question was "what service runs
> on 1443". This is not the 1433 and 1434 that MS SQL server runs on.
>
> A quick search on the neohapsis port listing reveals:
> 1443 tcp ies-lm Integrated Engineering Software
> 1443 udp ies-lm Integrated Engineering Software
The OP already knew this I think - however I generally find you can't
make an accurate guess from the port number.
> I expected better than the answers given from this mailing list.
Here are 3 things I found on Google:
http://www.agentrics.com/solutions/techreqs.html
http://www.cscare.com/TrapConsole/downloads/readme.txt
http://www.sarc.com/avcenter/venc/data/backdoor.homutex.html
So from a very small sample, I'd be more inclined to suspect that it's
being chosen in analogy with port 443 - that is an alternate HTTPS
port. But that's only a guess which is worth about as much as the
electrons it's printed on.
cheers,
Jamie
-- Jamie Riden, CISSP / jamesr@europe.com / jamie.riden@gmail.com NZ Honeynet project - http://www.nz-honeynet.org/
This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:57:30 EDT