Re: Port 1443

["Jamie Riden" <jamesr () europe com>]

On 22/12/06, Lee Lawson <leejlawson () gmail com> wrote:
> Right, let's get this clear now.  The question was "what service runs
> on 1443".  This is not the 1433 and 1434 that MS SQL server runs on.
>
> A quick search on the neohapsis port listing reveals:
> 1443 tcp ies-lm Integrated Engineering Software
> 1443 udp ies-lm Integrated Engineering Software

The OP already knew this I think - however I generally find you can't
make an accurate guess from the port number.

> I expected better than the answers given from this mailing list.

Here are 3 things I found on Google:

http://www.agentrics.com/solutions/techreqs.html
http://www.cscare.com/TrapConsole/downloads/readme.txt
http://www.sarc.com/avcenter/venc/data/backdoor.homutex.html

So from a very small sample, I'd be more inclined to suspect that it's
being chosen in analogy with port 443 - that is an alternate HTTPS
port. But that's only a guess which is worth about as much as the
electrons it's printed on.

cheers,
Jamie
--
Jamie Riden, CISSP / jamesr () europe com / jamie.riden () gmail com
NZ Honeynet project - http://www.nz-honeynet.org/