Port 1047 is officially registered for neod1, the daemon process for Sun Microsystems' NEO Object Request Broker. It's a registered port (in the range 1024-49151) that points to software that no longer exists.
What NEO Was
In the mid-1990s, distributed computing was the future. The idea: objects running on one machine could call methods on objects running on another machine as if they were local. The Common Object Request Broker Architecture (CORBA) was the standard, and everyone was building implementations.1
Sun Microsystems spent years developing Distributed Objects Everywhere (DOE), announced in 1990 but delayed repeatedly. It finally shipped in 1995 as NEO—a CORBA implementation with an Object Request Broker that would handle remote method calls across networks.2
NEO was announced with fanfare in March 1996. It was killed later that same year.3
Sun pivoted to Java. The components of NEO were folded into what became Enterprise JavaBeans. The port registration for neod1 remained.
What Runs on Port 1047 Now
Officially, nothing. NEO hasn't existed since 1996.
The port is registered to Sun (now Oracle), but the software it was registered for is long dead. This is common in the registered ports range—companies request a port for a product, the product dies, and the registration stays in IANA's database indefinitely.
You may occasionally see port 1047 associated with security warnings about "RemoteNC"—a remote access tool that was sometimes flagged as a backdoor in the 2000s. This was never an official use of the port, just malware opportunistically using an unoccupied number.
Why This Matters
The registered ports range (1024-49151) is full of ghosts like this. Companies register ports for products that fail, protocols that get replaced, or services that simply fade away. The registrations don't expire.4
This creates a landscape where:
- Thousands of ports are officially "taken" but never actually used
- Software can register a port and abandon it years later
- New services sometimes have to work around registrations for dead products
Port 1047 is a time capsule. It points to a moment in the mid-1990s when CORBA was supposed to be the future, before Java ate the world and distributed objects became something you did with JSON over HTTP instead of method calls over an Object Request Broker.
Checking What's Listening
If you want to see if anything is actually using port 1047 on your system:
On Linux or macOS:
On Windows:
You'll almost certainly see nothing. The port is registered, but the software it was registered for has been gone for nearly thirty years.
Byla tato stránka užitečná?