What This Port Is
Port 3437 sits in the registered port range (1024 to 49151). These ports are assigned by IANA to specific services upon request, though registration doesn't guarantee active use or wide deployment.
IANA assigned port 3437 to Autocue Directory Service on both TCP and UDP, registered in 2002 to 2003.1 Autocue is a British company that manufactures teleprompter systems for broadcast television. Their directory service was how studio equipment running Autocue software located other devices on the same network.
You are unlikely to encounter this service in the wild today. The assignment exists, but Autocue's equipment has not made port 3437 a notable presence on general-purpose networks.
The Malware Footnote
Port 3437 appears in security databases for a different reason. Backdoor:Win32/Netjoe, a remote access trojan active in the mid-2000s, opened TCP ports 3436 and 3437 on infected Windows machines to accept commands from a remote attacker.2 This association is why port 3437 occasionally triggers alerts in older intrusion detection rule sets.
The threat is a historical artifact. Modern antivirus software detects it readily, and the command-and-control infrastructure it relied on is long dead.
If You See This Port Open
If port 3437 appears in a port scan on a system today, the Autocue software scenario is unlikely unless you are running broadcast equipment. More probable explanations:
- An application chose this port arbitrarily for its own use
- A legacy security tool or service is bound to it
- Something unexpected is running, worth investigating
How to Check What Is Listening
On Linux or macOS:
On Windows:
The process ID from netstat maps to a process name in Task Manager under the Details tab.
Why Unassigned-in-Practice Ports Matter
The registered port range contains thousands of entries like this one: assigned to real services, rarely deployed, largely forgotten. They matter for a few reasons.
First, they represent a historical record. The IANA registry is a timestamp of what software needed to talk over a network and when. Autocue's registration tells you something about how broadcast equipment was networked in the early 2000s.
Second, their obscurity makes them useful for attackers. A port nobody expects to see open is a quieter place to run a listener than something that will immediately draw attention.
Third, they demonstrate that "registered" and "active" are different things. IANA registration is a reservation, not a presence. Most registered ports are dark most of the time.
此頁面對您有幫助嗎？