{
  "port": 1011,
  "protocol": "tcp",
  "service": "Reserved (IANA)",
  "oneLiner": "Part of IANA's reserved 1011–1020 block — held back deliberately, so no service will ever be registered here.",
  "whatItIs": "IANA marks the whole 1011–1020 range Reserved, which is a stronger statement than Unassigned: these numbers are held back and not handed out. No standard service exists or will exist on 1011, and nmap lists it as unknown with a very low open rate. Anything listening is a purely local decision, made by a privileged process since the port is inside the system range.",
  "exposure": {
    "verdict": "careful",
    "note": "A reserved port with a listener on it is by definition something nonstandard running with root privileges. Identify it; there is no registry entry to fall back on."
  },
  "checkCommand": "sudo lsof -nP -iTCP:1011 -sTCP:LISTEN",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry (1011–1020 Reserved)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    },
    {
      "title": "RFC 6335 — IANA procedures for port number assignment",
      "url": "https://www.rfc-editor.org/rfc/rfc6335.html",
      "kind": "spec"
    }
  ]
}