{
  "port": 1094,
  "protocol": "tcp",
  "service": "rootd / XRootD",
  "oneLiner": "Remote access to ROOT data files — the rootd daemon, and today XRootD, the storage backbone of LHC computing.",
  "whatItIs": "IANA assigned 1094 to rootd, the ROOT file server daemon, for Fons Rademakers of the CERN ROOT project. rootd itself is long superseded by XRootD, which keeps 1094 as its default listening port and serves data across worldwide grid infrastructure such as the WLCG. Seeing it open means a scientific data server: a storage element, a redirector fronting a federation of them, or an analysis facility's cache.",
  "exposure": {
    "verdict": "careful",
    "note": "Grid XRootD endpoints are intentionally reachable by remote sites, but only with an authentication plugin (GSI/X.509, tokens) configured and read scopes controlled. An XRootD server exporting paths with unauthenticated access is a data leak."
  },
  "checkCommand": "nc -vz -w 3 TARGET 1094",
  "links": [
    {
      "title": "IANA port registry — 1094 (rootd)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=1094",
      "kind": "iana"
    },
    {
      "title": "rootd(1) manual page — the ROOT file server daemon",
      "url": "https://manpages.ubuntu.com/manpages/trusty/man1/rootd.1.html",
      "kind": "official-docs"
    },
    {
      "title": "xrootd/xrootd — the XRootD data access framework",
      "url": "https://github.com/xrootd/xrootd",
      "kind": "github"
    }
  ]
}