{
  "port": 1117,
  "protocol": "tcp",
  "service": "ARDUS Multicast Transfer",
  "oneLiner": "Registered to ARDUS multicast file transfer; not seen in general scanning.",
  "whatItIs": "IANA assigns 1117 to ardus-mtrns, \"ARDUS Multicast Transfer\", one of a small group of ARDUS registrations for a multicast bulk-transfer product. There is no public protocol document, and Nmap's data shows it open on a negligible share of hosts. An open 1117 almost certainly belongs to unrelated local software.",
  "exposure": {
    "verdict": "careful",
    "note": "Unknown vendor protocol — identify the process; multicast transfer tooling is designed for a controlled LAN, not the internet."
  },
  "checkCommand": "sudo lsof -nP -iTCP:1117 -sTCP:LISTEN",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}