{
  "port": 1138,
  "protocol": "tcp",
  "service": "encrypted-admin",
  "oneLiner": "Registered in 2007 for \"encrypted admin requests\" — a vendor administration channel, not a public protocol.",
  "whatItIs": "IANA carries two names for 1138: the original encrypted_admin and encrypted-admin, which IANA assigned later as the well-formed replacement, both described as \"encrypted admin requests\". There is no published protocol, so the registration tells you only that the vendor intended an administrative channel with transport encryption. Nmap sees it open on a negligible fraction of hosts.",
  "exposure": {
    "verdict": "never",
    "note": "Administration planes do not belong on the internet even when they are encrypted; put it behind a VPN and identify the application while you are there."
  },
  "checkCommand": "sudo lsof -nP -iTCP:1138 -sTCP:LISTEN",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}