{
  "port": 11967,
  "protocol": "both",
  "service": "sysinfo-sp",
  "oneLiner": "\"SysInfo Service Protocol\", registered in 2003 and essentially never seen since.",
  "whatItIs": "IANA holds 11967 on TCP and UDP as `sysinfo-sp`, \"SysInfo Service Protocol\", registered in March 2003 by Mike Cooper. The registry entry is all there is: no public specification, no maintained implementation, and no vendor documentation that describes the wire format. Nmap carries the name from IANA but records essentially no observed traffic. If something is listening on 11967 on your network, assume it is an unrelated local service that picked the number, not SysInfo.",
  "exposure": {
    "verdict": "careful",
    "note": "An effectively dead registration gives you no security properties to reason about. Identify the real listener before exposing it."
  },
  "checkCommand": "nmap -Pn -sV -p 11967 TARGET",
  "links": [
    {
      "title": "IANA port registry — 11967 (sysinfo-sp)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=11967",
      "kind": "iana"
    }
  ]
}