{
  "port": 19801,
  "protocol": "tcp",
  "service": "Unassigned",
  "oneLiner": "Unassigned by IANA, no known service — it is in Nmap's default scan list only because hosts answer there.",
  "whatItIs": "IANA lists 19801 inside the unassigned block 19791-19997, so no vendor has ever claimed it. Nmap's service table carries it with an open-frequency but the label 'unknown', which is why it lands in the default top-1000 TCP scan and shows up in reports. In practice anything listening here is a private application, a container port mapping, or a service someone moved off its normal port. Identify the listener before you assume anything about it.",
  "exposure": {
    "verdict": "careful",
    "note": "The verdict belongs to whatever is actually bound here, not to the number. Fingerprint it first; an unidentified listener on a public IP is a finding, not a service."
  },
  "checkCommand": "nmap -Pn -sV -p 19801 --reason TARGET",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    },
    {
      "title": "Nmap nmap-services frequency table",
      "url": "https://github.com/nmap/nmap/blob/master/nmap-services",
      "kind": "github"
    }
  ]
}