{
  "port": 2048,
  "protocol": "both",
  "service": "dls-monitor (registration only)",
  "oneLiner": "Registered dls-monitor with no documentation; notable mainly for how often UDP scans get a response here.",
  "whatItIs": "IANA registers dls-monitor on TCP and UDP 2048 with no description, assignee or reference, paired with dls on 2047. TCP 2048 is as rare as its neighbours, but Nmap's frequency data is an outlier for UDP: 2048/udp responds on roughly 2% of scanned hosts, far above the surrounding ports and without any documented service to explain it. Whatever produces that, the registry name is not a reliable guide to what you have found.",
  "exposure": {
    "verdict": "careful",
    "note": "The label is meaningless and the UDP responses are unexplained; identify the process on the host before treating anything here as benign or exposing it."
  },
  "checkCommand": "sudo lsof -nP -iTCP:2048 -sTCP:LISTEN",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    },
    {
      "title": "nmap-services — Nmap port frequency data",
      "url": "https://github.com/nmap/nmap/blob/master/nmap-services",
      "kind": "github"
    }
  ]
}