Registered in 2018 to a message bus called hexxorecore; older tools still label it Dragon IDS Console.
IANA assigned 9111 to Hexxore in July 2018 for hexxorecore, described as a multiple-purpose distributed message bus. Before that registration, nmap's services file named the port DragonIDSConsole after the Enterasys Dragon intrusion-detection console, and that older label still shows up in scan output today. Neither is common on a modern network, so treat a listener here as something to fingerprint rather than something you already know.
Expose with care
An IDS management console or a message bus is an internal control-plane service; if that is what you find, it should not be reachable from outside the management network.
$ nmap -sV -Pn -p 9111 TARGETSeen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.