{
  "port": 9917,
  "protocol": "tcp",
  "service": "Unassigned",
  "oneLiner": "No IANA assignment and no established occupant — an application-chosen high port.",
  "whatItIs": "There is no IANA service registration for 9917 on TCP or UDP. Nmap records it as `unknown`, seen rarely enough that no pattern emerges. Nothing standard, nothing vendor-default, nothing notable in published malware writeups. Find the owning process rather than reading meaning into the number.",
  "exposure": {
    "verdict": "careful",
    "note": "An unidentified listener deserves scrutiny, not a default allow. Establish what it is, then decide."
  },
  "checkCommand": "sudo lsof -nP -iTCP:9917 -sTCP:LISTEN",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}