{
  "port": 9941,
  "protocol": "tcp",
  "service": "Unassigned",
  "oneLiner": "No IANA registration and no well-known service — whatever answers here is somebody's own application.",
  "whatItIs": "IANA has no service name assigned to 9941 in the service-name and port-number registry, and Nmap's service database lists it as unknown, open on roughly 0.015% of scanned hosts. That leaves no protocol you can assume from the number alone. In practice a listener on a port like this is an internal agent, a container port mapping, or an app that grabbed a free high number. Fingerprint the service instead of trusting the port.",
  "exposure": {
    "verdict": "careful",
    "note": "An unidentified listener is an unidentified authentication story. Find the process that owns the socket before deciding whether it belongs on a public interface."
  },
  "checkCommand": "sudo lsof -nP -iTCP:9941 -sTCP:LISTEN",
  "links": [
    {
      "title": "IANA port registry — 9941 (no assignment)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=9941",
      "kind": "iana"
    },
    {
      "title": "nmap-services — Nmap's port frequency database",
      "url": "https://github.com/nmap/nmap/blob/master/nmap-services",
      "kind": "github"
    }
  ]
}