{
  "port": 9988,
  "protocol": "tcp",
  "service": "nsesrvr",
  "oneLiner": "Registered to a long-discontinued IDS product; in practice a free high port applications squat on.",
  "whatItIs": "IANA assigns 9988/tcp the service name nsesrvr, described as the \"Software Essentials Secure HTTP server\" — a component of the SecureNet Pro intrusion-detection product, which has not been a going concern for many years. The matching UDP entry is simply Reserved. Nmap sees 9988/tcp open on roughly 0.015% of hosts, and vanishingly few of those are SecureNet. Read an open 9988 as an unidentified application, not as the registered service.",
  "exposure": {
    "verdict": "careful",
    "note": "The registration tells you nothing about what is actually listening, so it tells you nothing about whether it authenticates. Fingerprint before exposing."
  },
  "checkCommand": "nmap -sV -p 9988 TARGET",
  "links": [
    {
      "title": "IANA port registry — 9988 (nsesrvr)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=9988",
      "kind": "iana"
    },
    {
      "title": "nmap-services — Nmap's port frequency database",
      "url": "https://github.com/nmap/nmap/blob/master/nmap-services",
      "kind": "github"
    }
  ]
}