Unfamiliar Port Assistance Needed

JohnnyBiggles

Anyone know what ARDUS-CNTL is? 2 PCs are trying to access a server on a different segment on my network through TCP port 1116. Anyone know what it is?

BGraves

Honestly, never seen that one come up and can't find much info at all. Not sure if this would be helpful but have you checked this link?
what is ardus?? - Wireshark Q&A
Might point you in the right direction, not sure, would love to know what you find though!

JohnnyBiggles

Thanks. I'll block it for now & look into this.

BGraves

Yeah usually a safe route to go and if anyone starts complaining that something doesn't work, you'll be able to investigate and discover what it was used for/doing!

wes allen

Might try a bit of nmap/netcat to fingerprint, or maybe netstat on the server to see what process has that port open.

CodeBlox

I'd do the netstat as mentioned above to see what process is doing that on these workstations.