Internet-Security.com TCP port 11001 details

Johnson Controls Metasys (building automation system) uses TCP port 11001 for its proprietary “metasys” service, facilitating communication between the Site Director/ADS/ADX servers and Network Engines (NAE/NCE/NIE); this port is identified as “metasys” in tools like Nmap and in JCI networking documentation.
Security note: Metasys has had multiple ICS-CERT advisories, and internet-exposed devices on 11001/tcp have been observed in reconnaissance and exploitation attempts against vulnerable Metasys deployments.

TCP 11001