{
  "port": 1007,
  "protocol": "tcp",
  "service": "Unassigned",
  "oneLiner": "Unassigned at IANA with no conventional service; whatever is listening picked the number itself.",
  "whatItIs": "IANA's registry leaves 1002–1007 unassigned, and nmap lists 1007/tcp as unknown with one of the lowest open-frequency scores in this range. There is no protocol to expect and no scanner label to lean on. What it does tell you: 1007 is inside the system port range defined by RFC 6335, so on a Unix-like host a process needed root to bind it, and something privileged is answering. That is the interesting part, and it is worth chasing down.",
  "exposure": {
    "verdict": "careful",
    "note": "An unnamed, privileged listener is exactly the thing to identify before allowing it through a firewall — the registry gives you no cover here."
  },
  "checkCommand": "sudo lsof -nP -iTCP:1007 -sTCP:LISTEN",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry (1002–1007 unassigned)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    },
    {
      "title": "RFC 6335 — IANA procedures and the System (0–1023) port range",
      "url": "https://www.rfc-editor.org/rfc/rfc6335.html",
      "kind": "spec"
    },
    {
      "title": "nmap-services (1007/tcp unknown)",
      "url": "https://github.com/nmap/nmap/blob/master/nmap-services",
      "kind": "github"
    }
  ]
}