{
  "port": 1049,
  "protocol": "both",
  "service": "td-postman (Tobit David)",
  "oneLiner": "IANA-registered to Tobit David's Postman messaging component; almost never seen outside German SMB networks.",
  "whatItIs": "IANA assigns 1049 to \"td-postman — Tobit David Postman VPMN\", a component of Tobit Software's David groupware suite, a German unified-messaging product that combines email, fax and telephony for small and mid-size businesses. The registration dates from the era when David was widely deployed in German-speaking Europe; outside that market you will effectively never meet the real service. Nmap's frequency data puts 1049 at roughly 0.2% of scanned hosts, and a listener you find there is far more likely to be an unrelated application that grabbed a free port above 1024 than a Tobit server. Identify it by its banner before assuming the registration is what you are talking to.",
  "exposure": {
    "verdict": "careful",
    "note": "A proprietary LAN messaging component with no public security track record — keep it on the internal network, and if you find something listening here, fingerprint it before deciding anything."
  },
  "checkCommand": "nmap -Pn -sV -p 1049 TARGET",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    },
    {
      "title": "Nmap service frequency database (nmap-services)",
      "url": "https://svn.nmap.org/nmap/nmap-services",
      "kind": "official-docs"
    }
  ]
}