{
  "port": 1063,
  "protocol": "both",
  "service": "KyoceraNetDev",
  "oneLiner": "Registered by Kyocera for its network-device management traffic — a printer-fleet port, not a print port.",
  "whatItIs": "IANA lists 1063 as `kyoceranetdev`, \"KyoceraNetDev\", registered by Kyocera for its network device software. It is a management/discovery channel used by Kyocera's device-administration tooling rather than a printing port — actual jobs go to 9100 (raw), 515 (LPD) or 631 (IPP). Kyocera does not publish the protocol, so what you can say from a scan is limited: 1063 open on a host alongside 9100 and 161 is a strong signal you are looking at a Kyocera MFP or its management server. Kyocera's own discovery documentation describes SNMP, Bonjour and WS-Discovery as the supported discovery mechanisms, which is where the documented behavior lives.",
  "exposure": {
    "verdict": "never",
    "note": "Printer management planes ship with default credentials, expose address books and scan-to-folder settings, and are a standard internal foothold — keep MFPs off the public internet entirely."
  },
  "checkCommand": "nmap -Pn -sV -p 1063,9100,161 TARGET",
  "links": [
    {
      "title": "Kyocera — Discovery and network",
      "url": "https://www.kyoceradocumentsolutions.com/support/mobileprint/data/en/discoveryNetwork.html",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}