{
  "port": 1417,
  "protocol": "tcp",
  "service": "Timbuktu Service 1",
  "oneLiner": "The first of Timbuktu Pro's four service ports — remote control of a Mac or Windows desktop.",
  "whatItIs": "Timbuktu Pro, the Motorola/Netopia remote-control product that was a staple of Mac administration, opens connections on port 407 and then carries each service on its own TCP port: 1417 through 1420 for control, screen observation, and file send/exchange. IANA registers 1417 as timbuktu-srv1. The product is discontinued and unsupported, so an open 1417 today means an old workstation still running an abandoned remote-control agent.",
  "exposure": {
    "verdict": "never",
    "note": "An unmaintained remote-desktop agent with no vendor security updates; it should not be reachable from any untrusted network, and preferably should not be running at all."
  },
  "checkCommand": "nmap -Pn -p 407,1417-1420 TARGET",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}