{
  "port": 1984,
  "protocol": "tcp",
  "service": "Big Brother / Xymon",
  "oneLiner": "The Big Brother monitoring port, still in service as Xymon's server port.",
  "whatItIs": "IANA registers 1984 as bb, for the Big Brother monitoring system. Big Brother itself is long dead, but its successor Xymon kept the port: xymond listens on 0.0.0.0:1984 by default and accepts status reports from client machines as well as query and control commands. If you find it open, you are looking at a monitoring server, and its clients are pushing to it from across the network.",
  "exposure": {
    "verdict": "never",
    "note": "The Xymon protocol has no authentication — anyone who can reach the port can inject false status, read the monitoring database, and issue control commands, so keep it inside the monitored network."
  },
  "checkCommand": "printf 'ping\\n' | nc -w 3 TARGET 1984",
  "links": [
    {
      "title": "xymond(8) manual page — default listen 0.0.0.0:1984",
      "url": "https://xymon.sourceforge.io/xymon/help/manpages/man8/xymond.8.html",
      "kind": "official-docs"
    },
    {
      "title": "Xymon Monitor project site",
      "url": "https://xymon.sourceforge.io/",
      "kind": "official-docs"
    },
    {
      "title": "IANA port registry — 1984 (bb)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=1984",
      "kind": "iana"
    }
  ]
}