{
  "port": 2107,
  "protocol": "tcp",
  "service": "MSMQ management RPC (IANA: BinTec Admin)",
  "oneLiner": "MSMQ's remote management RPC endpoint, registered to IANA as BinTec router administration.",
  "whatItIs": "IANA assigns 2107 to BinTec Admin, the administration service of BinTec (later Teldat) routers. In practice the port belongs to Windows: from MSMQ 3.0 onwards Message Queuing listens on 2107 for RPC calls to its remote management APIs, which is why Nmap labels it msmq-mgmt and why it appears on Windows servers next to 135, 1801, 2103 and 2105. Both readings describe an administrative interface rather than an application protocol.",
  "exposure": {
    "verdict": "never",
    "note": "This is a management plane in either reading — MSMQ remote administration or a router admin service. Restrict it to a management network."
  },
  "checkCommand": "nc -vz TARGET 2107",
  "links": [
    {
      "title": "Microsoft — ports used by MSMQ (2107 for remote management APIs)",
      "url": "https://learn.microsoft.com/en-us/archive/blogs/johnbreakwell/clear-the-way-msmq-coming-through",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}