{
  "port": 2605,
  "protocol": "tcp",
  "service": "FRRouting/Quagga bgpd vty",
  "oneLiner": "The BGP daemon's command line — the next port up from ospfd on an FRR router.",
  "whatItIs": "2605 is BGP_VTY_PORT in FRRouting: bgpd's own telnet-style management CLI, separate from every other daemon's. Anyone who gets past its password can read the full BGP table and change neighbors, policy, and redistribution on a live router. It shows up on Linux route servers and reflectors, and on FRR-based network appliances. IANA has 2605 registered as \"NSC POSA\", unrelated to routing.",
  "exposure": {
    "verdict": "never",
    "note": "This is the routing control plane over cleartext telnet — internet exposure hands over the router's BGP configuration."
  },
  "checkCommand": "nc -v -w 3 TARGET 2605",
  "links": [
    {
      "title": "FRRouting — lib/libfrr.h (BGP_VTY_PORT 2605)",
      "url": "https://github.com/FRRouting/frr/blob/master/lib/libfrr.h",
      "kind": "github"
    },
    {
      "title": "FRRouting docs — BGP",
      "url": "https://docs.frrouting.org/en/latest/bgp.html",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 2605 (nsc-posa)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=2605",
      "kind": "iana"
    }
  ],
  "ianaName": "nsc-posa"
}