{
  "port": 3005,
  "protocol": "both",
  "service": "Genius License Manager (registered) / deslogin",
  "oneLiner": "Registered to a license manager; still labelled deslogin, a 1990s DES-encrypted remote login tool.",
  "whatItIs": "IANA registers 3005 as geniuslm, \"Genius License Manager\". Nmap and older service tables instead call it deslogin, an early encrypted-symmetric replacement for telnet/rlogin from before SSH existed, which is the label most scanners will print. Neither is common today; floating license daemons are the more plausible modern occupant of the 3000-3010 range on a workstation running commercial engineering software.",
  "exposure": {
    "verdict": "careful",
    "note": "If it is a license manager, it should be reachable only from the LAN that needs licenses; if it really is a pre-SSH remote login daemon, treat it as never and remove it."
  },
  "checkCommand": "nc -vz -w 3 TARGET 3005",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 3005 (geniuslm)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=3005",
      "kind": "iana"
    },
    {
      "title": "nmap/nmap — nmap-services (3005 deslogin)",
      "url": "https://github.com/nmap/nmap/blob/master/nmap-services",
      "kind": "github"
    }
  ],
  "ianaName": "geniuslm"
}