{
  "port": 3260,
  "protocol": "tcp",
  "service": "iSCSI target",
  "oneLiner": "iSCSI — raw SCSI block storage over TCP, the port every SAN target listens on.",
  "whatItIs": "TCP 3260 is the IANA-registered iSCSI target port from RFC 7143: initiators open a session, log in with a target IQN and then issue SCSI commands over TCP, treating a remote LUN as a local disk. Every common target implementation defaults here — Linux LIO, tgt, NetApp, Synology and QNAP appliances, and cloud block-storage gateways. On a scan it means someone's disks are on the network, and an unauthenticated target will hand its LUN list to anyone who asks.",
  "exposure": {
    "verdict": "never",
    "note": "iSCSI carries block data in cleartext and its CHAP authentication is optional and weak; put it on a dedicated storage VLAN, never on a routed or public interface."
  },
  "checkCommand": "iscsiadm -m discovery -t sendtargets -p TARGET:3260",
  "links": [
    {
      "title": "RFC 7143 — Internet Small Computer System Interface (iSCSI) Protocol",
      "url": "https://www.rfc-editor.org/rfc/rfc7143.html",
      "kind": "spec"
    },
    {
      "title": "open-iscsi — Linux iSCSI initiator",
      "url": "https://github.com/open-iscsi/open-iscsi",
      "kind": "github"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}