{
  "port": 407,
  "protocol": "tcp",
  "service": "Timbuktu",
  "oneLiner": "Timbuktu remote control — 1990s cross-platform screen sharing for Mac and Windows, long discontinued.",
  "whatItIs": "Timbuktu was Farallon's, later Netopia's and finally Motorola's, remote-control product: view and drive another machine's screen, plus file exchange and chat, across Mac and Windows. IANA holds 407 for it, registered by the vendor. The product was discontinued and receives no updates, so a listener on 407 is an unmaintained remote-control agent with full interactive access to the desktop it runs on. Nmap's frequency data still shows it turning up on UDP as well as TCP.",
  "exposure": {
    "verdict": "never",
    "note": "Unmaintained remote screen control with its own credential store — this is full desktop takeover if the authentication is bypassed, and nobody is shipping fixes."
  },
  "checkCommand": "nmap -sV -p 407 TARGET",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 407",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=407",
      "kind": "iana"
    }
  ],
  "ianaName": "timbuktu"
}