{
  "port": 4224,
  "protocol": "tcp",
  "service": "xtell",
  "oneLiner": "xtelld, a tiny Unix daemon that pops one-line messages onto other users' terminals.",
  "whatItIs": "xtell is a small message-sending tool in the spirit of write and talk: the xtell client sends a line to xtelld on another host, which displays it to the named user's terminal. The daemon defaults to TCP 4224 and is typically run from inetd; it still ships as a Debian and Ubuntu package. IANA's range assignment for 4200–4299 is unrelated, so 4224 is squatting by convention, not registration.",
  "exposure": {
    "verdict": "never",
    "note": "Its purpose is writing text to logged-in users' terminals from the network, with no meaningful authentication — a spam and social-engineering channel if it is reachable publicly."
  },
  "checkCommand": "nc -vz -w 3 TARGET 4224",
  "links": [
    {
      "title": "Debian manpage — xtelld(8), default port 4224",
      "url": "https://manpages.debian.org/testing/xtell/xtelld.8.en.html",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}