{
  "port": 548,
  "protocol": "tcp",
  "service": "AFP over TCP",
  "oneLiner": "Apple Filing Protocol — a Mac file share, a Time Machine target, or a NAS with AFP still switched on.",
  "whatItIs": "AFP over TCP is Apple's native file-sharing protocol, and for years it was how Macs mounted volumes from each other, from macOS Server, and from NAS boxes. Apple has since moved to SMB as the default — APFS volumes cannot be shared over AFP at all — and Apple's macOS Sequoia enterprise notes state that the AFP client is deprecated and will be removed in a future macOS release. In practice, 548 open today means a NAS (Synology, QNAP, or a Netatalk server) still offering AFP for older Macs or legacy Time Machine backups.",
  "exposure": {
    "verdict": "never",
    "note": "A file-share service on a deprecated protocol with a shrinking maintenance base, protected only by user passwords — keep it on the LAN or reach it over a VPN."
  },
  "checkCommand": "nc -vz -w 3 TARGET 548",
  "links": [
    {
      "title": "Apple — What's new for enterprise in macOS Sequoia (AFP client deprecated)",
      "url": "https://support.apple.com/en-us/121011",
      "kind": "official-docs"
    },
    {
      "title": "Apple — TCP and UDP ports used by Apple software products (548 = AFP over TCP)",
      "url": "https://support.apple.com/en-us/103229",
      "kind": "official-docs"
    },
    {
      "title": "Netatalk — open source AFP file server",
      "url": "https://github.com/Netatalk/netatalk",
      "kind": "github"
    }
  ]
}