{
  "port": 5907,
  "protocol": "tcp",
  "service": "dsd (ICAO) / VNC display :7 in practice",
  "oneLiner": "IANA lists a distress-and-safety data application; on a real host it is VNC display :7.",
  "whatItIs": "5907 is registered as dsd, \"Distress and Safety Data App\", another entry in ICAO's aeronautical block. Like its neighbours it lives on aviation networks and does not appear on general internet scans. The realistic explanation for an open 5907 is VNC at 5900 plus display 7 — a seventh remote desktop or virtual machine console.",
  "exposure": {
    "verdict": "never",
    "note": "Treat it as VNC until proven otherwise, which means unencrypted framebuffer traffic and weak authentication that should never leave a trusted network."
  },
  "checkCommand": "nc -w 3 TARGET 5907 | head -c 12; echo",
  "links": [
    {
      "title": "IANA port registry — 5907 (dsd)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=5907",
      "kind": "iana"
    },
    {
      "title": "RFC 6143 — The Remote Framebuffer Protocol",
      "url": "https://datatracker.ietf.org/doc/html/rfc6143",
      "kind": "spec"
    }
  ]
}