{
  "port": 5925,
  "protocol": "tcp",
  "service": "Unassigned / VNC display :25",
  "oneLiner": "No IANA assignment; a listener here is VNC display :25.",
  "whatItIs": "IANA has 5915-5962 as Unassigned, and 5925 carries no service name. RFB's 5900+display rule makes it display :25, which is the kind of number a hypervisor reaches when it has allocated a couple of dozen guest consoles. Nothing else well-known squats on it.",
  "exposure": {
    "verdict": "never",
    "note": "Unauthenticated or weakly authenticated desktop access is the default failure mode of this port range — keep it on loopback or a management VLAN."
  },
  "checkCommand": "sudo lsof -nP -iTCP:5925 -sTCP:LISTEN",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    },
    {
      "title": "RFC 6143 — The Remote Framebuffer Protocol",
      "url": "https://datatracker.ietf.org/doc/html/rfc6143",
      "kind": "spec"
    }
  ]
}