{
  "port": 6007,
  "protocol": "tcp",
  "service": "X11 display :7 / second TensorBoard",
  "oneLiner": "X11 display :7 by registration; in practice the port a second TensorBoard lands on.",
  "whatItIs": "By IANA's 6000-6063 x11 block this is display :7. The common real-world sighting is a second TensorBoard instance: 6006 is the default, so a second instance is commonly started with `--port 6007`. Either way you are looking at a machine running graphical or ML workloads, not a general-purpose service. Confirm which by what answers — an X server speaks the X protocol, TensorBoard answers HTTP.",
  "exposure": {
    "verdict": "never",
    "note": "Both plausible occupants are unauthenticated: an X server here can be driven by anyone who reaches it, and a TensorBoard here exposes training data to anyone who asks."
  },
  "checkCommand": "curl -sI http://TARGET:6007/",
  "links": [
    {
      "title": "tensorflow/tensorboard on GitHub",
      "url": "https://github.com/tensorflow/tensorboard",
      "kind": "github"
    },
    {
      "title": "Xsecurity(7) — X display access control",
      "url": "https://xorg.freedesktop.org/archive/X11R7.7/doc/man/man7/Xsecurity.7.xhtml",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 6000-6063 (x11)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=6007",
      "kind": "iana"
    }
  ]
}