{
  "port": 62078,
  "protocol": "tcp",
  "service": "iOS lockdownd (device pairing/sync)",
  "oneLiner": "An iPhone or iPad: lockdownd, the service behind pairing, sync, and backup.",
  "whatItIs": "lockdownd is the iOS service that brokers every other device service — backup, installation, diagnostics, screenshots — and it is reachable on TCP 62078, over USB through usbmuxd and over Wi-Fi when Wi-Fi sync is enabled. It is the single most reliable way to identify an iOS device on a network scan, since it is a fixed port in the dynamic range that Apple never registered with IANA. Tools like libimobiledevice (idevicepair, idevicebackup2) talk to exactly this port.",
  "exposure": {
    "verdict": "never",
    "note": "Anything that reaches lockdownd can attempt to pair with the device, and a valid pairing record grants broad access to its data — this should never leave the local link, let alone the LAN."
  },
  "checkCommand": "nc -vz -w 3 IPHONE_IP 62078",
  "links": [
    {
      "title": "Apple — TCP and UDP ports used by Apple software products (62078 = device pairing, sync, backup)",
      "url": "https://support.apple.com/en-us/103229",
      "kind": "official-docs"
    },
    {
      "title": "libimobiledevice/libimobiledevice",
      "url": "https://github.com/libimobiledevice/libimobiledevice",
      "kind": "github"
    }
  ]
}