{
  "port": 687,
  "protocol": "tcp",
  "service": "asipregistry",
  "oneLiner": "An Apple registration from the AppleShare IP era; you will almost never see it live.",
  "whatItIs": "IANA lists 687 as \"asipregistry\", registered by Erik Sea of Apple during the AppleShare IP period. It was a registry/lookup companion to AppleShare services, not the file protocol itself — AFP has always run on 548. No public protocol specification was ever published and modern macOS does not open it. On a scan it is effectively noise: either a very old Mac server or an unrelated service squatting on the number.",
  "exposure": {
    "verdict": "careful",
    "note": "Undocumented and unauthenticated by any published spec; if something is listening here, identify what it actually is before leaving it reachable."
  },
  "checkCommand": "nc -vz TARGET 687",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}
