{
  "port": 8087,
  "protocol": "tcp",
  "service": "Riak KV Protocol Buffers API",
  "oneLiner": "Riak's binary client interface — the Protocol Buffers half of the pair with 8098.",
  "whatItIs": "Riak KV exposes two client interfaces, and its own security guide states that clients must reach the cluster on TCP 8098 for HTTP and TCP 8087 for Protocol Buffers. 8087 is the faster binary path that the official Riak client libraries use. IANA registers 8087 to simplifymedia, a defunct music-sharing product, so a listener here is almost certainly a Riak node. Riak's authentication and TLS are opt-in via `riak-admin security`, off by default.",
  "exposure": {
    "verdict": "never",
    "note": "With security disabled — the default — anyone who can reach 8087 can read and write every bucket in the cluster."
  },
  "checkCommand": "nc -vz TARGET 8087",
  "links": [
    {
      "title": "Riak KV — Security (client ports 8098 HTTP and 8087 Protocol Buffers)",
      "url": "https://docs.riak.com/riak/kv/latest/using/security/index.html",
      "kind": "official-docs"
    },
    {
      "title": "basho/riak on GitHub",
      "url": "https://github.com/basho/riak",
      "kind": "github"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 8087",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=8087",
      "kind": "iana"
    }
  ],
  "ianaName": "simplifymedia"
}