{
  "port": 4899,
  "protocol": "both",
  "service": "Radmin",
  "oneLiner": "Radmin Server — Windows remote control, listening on its registered default port.",
  "whatItIs": "IANA has 4899 registered as radmin-port for Famatech's Radmin, and Radmin Server listens here unless an admin unticks \"Use default port\" in its options. Radmin Viewer connects to it for full remote desktop control, file transfer, and shell access on Windows hosts. It shows up on scans of corporate Windows fleets and, historically, on machines where a trojan installed a copy of Radmin as a backdoor.",
  "exposure": {
    "verdict": "never",
    "note": "This is a full remote-control plane for a Windows desktop. Keep it inside the LAN or behind a VPN; an internet-facing 4899 is a credential-guessing target with total-compromise payoff."
  },
  "checkCommand": "nc -vz TARGET 4899",
  "links": [
    {
      "title": "Radmin Helpdesk — Changing the Radmin port",
      "url": "https://helpdesk.radmin.com/kb/faq.php?id=327",
      "kind": "official-docs"
    },
    {
      "title": "IANA port registry — 4899 (radmin-port)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=4899",
      "kind": "iana"
    }
  ]
}