# WHATPORT(49175)

## NAME

port 49175 — Dynamic / ephemeral (commonly Windows RPC) — Dynamic-range port with no assignment; open on a Windows host it is an RPC endpoint among several.

Protocol: TCP

## DESCRIPTION

49175 lies in the range RFC 6335 reserves for dynamic and private use, which IANA does not register. Windows hosts running many RPC services spread their endpoints across this range, so scans of a busy server often show a scattered handful of open ports in the 49150-49200 region with no obvious pattern. Nmap's service database records no known service for 49175 and reports it as a rarely-seen open port, which matches: it is an allocation, not a protocol.

## EXPOSURE

**Do not expose.** A port with no defined protocol and no defined authentication model has no defensible reason to be internet-facing.

## CHECK

```sh
nmap -Pn -sV -p 49175 TARGET
```

## SEE ALSO

- spec — [RFC 6335 — IANA Procedures for Service Name and Transport Protocol Port Number Registry](https://www.rfc-editor.org/rfc/rfc6335.html) (rfc-editor.org)
- source — [Nmap source repository (nmap-services port frequency database)](https://github.com/nmap/nmap) (github.com)

---

HTML: <https://whatport.net/49175/> · JSON: <https://whatport.net/49175.json> · full dataset: <https://whatport.net/ports.json>