{
  "port": 52673,
  "protocol": "tcp",
  "service": "Unassigned (dynamic range)",
  "oneLiner": "No registered service — it is on scans only because Nmap probes it by default.",
  "whatItIs": "52673 sits in the Dynamic/Private range (49152-65535), which RFC 6335 sets aside for local and ephemeral use and where IANA assigns nothing. Nmap's nmap-services file lists it as \"unknown\" with an observed-open frequency of 0.000228, which is enough to keep it inside the default top-1000 TCP set that a bare `nmap TARGET` scans. No public service database names an application here — SANS ISC also shows the service field empty. In practice a hit is either an ephemeral client socket caught mid-connection or a program that was told to bind a high port.",
  "exposure": {
    "verdict": "careful",
    "note": "You cannot rate a port you cannot name. Identify the owning process locally before deciding anything; an unidentified listener on a public IP should be closed until it is identified."
  },
  "checkCommand": "sudo lsof -nP -iTCP:52673 -sTCP:LISTEN",
  "links": [
    {
      "title": "RFC 6335 — IANA Procedures for Service Name and Port Number Registry (Dynamic Ports 49152-65535)",
      "url": "https://www.rfc-editor.org/rfc/rfc6335.html",
      "kind": "spec"
    },
    {
      "title": "IANA port registry — search 52673",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=52673",
      "kind": "iana"
    },
    {
      "title": "nmap/nmap — nmap-services frequency data",
      "url": "https://github.com/nmap/nmap/blob/master/nmap-services",
      "kind": "github"
    }
  ]
}