{
  "port": 65129,
  "protocol": "tcp",
  "service": "Ivanti Device and Application Control Application Server (non-TLS)",
  "oneLiner": "No IANA assignment — it sits in the dynamic/private range — but it is the documented listener for Ivanti Device and Application Control's Application Server when TLS is off.",
  "whatItIs": "65129 is above 49151, so IANA never assigns it; RFC 6335 reserves 49152-65535 as the Dynamic/Private range for ephemeral and private use. The one well-documented service here is Ivanti Device and Application Control (the old SecureWave/Sanctuary endpoint-control product), whose Application Server listens on 65129 for client and peer-server traffic, or on 65229 when TLS is enabled; managed clients listen on 33115 for server-initiated calls. Otherwise it is an ordinary high port: Windows and macOS/BSD draw ephemeral source ports from 49152-65535, so a 65129 in a packet capture is usually just a client socket. Nmap's service database has no name for it and records it open on roughly 0.04% of scanned hosts.",
  "exposure": {
    "verdict": "never",
    "note": "If this is the Ivanti Application Server, it is an endpoint-security management plane running without TLS — keep it on a management network, and prefer the TLS listener on 65229. An unidentified listener here should be identified before it faces anything."
  },
  "checkCommand": "sudo lsof -nP -iTCP:65129 -sTCP:LISTEN",
  "links": [
    {
      "title": "Ivanti Device and Application Control — About Application Server-Client Communications",
      "url": "https://help.ivanti.com/ht/help/en_US/IDAC/vNow/admin/application-server-client-comms.htm",
      "kind": "official-docs"
    },
    {
      "title": "RFC 6335 — IANA Procedures for Port Number Registration (Dynamic/Private range 49152-65535)",
      "url": "https://www.rfc-editor.org/rfc/rfc6335.html",
      "kind": "spec"
    },
    {
      "title": "nmap-services — Nmap's port frequency database",
      "url": "https://github.com/nmap/nmap/blob/master/nmap-services",
      "kind": "github"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}