{
  "port": 65310,
  "protocol": "tcp",
  "service": "Unassigned (dynamic/private range)",
  "oneLiner": "Unregistered and unnamed — a bare high port with no standard service behind it.",
  "whatItIs": "65310 falls in the Dynamic/Private range that RFC 6335 sets aside at 49152-65535, which IANA does not assign, so there is no registered service name for it. Nmap's service database lists it as unknown and records it open on about 0.015% of scanned hosts, putting it around 1,250th out of the 8,000-odd TCP ports Nmap tracks. In practice a 65310 you see is almost always an ephemeral client socket — Windows and macOS/BSD allocate outbound source ports from 49152-65535 — or a service someone deliberately parked on an arbitrary high port. Nothing well-documented, and no notable malware, claims it.",
  "exposure": {
    "verdict": "careful",
    "note": "The port itself carries no verdict; whatever you find listening does. Identify the process before deciding, and do not treat the high number as protection — scanners sweep the full range."
  },
  "checkCommand": "sudo lsof -nP -iTCP:65310 -sTCP:LISTEN",
  "links": [
    {
      "title": "RFC 6335 — IANA Procedures for Port Number Registration (Dynamic/Private range 49152-65535)",
      "url": "https://www.rfc-editor.org/rfc/rfc6335.html",
      "kind": "spec"
    },
    {
      "title": "nmap-services — Nmap's port frequency database",
      "url": "https://github.com/nmap/nmap/blob/master/nmap-services",
      "kind": "github"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    }
  ]
}