Internet-Security.com TCP port 61000 details

Windows RPC/DCOM services on modern Windows (Vista/Server 2008+), including Active Directory replication, DFSR, WMI/DCOM components, and parts of Microsoft Exchange, use dynamic TCP ports 49152–65535; as a result, TCP 61000 is commonly seen as an RPC service endpoint after the endpoint mapper (135) assigns it.
Microsoft SQL Server named instances that use dynamic ports frequently choose a port in this range; in real deployments, admins often find a named instance listening on TCP 61000.
Many FTP servers (vsftpd, ProFTPD, FileZilla Server) are configured with a passive data port range such as 60000–61000, so TCP 61000 is often used for passive FTP data connections.
Management tools that leverage Windows RPC—such as Veeam Backup & Replication or Microsoft System Center Configuration Manager—will communicate over TCP 61000 when the target Windows host selects it as the dynamic RPC port.

TCP 61000