Port 16994Intel AMT Redirection
Intel AMT out-of-band redirection for remote console and storage access, including Serial-over-LAN and IDE redirection.
- transport
- tcp · udp
- in transit
- cleartext
- assignment
- official
- risk
- 8/10
- lookups
- 0
2 transports registered
payload readable on path
registered with iana
risk
rank 993 of 6,343 · top 16%
also known as amt-redir-tcp, IDER
Technical Details
what runs on :16994Intel AMT redirection carries SOL and IDER sessions so administrators can interact with a machine independently of its operating system, including during boot. The standard redirection endpoint is TCP 16994; TCP 16995 is its TLS-protected counterpart. AMT also commonly uses ports 16992 and 16993 for its management interface. Although IANA lists both TCP and UDP for this assignment, AMT redirection is normally encountered over TCP.
Security Information
exposure of :16994risk score
8/ 10risk
treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.
remote access averages 4.0 across 236 ports — this one sits 4.0 above.
in transit
cleartext
credentials and payloads are readable by anyone on path
assignment
official
registered with iana for this service — scanners fingerprint it by number
reachable over
tcp · udp
udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite
security overview
This is a remote-management interface that can provide console and boot-media access, so an exposed listener can be sensitive even when authentication is required. Port 16994 is not encrypted by default; keep AMT interfaces on a trusted management network, restrict access with firewall rules, and prefer the TLS endpoint on 16995 where supported. Do not expose it directly to the internet.
Related Ports
the 8 most looked-up other ports in remote access — 236 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :8000 | Intel Remote Desktop / Alternate HTTP Port | TCP | Web Services | safe | 84.3k |
| :8888 | D2GS Admin Console | TCP | Remote Access | caution | 83.7k |
| :8881 | Atlasz Secure Server | TCP | Web Services | caution | 67.6k |
| :5938 | TeamViewer | TCPUDP | Remote Access | caution | 65.0k |
| :8291 | Winbox MikroTik Admin | TCP | Security | caution | 62.9k |
| :8008 | IBM HTTP Server Admin | TCP | Web Services | caution | 58.3k |
| :135 | Microsoft EPMAP | TCPUDP | Security | caution | 51.9k |
| :23 | Telnet | TCP | Remote Access | caution | 34.8k |
risk mix of the 8 listed
- safe13%
- caution88%
0 of 8 encrypted