Port 16994Intel AMT Redirection

Intel AMT out-of-band redirection for remote console and storage access, including Serial-over-LAN and IDE redirection.

transport
tcp · udp

2 transports registered

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
8/10

risk

lookups
0

rank 993 of 6,343 · top 16%

also known as amt-redir-tcp, IDER

Technical Details

what runs on :16994

Intel AMT redirection carries SOL and IDER sessions so administrators can interact with a machine independently of its operating system, including during boot. The standard redirection endpoint is TCP 16994; TCP 16995 is its TLS-protected counterpart. AMT also commonly uses ports 16992 and 16993 for its management interface. Although IANA lists both TCP and UDP for this assignment, AMT redirection is normally encountered over TCP.

Security Information

exposure of :16994

risk score

8/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

remote access averages 4.0 across 236 ports — this one sits 4.0 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

This is a remote-management interface that can provide console and boot-media access, so an exposed listener can be sensitive even when authentication is required. Port 16994 is not encrypted by default; keep AMT interfaces on a trusted management network, restrict access with firewall rules, and prefer the TLS endpoint on 16995 where supported. Do not expose it directly to the internet.

the 8 most looked-up other ports in remote access — 236 ports carry that label.

risk mix of the 8 listed

  • safe13%
  • caution88%

0 of 8 encrypted