Port 16995Intel AMT Redirection over TLS

TLS-protected Intel AMT out-of-band redirection for remote management channels such as Serial over LAN and IDE redirection.

inRemote Access System

transport: tcp · udp
in transit: encrypted
assignment: official
risk: 7/10
lookups: 0

also known as amt-redir-tls, AMT TLS redirection

Technical Details

what runs on :16995

Intel AMT's TLS-protected redirection service. A client establishes TLS and then exchanges Intel AMT redirection-protocol data for management channels such as SOL and IDER. IANA lists both TCP and UDP, but deployed AMT redirection is normally encountered over TCP. The related port 16994 is the non-TLS redirection service; AMT's web-management ports are 16992 (HTTP) and 16993 (HTTPS).

Security Information

exposure of :16995

risk score

7/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

remote access averages 4.0 across 236 ports — this one sits 3.0 above.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

This is an out-of-band remote-management surface, so an exposed listener can give an attacker a route to sensitive control channels if the system is misconfigured or its credentials are compromised. It should generally be restricted to trusted management networks, even though TLS protects the connection. Keep AMT firmware current: older affected systems had serious remote-authentication vulnerabilities, including CVE-2017-5689.

Record

iana registry entry

port: :16995
service: Intel AMT Redirection over TLS
transport: TCPUDP
encryption: tls / encrypted
assignment: iana registered
risk: 7/10risk
category: Remote Access System
usage: Found on Intel AMT/vPro systems when out-of-band management is enabled and provisioned. Management software uses it to establish secure redirection sessions, commonly for Serial over LAN (SOL) or IDE redirection (IDER).
lookups: 0rank 993
added: 2026-10-17
updated: 2026-10-17
references: IANA service name registry — port 16995

Something wrong?

This record is maintained by the engineers who use port 16995. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-10-17.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 236 in remote access →

the 8 most looked-up other ports in remote access — 236 ports carry that label.

port	service	proto	category	risk	views
:8000	Intel Remote Desktop / Alternate HTTP Port	TCP	Web Services	safe	84.3k
:8888	D2GS Admin Console	TCP	Remote Access	caution	83.7k
:8881	Atlasz Secure Server	TCP	Web Services	caution	67.6k
:5938	TeamViewer	TCPUDP	Remote Access	caution	65.0k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:8008	IBM HTTP Server Admin	TCP	Web Services	caution	58.3k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:23	Telnet	TCP	Remote Access	caution	34.8k

risk mix of the 8 listed

safe13%
caution88%

0 of 8 encrypted

Port :16995Intel AMT Redirection over TLS

Technical Details

Security Information

Related Ports

Port 16995Intel AMT Redirection over TLS