Port 2383Microsoft OLAP

Default TCP listener for Microsoft SQL Server Analysis Services (SSAS) OLAP queries and administration.

transport
tcp · udp

2 transports registered

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
7/10

risk

lookups
0

rank 994 of 1,114 · top 89%

also known as ms-olap4, SQL Server Analysis Services, SSAS, Microsoft Analysis Services

Technical Details

what runs on :2383

SSAS clients normally connect over TCP 2383 using Microsoft's Analysis Services client protocol and exchange requests for metadata, cubes, models, and query results. The service uses a proprietary binary/native protocol for standard client connections; XMLA is also used for management and analytical operations, commonly through SSAS client libraries. Port 2383 is the fixed default-instance listener, while named instances generally use dynamically assigned TCP ports and are located through SQL Server Browser on UDP 1434. IANA lists this assignment for both TCP and UDP, although normal SSAS listener traffic is TCP.

Security Information

exposure of :2383

risk score

7/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

databases averages 4.0 across 60 ports — this one sits 3.0 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

An internet-exposed SSAS listener provides direct access to a database analytics service and may disclose model metadata or sensitive query results if authentication or authorization is weak. It should normally be restricted to trusted application and administration networks; authentication and transport protection depend on SSAS configuration, so traffic should not be assumed encrypted by default.

the 8 most looked-up other ports in databases — 60 ports carry that label.

risk mix of the 8 listed

  • caution100%

1 of 8 encrypted