Port 47001Windows Remote Management (WinRM)

WinRM uses this port for Windows remote management over WS-Management; the more common default ports are 5985 and 5986.

transport: tcp
in transit: cleartext
assignment: official
risk: 7/10
lookups: 0

also known as winrm, WS-Management, WSMan

Technical Details

what runs on :47001

WinRM carries WS-Management SOAP messages over HTTP, typically using the /wsman endpoint. Port 47001 is associated with the WinRM service, but it is not the usual default listener port: standard WinRM defaults are TCP 5985 for HTTP and 5986 for HTTPS. HTTP on 47001 does not provide TLS at the transport layer; WinRM can protect message contents through authentication mechanisms such as Kerberos or NTLM, while HTTPS provides TLS transport encryption.

Security Information

exposure of :47001

risk score

7/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

remote access averages 4.0 across 245 ports — this one sits 3.0 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

An externally reachable WinRM listener exposes a remote administration interface that attackers may probe for valid accounts and attempt to use with stolen or guessed credentials. Do not expose it directly to the internet; restrict access to trusted management networks and require strong authentication. HTTP does not itself provide TLS, so configure HTTPS where transport-level protection is needed and avoid Basic authentication over unencrypted HTTP.

Record

iana registry entry

port: :47001
service: Windows Remote Management (WinRM)
transport: TCP
encryption: cleartext
assignment: iana registered
risk: 7/10risk
category: Remote Access System
usage: This is a Windows Remote Management (WinRM) endpoint, used by administrators and automation tools to manage Windows hosts remotely. Engineers more commonly encounter WinRM on TCP 5985 (HTTP) or 5986 (HTTPS); port 47001 is a less common WinRM listener.
lookups: 0rank 993
added: 2026-10-21
updated: 2026-10-21
references: IANA service name registry — port 47001

Something wrong?

This record is maintained by the engineers who use port 47001. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-10-21.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 245 in remote access →

the 8 most looked-up other ports in remote access — 245 ports carry that label.

port	service	proto	category	risk	views
:8000	Intel Remote Desktop / Alternate HTTP Port	TCP	Web Services	safe	84.3k
:8888	D2GS Admin Console	TCP	Remote Access	caution	83.7k
:8881	Atlasz Secure Server	TCP	Web Services	caution	67.6k
:5938	TeamViewer	TCPUDP	Remote Access	caution	65.0k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:8008	IBM HTTP Server Admin	TCP	Web Services	caution	58.3k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:23	Telnet	TCP	Remote Access	caution	34.8k

risk mix of the 8 listed

safe13%
caution88%

0 of 8 encrypted

Port :47001Windows Remote Management (WinRM)

Technical Details

Security Information

Related Ports

Port 47001Windows Remote Management (WinRM)