{
  "port": 2161,
  "protocol": "tcp",
  "service": "APC PowerChute agent (legacy)",
  "oneLiner": "The APC-registered port most often seen in practice — PowerChute Business Edition agent traffic.",
  "whatItIs": "IANA registers 2161 to American Power Conversion (now Schneider Electric) as \"APC 2161\", with no protocol detail. Of APC's three registered ports it is the one that actually turned up on scans: PowerChute Business Edition agents on UPS-attached servers listened here for their management server. Schneider's current PowerChute port list documents TCP 6547 for the agent web UI and UDP 161 for SNMP, so 2161 marks an older install. Note the easy misread — this is not SNMP, which is 161.",
  "exposure": {
    "verdict": "never",
    "note": "Old UPS-shutdown agent software reachable from the network is a power-off control path; restrict it to a management VLAN and prefer a currently supported PowerChute release."
  },
  "checkCommand": "nc -vz TARGET 2161",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 2161 (apc-2161)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=2161",
      "kind": "iana"
    },
    {
      "title": "Schneider Electric — TCP and UDP ports used by each component of PowerChute",
      "url": "https://www.se.com/us/en/faqs/FA159597/",
      "kind": "official-docs"
    }
  ],
  "ianaName": "apc-2161"
}
