# WHATPORT(49154)

## NAME

port 49154 — Dynamic/ephemeral port (Windows RPC) — Third in the Windows RPC pool — and the number can move between reboots.

Protocol: TCP  
IANA registry

## DESCRIPTION

Like the rest of 49152-65535, 49154 is a dynamic port that IANA never assigns; on Windows it is usually the third RPC endpoint allocated after boot. Because allocation follows service start order, the mapping is not stable, which is exactly why firewall rules pinned to individual numbers in this range break. Microsoft's answer is to allow the whole range internally or to configure static ports for the specific services that need them.

## EXPOSURE

**Do not expose.** Do not open individual ports here to the internet — the service behind the number changes, and the RPC surface should be internal regardless.

## CHECK

```sh
nmap -sV -Pn -p 49154 TARGET
```

## SEE ALSO

- docs — [Microsoft — Service overview and network port requirements (default dynamic port range)](https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/service-overview-and-network-port-requirements) (learn.microsoft.com)
- spec — [RFC 6335 — Dynamic Ports 49152-65535](https://www.rfc-editor.org/rfc/rfc6335.html) (rfc-editor.org)
- iana — [IANA Service Name and Transport Protocol Port Number Registry](https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml) (iana.org)

---

HTML: <https://whatport.net/49154/> · JSON: <https://whatport.net/49154.json> · full dataset: <https://whatport.net/ports.json>