WHATPORT(49163) whatport.net WHATPORT(49163)
49163

Dynamic / ephemeral (commonly Windows RPC)

Dynamic-range port, no IANA owner; usually one of a Windows host's RPC listeners.

TCP

Description

49163 falls in the Dynamic/Private range that RFC 6335 sets aside for local use and bars from registration. On Windows it is ordinary for several RPC-backed services — Netlogon, DFS Replication, certificate services, WMI and others — to occupy scattered ports across 49152-65535, and Microsoft's own port-requirements documentation lists that whole range as the requirement rather than naming individual numbers. On a scan, an open 49163 next to open 135 is the signature of Windows RPC rather than of any particular product.

Exposed to the internet?

Do not expose

Microsoft documents this range as internal server-to-server traffic; exposing it publicly exposes the RPC surface behind it.

Check it yourself

$ nmap -Pn -sV -p 135,49163 TARGET

See also

Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.

Get Beige Box →

also available as JSON · Markdown

Corrections or a missing port? Reply @rimrocksystems.