TCP 16992
Synopsis
- TCP port 16992 is used by Intel Active Management Technology (Intel AMT) for its HTTP-based management interface and WS-Management/SOAP services.
- The firmware’s Intel AMT Web UI is reachable at http://
:16992 on vPro-enabled systems from OEMs like Dell, HP, and Lenovo. - Intel Endpoint Management Assistant (EMA) and the legacy Intel Setup and Configuration Service (SCS) communicate with AMT clients on 16992.
- Microsoft System Center Configuration Manager (SCCM) Out of Band Management uses this port to manage AMT-enabled clients.
- Third-party tools such as MeshCommander and MeshCentral connect to Intel AMT on 16992/16993.
- Open-source utilities like amttool/amtterm and wsmancli also manage AMT over 16992 for tasks like power control and inventory.
- Security note: attackers have targeted this port due to Intel AMT flaws (e.g., CVE-2017-5689 authentication bypass) and exposed AMT interfaces found via Internet scans.
Observed activity
Last 30 days
Detailed chart