Port 2499: UniControl — Registered, Undocumented

What This Port Is

Port 2499 sits in the registered ports range (1024–49151). These ports are assigned by the Internet Assigned Numbers Authority (IANA) to specific services upon application — not through the formal RFC process that governs well-known ports, but through a simpler registration system.¹

IANA's registry shows port 2499 assigned to a service named "unicontrol", registered for both TCP and UDP, with Ing. Markus Huemer listed as the assignee and contact.² That is the entirety of the official record.

There is no RFC. No specification. No public documentation of what the protocol does, how it works, or whether it was ever deployed.

The Registered Ports Range

Registered ports exist in a middle ground. Below them (ports 0–1023) are the well-known ports: HTTP, SSH, DNS — protocols with RFCs, decades of history, and broad adoption. Above them (ports 49152–65535) are the ephemeral ports that operating systems assign dynamically for outgoing connections.

Registered ports are meant for specific applications that need a stable, predictable port number. Getting one assigned is straightforward — IANA requires a description and contact information, not a working specification. The result is a registry that ranges from foundational Internet services to private registrations like this one, where the name tells you almost nothing.

The Name Problem

"UniControl" appears to be the name of multiple unrelated companies and products: a 3D machine control system for construction equipment, a home automation firmware for ESP8266 microcontrollers, a transportation management company in Germany. None of them are demonstrably the entity behind port 2499's registration.³

This is common. Generic names get registered. Companies form, dissolve, or pivot. The port registry preserves the name long after the original intent has faded.

If This Port Is Open on Your System

If a port scanner shows something listening on 2499, the process behind it is almost certainly not "unicontrol" in any meaningful sense. It's more likely:

• Custom application or internal service using the port opportunistically
• Malware (historically, some remote access tools have used obscure registered ports to blend in)
• A misconfigured service

To check what's listening:

# macOS / Linux
sudo lsof -i :2499
sudo ss -tlnp | grep 2499

# Windows
netstat -ano | findstr :2499

The process ID from those commands will tell you what's actually running. Cross-reference with your task manager or ps aux to identify the application.

Why Unassigned-in-Practice Ports Matter

A port like 2499 illustrates something real about how the Internet's numbering system works in practice. The registry is not a census of active protocols — it's a ledger of claims, some backed by real implementations and some not. The gap between "registered" and "documented" is wide, and port 2499 sits squarely in it.

That ambiguity is exactly why security tools flag unknown open ports. "Registered" means someone filed paperwork. It does not mean anything is safe, active, or worth trusting.