Port 2161: Unassigned — Informally Claimed by APC PowerChute

What Port 2161 Is

Port 2161 sits in the registered port range (1024–49151). These ports are allocated by IANA to specific services that apply for them — but port 2161 never went through that process. IANA lists it as unassigned.

In practice, that didn't stop APC from using it.

The Unofficial Occupant: APC PowerChute

APC (now part of Schneider Electric) makes uninterruptible power supplies — the devices that keep servers running during a power outage long enough to shut down cleanly. Their PowerChute Business Edition software uses port 2161 TCP for agent-to-server communication.¹

The architecture is straightforward:

• A PowerChute Agent runs on each protected server and listens on port 2161
• A PowerChute Server monitors connected UPS devices
• When the UPS reports an outage, the server connects to each agent on port 2161 and instructs it to begin a graceful shutdown

The communication is SSL-encrypted. If you see port 2161 open on a server in a data center or server room, there's a good chance it's running PowerChute and connected to an APC UPS.

Security scanners have occasionally flagged this port for weak cipher configurations.² APC's response has been that the SSL handshake uses anonymous authentication initially, then immediately challenges the client to renegotiate with stronger ciphers — connections that fail the challenge are dropped. Whether that satisfies your security team is a separate question.

How to Check What's Listening

If port 2161 is open on a system you manage, here's how to identify the process:

On Linux:

ss -tlnp | grep 2161
# or
lsof -i :2161

On Windows:

netstat -ano | findstr :2161
# Then look up the PID:
tasklist | findstr <PID>

From another machine:

nmap -sV -p 2161 <target-ip>

If you see it and you don't run APC PowerChute, investigate. Unrecognized open ports are worth understanding.

Why Unassigned Ports Matter

The registered port range has 48,127 slots. IANA formally assigns only a fraction of them. The rest are either truly unused or — like 2161 — quietly occupied by software that never applied for official registration.

This matters for a few reasons:

• Firewall rules: You can't look up "port 2161" in an official reference and know whether to allow it. You have to know your own systems.
• Security scanning: Scanners flag unexpected open ports. If your team doesn't know PowerChute uses 2161, legitimate traffic gets flagged as suspicious.
• Port conflicts: If you try to run something else on 2161 on a system that already runs PowerChute, you'll get a bind error with no obvious explanation.

The unassigned ports are the dark matter of the port space — not empty, just undocumented.