Port 4191Dual-Stack MIPv6 NAT Traversal

UDP transport for Dual-Stack Mobile IPv6 signaling and tunneled traffic across IPv4 NATs.

transport
udp

single transport

in transit
encrypted

payload protected on the wire

assignment
official

registered with iana

risk
2/10

safe

lookups
0

rank 994 of 2,537 · top 39%

also known as dsmipv6, Dual-Stack Mobile IPv6, RFC 5555

Technical Details

what runs on :4191

DSMIPv6 uses UDP port 4191 to encapsulate Mobile IPv6 signaling and tunneled IPv6 traffic between a mobile node and its home agent when IPv4 transport or NAT traversal is required. The protocol exchanges Mobile IPv6 binding-management messages over the UDP path and maintains the mapping with mobility signaling and, where needed, keepalive behavior; it is not a generic application protocol with a text command handshake. IPsec protection is used for Mobile IPv6 signaling and traffic in normal deployments, while UDP ports 500 and 4500 may also appear for IKE and conventional IPsec NAT traversal.

Security Information

exposure of :4191

risk score

2/ 10safe

routine exposure. this port is rarely the way in on its own — keep it patched and logged and move on.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

An exposed endpoint may receive unsolicited DSMIPv6 signaling or encapsulated traffic, but a correctly configured home agent should require authenticated Mobile IPv6/IPsec peers and reject unauthorised bindings. It is generally not intended as a public application service; restrict it to expected mobility peers and monitor unusual UDP 4191 traffic, malformed encapsulation, and excessive binding or keepalive requests.

ports registered around :4191, by lookups.

risk mix of the 8 listed

  • safe50%
  • caution50%

1 of 8 encrypted