Port 4195Amazon WorkSpaces Streaming Protocol (WSP)

Port 4195 carries Amazon WorkSpaces streaming sessions between clients and AWS WorkSpaces endpoints.

transport: tcp · udp · sctp
in transit: encrypted
assignment: official
risk: 4/10
lookups: 0

also known as aws-wsp, WorkSpaces WSP

Technical Details

what runs on :4195

WSP is Amazon's protocol for streaming WorkSpaces desktop sessions. AWS documents TCP and UDP on port 4195 for streaming traffic; session setup and authentication also involve WorkSpaces service endpoints, including HTTPS on port 443. The registry additionally lists SCTP, but TCP and UDP are the transports used in the documented client network paths. WSP is proprietary, so its on-wire framing and handshake are not publicly specified here; this port should be interpreted in the context of WorkSpaces rather than as a generic remote-desktop protocol.

Security Information

exposure of :4195

risk score

4/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

remote access averages 3.7 across 202 ports — this one sits 0.3 above.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp · sctp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

A WSP session provides access to a remote desktop, so an exposed endpoint can represent access to sensitive user or business data. WorkSpaces sessions are authenticated through AWS WorkSpaces, and streaming traffic is encrypted in normal deployment. Use the AWS-recommended network paths and restrict access where applicable; an unexpected listener on 4195 should be identified rather than assumed to be WorkSpaces.

Record

iana registry entry

port: :4195
service: Amazon WorkSpaces Streaming Protocol (WSP)
transport: TCPUDPSCTP
encryption: tls / encrypted
assignment: iana registered
risk: 4/10caution
category: Remote Access Cloud
usage: Amazon WorkSpaces clients use WSP to stream a remote desktop session. Engineers are most likely to encounter TCP or UDP 4195 in WorkSpaces network requirements or traffic to AWS-managed streaming endpoints; it is not a general-purpose service port.
lookups: 0rank 993
added: 2026-10-04
updated: 2026-10-04
references: IANA service name registry — port 4195

Something wrong?

This record is maintained by the engineers who use port 4195. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-10-04.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 202 in remote access →

the 8 most looked-up other ports in remote access — 202 ports carry that label.

port	service	proto	category	risk	views
:8000	Intel Remote Desktop / Alternate HTTP Port	TCP	Web Services	safe	84.3k
:8888	D2GS Admin Console	TCP	Remote Access	caution	83.7k
:8881	Atlasz Secure Server	TCP	Web Services	caution	67.6k
:5938	TeamViewer	TCPUDP	Remote Access	caution	65.0k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:8008	IBM HTTP Server Admin	TCP	Web Services	caution	58.3k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:23	Telnet	TCP	Remote Access	caution	34.8k

risk mix of the 8 listed

safe13%
caution88%

0 of 8 encrypted

Port :4195Amazon WorkSpaces Streaming Protocol (WSP)

Technical Details

Security Information

Related Ports

Port 4195Amazon WorkSpaces Streaming Protocol (WSP)