Port 4690Prelude Communication Protocol (PCP)

Prelude sensors use this port to send intrusion-detection alerts to a Prelude Manager.

transport
tcp · udp

2 transports registered

in transit
encrypted

payload protected on the wire

assignment
official

registered with iana

risk
4/10

caution

lookups
0

rank 993 of 5,253 · top 19%

also known as Prelude IDS message protocol, PCP

Technical Details

what runs on :4690

Prelude Manager commonly listens on TCP port 4690 for connections from Prelude sensors and other components. The protocol transports IDMEF security events, typically over TLS, with clients configured using Prelude credentials; TCP is the usual deployment, although IANA lists both TCP and UDP for the service. This is an IDS/SIEM event-ingestion endpoint, not a general-purpose remote shell.

Security Information

exposure of :4690

risk score

4/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

security averages 3.0 across 378 ports — this one sits 1.0 above.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

Keep the manager reachable only from trusted sensor networks rather than exposing it to the internet. TLS and configured client credentials help protect the connection, but compromised sensor credentials or an exposed manager could allow forged alert submissions, and any network-facing parser can be a target for denial of service or implementation flaws.

the 8 most looked-up other ports in security — 378 ports carry that label.

risk mix of the 8 listed

  • caution100%

2 of 8 encrypted