Port 4739IPFIX (IP Flow Information Export)

IPFIX carries network flow records from exporters to collectors for traffic monitoring and analysis.

transport: tcp · udp · sctp
in transit: cleartext
assignment: official
risk: 5/10
lookups: 0

also known as IP Flow Information Export

Technical Details

what runs on :4739

IPFIX is a standards-based flow export protocol (RFC 7011). Port 4739 is its default destination port for TCP, UDP, and SCTP; TCP uses IPFIX message framing, including a message-length field, while UDP datagrams preserve message boundaries. Exporters send template records that describe subsequent data records, along with flow information and observation-domain identifiers. IPFIX over TLS has a separate registered default port, 4740; ordinary traffic on 4739 is not encrypted by default.

Security Information

exposure of :4739

risk score

5/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

security averages 3.1 across 379 ports — this one sits 1.9 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp · sctp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

Flow records can reveal internal addresses, communication patterns, and network activity, and unencrypted exports can be observed in transit. An exposed collector may also accept forged or unwanted records or be subjected to resource exhaustion, depending on its implementation and configuration. Keep collectors restricted to trusted exporters and management networks; use the TLS service where transport confidentiality and authentication are needed.

Record

iana registry entry

port: :4739
service: IPFIX (IP Flow Information Export)
transport: TCPUDPSCTP
encryption: cleartext
assignment: iana registered
risk: 5/10caution
category: Security Network Services
usage: Network devices and software exporters send IPFIX flow records to a collector, typically as part of traffic monitoring, accounting, or security analysis. Engineers usually encounter it on a collector listening for exports from routers, switches, firewalls, or virtual network appliances.
lookups: 0rank 993
added: 2026-10-05
updated: 2026-10-05
references: IANA service name registry — port 4739

Something wrong?

This record is maintained by the engineers who use port 4739. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-10-05.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 379 in security →

the 8 most looked-up other ports in security — 379 ports carry that label.

port	service	proto	category	risk	views
:8881	Atlasz Secure Server	TCP	Web Services	caution	67.6k
:443	HTTPS	TCPtls	Web Services	caution	65.9k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Squid Proxy HTTP	TCP	Web Services	caution	45.8k
:8080	HTTP Alternate	TCP	Web Services	caution	44.9k
:7000	Vuze HTTPS Tracker	TCPtls	Security	caution	28.9k

risk mix of the 8 listed

caution100%

2 of 8 encrypted

Port :4739IPFIX (IP Flow Information Export)

Technical Details

Security Information

Related Ports

Port 4739IPFIX (IP Flow Information Export)