CyberHunter
Local dataset, no network
// Voice & chat

Port 4801: Icona Web Embedded Chat

Port 4801 is assigned by IANA to iwec (Icona Web Embedded Chat).

4801

How iwec works

Voice & chat
callercalleeiwec callercalleeiwec

Port 4801 sets up the call (who calls whom), then the voice travels as a stream of audio packets.

Transport
TCP · UDP
Exposure risk
not rated depends on the program listening
Encryption
Unknownnot stated by the registry
IANA status
Assigned1 registered service
Range
Registered (1024-49151)
Category
Voice & chat
01 Security

Is port 4801 dangerous?

We have no specific security note for port 4801. Its risk depends on the program actually listening on it. General advice for voice & chat services:

  • Use strong credentials and TLS for signalling.
  • Rate-limit registrations to stop extension scanning and toll fraud.
  • Alert on unexpected chat protocols leaving servers (possible command and control).
02 Registry

IANA registry entries for port 4801

ServicePortTransportDescriptionReferenceUpdated
iwec 4801 TCP, UDP Icona Web Embedded Chat - -

// source: IANA service name and port number registry

03 Check it

Which program uses port 4801, and is it reachable?

Linux

sudo ss -ltnup 'sport = :4801'      # process listening on 4801
sudo lsof -nP -i :4801

macOS

sudo lsof -nP -i :4801

Windows (PowerShell)

Get-NetTCPConnection -LocalPort 4801 -State Listen | Select LocalAddress, OwningProcess
Get-NetUDPEndpoint -LocalPort 4801
netstat -ano | findstr :4801

From another machine

nmap -p 4801 -sV <host>
sudo nmap -sU -p 4801 <host>
nc -zv <host> 4801

Block it in the firewall

sudo ufw deny 4801/tcp                                         # Linux (ufw)
New-NetFirewallRule -DisplayName "Block 4801" -Direction Inbound -LocalPort 4801 -Protocol TCP -Action Block  # Windows
04 FAQ
What is port 4801 used for?

Port 4801 is assigned by IANA to iwec (Icona Web Embedded Chat).

Is port 4801 TCP or UDP?

Port 4801 is registered for TCP and UDP.

Is it safe to open port 4801?

It depends on the program that listens on it. Open it only for a service you know and only to the networks that need it. Use strong credentials and TLS for signalling.

How do I check if port 4801 is open?

On Linux run "ss -ltnup 'sport = :4801'", on macOS "lsof -nP -i :4801", and on Windows "netstat -ano | findstr :4801" to see the local process. From another machine, "nmap -p 4801 <host>" shows whether it is reachable.

05 Related

Latest vulnerability news

All news