Port 10933Octopus Deploy Tentacle

Octopus Deploy Tentacle listens here for secure deployment and management connections from an Octopus Server.

transport
tcp

single transport

in transit
encrypted

payload protected on the wire

assignment
official

registered with iana

risk
7/10

risk

lookups
0

rank 993 of 6,247 · top 16%

also known as octopustentacle

Technical Details

what runs on :10933

The Tentacle agent listens on TCP 10933 by default in listening mode. It uses Octopus Deploy's agent communication protocol over an encrypted, mutually authenticated TLS connection rather than a general-purpose HTTP service. The Octopus Server must be configured to trust the Tentacle's certificate, and the Tentacle must trust the server. Polling-mode Tentacles initiate outbound connections to the Octopus Server's polling endpoint instead of accepting connections on this port.

Security Information

exposure of :10933

risk score

7/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

remote access averages 3.9 across 230 ports — this one sits 3.1 above.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

A trusted Octopus Server can use the Tentacle to orchestrate deployments and execute deployment tasks on the target host, so access to this port is operationally sensitive. TLS and certificate-based trust help restrict connections, but the listener should normally be reachable only from the relevant Octopus Server or tightly controlled management network—not exposed broadly to the internet. Keep the agent updated and protect its certificate and deployment credentials.

the 8 most looked-up other ports in remote access — 230 ports carry that label.

risk mix of the 8 listed

  • safe13%
  • caution88%

0 of 8 encrypted