Port 10933Octopus Deploy Tentacle
Octopus Deploy Tentacle listens here for secure deployment and management connections from an Octopus Server.
- transport
- tcp
- in transit
- encrypted
- assignment
- official
- risk
- 7/10
- lookups
- 0
single transport
payload protected on the wire
registered with iana
risk
rank 993 of 6,247 · top 16%
also known as octopustentacle
Technical Details
what runs on :10933The Tentacle agent listens on TCP 10933 by default in listening mode. It uses Octopus Deploy's agent communication protocol over an encrypted, mutually authenticated TLS connection rather than a general-purpose HTTP service. The Octopus Server must be configured to trust the Tentacle's certificate, and the Tentacle must trust the server. Polling-mode Tentacles initiate outbound connections to the Octopus Server's polling endpoint instead of accepting connections on this port.
Security Information
exposure of :10933risk score
7/ 10risk
treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.
remote access averages 3.9 across 230 ports — this one sits 3.1 above.
in transit
encrypted
payloads are protected on the wire
assignment
official
registered with iana for this service — scanners fingerprint it by number
reachable over
tcp
every listening transport is another surface to filter at the edge
security overview
A trusted Octopus Server can use the Tentacle to orchestrate deployments and execute deployment tasks on the target host, so access to this port is operationally sensitive. TLS and certificate-based trust help restrict connections, but the listener should normally be reachable only from the relevant Octopus Server or tightly controlled management network—not exposed broadly to the internet. Keep the agent updated and protect its certificate and deployment credentials.
Related Ports
the 8 most looked-up other ports in remote access — 230 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :8000 | Intel Remote Desktop / Alternate HTTP Port | TCP | Web Services | safe | 84.3k |
| :8888 | D2GS Admin Console | TCP | Remote Access | caution | 83.7k |
| :8881 | Atlasz Secure Server | TCP | Web Services | caution | 67.6k |
| :5938 | TeamViewer | TCPUDP | Remote Access | caution | 65.0k |
| :8291 | Winbox MikroTik Admin | TCP | Security | caution | 62.9k |
| :8008 | IBM HTTP Server Admin | TCP | Web Services | caution | 58.3k |
| :135 | Microsoft EPMAP | TCPUDP | Security | caution | 51.9k |
| :23 | Telnet | TCP | Remote Access | caution | 34.8k |
risk mix of the 8 listed
- safe13%
- caution88%
0 of 8 encrypted