Port 3671KNXnet/IP (EIBnet/IP)

KNX building-automation traffic transported over IP for tunneling and routing EIB/KNX telegrams.

transport
tcp · udp

2 transports registered

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
7/10

risk

lookups
0

rank 994 of 2,463 · top 40%

also known as efcp, KNX IP

Technical Details

what runs on :3671

KNXnet/IP transports KNX building-automation telegrams over IP, commonly using UDP port 3671 for device discovery and tunneling, with TCP also assigned for implementations that support it. Devices exchange discovery and connection-management messages before carrying KNX cEMI frames; KNXnet/IP routers can also route traffic between IP networks and conventional KNX segments. Classic KNXnet/IP is distinct from newer KNX Secure deployments.

Security Information

exposure of :3671

risk score

7/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

network services averages 3.1 across 946 ports — this one sits 3.9 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

Classic KNXnet/IP traffic is generally not encrypted or strongly authenticated by default. An Internet-exposed interface may allow discovery, traffic observation, or injection of commands affecting lighting, HVAC, access control, and other building systems; restrict it to trusted networks and use VPNs or KNX Secure where supported.

the 8 most looked-up other ports in network services — 946 ports carry that label.

risk mix of the 8 listed

  • caution100%

0 of 8 encrypted