Port 5065EPICS Channel Access Repeater

UDP 5065 is the default EPICS Channel Access repeater port, used to distribute server beacons to clients.

transport: tcp · udp
in transit: cleartext
assignment: official
risk: 2/10
lookups: 0

also known as ca-2, EPICS CA repeater

Technical Details

what runs on :5065

EPICS Channel Access (CA) uses UDP for discovery and TCP for client-to-IOC connections. The CA repeater normally listens on UDP 5065: clients register their addresses with it, and it forwards server beacon messages to registered clients. It is a discovery helper, not the service that carries normal process-variable reads and writes; those connections typically go to TCP 5064. Although IANA lists both TCP and UDP for this assignment, the standard repeater use is UDP, and TCP 5065 is not a usual CA endpoint.

Security Information

exposure of :5065

risk score

2/ 10safe

routine exposure. this port is rarely the way in on its own — keep it patched and logged and move on.

network services averages 2.6 across 1,614 ports — this one sits 0.6 below.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

The repeater is not itself the usual control or read/write endpoint, so an exposed UDP 5065 does not by itself imply that an IOC is remotely controllable. CA traffic is generally unencrypted and lacks strong built-in access control, however, so reachable IOCs—typically on TCP 5064—can expose sensitive process data or permit writes depending on configuration. Keep CA discovery and IOC ports on trusted control-system networks rather than exposing them to the internet.

Record

iana registry entry

port: :5065
service: EPICS Channel Access Repeater
transport: TCPUDP
encryption: cleartext
assignment: iana registered
risk: 2/10safe
category: Network Services System
usage: This port is associated with EPICS Channel Access, used by distributed control systems such as those in scientific facilities. In normal deployments, a CA repeater listens on UDP 5065 to receive client registrations and forward IOC beacons; the actual CA server connections typically use TCP 5064.
lookups: 0rank 993
added: 2026-10-06
updated: 2026-10-06
references: IANA service name registry — port 5065

Something wrong?

This record is maintained by the engineers who use port 5065. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-10-06.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 1,614 in network services →

the 8 most looked-up other ports in network services — 1,614 ports carry that label.

port	service	proto	category	risk	views
:9080	Groove RPC	TCPUDP	Web Services	caution	70.8k
:6543	Jetnet	UDP	Network Services	caution	65.3k
:5938	TeamViewer	TCPUDP	Remote Access	caution	65.0k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3233	WhiskerControl Protocol	TCPUDP	Network Services	caution	61.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Tatsoft Default HTTP Proxy	TCP	Web Services	caution	46.8k

risk mix of the 8 listed

caution100%

0 of 8 encrypted

Port :5065EPICS Channel Access Repeater

Technical Details

Security Information

Related Ports

Port 5065EPICS Channel Access Repeater