Port 5228Google Firebase Cloud Messaging (FCM)
TCP 5228 is commonly used for Android's outbound Google Firebase Cloud Messaging connections; IANA also assigns it to HP Virtual Room Service.
- transport
- tcp
- in transit
- encrypted
- assignment
- official
- risk
- 1/10
- lookups
- 0
single transport
payload protected on the wire
registered with iana
safe
rank 993 of 5,413 · top 18%
also known as hpvroom, GCM
Technical Details
what runs on :5228The IANA assignment is HP Virtual Room Service, but a well-known real-world use of TCP 5228 is Android's persistent outbound connection to Google services for Firebase Cloud Messaging (formerly Google Cloud Messaging) and related Play services. FCM documentation lists TCP 5228–5230 for these connections. The client initiates the connection to Google, and the traffic is encrypted; the port number alone does not identify the application protocol. This use differs from the IANA assignment, and ordinarily does not mean a device has an inbound listener on 5228.
Security Information
exposure of :5228risk score
1/ 10safe
routine exposure. this port is rarely the way in on its own — keep it patched and logged and move on.
network services averages 2.6 across 1,627 ports — this one sits 1.6 below.
in transit
encrypted
payloads are protected on the wire
assignment
official
registered with iana for this service — scanners fingerprint it by number
reachable over
tcp
every listening transport is another surface to filter at the edge
security overview
FCM clients initiate outbound connections, so allowing outbound access to Google's service endpoints may be needed for push notifications; this is not a reason to expose an inbound listener on TCP 5228. An unexpected open inbound port should be identified by process and protocol rather than assumed to be FCM. There are no specific security implications established here for the obscure HP Virtual Room Service assignment.
Related Ports
the 8 most looked-up other ports in network services — 1,627 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :9080 | Groove RPC | TCPUDP | Web Services | caution | 70.8k |
| :6543 | Jetnet | UDP | Network Services | caution | 65.3k |
| :5938 | TeamViewer | TCPUDP | Remote Access | caution | 65.0k |
| :8291 | Winbox MikroTik Admin | TCP | Security | caution | 62.9k |
| :3233 | WhiskerControl Protocol | TCPUDP | Network Services | caution | 61.9k |
| :3268 | Microsoft Global Catalog (GC) | TCPUDP | Security | caution | 54.6k |
| :135 | Microsoft EPMAP | TCPUDP | Security | caution | 51.9k |
| :3128 | Tatsoft Default HTTP Proxy | TCP | Web Services | caution | 46.8k |
risk mix of the 8 listed
- caution100%
0 of 8 encrypted