Port 5672Advanced Message Queuing Protocol (AMQP)

AMQP message brokers, including RabbitMQ, commonly accept client connections on TCP port 5672.

transport
tcp · udp · sctp

3 transports registered

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
6/10

risk

lookups
0

rank 994 of 3,333 · top 30%

also known as amqp, AMQP 0-9-1, RabbitMQ

Technical Details

what runs on :5672

AMQP deployments commonly use TCP, although the IANA assignment also lists UDP and SCTP. AMQP 0-9-1 begins with an AMQP protocol header followed by a connection negotiation and framed channels, methods, content headers, and message bodies; AMQP 1.0 uses its own framed connection, session, link, and transfer model. Port 5672 is the conventional unencrypted AMQP listener, while 5671 is commonly used for AMQP over TLS.

Security Information

exposure of :5672

risk score

6/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

network services averages 2.8 across 1,162 ports — this one sits 3.2 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp · sctp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

An internet-exposed broker can be targeted for password guessing, unauthorized message publication or consumption, and exploitation of broker-specific vulnerabilities. Non-TLS AMQP can expose credentials and message contents in transit, so this port should normally be restricted to trusted networks or protected with TLS, strong authentication, and authorization.

the 8 most looked-up other ports in network services — 1,162 ports carry that label.

risk mix of the 8 listed

  • caution100%

0 of 8 encrypted