Port 5683Constrained Application Protocol (CoAP)

CoAP carries lightweight REST-style IoT application traffic, typically over UDP on port 5683.

transport
tcp · udp

2 transports registered

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
6/10

risk

lookups
0

rank 994 of 2,628 · top 38%

also known as coap

Technical Details

what runs on :5683

CoAP normally runs over UDP and uses compact binary messages with a fixed four-byte header, token, options, and an optional payload. Confirmable requests are acknowledged and retransmitted when necessary, while non-confirmable messages do not require acknowledgements; responses use CoAP response codes analogous to HTTP status codes. CoAP supports GET, POST, PUT, DELETE, resource discovery, observe notifications, and block-wise transfers. Port 5683 is the default cleartext service for UDP and CoAP over TCP; CoAPS on port 5684 provides DTLS or TLS protection.

Security Information

exposure of :5683

risk score

6/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

web services averages 3.5 across 138 ports — this one sits 2.5 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

CoAP on port 5683 is cleartext and is often deployed on devices with sensitive telemetry or physical control functions. Internet exposure can permit unauthenticated resource discovery, data access, device manipulation, or use in UDP reflection and amplification attacks. Restrict access with network controls and application authorization; use DTLS or TLS on the secure CoAPS service when traffic crosses untrusted networks.

the 8 most looked-up other ports in web services — 138 ports carry that label.

risk mix of the 8 listed

  • safe13%
  • caution88%

0 of 8 encrypted