Port 5684Secure CoAP
Encrypted Constrained Application Protocol traffic for IoT devices and constrained networks.
- transport
- tcp · udp
- in transit
- encrypted
- assignment
- official
- risk
- 4/10
- lookups
- 0
2 transports registered
payload protected on the wire
registered with iana
caution
rank 994 of 2,628 · top 38%
also known as coaps, CoAP over DTLS, CoAP over TLS
Technical Details
what runs on :5684Secure CoAP uses DTLS for the traditional UDP transport and TLS for TCP-based CoAP, normally on port 5684; unencrypted CoAP normally uses port 5683. UDP CoAP has a compact fixed header, tokens, options, and an optional payload, with confirmable messages retransmitted by the protocol; TCP CoAP uses stream framing and does not need CoAP-level retransmission. Deployments commonly authenticate with certificates or pre-shared keys, depending on the device and provisioning model.
Security Information
exposure of :5684risk score
4/ 10caution
worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.
network services averages 3.0 across 995 ports — this one sits 1.0 above.
in transit
encrypted
payloads are protected on the wire
assignment
official
registered with iana for this service — scanners fingerprint it by number
reachable over
tcp · udp
udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite
security overview
Although transport encryption is expected, exposure still reveals a potentially sensitive device API. An attacker can probe resources, send requests, attempt authentication with weak or reused credentials, or exploit vulnerabilities in the CoAP/DTLS/TLS implementation; UDP deployments may also require care to prevent reflection or resource-exhaustion abuse. Internet exposure should generally be restricted to known peers and protected with strong device authentication and rate limits.
Related Ports
the 8 most looked-up other ports in network services — 995 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :9080 | Groove RPC | TCPUDP | Web Services | caution | 70.8k |
| :6543 | Jetnet | UDP | Network Services | caution | 65.3k |
| :5938 | TeamViewer | TCPUDP | Remote Access | caution | 65.0k |
| :8291 | Winbox MikroTik Admin | TCP | Security | caution | 62.9k |
| :3233 | WhiskerControl Protocol | TCPUDP | Network Services | caution | 61.9k |
| :3268 | Microsoft Global Catalog (GC) | TCPUDP | Security | caution | 54.6k |
| :135 | Microsoft EPMAP | TCPUDP | Security | caution | 51.9k |
| :3128 | Tatsoft Default HTTP Proxy | TCP | Web Services | caution | 46.8k |
risk mix of the 8 listed
- caution100%
0 of 8 encrypted