Port 5868Diameter over TLS

Secure Diameter signaling for telecom authentication, authorization, accounting, and policy traffic.

transport: tcp · sctp
in transit: encrypted
assignment: official
risk: 4/10
lookups: 0

also known as diameters, Diameter TLS, Secure Diameter

Technical Details

what runs on :5868

Diameter is a message-based AAA and policy protocol defined by RFC 6733, using a fixed Diameter header followed by attribute-value pairs (AVPs). On TCP, port 5868 is the TLS-protected counterpart to the conventional Diameter port 3868: the TLS handshake occurs before Diameter messages are exchanged, providing confidentiality and peer authentication when certificates are correctly configured. The registry also lists SCTP for this service; deployments should verify whether their implementation uses TLS or an SCTP-specific secure transport profile.

Security Information

exposure of :5868

risk score

4/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

security averages 3.3 across 299 ports — this one sits 0.7 above.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · sctp

every listening transport is another surface to filter at the edge

security overview

Diameter traffic can contain subscriber identities, authentication material, routing information, and policy data, so it should normally be restricted to trusted telecom peers or protected private links rather than exposed to the public internet. TLS reduces interception and credential theft, but weak certificate validation, exposed Diameter endpoints, and protocol-level trust or routing errors can still enable unauthorized signaling or denial of service.

Record

iana registry entry

port: :5868
service: Diameter over TLS
transport: TCPSCTP
encryption: tls / encrypted
assignment: iana registered
risk: 4/10caution
category: Security Network Services
usage: This port carries Diameter signaling over TLS, commonly between telecom core, IMS, AAA, and policy-control systems. Engineers may encounter it in mobile-network infrastructure and carrier interconnects rather than ordinary enterprise networks.
lookups: 0rank 994
added: 2026-09-10
updated: 2026-09-10
references: IANA service name registry — port 5868
RFC 6733

Something wrong?

This record is maintained by the engineers who use port 5868. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-09-10.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 299 in security →

the 8 most looked-up other ports in security — 299 ports carry that label.

port	service	proto	category	risk	views
:8881	Atlasz Secure Server	TCP	Web Services	caution	67.6k
:443	HTTPS	TCPtls	Web Services	caution	65.9k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Squid Proxy HTTP	TCP	Web Services	caution	45.8k
:8080	HTTP Alternate	TCPtls	Web Services	caution	44.9k
:7000	Vuze HTTPS Tracker	TCPtls	Security	caution	28.9k

risk mix of the 8 listed

caution100%

3 of 8 encrypted

Port :5868Diameter over TLS

Technical Details

Security Information

Related Ports

Port 5868Diameter over TLS