Is port 5984 (CouchDB) dangerous?

Port 5984 is classified as critical risk and should not be exposed to the public internet. It transmits data without encryption, making it vulnerable to eavesdropping and credential theft.

Should port 5984 be open on my firewall?

No, port 5984 should not be open to the public internet. Block it at the firewall and use encrypted alternatives such as SSH, SFTP, or HTTPS instead.

What transport protocol does port 5984 use?

Port 5984 (CouchDB) uses the TCP transport protocol and falls under the Database category.

:5984 (TCP)

CouchDB

Critical Risk

TCP — Database

Port Overview

Port Number 5984

Service Name CouchDB

Transport Protocol TCP

Category Database

Security Risk Critical

Port Range Registered (1024-49151)

What is Port 5984?

Port 5984 is the default HTTP API port for Apache CouchDB, a document-oriented NoSQL database that uses a JSON-based REST API. CouchDB is known for its multi-master replication and offline-first capabilities. Numerous data breaches have resulted from publicly exposed CouchDB instances left with default settings and no authentication.

TCP Database Commonly Used

Security Considerations

Port 5984 (CouchDB) is classified as critical risk. This port should not be exposed to the public internet. The service transmits data without encryption, making it vulnerable to eavesdropping, credential theft, and man-in-the-middle attacks.

Recommendation: Block this port at the firewall. Use encrypted alternatives (SSH, SFTP, HTTPS) instead.

Related Ports — Database

66 Oracle SQL*NET 118 SQL Services 134 INGRES-NET 142 BL-IDM 150 SQL-NET 156 SQL Service 181 Unify 188 MUMPS

Related Terms

ASN BGP Hijack Data Center Domain Name Dual Stack Internet Exchange Point (IXP)