Port 5280 (XMPP BOSH / HTTP)

XMPP over HTTP (BOSH) and web admin for ejabberd and Prosody.

Registered (user) port, 1024-49151 TCP Voice, video and chat Expose only to trusted sources

What port 5280 is used for

XMPP over HTTP (BOSH) and web admin for ejabberd and Prosody.

Expose only to trusted sources. Restrict admin interfaces.

Service nameProtoDescriptionAssigneeReference

xmpp-bosh TCP Bidirectional-streams Over Synchronous HTTP (BOSH) Peter Saint Andre -

Registry dates for this port: registered 2009-11-25.

Linux: is anything listening on TCP 5280?

sudo ss -tlnp 'sport = :5280'

Linux / macOS: which process owns the port

sudo lsof -nP -i :5280

Older Linux / BSD (net-tools)

sudo netstat -tlnp | grep ':5280 '

Windows (Command Prompt)

netstat -ano | findstr :5280

Windows (PowerShell)

Get-NetTCPConnection -LocalPort 5280 -State Listen | Select LocalAddress,OwningProcess

From another machine

nc -vz -w 5 HOST 5280

From Windows

Test-NetConnection HOST -Port 5280

Replace 203.0.113.10 with the address or network you trust. With ufw, make sure the default incoming policy is deny.

ufw (one trusted source)

sudo ufw allow from 203.0.113.10 to any port 5280 proto tcp

iptables

sudo iptables -A INPUT -p tcp --dport 5280 -s 203.0.113.10 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 5280 -j DROP

nftables

sudo nft add rule inet filter input ip saddr 203.0.113.10 tcp dport 5280 accept
sudo nft add rule inet filter input tcp dport 5280 drop

Windows Firewall

New-NetFirewallRule -DisplayName 'TCP 5280 trusted' -Direction Inbound -Protocol TCP -LocalPort 5280 -RemoteAddress 203.0.113.10 -Action Allow

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.