Port 5984 (Apache CouchDB)

CouchDB HTTP API and Fauxton UI.

Registered (user) port, 1024-49151 TCP Databases Do not expose to the internet

What port 5984 is used for

CouchDB HTTP API and Fauxton UI.

Security: should port 5984 be open?

Do not expose to the internet. Old CouchDB 'admin party' mode let anyone be admin; exposed servers were mass-exploited (CVE-2017-12635/12636) for cryptomining. Keep it private and require admin credentials.

IANA assignment

Service nameProtoDescriptionAssigneeReference

couchdb TCP CouchDB Noah Slater -

couchdb UDP CouchDB Noah Slater -

Registry dates for this port: registered 2007-11-27.

Check what is listening on port 5984

Linux: is anything listening on TCP 5984?

sudo ss -tlnp 'sport = :5984'

Linux / macOS: which process owns the port

sudo lsof -nP -i :5984

Older Linux / BSD (net-tools)

sudo netstat -tlnp | grep ':5984 '

Windows (Command Prompt)

netstat -ano | findstr :5984

Windows (PowerShell)

Get-NetTCPConnection -LocalPort 5984 -State Listen | Select LocalAddress,OwningProcess

Test it from outside

From another machine

nc -vz -w 5 HOST 5984

From Windows

Test-NetConnection HOST -Port 5984

Block port 5984 in the firewall

ufw

sudo ufw deny 5984/tcp

iptables

sudo iptables -A INPUT -p tcp --dport 5984 -j DROP

nftables

sudo nft add rule inet filter input tcp dport 5984 drop

Windows Firewall

New-NetFirewallRule -DisplayName 'Block TCP 5984' -Direction Inbound -Protocol TCP -LocalPort 5984 -Action Block

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.