Internet-Security raven logo internet-security.com

TCP 5601

ProtocolTCP
Port5601
LabelsKibana

Synopsis

  • Kibana (Elastic Stack) uses TCP 5601 by default for its web UI; this is how ELK stacks, Elastic’s official Docker images, and deployments like Security Onion expose Kibana.
  • OpenSearch Dashboards (the Kibana fork) also defaults to TCP 5601, including in AWS OpenSearch Service and the official opensearch-dashboards Docker image.
  • Many packaged ELK/OSD distributions and guides map external port 5601 to access the dashboard interface.
  • Security note: Port 5601 is frequently targeted due to exposed Kibana instances, including exploitation of CVE-2019-7609 (Kibana Vega visualization RCE) observed in the wild.

Observed activity

Last 30 days Detailed chart

More information