Port 5432 (PostgreSQL)

Default port for PostgreSQL.

Transport
TCP
Internet exposure
Never expose

Should not be reachable from the internet.

Security notes

  • Exposed PostgreSQL is brute forced; COPY … FROM PROGRAM can turn superuser access into command execution.

When it shows up in your logs

Inbound 5432 from the internet is scanning or brute forcing.