TCP 47808
Synopsis
- TCP port 47808 is registered for BACnet (Building Automation and Control Networks).
- BACnet Secure Connect (BACnet/SC) uses TCP 47808 for its TLS/WebSocket-based communications between hubs and nodes.
- Real products using 47808/TCP for BACnet/SC include Johnson Controls Metasys, Siemens Desigo CC (and BACnet/SC Hub), Schneider Electric EcoStruxure Building Operation, and Tridium Niagara 4 (BACnet/SC driver).
- BACnet/SC gateways/routers from vendors such as Contemporary Controls and Johnson Controls also listen on 47808/TCP.
- While classic BACnet/IP primarily uses UDP 47808, enabling BACnet/SC in these systems adds or moves communications to TCP 47808.
- Exposed BACnet services on 47808 (TCP/UDP) have been abused to enumerate devices and read/write building control points (e.g., changing HVAC setpoints), as noted in multiple ICS security advisories.
- Vendors recommend restricting 47808/TCP to trusted peers and using certificate-based BACnet/SC rather than exposing it to the internet.
Observed activity
Last 30 days
Detailed chart