# WHATPORT(6005)

## NAME

port 6005 — X11 display :5 — X Window System display number 5 — inside IANA's 6000-6063 x11 block.

Protocol: TCP  
IANA registry

## DESCRIPTION

An X server listening for TCP clients uses port 6000 plus its display number, so display :5 is TCP 6005. Modern desktops start the X server with -nolisten tcp (or run Wayland), so nothing binds here unless someone deliberately re-enabled TCP transport. When it is open it is usually a thin client, an X terminal, or a headless Xvfb instance started for CI screenshots. Access is then gated only by whatever xhost/xauth policy the server was started with.

## EXPOSURE

**Do not expose.** An X server reachable over TCP with xhost + or a leaked MIT-MAGIC-COOKIE-1 lets anyone read the screen, log keystrokes, and inject input; keep X on Unix sockets and forward it over SSH.

## CHECK

```sh
xdpyinfo -display TARGET:5
```

## SEE ALSO

- docs — [Xserver(1) — X server options including -nolisten](https://xorg.freedesktop.org/archive/X11R7.7/doc/man/man1/Xserver.1.xhtml) (xorg.freedesktop.org)
- docs — [Xsecurity(7) — X display access control](https://xorg.freedesktop.org/archive/X11R7.7/doc/man/man7/Xsecurity.7.xhtml) (xorg.freedesktop.org)
- iana — [IANA Service Name and Transport Protocol Port Number Registry — 6000-6063 (x11)](https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=6005) (iana.org)

---

HTML: <https://whatport.net/6005/> · JSON: <https://whatport.net/6005.json> · full dataset: <https://whatport.net/ports.json>