TCPRegistered PortFirewall: Varies
5228

Google Play / FCM

What is Port 5228?

Port 5228 is used by Google services, primarily Firebase Cloud Messaging (FCM, formerly Google Cloud Messaging) and Google Play Store. Android devices maintain a persistent connection to Google's servers on this port to receive push notifications and Play Store updates. When an app sends a push notification through FCM, the notification is delivered to the device via this persistent connection. Ports 5228, 5229, and 5230 are used by Google services, with 5228 being the primary port. This connection is essential for Android device functionality — without it, push notifications, Play Store updates, and some Google services won't work properly. Enterprise firewalls that block this port will prevent Android devices from receiving timely notifications.

Common Uses

  • Android push notification delivery (FCM)
  • Google Play Store updates and downloads
  • Google services communication
  • Chrome browser push notifications

Technical Details

Port Number5228
ProtocolTCP
CategoryRegistered
Service NameGoogle Play / FCM
Default FirewallVaries
Port Test Commands

Copy-paste commands to check port 5228 (Google Play / FCM) from your terminal

Test connectivity

Netcat (nc)Check if TCP port is reachable
nc -zv example.com 5228
curl (HTTP)Test HTTP response on this port
curl -v --max-time 5 http://example.com:5228/
TelnetBasic TCP port connectivity check
telnet example.com 5228
nmapScan port 5228 with service detection
nmap -p 5228 -sV example.com
Bash /dev/tcpPure bash TCP check (no extra tools needed)
(echo > /dev/tcp/example.com/5228) 2>/dev/null && echo "open" || echo "closed"

Open port in firewall

UFW (Ubuntu / Debian)
sudo ufw allow 5228/tcp
iptables
sudo iptables -A INPUT -p tcp --dport 5228 -j ACCEPT
firewalld (RHEL / CentOS)
sudo firewall-cmd --permanent --add-port=5228/tcp && sudo firewall-cmd --reload

Security Considerations

!

Port 5228 is used for legitimate Google services and blocking it impacts Android functionality. The connections are TLS-encrypted. If you need to restrict Google services in an enterprise environment, use network policies rather than port blocking. Verify that port 5228 traffic is actually going to Google's IP ranges.

Popular Ports Reference

The most commonly used and referenced network ports

Related Ports