Port 3343Windows Failover Clustering

Intra-cluster communication for Microsoft Windows Server Failover Clustering nodes.

transport
tcp · udp

2 transports registered

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
6/10

risk

lookups
0

rank 994 of 1,126 · top 88%

also known as ms-cluster-net, Microsoft Cluster Service, MSCS, WSFC

Technical Details

what runs on :3343

Windows Failover Clustering registers port 3343 for cluster-service communication over both TCP and UDP; UDP is commonly associated with cluster heartbeat and membership traffic. It is an internal node-to-node protocol rather than a general-purpose client service, and deployments also use RPC endpoint mapping on TCP 135, dynamic RPC ports, and SMB on TCP 445 for related operations. Exact message formats and transport usage vary across Windows Server releases and cluster configurations.

Security Information

exposure of :3343

risk score

6/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

network services averages 3.8 across 639 ports — this one sits 2.2 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

Port 3343 should be restricted to the cluster nodes and authorized management networks, never exposed directly to the public internet. An exposed service can be fingerprinted and targeted for spoofed, malformed, or resource-exhaustion traffic; compromise or disruption of cluster communications could affect highly available workloads. The port is not a substitute for the authentication and authorization controls protecting the Windows cluster itself.

the 8 most looked-up other ports in network services — 639 ports carry that label.

risk mix of the 8 listed

  • caution100%

0 of 8 encrypted