Port 3653Tunnel Setup Protocol

Port 3653 is assigned to the Tunnel Setup Protocol for establishing network tunnels.

transport: tcp · udp
in transit: cleartext
assignment: official
risk: 4/10
lookups: 0

also known as tsp

Technical Details

what runs on :3653

Tunnel Setup Protocol (TSP) uses XML request/response exchanges to negotiate tunnel creation, client authentication, IPv6 addresses or prefixes, and tunnel parameters. It is registered for both TCP and UDP on port 3653; TCP is commonly used for the control exchange, while UDP is supported by some implementations. The resulting IPv6 tunnel traffic is separate from the setup connection and may use IPv6-in-IPv4 protocol 41 or another negotiated tunnel mode.

Security Information

exposure of :3653

risk score

4/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

network services averages 2.7 across 1,329 ports — this one sits 1.3 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

TSP setup traffic is not encrypted by default, so credentials and tunnel parameters may be exposed unless the deployment adds transport protection. An exposed server can be probed for authentication weaknesses or abused to consume tunnel resources and provide unintended IPv6 transit; restrict provisioning to intended clients and use authenticated, protected deployments.

Record

iana registry entry

port: :3653
service: Tunnel Setup Protocol
transport: TCPUDP
encryption: cleartext
assignment: iana registered
risk: 4/10caution
category: Network Services
usage: This port is used by IPv6 tunnel-broker clients and servers to negotiate tunnel parameters, authenticate clients, and provision IPv6 connectivity. It is associated with implementations such as the gw6c client and Hexago/Freenet6-style tunnel brokers.
lookups: 0rank 993
added: 2026-09-05
updated: 2026-09-22
references: IANA service name registry — port 3653
RFC 5572

Something wrong?

This record is maintained by the engineers who use port 3653. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-09-22.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 1,329 in network services →

the 8 most looked-up other ports in network services — 1,329 ports carry that label.

port	service	proto	category	risk	views
:9080	Groove RPC	TCPUDP	Web Services	caution	70.8k
:6543	Jetnet	UDP	Network Services	caution	65.3k
:5938	TeamViewer	TCPUDP	Remote Access	caution	65.0k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3233	WhiskerControl Protocol	TCPUDP	Network Services	caution	61.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Tatsoft Default HTTP Proxy	TCP	Web Services	caution	46.8k

risk mix of the 8 listed

caution100%

0 of 8 encrypted

Port :3653Tunnel Setup Protocol

Technical Details

Security Information

Related Ports

Port 3653Tunnel Setup Protocol