Port 5349STUN/TURN over TLS

STUN behavior discovery and secure STUN/TURN clients use TLS on TCP port 5349.

transport: tcp
in transit: encrypted
assignment: official
risk: 4/10
lookups: 0

also known as stun-behaviors, STUN over TLS, STUNS, TURNS, TURN over TLS/DTLS, TURN/TLS, TURN over DTLS, STUN over TLS/DTLS, STUN over DTLS

Technical Details

what runs on :5349

A client first establishes a TLS connection, then exchanges STUN messages over the connection using STUN's binary message format. TCP port 5349 is the conventional port for STUN over TLS and TURN over TLS; the corresponding non-TLS service commonly uses port 3478. The assigned behavior-discovery purpose relates to STUN extensions for probing NAT mapping and filtering behavior, which require a suitably configured server; not every STUN/TURN listener supports those probes.

Security Information

exposure of :5349

risk score

4/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

network services averages 2.6 across 1,637 ports — this one sits 1.4 above.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

TLS encrypts the connection, but an exposed listener can still reveal STUN-derived network information or provide a TURN relay. Public service is normal, but TURN should require authentication and be configured to prevent unauthorized relay use and bandwidth abuse; keep TLS and server software maintained.

Record

iana registry entry

port: :5349
service: STUN/TURN over TLS
transport: TCP
encryption: tls / encrypted
assignment: iana registered
risk: 4/10caution
category: Network Services
usage: The IANA assignment is for STUN behavior discovery over TLS. In practice, engineers may also encounter STUN or TURN-over-TLS listeners here, commonly on ICE/WebRTC connectivity services such as coturn.
lookups: 0rank 993
added: 2026-10-07
updated: 2026-10-07
references: IANA service name registry — port 5349
RFC 5780

Something wrong?

This record is maintained by the engineers who use port 5349. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-10-07.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 1,637 in network services →

the 8 most looked-up other ports in network services — 1,637 ports carry that label.

port	service	proto	category	risk	views
:9080	Groove RPC	TCPUDP	Web Services	caution	70.8k
:6543	Jetnet	UDP	Network Services	caution	65.3k
:5938	TeamViewer	TCPUDP	Remote Access	caution	65.0k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3233	WhiskerControl Protocol	TCPUDP	Network Services	caution	61.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Tatsoft Default HTTP Proxy	TCP	Web Services	caution	46.8k

risk mix of the 8 listed

caution100%

0 of 8 encrypted

Port :5349STUN/TURN over TLS

Technical Details

Security Information

Related Ports

Port 5349STUN/TURN over TLS