Port 9899SCTP over UDP (RFC 6951)

UDP port 9899 carries SCTP packets encapsulated in UDP, commonly to traverse networks that block native SCTP.

transport
udp

single transport

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
2/10

safe

lookups
0

rank 993 of 6,188 · top 16%

also known as sctp-tunneling, SCTP/UDP

Technical Details

what runs on :9899

RFC 6951 encapsulates SCTP packets in UDP datagrams, using UDP port 9899 as the default destination port. The SCTP association itself still uses SCTP's INIT, INIT-ACK, COOKIE-ECHO, and COOKIE-ACK handshake and SCTP packet framing; the UDP layer carries those packets between endpoints. This is an encapsulation mechanism, not encryption: SCTP's CRC32c checksum detects corruption but does not provide confidentiality or cryptographic authentication. The inner SCTP application determines what data or service is available.

Security Information

exposure of :9899

risk score

2/ 10safe

routine exposure. this port is rarely the way in on its own — keep it patched and logged and move on.

network services averages 2.6 across 1,859 ports — this one sits 0.6 below.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

UDP encapsulation does not encrypt or authenticate the SCTP traffic, and it does not make an exposed inner SCTP service safe. An internet-reachable listener may be probed or used to reach the SCTP application behind it; restrict access to expected peers and assess the inner service's security. The port is uncommon in scan data, so an unexpected listener warrants investigation.

the 8 most looked-up other ports in network services — 1,859 ports carry that label.

risk mix of the 8 listed

  • caution100%

0 of 8 encrypted