Skip to main content
IMMUNITYSEC

Port 554: Real Time Streaming Protocol

Port 554 is the default for rtsp URIs, which control the delivery of audio and video streams. Microsoft lists TCP 554 for RTSP in Windows Media Services. RFC 7826 (RTSP 2.0) requires port 554 when an rtsp URI omits a port, and uses TCP 322 for rtsps over TLS. RTSP 1.0 (RFC 2326) also defined an rtspu scheme over UDP.

554
TCP / UDP

Port Details

Port
554
Transport
TCP / UDP
Service
RTSP
IANA service name
rtsp
Range
System port (0-1023)
Related ports
322

Security Exposure

RFC 7826 warns that URIs and headers in RTSP messages can be as sensitive as in HTTP, and that media streams need their own protection separate from the signaling channel. Plain rtsp on 554 has no TLS; RFC 7826 defines the rtsps scheme for that.

Hardening

  • +Keep RTSP servers off the public internet; provide remote access to streams through a VPN.
  • +Require authentication on every stream.
  • +Use rtsps on TCP 322 or another TLS-protected transport where devices support it.
  • +Keep media server software and device firmware updated.

Monitoring

Track which devices listen on 554 and alert on RTSP sessions from external addresses. Review camera access logs for repeated authentication failures.

Tools for Auditing and Monitoring RTSP

Nmap

Free / Commercial
Penetration Testing Tools

Network discovery scanner and port auditor for discovering live hosts, open ports, running services, and OS fingerprints.

LicenseNPSL-0.95 (Nmap Public Source License, not OSI-approved)
PlatformLinux, macOS, Windows

Shodan

Freemium
Open Source Intelligence Tools

Search engine for Internet-connected devices that indexes service banners, open ports, and exposed assets across public IP space.

LicenseProprietary (service); MIT (Python client)
PlatformWeb, Linux, macOS, Windows

Nessus

Commercial
Vulnerability Scanning

Tenable vulnerability scanner with the industry’s largest plugin library; time-limited free Essentials license.

LicenseProprietary
PlatformLinux, Windows, Web

Related Tool Categories

Network Security Tools→

Zero trust access, secure web gateways, firewalls, and perimeter enforcement platforms.

Vulnerability Scanning→

Infrastructure scanners, CVE audit engines, container image inspectors, and exposure management platforms.

Frequently Asked Questions

Is port 554 TCP or UDP?→

RTSP control traffic uses TCP 554 in RTSP 2.0. IANA lists 554 on both TCP and UDP, and RTSP 1.0 defined an rtspu scheme over UDP.

What is the secure alternative to port 554?→

RFC 7826 defines the rtsps scheme, which uses TCP port 322 with TLS by default.

Sources

Port assignments from the IANA Service Name and Transport Protocol Port Number Registry. Services can be configured to run on any port, so traffic on port 554 is not guaranteed to be RTSP. Exploited-in-the-wild data from the CISA KEV catalog (CC0).