Port 33060MySQL X Protocol

MySQL X Protocol traffic for MySQL’s document-store and SQL APIs, normally served by the X Plugin on TCP port 33060.

transport
tcp

single transport

in transit
encrypted

payload protected on the wire

assignment
official

registered with iana

risk
8/10

risk

lookups
0

rank 993 of 6,548 · top 15%

also known as MySQL X Plugin, X DevAPI

Technical Details

what runs on :33060

This is the MySQL X Protocol over TCP, commonly configured on port 33060. Unlike the classic MySQL protocol on 3306, it uses Protocol Buffers messages framed with a four-byte length followed by a message type and payload. Clients exchange capability and authentication messages before issuing SQL or document-store CRUD operations. The X Plugin supports TLS; its default SSL mode is REQUIRED, though configuration can change that.

Security Information

exposure of :33060

risk score

8/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

databases averages 3.8 across 173 ports — this one sits 4.2 above.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

This is a database access endpoint: authenticated clients may be able to read or modify data according to their MySQL privileges. Avoid exposing it directly to the internet; restrict access to trusted networks, use least-privilege accounts, keep MySQL patched, and verify that TLS and strong authentication are in use. TLS is supported and normally required by the X Plugin, but server configuration can alter this.

the 8 most looked-up other ports in databases — 173 ports carry that label.

risk mix of the 8 listed

  • caution100%

1 of 8 encrypted