Port 36422X2 Application Protocol (X2AP)

X2AP carries LTE control-plane signalling between eNodeBs over SCTP, including coordination for handovers.

transport
sctp

single transport

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
7/10

risk

lookups
0

rank 993 of 6,576 · top 15%

also known as x2-control, X2-C

Technical Details

what runs on :36422

X2AP is specified in 3GPP TS 36.423 and normally uses SCTP on port 36422. SCTP establishes an association using its INIT/INIT-ACK and cookie handshake; X2AP messages, including X2 Setup and handover signalling, are encoded using ASN.1 aligned PER. The protocol has no built-in encryption, and deployments rely on the operator's network protections or separately configured IPsec. X2 user-plane traffic is separate and commonly uses GTP-U over UDP port 2152.

Security Information

exposure of :36422

risk score

7/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

network services averages 2.6 across 1,994 ports — this one sits 4.4 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

sctp

every listening transport is another surface to filter at the edge

security overview

X2AP is a cellular control-plane service and should not be exposed to the public internet; access should be restricted to trusted operator network elements, with transport protections such as IPsec where required. An exposed endpoint can invite probing, denial-of-service attempts, and attacks against vulnerable X2AP implementations; the protocol itself does not encrypt or authenticate the peer.

the 8 most looked-up other ports in network services — 1,994 ports carry that label.

risk mix of the 8 listed

  • caution100%

0 of 8 encrypted