Port 384125G NG Application Protocol (NGAP)

SCTP port for NGAP signaling between 5G gNBs and AMF core-network functions over the N2 interface.

transport: sctp
in transit: cleartext
assignment: official
risk: 7/10
lookups: 0

also known as ng-control, NG Control Plane, N2 interface

Technical Details

what runs on :38412

NGAP is the 3GPP control-plane protocol for the 5G NG interface. It runs over an SCTP association on port 38412; peers establish the association with SCTP INIT/INIT ACK, then exchange NGAP messages such as NG Setup Request and NG Setup Response. Messages use ASN.1 encoding with aligned PER, and the SCTP payload protocol identifier is 60. NGAP carries signaling, not subscriber user-plane traffic (which commonly uses GTP-U on UDP 2152). SCTP itself does not encrypt the traffic.

Security Information

exposure of :38412

risk score

7/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

network services averages 2.6 across 2,001 ports — this one sits 4.4 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

sctp

every listening transport is another surface to filter at the edge

security overview

This is sensitive mobile-core control-plane signaling and should not be exposed to arbitrary internet hosts. NGAP does not provide encryption itself; protect the transport with appropriate network controls (such as peer allowlists and, where used, IPsec) and monitor association attempts. An exposed endpoint may be probed for implementation weaknesses or subjected to signaling and resource-exhaustion attempts.

Record

iana registry entry

port: :38412
service: 5G NG Application Protocol (NGAP)
transport: SCTP
encryption: cleartext
assignment: iana registered
risk: 7/10risk
category: Network Services Mobile
usage: This port carries NGAP control-plane signaling between a 5G base station (gNB) and the Access and Mobility Management Function (AMF) over the N2 interface. Engineers typically encounter it in private or operator 5G networks, not as a public-facing service.
lookups: 0rank 993
added: 2026-10-20
updated: 2026-10-20
references: IANA service name registry — port 38412

Something wrong?

This record is maintained by the engineers who use port 38412. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-10-20.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 2,001 in network services →

the 8 most looked-up other ports in network services — 2,001 ports carry that label.

port	service	proto	category	risk	views
:9080	Groove RPC	TCPUDP	Web Services	caution	70.8k
:6543	Jetnet	UDP	Network Services	caution	65.3k
:5938	TeamViewer	TCPUDP	Remote Access	caution	65.0k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3233	WhiskerControl Protocol	TCPUDP	Network Services	caution	61.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Tatsoft Default HTTP Proxy	TCP	Web Services	caution	46.8k

risk mix of the 8 listed

caution100%

0 of 8 encrypted

Port :384125G NG Application Protocol (NGAP)

Technical Details

Security Information

Related Ports

Port 384125G NG Application Protocol (NGAP)