Internet-Security raven logo internet-security.com

UDP 2152

ProtocolUDP
Port2152
LabelsGTP user data messages (GTP-U)

Synopsis

  • UDP port 2152 is used by GPRS Tunneling Protocol – User Plane (GTP‑U), the 3GPP standard for carrying user data in 3G/4G/5G mobile networks.
  • Mobile core products such as Cisco ASR 5000/5500 (StarOS), Ericsson EPC components (SGW/PGW), and Nokia and Huawei EPCs exchange user‑plane traffic over UDP 2152 on interfaces like S1‑U, S5/S8, and 5G’s N3.
  • Open-source cores including Open5GS and free5GC listen on UDP 2152 for GTP‑U, and RAN stacks like srsRAN/srsLTE send user traffic to the core via this port.
  • Osmocom’s OsmoGGSN/OsmoSGSN and projects like OpenUPF also implement GTP‑U on UDP 2152.
  • This port has been associated with exploitation when exposed to the public Internet; telecom security research has shown GTP‑U endpoints abused for tunneling, subscriber spoofing, and denial‑of‑service, so operators restrict it to trusted peers.

Observed activity

Last 30 days Detailed chart

More information