HTTPfy

Port 33060 (MySQL X Protocol)

MySQL X Plugin / X DevAPI (MySQL Shell, document store), enabled by default since MySQL 8.0.

Registered (user) port, 1024-49151 TCP Databases Do not expose to the internet

What port 33060 is used for

MySQL X Plugin / X DevAPI (MySQL Shell, document store), enabled by default since MySQL 8.0.

Security: should port 33060 be open?

Do not expose to the internet. Often forgotten when only 3306 is firewalled; bind it to localhost or disable mysqlx if unused.

IANA assignment

Service nameProtoDescriptionAssigneeReference
mysqlx TCP MySQL Database Extended Interface Oracle 8 -

Registry dates for this port: registered 2015-08-06.

Check what is listening on port 33060

Linux: is anything listening on TCP 33060?
sudo ss -tlnp 'sport = :33060'
Linux / macOS: which process owns the port
sudo lsof -nP -i :33060
Older Linux / BSD (net-tools)
sudo netstat -tlnp | grep ':33060 '
Windows (Command Prompt)
netstat -ano | findstr :33060
Windows (PowerShell)
Get-NetTCPConnection -LocalPort 33060 -State Listen | Select LocalAddress,OwningProcess

Test it from outside

From another machine
nc -vz -w 5 HOST 33060
From Windows
Test-NetConnection HOST -Port 33060

Block port 33060 in the firewall

ufw
sudo ufw deny 33060/tcp
iptables
sudo iptables -A INPUT -p tcp --dport 33060 -j DROP
nftables
sudo nft add rule inet filter input tcp dport 33060 drop
Windows Firewall
New-NetFirewallRule -DisplayName 'Block TCP 33060' -Direction Inbound -Protocol TCP -LocalPort 33060 -Action Block

Related ports

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.