Port 50000 (Jenkins agents / SAP)

Jenkins inbound (JNLP) agent port in the official Docker image, and SAP instance 00 HTTP (5NN00) and IBM Db2 defaults.

Dynamic / private (ephemeral) port, 49152-65535 TCP Development tools Do not expose to the internet

What port 50000 is used for

Jenkins inbound (JNLP) agent port in the official Docker image, and SAP instance 00 HTTP (5NN00) and IBM Db2 defaults.

Do not expose to the internet. Allow agents only from known hosts; Jenkins controllers themselves should not be public.

Port 50000 is in the dynamic range, which IANA never assigns. The usage above is unofficial but widespread.

Linux: is anything listening on TCP 50000?

sudo ss -tlnp 'sport = :50000'

Linux / macOS: which process owns the port

sudo lsof -nP -i :50000

Older Linux / BSD (net-tools)

sudo netstat -tlnp | grep ':50000 '

Windows (Command Prompt)

netstat -ano | findstr :50000

Windows (PowerShell)

Get-NetTCPConnection -LocalPort 50000 -State Listen | Select LocalAddress,OwningProcess

From another machine

nc -vz -w 5 HOST 50000

From Windows

Test-NetConnection HOST -Port 50000

ufw

sudo ufw deny 50000/tcp

iptables

sudo iptables -A INPUT -p tcp --dport 50000 -j DROP

nftables

sudo nft add rule inet filter input tcp dport 50000 drop

Windows Firewall

New-NetFirewallRule -DisplayName 'Block TCP 50000' -Direction Inbound -Protocol TCP -LocalPort 50000 -Action Block

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.