HTTPfy

Port 5044 (Logstash Beats input)

Logstash input for Filebeat and other Beats shippers.

Registered (user) port, 1024-49151 TCP Monitoring and logging Do not expose to the internet

What port 5044 is used for

Logstash input for Filebeat and other Beats shippers.

Security: should port 5044 be open?

Do not expose to the internet. Enable TLS with client certificates if shippers are outside the network.

IANA assignment

Service nameProtoDescriptionAssigneeReference
lxi-evntsvc TCP LXI Event Service Nick Barendt -
lxi-evntsvc UDP LXI Event Service Nick Barendt -

Registry dates for this port: registered 2005-08.

Check what is listening on port 5044

Linux: is anything listening on TCP 5044?
sudo ss -tlnp 'sport = :5044'
Linux / macOS: which process owns the port
sudo lsof -nP -i :5044
Older Linux / BSD (net-tools)
sudo netstat -tlnp | grep ':5044 '
Windows (Command Prompt)
netstat -ano | findstr :5044
Windows (PowerShell)
Get-NetTCPConnection -LocalPort 5044 -State Listen | Select LocalAddress,OwningProcess

Test it from outside

From another machine
nc -vz -w 5 HOST 5044
From Windows
Test-NetConnection HOST -Port 5044

Block port 5044 in the firewall

ufw
sudo ufw deny 5044/tcp
iptables
sudo iptables -A INPUT -p tcp --dport 5044 -j DROP
nftables
sudo nft add rule inet filter input tcp dport 5044 drop
Windows Firewall
New-NetFirewallRule -DisplayName 'Block TCP 5044' -Direction Inbound -Protocol TCP -LocalPort 5044 -Action Block

Related ports

9200Elasticsearch / OpenSearch HTTP5601Kibana514Syslog (UDP) / rsh (TCP)5042asnaacceler8db5043swxadmin5045osp5046vpm-udp

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.