Internet-Security raven logo internet-security.com

TCP 5000

ProtocolTCP
Port5000
LabelsDocker Registry

Synopsis

  • Python Flask’s built-in development server (Werkzeug) listens on TCP port 5000 by default.
  • Docker Registry v2 (private container registry) runs on TCP 5000 by default.
  • OpenStack Keystone (Identity service) exposes its public API on TCP 5000 by default.
  • Synology DiskStation Manager (DSM) web interface uses TCP 5000 for HTTP (and 5001 for HTTPS).
  • AirPlay 1/AirTunes (RAOP) uses TCP 5000 for its RTSP control channel on devices like Apple AirPort Express and many AirPlay speakers.
  • Many consumer routers and other devices present their UPnP control interface over HTTP on TCP 5000; Windows XP/ME’s UPnP service also listened on 5000.
  • Security note: port 5000 has seen exploitation, including the MS01-059 UPnP buffer overflow on Windows XP/ME and attacks on exposed UPnP/IoT web interfaces on 5000 by worms/botnets.
  • Heroku/Foreman commonly binds the local “web” process to TCP 5000 during development.

Observed activity

Last 30 days Detailed chart

More information