Internet-Security.com TCP port 50070 details

TCP 50070 is the default HTTP service for the Apache Hadoop HDFS NameNode in Hadoop 1.x/2.x, providing the NameNode web UI and the WebHDFS REST API.
Popular distributions such as Cloudera CDH 5.x and Hortonworks HDP 2.x use 50070 for the NameNode UI (e.g., http://namenode:50070/).
Tools and clients interact with WebHDFS on this port (for example, curl requests to /webhdfs/v1/... for file operations).
In Hadoop 3.x the default moved to 9870, but many existing deployments still run the service on 50070.
Security note: exposed 50070 services have been abused in the wild for data theft, ransomware, and cryptojacking against misconfigured Hadoop clusters, with multiple campaigns reported since 2017 targeting publicly reachable HDFS NameNodes.

TCP 50070