TCP 50100
Synopsis
- TCP/50100 is used by SAP NetWeaver Application Server Java (AS Java) as the HTTP listener when the SAP instance number is 01 (pattern 5
00). - Real deployments such as SAP Process Integration/Process Orchestration (PI/PO), SAP Enterprise Portal, and the Java stack of SAP Solution Manager commonly expose web UIs and services on this port (e.g., NetWeaver Administrator at http://host:50100/nwa, PI Directory at http://host:50100/dir, and Integration Builder at /rep).
- Many enterprises run their AS Java as instance 01, so 50100 is frequently seen in SAP environments.
- This port has been a target in attacks exploiting SAP AS Java vulnerabilities, notably the RECON flaw (CVE-2020-6287), which allowed unauthenticated remote administrative access via the HTTP interface.
Observed activity
Last 30 days
Detailed chart