Port 2369: BMC Control-M Configuration Agent

What Port 2369 Is

Port 2369 is the default port for the BMC Control-M/Server Configuration Agent — a component of BMC's Control-M workload automation platform. It sits in the registered port range (1024–49151), meaning it's available for software vendors to claim without IANA formal assignment.

The Configuration Agent is the administrative interface into a Control-M/Server installation. It handles configuration commands, agent management, deployment updates, and status queries — the internal plumbing that lets operators control a system responsible for scheduling and orchestrating jobs across an enterprise.

The Registered Port Range

Ports from 1024 to 49151 are registered ports. Any software vendor can request IANA registration for a port in this range, but many — including this one — simply pick a number and document it without formal assignment. The result is a vast middle ground of ports that have real uses in production environments but no official IANA record.

Port 2369 sits in this gray zone. It's not arbitrary — BMC chose it deliberately for Control-M — but it's not in the IANA registry as a formal assignment either. It just became the default, documented in BMC's own manuals, and that became the convention.

Who Uses It

Control-M is enterprise workload automation software. Banks run it. Hospitals run it. Retailers run it. Any organization that needs to schedule thousands of jobs — batch processing, data pipelines, report generation, nightly ETL runs — often ends up running Control-M. It's the kind of infrastructure that runs invisibly at 2am, and you only notice it when it stops.

The Configuration Agent on port 2369 is the interface that administrators use to manage the Control-M/Server: changing settings, updating configurations, deploying agents to new machines. It's the control plane for the control plane.

Security Note

The valid range for the Configuration Agent port is 1025–32767, and the default is 2369. Security-conscious administrators routinely change it during installation — default ports are the first thing attackers probe. If you see port 2369 open on a server and you're not running Control-M, that's worth investigating.

Checking What's on This Port

# See if anything is listening on port 2369
ss -tlnp | grep 2369

# On macOS
lsof -i :2369

# Check from outside the machine
nmap -p 2369 <host>