whatportis.com
suggest an edit →

Port 80HTTP

Hypertext Transfer Protocol (HTTP) facilitates communication between web browsers and servers, enabling retrieval of web content such as HTML pages, images, and other resources. It is the foundation of data exchange on the World Wide Web, operating primarily over TCP port 80 in plaintext. Despite being widely used, its lack of encryption exposes data transmissions to various network-based threats..

inWeb Services
transport
tcp · udp

2 transports registered

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
4/10

caution

lookups
67,323

rank 10 of 993 · top 1%

Technical Details

what runs on :80

HTTP, or Hypertext Transfer Protocol, is an application-layer protocol in the Internet protocol suite designed primarily for distributed, collaborative, and hypermedia information systems. It is the fundamental protocol used by the World Wide Web for transmitting web pages and related content between clients and servers.

HTTP functions through a client–server model where a client (such as a web browser) sends an HTTP request message to a server hosting a website, which then returns an HTTP response with the requested data or an error. The protocol is stateless, meaning that each request–response pair is independent; however, mechanisms like cookies and sessions are employed to maintain stateful information.

HTTP utilizes methods such as GET, POST, PUT, DELETE, and others to specify desired actions on resources. The protocol initially relied on plaintext transmission over TCP port 80, making it simple yet vulnerable. To address this, secure variants such as HTTPS (HTTP over SSL/TLS) operate over port 443 to provide confidentiality, integrity, and authentication.

Security Information

exposure of :80

risk score

4/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

web services averages 3.9 across 112 ports — this one sits 0.1 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

Common Vulnerabilities:

  • Transmission of sensitive data in plaintext, susceptible to eavesdropping and interception.
  • Man-in-the-middle (MitM) attacks where attackers modify or inject malicious content.
  • Session hijacking due to predictable or exposed session tokens.
  • Cross Site Scripting (XSS) and Cross Site Request Forgery (CSRF) exploits facilitated via insecure HTTP communication.

Mitigations:

  • Prefer enforcing HTTPS (SSL/TLS encryption) across all pages to prevent interception and tampering.
  • Utilize secure and HttpOnly flags with cookies to reduce exploit surface.
  • Implement strict Content Security Policies (CSP) to limit script execution and mitigate XSS.
  • Regularly update and patch web server software.
  • Employ network-level controls such as firewalls and intrusion detection/prevention systems to monitor HTTP traffic.

Related Ports

all 112 in web services →

the 8 most looked-up other ports in web services — 112 ports carry that label.

portservicerisk
:8888Sun Answerbook & Alt HTTPcaution
:8000Intel Remote Desktop / Alternate HTTP Portsafe
:8888NewsEDGEcaution
:8888HTTP Alternative Portcaution
:8888GNUmp3d Streaming HTTPcaution
:9080Groove RPCcaution
:8881Atlasz Secure Servercaution
:8882Atlasz Secure App Servercaution

risk mix of the 8 listed

  • safe13%
  • caution88%

0 of 8 encrypted