whatportis.com
suggest an edit →

Port 8080Apache Tomcat

Port 8080 is commonly used by Apache Tomcat, an open-source Java Servlet Container developed by the Apache Software Foundation. As an alternative HTTP port to the default port 80, it facilitates the development, deployment, and management of Java-based web applications. Due to widespread adoption, it's a key component for Java web application hosting and testing environments..

inWeb Services
transport
tcp

single transport

in transit
cleartext

payload readable on path

assignment
unofficial

used by convention

risk
4/10

caution

lookups
27,995

rank 48 of 993 · top 5%

2 other services are registered on port 8080. compare all 3 →

Technical Details

what runs on :8080

Port 8080 is typically associated with Apache Tomcat, which serves as a platform for running Java Servlets and JavaServer Pages (JSPs). Tomcat functions as an HTTP web server built around the Java ecosystem, allowing the deployment of dynamic Java-based content. Since it often operates alongside traditional web servers like Apache HTTPD, it's common to see Tomcat bound to alternate ports such as 8080 while the main server listens on port 80.

By default, Tomcat listens on port 8080 for incoming HTTP connection requests. This non-standard port minimizes conflicts with other services already operating on port 80 and is preferred for development and testing. The server supports essential protocols such as HTTP, HTTPS, AJP, and WebSocket, enabling comprehensive application hosting capabilities.

Tomcat is widely appreciated for its ease of integration with Java development workflows, compatibility with major Java IDEs, and support for essential Java EE components excluding full EE profile features. Its lightweight nature makes it a popular choice to serve Java web apps in both production and development settings, facilitating streamlined deployments.

Security Information

exposure of :8080

risk score

4/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

web services averages 3.9 across 112 ports — this one sits 0.1 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

unofficial

used by convention, not registered — what answers here varies by deployment

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

Common Vulnerabilities:

  • Exposure of Tomcat management interfaces on port 8080 can lead to unauthorized access and potential server takeover.
  • Older versions of Tomcat may be susceptible to remote code execution, directory traversal, and information disclosure vulnerabilities.
  • Default installations without hardened configurations may allow attackers to enumerate installed applications or gain sensitive information.
  • Lack of encryption (plain HTTP on port 8080) can lead to data interception and man-in-the-middle attacks.

Mitigations:

  • Restrict access to management and administrative interfaces via firewall rules or access controls.
  • Deploy Tomcat behind reverse proxies and utilize HTTPS to encrypt traffic.
  • Regularly patch Tomcat installations and monitor for security advisories.
  • Remove or secure sample applications and default files included with Tomcat to reduce attack surface.
  • Enforce authentication and role-based access control (RBAC) for the Tomcat Manager and Host Manager.

Related Ports

all 112 in web services →

the 8 most looked-up other ports in web services — 112 ports carry that label.

portservicerisk
:8888Sun Answerbook & Alt HTTPcaution
:8000Intel Remote Desktop / Alternate HTTP Portsafe
:8888NewsEDGEcaution
:8888HTTP Alternative Portcaution
:8888GNUmp3d Streaming HTTPcaution
:9080Groove RPCcaution
:8881Atlasz Secure Servercaution
:80HTTPcaution

risk mix of the 8 listed

  • safe13%
  • caution88%

0 of 8 encrypted