Port 8090HTTP Alternate
Port 8090 is commonly utilized as an alternative HTTP port, especially when the default port 80, or the primary alternative 8080, are already occupied or restricted. It facilitates HTTP web traffic, enabling access to web services and applications through an alternative entry point. This port is popular in development environments, custom web server deployments, proxy services, and certain web platforms where port conflicts might arise..
- transport
- tcp
- in transit
- cleartext
- assignment
- unofficial
- risk
- 4/10
- lookups
- 27,589
single transport
payload readable on path
used by convention
caution
rank 52 of 993 · top 5%
Technical Details
what runs on :8090Port 8090 primarily serves as an alternative HTTP port. While port 80 is the default for HTTP traffic and port 8080 is widely adopted for web proxies and alternative services, port 8090 provides yet another option, often chosen when the other two are unavailable or already reserved. This flexibility supports developers and administrators in managing multiple web applications or avoiding conflicts during deployment.
Administrators configure web servers—such as Apache, Nginx, Tomcat, Jetty, or Atlassian services (like Jira and Confluence)—to listen on port 8090 either for testing, multi-instance setups, or isolating less-public services. Despite being unofficial, it is a de facto standard alternative, supported across a wide range of platforms and HTTP-compatible services.
Because HTTP traffic over 8090 uses the same protocol as on 80 or 8080, it inherits full support for web technologies like HTML, CSS, JavaScript, REST APIs, and HTTP headers. There is nothing unique about communication semantics; only the entry point differs, simplifying integration but also potentially introducing assumptions if network policies do not account for services running on non-standard ports.
Security Information
exposure of :8090risk score
4/ 10caution
worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.
web services averages 3.9 across 112 ports — this one sits 0.1 above.
in transit
cleartext
credentials and payloads are readable by anyone on path
assignment
unofficial
used by convention, not registered — what answers here varies by deployment
reachable over
tcp
every listening transport is another surface to filter at the edge
security overview
Port 8090, like other HTTP ports, is vulnerable to a variety of web-based attacks due to the underlying application protocols. Common vulnerabilities include:
- Unencrypted Communication: Since HTTP is plaintext, data can be intercepted through Man-in-the-Middle (MitM) attacks if TLS is not enforced.
- Exposure of Development or Administrative Interfaces: Services bound to 8090 may be less scrutinized, leading to exposure of sensitive management consoles or staging environments.
- Standard Web Exploits: Such as cross-site scripting (XSS), SQL injection, cross-site request forgery (CSRF), directory traversal, and authentication bypass vulnerabilities.
Mitigation strategies include:
- Implementing HTTPS to encrypt communications, using TLS certificates on port 8090 or through reverse proxies.
- Strict Access Controls: Restricting port exposure to trusted IP ranges or internal networks only.
- Web Application Firewalls (WAFs): Filtering malicious inputs and detecting unusual behavior.
- Routine Vulnerability Scanning and Patching: Keeping all web server components and applications up to date.
- Least Privilege Principle: Limiting permissions to reduce potential attack surfaces and impacts.
Related Ports
the 8 most looked-up other ports in web services — 112 ports carry that label.
| port | service | risk | |||
|---|---|---|---|---|---|
| :8888 | Sun Answerbook & Alt HTTP | TCP | Web Services | caution | 123.9k |
| :8000 | Intel Remote Desktop / Alternate HTTP Port | TCP | Web Services | safe | 84.3k |
| :8888 | NewsEDGE | TCPUDP | Web Services | caution | 83.3k |
| :8888 | HTTP Alternative Port | TCP | Web Services | caution | 76.5k |
| :8888 | GNUmp3d Streaming HTTP | TCP | Web Services | caution | 76.3k |
| :9080 | Groove RPC | TCPUDP | Web Services | caution | 70.8k |
| :8881 | Atlasz Secure Server | TCP | Web Services | caution | 67.6k |
| :80 | HTTP | TCPUDP | Web Services | caution | 67.3k |
risk mix of the 8 listed
- safe13%
- caution88%
0 of 8 encrypted