whatportis.com
suggest an edit →

Port 8443Plesk/Tomcat SSL

Port 8443 is commonly used for secure web-based administrative interfaces such as the SW Soft Plesk Control Panel, Apache Tomcat Manager over SSL, and Promise WebPAM SSL management. Typically, it facilitates encrypted communications for web applications running outside the default HTTPS port (443), enabling secure management and service access without conflicting with standard HTTPS content..

inWeb ServicesRemote AccessCloud
transport
tcp

single transport

in transit
encrypted

payload protected on the wire

assignment
unofficial

used by convention

risk
4/10

caution

lookups
14,203

rank 248 of 993 · top 25%

Technical Details

what runs on :8443

Port 8443 is a popular alternative HTTPS port, used primarily when hosting SSL-enabled services that do not run on the default port 443. For example, many web management consoles like Plesk’s Control Panel employ 8443 to provide an isolated, secure interface for administrators, separate from the main website or application. It is also the default SSL port for Apache Tomcat Manager, a tool that allows administrators to manage Java application deployments securely.

The port supports encrypted HTTPS connections utilizing TLS/SSL protocols. The encryption ensures confidentiality and integrity during data transmission between the administration client and server. Since HTTPS traffic is inherently TCP-based, communication on this port benefits from established HTTP security features, such as certificate-based authentication and encrypted sessions.

Given its common use for management portals, this port often exposes web application frontends which may be customized or vendor-provided. As such, its behavior can vary widely, but it generally involves encrypted HTTP traffic intended for interactive user interfaces controlling server configurations, resource management, or application deployments.

Security Information

exposure of :8443

risk score

4/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

web services averages 3.9 across 112 ports — this one sits 0.1 above.

in transit

encrypted

payloads are protected on the wire

assignment

unofficial

used by convention, not registered — what answers here varies by deployment

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

Common Vulnerabilities:

  • Exposed management interfaces on 8443 can be susceptible to brute-force login attacks.
  • Outdated software running on this port (e.g., old versions of Tomcat or Plesk) may contain vulnerabilities such as remote code execution or privilege escalation.
  • Misconfigured SSL/TLS settings can lead to weak encryption, exposing the connection to downgrade or Man-in-the-Middle (MitM) attacks.
  • Application-specific vulnerabilities, such as cross-site scripting (XSS) or CSRF within management portals.

Common Mitigations:

  • Restrict access to port 8443 using firewalls or VPNs to limit exposure to trusted IP ranges.
  • Keep underlying management software updated to patch known vulnerabilities.
  • Enforce strong authentication, including multi-factor authentication if available.
  • Harden SSL/TLS settings by disabling weak protocols and cipher suites, and using valid security certificates.
  • Employ web security best practices: validate inputs, sanitize outputs, and monitor access logs for suspicious activities.

Related Ports

all 112 in web services →

the 8 most looked-up other ports in web services — 112 ports carry that label.

portservicerisk
:8888Sun Answerbook & Alt HTTPcaution
:8000Intel Remote Desktop / Alternate HTTP Portsafe
:8888NewsEDGEcaution
:8888HTTP Alternative Portcaution
:8888GNUmp3d Streaming HTTPcaution
:9080Groove RPCcaution
:8881Atlasz Secure Servercaution
:80HTTPcaution

risk mix of the 8 listed

  • safe13%
  • caution88%

0 of 8 encrypted