Port 8080 (HTTP alternate)
Common alternative HTTP port for proxies, application servers and admin consoles (Jenkins, Tomcat).
- Transport
- TCP
- Internet exposure
- Restrict
Expose only to specific networks, or behind a VPN.
Security notes
- Admin consoles on 8080 are frequently left exposed with default credentials.
- Also used by malware for command and control.
When it shows up in your logs
Inbound probing for admin paths is scanning; outbound 8080 to unknown hosts can be C2.