HTTPfy

Port 8006 (Proxmox VE web UI)

Proxmox Virtual Environment web interface and API (HTTPS).

Registered (user) port, 1024-49151 TCP Remote access Expose only to trusted sources

What port 8006 is used for

Proxmox Virtual Environment web interface and API (HTTPS).

Security: should port 8006 be open?

Expose only to trusted sources. Full control over all VMs; keep it behind a VPN or allowlist and enable TOTP.

IANA assignment

Service nameProtoDescriptionAssigneeReference
wpl-analytics TCP World Programming analytics World Programming Limited -
wpl-disc UDP World Programming analytics discovery World Programming Limited -

Registry dates for this port: registered 2017-04-04.

Check what is listening on port 8006

Linux: is anything listening on TCP 8006?
sudo ss -tlnp 'sport = :8006'
Linux / macOS: which process owns the port
sudo lsof -nP -i :8006
Older Linux / BSD (net-tools)
sudo netstat -tlnp | grep ':8006 '
Windows (Command Prompt)
netstat -ano | findstr :8006
Windows (PowerShell)
Get-NetTCPConnection -LocalPort 8006 -State Listen | Select LocalAddress,OwningProcess

Test it from outside

From another machine
nc -vz -w 5 HOST 8006
From Windows
Test-NetConnection HOST -Port 8006

Allow only trusted sources on port 8006 in the firewall

Replace 203.0.113.10 with the address or network you trust. With ufw, make sure the default incoming policy is deny.

ufw (one trusted source)
sudo ufw allow from 203.0.113.10 to any port 8006 proto tcp
iptables
sudo iptables -A INPUT -p tcp --dport 8006 -s 203.0.113.10 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 8006 -j DROP
nftables
sudo nft add rule inet filter input ip saddr 203.0.113.10 tcp dport 8006 accept
sudo nft add rule inet filter input tcp dport 8006 drop
Windows Firewall
New-NetFirewallRule -DisplayName 'TCP 8006 trusted' -Direction Inbound -Protocol TCP -LocalPort 8006 -RemoteAddress 203.0.113.10 -Action Allow

Related ports

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.