Port 8080 (HTTP alternate)

The most common alternative HTTP port: Tomcat, Jenkins, many Java and Go apps, proxies, container images and home routers' admin pages listen here.

Registered (user) port, 1024-49151 TCP Web Expose only to trusted sources

What port 8080 is used for

The most common alternative HTTP port: Tomcat, Jenkins, many Java and Go apps, proxies, container images and home routers' admin pages listen here.

Security: should port 8080 be open?

Expose only to trusted sources. Often an app server that should sit behind a reverse proxy rather than be reached directly. Exposed 8080 services are frequently admin consoles (Jenkins, Tomcat manager) that get brute-forced or exploited; check what is listening before you open it.

IANA assignment

Service nameProtoDescriptionAssigneeReference

http-alt TCP HTTP Alternate (see port 80) Stephen Casner -

http-alt UDP HTTP Alternate (see port 80) Stephen Casner -

Check what is listening on port 8080

Linux: is anything listening on TCP 8080?

sudo ss -tlnp 'sport = :8080'

Linux / macOS: which process owns the port

sudo lsof -nP -i :8080

Older Linux / BSD (net-tools)

sudo netstat -tlnp | grep ':8080 '

Windows (Command Prompt)

netstat -ano | findstr :8080

Windows (PowerShell)

Get-NetTCPConnection -LocalPort 8080 -State Listen | Select LocalAddress,OwningProcess

Test it from outside

From another machine

nc -vz -w 5 HOST 8080

From Windows

Test-NetConnection HOST -Port 8080

Allow only trusted sources on port 8080 in the firewall

Replace 203.0.113.10 with the address or network you trust. With ufw, make sure the default incoming policy is deny.

ufw (one trusted source)

sudo ufw allow from 203.0.113.10 to any port 8080 proto tcp

iptables

sudo iptables -A INPUT -p tcp --dport 8080 -s 203.0.113.10 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 8080 -j DROP

nftables

sudo nft add rule inet filter input ip saddr 203.0.113.10 tcp dport 8080 accept
sudo nft add rule inet filter input tcp dport 8080 drop

Windows Firewall

New-NetFirewallRule -DisplayName 'TCP 8080 trusted' -Direction Inbound -Protocol TCP -LocalPort 8080 -RemoteAddress 203.0.113.10 -Action Allow

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.