Common attacks and weaknesses
- Admin interfaces of firewalls, VPNs and hypervisors, frequent targets of critical CVEs.
- Default credentials.
Alternate HTTPS port, often used by admin consoles, appliances and application servers.
A browser sends an HTTP request to port 8443 and the HTTPS alternate server sends the page back. Everything is encrypted: someone on the path only sees unreadable bytes.
| Service | Port | Transport | Description | Reference | Updated |
|---|---|---|---|---|---|
| pcsync-https | 8443 | TCP, UDP | PCsync HTTPS | - | - |
// source: IANA service name and port number registry
Linux
sudo ss -ltnup 'sport = :8443' # process listening on 8443
sudo lsof -nP -i :8443macOS
sudo lsof -nP -i :8443
Windows (PowerShell)
Get-NetTCPConnection -LocalPort 8443 -State Listen | Select LocalAddress, OwningProcess Get-NetUDPEndpoint -LocalPort 8443 netstat -ano | findstr :8443
From another machine
nmap -p 8443 -sV <host> sudo nmap -sU -p 8443 <host> nc -zv <host> 8443
Block it in the firewall
sudo ufw deny 8443/tcp # Linux (ufw) New-NetFirewallRule -DisplayName "Block 8443" -Direction Inbound -LocalPort 8443 -Protocol TCP -Action Block # Windows
Alternate HTTPS port, often used by admin consoles, appliances and application servers.
Port 8443 is registered for TCP and UDP. In practice the service mostly uses TCP.
It is rated 5/10 (moderate) when exposed to the Internet. Admin interfaces of firewalls, VPNs and hypervisors, frequent targets of critical CVEs. Restrict management interfaces to admin networks.
On Linux run "ss -ltnup 'sport = :8443'", on macOS "lsof -nP -i :8443", and on Windows "netstat -ano | findstr :8443" to see the local process. From another machine, "nmap -p 8443 <host>" shows whether it is reachable.