- Serve it over HTTPS only and check the HTTP security headers.
- Keep admin consoles and development servers off the Internet.
- Patch the application server and remove default credentials and sample apps.
Web ports
HTTP, HTTPS, application servers, proxies and web admin consoles. 130 ports, most common first.
| Port | Service | Transport | Risk | Encryption |
|---|---|---|---|---|
| 443 | HTTPS https | TCP UDP SCTP | 2/10 low | yes |
| 80 | HTTP http, www, www-http | TCP UDP SCTP | 4/10 moderate | no |
| 8080 | HTTP alternate http-alt | TCP UDP | 6/10 high | no |
| 8443 | HTTPS alternate pcsync-https | TCP UDP | 5/10 moderate | yes |
| 3000 | Dev servers / Grafana hbci, remoteware-cl | TCP UDP | 5/10 moderate | no |
| 5000 | Flask / Docker registry / UPnP commplex-main | TCP UDP | 5/10 moderate | no |
| 8000 | HTTP alternate (dev) irdmi | TCP UDP | 5/10 moderate | no |
| 8888 | Jupyter / HTTP alternate ddi-tcp-1, ddi-udp-1 | TCP UDP | 7/10 high | no |
| 9443 | HTTPS alternate (admin) tungsten-https | TCP UDP | 5/10 moderate | yes |
| 280 | http-mgmt http-mgmt | TCP UDP | - | - |
| 488 | gss-http gss-http | TCP UDP | - | - |
| 591 | FileMaker, Inc. - HTTP Alternate (see Port 80) http-alt | TCP UDP | - | - |
| 593 | HTTP RPC Ep Map http-rpc-epmap | TCP UDP | - | - |
| 598 | SCO Web Server Manager 3 sco-websrvrmg3 | TCP UDP | - | - |
| 602 | XML-RPC over BEEP xmlrpc-beep | TCP UDP | - | - |
| 605 | SOAP over BEEP soap-beep | TCP UDP | - | - |
| 777 | Multiling HTTP multiling-http | TCP UDP | - | - |
| 1001 | HTTP Web Push webpush | TCP | - | - |
| 1085 | Web Objects webobjects | TCP UDP | - | - |
| 1128 | SAPHostControl over SOAP/HTTP saphostctrl | TCP UDP | - | - |
| 1129 | SAPHostControl over SOAP/HTTPS saphostctrls | TCP UDP | - | - |
| 1183 | LL Surfup HTTP llsurfup-http | TCP UDP | - | - |
| 1184 | LL Surfup HTTPS llsurfup-https | TCP UDP | - | - |
| 1188 | HP Web Admin hp-webadmin | TCP UDP | - | - |
| 1278 | Dell Web Admin 1 dellwebadmin-1 | TCP UDP | - | - |
| 1279 | Dell Web Admin 2 dellwebadmin-2 | TCP UDP | - | - |
| 1889 | Unify Web Adapter Service unify-adapter | TCP UDP | - | - |
| 2069 | HTTP Event Port event-port | TCP UDP | - | - |
| 2193 | Dr.Web Enterprise Management Service drwcs | TCP UDP | - | - |
| 2381 | Compaq HTTPS compaq-https | TCP UDP | - | - |
| 2403 | TaskMaster 2000 Web taskmaster2000 | TCP UDP | - | - |
| 2408 | CloudFlare Railgun Web Acceleration Protocol railgun-webaccl | TCP | - | - |
| 2534 | Combox Web Access combox-web-acc | TCP UDP | - | - |
| 2688 | md-cf-http md-cg-http | TCP UDP | - | - |
| 2784 | world wide web - development www-dev | TCP UDP | - | - |
| 2948 | WAP PUSH wap-push | TCP UDP | - | - |
| 2949 | WAP PUSH SECURE wap-pushsecure | TCP UDP | - | - |
| 3011 | Trusted Web trusted-web | TCP UDP | - | - |
| 3012 | Trusted Web Client twsdss | TCP UDP | - | - |
| 3106 | Cardbox HTTP cardbox-http | TCP UDP | - | - |
| 3111 | Web Synchronous Services wsynch | TCP UDP | - | - |
| 3443 | OpenView Network Node Manager WEB Server ov-nnm-websrv | TCP UDP | - | - |
| 3508 | Interaction Web interactionweb | TCP UDP | - | - |
| 3570 | MCC Web Server Port mccwebsvr-port | TCP UDP | - | - |
| 3631 | C&S Web Services Port cs-services | TCP UDP | - | - |
| 3702 | Web Service Discovery ws-discovery | TCP UDP | - | - |
| 3728 | Ericsson Web on Air e-woa | TCP UDP | - | - |
| 3816 | Sun Local Patch Server sunlps-http | TCP UDP | - | - |
| 3840 | www.FlirtMitMir.de flirtmitmir | TCP UDP | - | - |
| 3930 | Syam Web Server Port syam-webserver | TCP UDP | - | - |
| 3941 | Home Portal Web Server homeportal-web | TCP UDP | - | - |
| 4035 | WAP Push OTA-HTTP port wap-push-http | TCP UDP | - | - |
| 4036 | WAP Push OTA-HTTP secure wap-push-https | TCP UDP | - | - |
| 4327 | Jaxer Web Protocol jaxer-web | TCP UDP | - | - |
| 4330 | DEY Storage Administration REST API dey-sapi | TCP | - | - |
| 4331 | ktickets REST API for event management and ticketing systems (embedded POS devices) ktickets-rest | TCP | - | - |
| 4590 | RID over HTTP/TLS rid | TCP | - | - |
| 4847 | Web Fresh Communication wfc | TCP UDP | - | - |
| 4848 | App Server - Admin HTTP appserv-http | TCP UDP | - | - |
| 4849 | App Server - Admin HTTPS appserv-https | TCP UDP | - | - |
| 5015 | FileMaker, Inc. - Web publishing fmwp | TCP | - | - |
| 5049 | iVocalize Web Conference ivocalize | TCP UDP | - | - |
| 5248 | CA Access Control Web Service caacws | TCP UDP | - | - |
| 5357 | Web Services for Devices wsdapi | TCP UDP | - | - |
| 5443 | Pearson HTTPS spss | TCP UDP | - | - |
| 5554 | SGI ESP HTTP sgi-esphttp | TCP UDP | - | - |
| 5584 | BeInSync-Web bis-web | TCP UDP | - | - |
| 5705 | StorageOS REST API storageos | TCP | - | - |
| 5841 | Z-firm ShipRush interface for web access and bidirectional data shiprush-d-ch | TCP | - | - |
| 6121 | SPDY for a faster web spdy | TCP | - | - |
| 6480 | Service Registry Default HTTP Domain sun-sr-http | TCP UDP | - | - |
| 6703 | e-Design web e-design-web | TCP UDP | - | - |
| 6770 | PolyServe http plysrv-http | TCP UDP | - | - |
| 6771 | PolyServe https plysrv-https | TCP UDP | - | - |
| 6786 | Sun Java Web Console JMX smc-jmx | TCP UDP | - | - |
| 6787 | Sun Web Console Admin smc-admin | TCP UDP | - | - |
| 6788 | SMC-HTTP smc-http | TCP UDP | - | - |
| 6842 | Netmo HTTP netmo-http | TCP UDP | - | - |
| 7627 | SOAP Service Port soap-http | TCP UDP | - | - |
| 7630 | HA Web Konsole hawk | TCP | - | - |
| 7677 | Sun App Server - HTTPS sun-user-https | TCP UDP | - | - |
| 8008 | HTTP Alternate http-alt | TCP UDP | - | - |
| 8084 | Snarl Network Protocol over HTTP websnp | TCP | - | - |
| 8088 | Radan HTTP radan-http | TCP UDP | - | - |
| 8243 | Synapse Non Blocking HTTPS synapse-nhttps | TCP UDP | - | - |
| 8280 | Synapse Non Blocking HTTP synapse-nhttp | TCP UDP | - | - |
| 8444 | PCsync HTTP pcsync-http | TCP UDP | - | - |
| 8688 | OpenRemote Controller HTTP/REST openremote-ctrl | TCP | - | - |
| 8765 | Ultraseek HTTP ultraseek-http | TCP UDP | - | - |
| 8800 | Sun Web Server Admin Service sunwebadmin | TCP UDP | - | - |
| 8893 | Desktop Data TCP 5: NewsEDGE/Web application ddi-tcp-6, ddi-udp-6 | TCP UDP | - | - |
| 8910 | manyone-http manyone-http | TCP UDP | - | - |
| 8989 | Sun Web Server SSL Admin Service sunwebadmins | TCP UDP | - | - |
| 8990 | webmail HTTP service http-wmap | TCP UDP | - | - |
| 8991 | webmail HTTPS service https-wmap | TCP UDP | - | - |
| 9023 | Secure Web Access - 1 swa-1 | TCP UDP | - | - |
| 9024 | Secure Web Access - 2 swa-2 | TCP UDP | - | - |
| 9025 | Secure Web Access - 3 swa-3 | TCP UDP | - | - |
| 9026 | Secure Web Access - 4 swa-4 | TCP UDP | - | - |
| 9201 | WAP session service wap-wsp-wtp | TCP UDP | - | - |
Securing web services
Other port categories
Remote access /tools/ports/category/remote-access File transfer & sharing /tools/ports/category/file-transfer Email /tools/ports/category/email Databases & caches /tools/ports/category/databases Directory & authentication /tools/ports/category/directory-auth Network services /tools/ports/category/network-services VPN, tunnels & proxies /tools/ports/category/vpn-tunnels Messaging & queues /tools/ports/category/messaging Voice & chat /tools/ports/category/voice-chat Media & streaming /tools/ports/category/media IoT & industrial (ICS) /tools/ports/category/iot-ics DevOps, cloud & containers /tools/ports/category/devops Monitoring & logging /tools/ports/category/monitoring Gaming /tools/ports/category/gaming Other services /tools/ports/category/other