{
  "port": 8080,
  "protocol": "tcp",
  "service": "HTTP alternate",
  "oneLiner": "The registered HTTP alternate port — what web software uses when it cannot have 80.",
  "whatItIs": "IANA registers 8080 as http-alt, \"HTTP Alternate (see port 80)\". It is what unprivileged processes bind because ports below 1024 need root: Tomcat, Jenkins, Spring Boot apps, proxies, and thousands of container images. On a scan it is almost always a real HTTP service sitting behind (or waiting for) a reverse proxy.",
  "exposure": {
    "verdict": "careful",
    "note": "The port is legitimate, but what is behind it is often an admin console or an unauthenticated app that assumed a proxy would guard it."
  },
  "checkCommand": "curl -sI http://127.0.0.1:8080/",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 8080 (http-alt)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=8080",
      "kind": "iana"
    },
    {
      "title": "Jenkins — Installing Jenkins on Linux (listens on 8080)",
      "url": "https://www.jenkins.io/doc/book/installing/linux/",
      "kind": "official-docs"
    },
    {
      "title": "Apache Tomcat 11 — HTTP Connector configuration",
      "url": "https://tomcat.apache.org/tomcat-11.0-doc/config/http.html",
      "kind": "official-docs"
    }
  ]
}