# WHATPORT(8088)

## NAME

port 8088 — Hadoop YARN ResourceManager UI, Asterisk HTTP — The Hadoop YARN ResourceManager web UI, and Asterisk's built-in HTTP server.

Protocol: TCP  
IANA: radan-http

## DESCRIPTION

Hadoop's yarn.resourcemanager.webapp.address defaults to ${yarn.resourcemanager.hostname}:8088, so every stock YARN cluster serves its ResourceManager UI and REST API there. Asterisk's built-in mini HTTP server also defaults to bindport 8088, which is how ARI and the WebSocket transports are reached. IANA has 8088 registered as radan-http. On an internet scan a 8088 is overwhelmingly a Hadoop cluster: the ResourceManager REST API accepts application submissions, and with the default open ACLs anyone who can reach it can run code on the cluster, which is why the port is scanned constantly.

## EXPOSURE

**Do not expose.** An unauthenticated ResourceManager on a public IP is remote code execution by design; put Kerberos in front of it or keep it off the internet entirely.

## CHECK

```sh
curl -s --max-time 5 http://TARGET:8088/ws/v1/cluster/info
```

## SEE ALSO

- docs — [Apache Hadoop — yarn-default.xml (yarn.resourcemanager.webapp.address)](https://hadoop.apache.org/docs/stable/hadoop-yarn/hadoop-yarn-common/yarn-default.xml) (hadoop.apache.org)
- docs — [Asterisk — Built-in mini-HTTP server (bindport default 8088)](https://docs.asterisk.org/Configuration/Core-Configuration/Asterisk-Builtin-mini-HTTP-Server/) (docs.asterisk.org)
- iana — [IANA Service Name and Transport Protocol Port Number Registry — 8088](https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=8088) (iana.org)

---

HTML: <https://whatport.net/8088/> · JSON: <https://whatport.net/8088.json> · full dataset: <https://whatport.net/ports.json>