WHATPORT(8088) whatport.net WHATPORT(8088)
8088

Hadoop YARN ResourceManager UI, Asterisk HTTP

The Hadoop YARN ResourceManager web UI, and Asterisk's built-in HTTP server.

TCP IANA: radan-http

Description

Hadoop's yarn.resourcemanager.webapp.address defaults to ${yarn.resourcemanager.hostname}:8088, so every stock YARN cluster serves its ResourceManager UI and REST API there. Asterisk's built-in mini HTTP server also defaults to bindport 8088, which is how ARI and the WebSocket transports are reached. IANA has 8088 registered as radan-http. On an internet scan a 8088 is overwhelmingly a Hadoop cluster: the ResourceManager REST API accepts application submissions, and with the default open ACLs anyone who can reach it can run code on the cluster, which is why the port is scanned constantly.

Exposed to the internet?

Do not expose

An unauthenticated ResourceManager on a public IP is remote code execution by design; put Kerberos in front of it or keep it off the internet entirely.

Check it yourself

$ curl -s --max-time 5 http://TARGET:8088/ws/v1/cluster/info

See also

Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.

Get Beige Box →

also available as JSON · Markdown

Corrections or a missing port? Reply @rimrocksystems.