The Hadoop YARN ResourceManager web UI, and Asterisk's built-in HTTP server.
Hadoop's yarn.resourcemanager.webapp.address defaults to ${yarn.resourcemanager.hostname}:8088, so every stock YARN cluster serves its ResourceManager UI and REST API there. Asterisk's built-in mini HTTP server also defaults to bindport 8088, which is how ARI and the WebSocket transports are reached. IANA has 8088 registered as radan-http. On an internet scan a 8088 is overwhelmingly a Hadoop cluster: the ResourceManager REST API accepts application submissions, and with the default open ACLs anyone who can reach it can run code on the cluster, which is why the port is scanned constantly.
Do not expose
An unauthenticated ResourceManager on a public IP is remote code execution by design; put Kerberos in front of it or keep it off the internet entirely.
$ curl -s --max-time 5 http://TARGET:8088/ws/v1/cluster/infoSeen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.