{
  "port": 8180,
  "protocol": "tcp",
  "service": "Tomcat / HTTP alternate",
  "oneLiner": "Unassigned at IANA; a conventional second Tomcat port when 8080 is taken.",
  "whatItIs": "IANA lists the whole 8163–8180 block as Unassigned, so 8180 is unregistered. It is a common offset choice for a Java servlet container that cannot have 8080 — a second Tomcat instance, or one packaged to sit behind Apache httpd. It is also the port the widely used Metasploitable 2 training image leaves open, which is why 8180 turns up in so many teaching materials and scan write-ups.",
  "exposure": {
    "verdict": "careful",
    "note": "Application servers on alternate ports commonly still have the manager or admin webapp deployed; check /manager and /host-manager before exposing it."
  },
  "checkCommand": "curl -sI --max-time 5 http://TARGET:8180/",
  "links": [
    {
      "title": "Rapid7 — Metasploitable 2 exploitability guide (8180/tcp open)",
      "url": "https://docs.rapid7.com/metasploit/metasploitable-2-exploitability-guide/",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 8180",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=8180",
      "kind": "iana"
    }
  ],
  "ianaName": "Unassigned"
}