WHATPORT(8180) whatport.net WHATPORT(8180)
8180

Tomcat / HTTP alternate

Unassigned at IANA; a conventional second Tomcat port when 8080 is taken.

TCP IANA: Unassigned

Description

IANA lists the whole 8163–8180 block as Unassigned, so 8180 is unregistered. It is a common offset choice for a Java servlet container that cannot have 8080 — a second Tomcat instance, or one packaged to sit behind Apache httpd. It is also the port the widely used Metasploitable 2 training image leaves open, which is why 8180 turns up in so many teaching materials and scan write-ups.

Exposed to the internet?

Expose with care

Application servers on alternate ports commonly still have the manager or admin webapp deployed; check /manager and /host-manager before exposing it.

Check it yourself

$ curl -sI --max-time 5 http://TARGET:8180/

See also

Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.

Get Beige Box →

also available as JSON · Markdown

Corrections or a missing port? Reply @rimrocksystems.