{
  "port": 9080,
  "protocol": "tcp",
  "service": "Open Liberty / WebSphere Liberty HTTP",
  "oneLiner": "The default HTTP port for Open Liberty and WebSphere Liberty Java application servers.",
  "whatItIs": "Open Liberty and IBM WebSphere Liberty ship with HTTP on 9080 and HTTPS on 9443, so a Java shop's application servers, and the sample apps in their tutorials, all answer here. Anything else that needs a second HTTP-alt port also reaches for 9080 because it reads as \"80, but higher\". IANA registers the port as glrpc (Groove GLRPC), a Microsoft Groove component you will not encounter now.",
  "exposure": {
    "verdict": "careful",
    "note": "Legitimate as an application listener, but it is plain HTTP — put TLS termination and access control in front of it rather than publishing 9080 directly."
  },
  "checkCommand": "curl -sI http://TARGET:9080/",
  "links": [
    {
      "title": "Open Liberty — default port numbers (HTTP 9080, HTTPS 9443)",
      "url": "https://openliberty.io/docs/latest/reference/default-port-numbers.html",
      "kind": "official-docs"
    },
    {
      "title": "OpenLiberty/open-liberty on GitHub",
      "url": "https://github.com/OpenLiberty/open-liberty",
      "kind": "github"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 9080",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=9080",
      "kind": "iana"
    }
  ],
  "ianaName": "glrpc"
}