TCP 8088
Synopsis
- Apache Hadoop YARN ResourceManager’s web UI and REST API listen on TCP 8088 by default (used in Apache Hadoop, Cloudera/HDP, and cloud Hadoop clusters like Amazon EMR and Azure HDInsight).
- Splunk Enterprise’s HTTP Event Collector (HEC) uses TCP 8088 by default for ingesting events over HTTP/HTTPS.
- Confluent ksqlDB (KSQL) exposes its REST API on TCP 8088 by default.
- Security note: Unsecured Hadoop YARN ResourceManager on 8088 has been widely abused by attackers to submit jobs (e.g., crypto-miners) via its REST API.
Observed activity
Last 30 days
Detailed chart