TCP 8111
Synopsis
- JetBrains TeamCity Server uses TCP port 8111 by default for its web UI and REST API (e.g., accessing http://your-teamcity-host:8111), and TeamCity build agents connect back to the server on this port.
- Real-world deployments of self-hosted CI/CD servers often expose 8111 externally or behind reverse proxies for developer access.
- Many internet scans (e.g., Shodan/Censys) fingerprint TeamCity by detecting HTTP banners on port 8111.
- Associated with hacking/exploitation:
- Port 8111 is frequently targeted because of TeamCity vulnerabilities (e.g., CVE-2023-42793 and CVE-2024-27198/27199) that enabled authentication bypass and remote code execution, leading attackers to scan for exposed TeamCity instances on 8111.
Observed activity
Last 30 days
Detailed chart