Skip to main content
protocols.pageprotocols.page
8880

Port 8880 – HTTP Alternate / cPanel

TCP

Port 8880 is used for cPanel webmail (HTTP redirect to HTTPS), Plesk alternate web, and various application servers as an alternate HTTP port. IANA registered as cddbp-alt. In cPanel environments, port 8880 redirects to the encrypted webmail interface on port 2096.

Port Number

8880

Protocol

TCP

Service

HTTP Alternate / cPanel Webmail

Range

IANA Registered (1024–49151)

Description

Port 8880 serves multiple purposes depending on the hosting platform. In cPanel environments, it handles the webmail HTTP-to-HTTPS redirect (2096 is the actual secure webmail port). Plesk uses 8880 as an alternate control panel port. Some Java application servers and development tools also bind to 8880. As a generic alternate HTTP port, 8880 has no special security properties. Apply the same controls as any HTTP service – redirect to HTTPS equivalents where possible and restrict access based on the service's sensitivity.

Security risks

  • 1Port 8880 in cPanel environments exposes webmail redirect logic – HTTP response splitting attacks possible if redirect URL validation is weak
  • 2Plesk on port 8880 exposes the control panel login page – brute force attacks against hosting admin credentials if rate limiting is not configured
  • 3CVE-2020-15867: Plesk Obsidian authentication bypass via port 8880 allowed unauthorized access to hosting control functions
  • 4Unencrypted HTTP on port 8880 transmits credentials in plaintext before redirect to HTTPS occurs – session cookies visible to network observers
  • 5Java application servers binding to 8880 (WebSphere, custom apps) may expose admin interfaces intended for internal use only
  • 6Information disclosure via HTTP headers on port 8880 reveals hosting platform type, version, and configuration details

Firewall guidance

If using cPanel: port 8880 only serves as an HTTP-to-HTTPS redirect for webmail. Consider blocking it and directing users to port 2096 (HTTPS) directly. If using Plesk: prefer port 8443 (HTTPS) and block 8880 unless HTTP redirect is required for legacy clients. For all uses: ensure HSTS headers are set on the HTTPS target to prevent downgrade attacks.

Diagnosis commands

Check what service responds on port 8880 – look for redirect headers (Location: https://...) or direct content

shell
curl -I http://server:8880/

Identify which process owns port 8880 (cpsrvd for cPanel, sw-cp-server for Plesk, java for app servers)

shell
ss -tlnp | grep 8880

Check cPanel redirect configuration for port 8880 behavior

shell
/usr/local/cpanel/bin/whmapi1 get_tweaksetting key=alwaysredirecthandler

Verify Plesk HTTP daemon status and port 8880 binding configuration

shell
plesk bin httpd --status | grep 8880

Service version detection on port 8880 – identifies whether cPanel, Plesk, or application server

shell
nmap -sV -p 8880 target

Usage examples

Port 8880 – HTTP Alternate / cPanel
shell
curl -I http://server:8880/ (typically redirects to HTTPS webmail)
Plesk: https://server:8880/
netstat -tlnp | grep 8880

Common services on this port

cPanel webmail HTTP redirect (→ port 2096 HTTPS)Plesk control panel alternate portIBM WebSphere Application Server (alternate HTTP)Custom Java application serverscddbp-alt (IANA registered – CD Database Protocol alternate)

Related ports

2082

cPanel (HTTP)

2083

cPanel (HTTPS)

2095

cPanel Webmail (HTTP)

2096

cPanel Webmail (HTTPS)

8443

Plesk HTTPS

80

HTTP standard

History

Port 8880 was registered with IANA as cddbp-alt (CD Database Protocol alternate) but gained widespread use through hosting control panels in the early 2000s. cPanel adopted port 8880 for webmail HTTP-to-HTTPS redirects as part of their port allocation scheme (2082-2096 for panel functions, 8880 for webmail redirect). Plesk later used 8880 as an alternate HTTP port for its control panel. IBM WebSphere also adopted 8880 as its default alternate HTTP transport. The port's role is predominantly as a redirect/alternate – it rarely serves primary content, making it low-priority for monitoring but still requiring firewall consideration.

FAQ

Can I safely block port 8880 on a cPanel server?

Yes, in most cases. Port 8880 only provides an HTTP redirect to the HTTPS webmail on port 2096. Blocking it means users who type http://mail.domain.com:8880 get a connection refused instead of a redirect. Direct them to https://mail.domain.com:2096 instead. The only risk is breaking bookmarks or legacy email client configurations that reference port 8880.

What is the difference between port 8880 and 8443 in Plesk?

Port 8880 is Plesk's HTTP (unencrypted) alternate port, while port 8443 is the primary HTTPS port for the Plesk control panel. In modern Plesk installations, 8880 simply redirects to 8443. You should always access Plesk via 8443 (HTTPS) and can safely firewall 8880 if all users are configured for direct HTTPS access.

Why does my security scan flag port 8880?

Scanners flag port 8880 because: 1) it serves HTTP (unencrypted) which allows credential interception before redirect, 2) it reveals the hosting platform via response headers (X-Powered-By, Server headers), 3) the redirect itself can be exploited for open redirect attacks if input validation is weak. Fix by blocking the port or ensuring strict redirect validation and HSTS on the target.