TCP 6066
Synopsis
- Apache Spark (Standalone mode) uses TCP port 6066 for its REST submission server, which accepts job submissions via spark-submit and other clients.
- This is the default spark.master.rest.port in Spark’s standalone Master; many on-prem clusters and packaged distributions (e.g., Cloudera/HDP-era Spark standalone setups or common Docker images for Spark) expose 6066 for this purpose.
- Real-world operations often have 7077 (Spark master RPC) and 6066 (REST) open together for cluster management and job submission.
- Security note: attackers frequently scan for exposed Spark 6066 endpoints and, if authentication/network controls are weak, submit jobs to run cryptocurrency miners or arbitrary code on the cluster.
Observed activity
Last 30 days
Detailed chart