Internet-Security raven logo internet-security.com

TCP 6080

ProtocolTCP
Port6080
Labels

Synopsis

  • Port 6080/TCP is commonly used by noVNC via WebSockify to serve an HTML5 VNC console over WebSockets.
  • OpenStack uses it by default for nova-novncproxy (e.g., Horizon’s “Console” button connects through TCP 6080).
  • Numerous Docker images expose a browser desktop on 6080 using noVNC, such as novnc/noVNC and dorowu/ubuntu-desktop-lxde-vnc (accessed at http://host:6080).
  • QEMU/KVM deployments often run WebSockify on 6080 to bridge a VM’s VNC server to a web client (noVNC).
  • Security note: attackers scan for exposed 6080 noVNC endpoints; weak or missing authentication and mismanaged console tokens (seen in some OpenStack/noVNC setups) can allow unauthorized remote desktop or VM console access.

Observed activity

Last 30 days Detailed chart

More information