TCP 8200
Synopsis
- HashiCorp Vault uses TCP port 8200 by default for its HTTP API and web UI (common in both dev mode and production, with 8201 used for cluster traffic).
- Attackers frequently scan the internet for Vault on 8200 and exploit misconfigurations or unpatched instances to steal secrets, so exposing it publicly is risky.
- ReadyMedia (MiniDLNA) listens on TCP 8200 for its DLNA/UPnP-AV HTTP service and status page, serving media to TVs and other clients.
- This is widely deployed on NAS and home routers, e.g., OpenWrt’s minidlna package, TrueNAS/FreeNAS community plugins, and Linux distributions running ReadyMedia.
Observed activity
Last 30 days
Detailed chart