TCP 8530
Synopsis
- TCP port 8530 is the default HTTP port for Microsoft Windows Server Update Services (WSUS) hosted in IIS (“WSUS Administration” site).
- Real-world use: Windows clients (Windows Update Agent) in enterprises are pointed to http://wsus.company.local:8530 for update detection and downloads.
- Microsoft Endpoint Configuration Manager (SCCM/MECM) uses the WSUS Software Update Point on 8530 (HTTP) or 8531 (HTTPS) to synchronize and deliver updates.
- Upstream/downstream WSUS server synchronizations commonly occur over 8530 when using HTTP.
- Third-party patch management tools that integrate with WSUS—such as SolarWinds Patch Manager and Ivanti Patch for MEM/Configuration Manager—communicate with the WSUS service on 8530.
- Security: Because 8530 is HTTP, misconfigured WSUS over 8530 has been targeted for man-in-the-middle tampering of update metadata (e.g., the “WSUSpect” attack); Microsoft recommends using HTTPS on 8531.
Observed activity
Last 30 days
Detailed chart