TCP 8848
Synopsis
- Alibaba Nacos uses TCP port 8848 by default for its HTTP/OpenAPI endpoints and web console (/nacos).
- In real deployments, Spring Cloud Alibaba, Dubbo, and Seata commonly connect to a Nacos server on 8848 for service discovery and configuration; the official Docker/Helm setups also expose 8848.
- Many public Nacos instances are accessible on 8848, making it a recognizable port in microservice environments.
- Security note: 8848 has been widely targeted due to exposed Nacos servers, default/weak credentials, and past authentication-bypass flaws, which attackers have abused to alter configurations or achieve code execution when instances are misconfigured.
Observed activity
Last 30 days
Detailed chart