Port reference
Port 2082 (TCP) – cPanel
Default non-TLS web port for cPanel, the hosting control panel used to manage websites, email, and files.
Quick facts
- Transport
- tcp
- Category
- Registered
- Risk level
- High
Frequently targeted — restrict exposure and harden it.
Default state
Open on shared-hosting and VPS servers running cPanel; serves plain HTTP, with the TLS variant on 2083.
What is port 2082 used for?
Port 2082 is the default non-TLS web port for cPanel, the popular hosting
control panel customers use to manage a single account — websites, databases,
email, DNS, files, and backups. You connect to it in a browser, typically at
http://yourserver:2082. It's common on shared-hosting and VPS servers. The
encrypted equivalent runs on 2083, while the WHM admin panel uses 2086/2087.
When would you open it?
You'd only have 2082 open on a server that runs cPanel, and in practice you should point users to the secure port 2083 instead. There's no reason to open or forward the plain-HTTP 2082 separately on your own machine.
Is it safe to open?
Port 2082 sends logins over plain HTTP and the panel is heavily scanned, so use the TLS port 2083, restrict access by IP or VPN, and enable MFA and cPHulk protection. See the security notes below.
How to check if this port is open
ss -tulpn | grep :2082
nmap -p 2082 <target>netstat -ano | findstr :2082
Test-NetConnection <host> -Port 2082lsof -i :2082
nmap -p 2082 <target>How to open this port on your router
To reach this service from outside your network, forward the port on your router:
- Open your router's admin page (usually http://192.168.1.1 or http://192.168.0.1) and sign in.
- Find the "Port Forwarding" section — it may be called NAT, Virtual Server, or Applications & Gaming.
- Add a rule forwarding external port 2082 to your device's local IP, internal port 2082, protocol TCP.
- Save and reboot the router if prompted, then test the port from outside your network.
Only forward ports you understand — it exposes that device to the public internet. For remote admin access, a VPN is safer than forwarding the port.
Allow this port through the firewall
sudo ufw allow 2082/tcpsudo firewall-cmd --permanent --add-port=2082/tcp
sudo firewall-cmd --reloadsudo iptables -A INPUT -p tcp --dport 2082 -j ACCEPTNew-NetFirewallRule -DisplayName "Allow 2082" -Direction Inbound -Protocol TCP -LocalPort 2082 -Action AllowSecurity & risks
Common attacks
- Credential brute force and password spraying against the login
- Cleartext interception of credentials (2082 is non-TLS)
- Exploitation of repeated cPanel/WHM vulnerabilities (XSS, auth, RCE)
- Mass automated scanning of hosting servers for exposed panels
Hardening
- Prefer the TLS port 2083 and redirect/disable plain 2082
- Restrict access to allowlisted IPs / VPN rather than the open internet
- Enforce strong unique passwords, MFA, and cPHulk brute-force protection
- Keep cPanel & WHM on a current, patched release
- Monitor logins and disable unused features and demo accounts
How to block this port
sudo ufw deny 2082/tcpsudo firewall-cmd --permanent --remove-port=2082/tcp
sudo firewall-cmd --reloadsudo iptables -A INPUT -p tcp --dport 2082 -j DROPNew-NetFirewallRule -DisplayName "Block 2082" -Direction Inbound -Protocol TCP -LocalPort 2082 -Action Blocknmap snippet
nmap -p2082 --script http-title,http-headers,http-auth <target>Replace <target> with the host or range you're authorized to scan.
Related ports
Frequently asked questions
- What is port 2082 used for?
- It is the default non-TLS web port for cPanel, the control panel users log into to manage their hosting account — websites, databases, email, and files. The encrypted equivalent is port 2083.
- Is it safe to use cPanel on port 2082?
- Not as plain HTTP. Port 2082 transmits credentials in cleartext and the login is heavily brute-forced. Use the TLS port 2083 instead, restrict access by IP/VPN, enable MFA and cPHulk, and keep cPanel patched.