Default port: 8089
PORT STATE SERVICE VERSION
8089/tcp open http Splunkd httpd
In the following page you can find an explanation how this service can be abused to escalate privileges and obtain persistence:
{% page-ref page="../linux-unix/privilege-escalation/splunk-lpe-and-persistence.md" %}
Splunk build