На свежеустановленной ubuntu 16.04 обнаружил такое
tcp6 0 0 :::8000 :::* LISTEN 1992/webfsd
aptitude search ~i~nweb
i A webfs - lightweight HTTP server for static content
признак A указывает, что оно встало по какой-то зависимости.
apt show webfs
Package: webfs
Version: 1.21+ds1-11
Priority: optional
Section: universe/web
Origin: Ubuntu
Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
Original-Maintainer: Mats Erik Andersson <mats.andersson@gisladisker.se>
Bugs: https://bugs.launchpad.net/ubuntu/+filebug
Installed-Size: 187 kB
Provides: httpd
Depends: libc6 (>= 2.15), libgnutls30 (>= 3.4.2), debconf (>= 0.5) | debconf-2.0, ucf, lsb-base (>= 3.2-14)
Homepage: http://linux.bytesex.org/misc/webfs.html
Download-Size: 63.4 kB
APT-Manual-Installed: no
APT-Sources: http://ru.archive.ubuntu.com/ubuntu xenial/universe amd64 Packages
Description: lightweight HTTP server for static content
This package provides a simple web server for mostly static content,
with limited CGI support (GET requests only).
.
Example uses include giving HTTP access to the contents of an FTP
site, or exporting some files by quickly starting a web server
without any need to edit configuration files first.
Чот не догоняю, система самая базовая, откуда там прилетел веб сервер по зависимостям.