{
  "port": 48080,
  "protocol": "tcp",
  "service": "Unassigned (commonly an alternate HTTP listener)",
  "oneLiner": "Unregistered, but the digits spell \"8080 with a 4 in front\" — usually someone's second HTTP port.",
  "whatItIs": "There is no IANA assignment for 48080 and no service name in Nmap's database, which sees it open on about 0.04% of hosts. The number is a hand-picked variant of 8080, so an open port here is most often an extra HTTP listener — a second app server, a proxy, or a management UI moved off the obvious port. Port obscurity is not access control: a version scan finds it in seconds.",
  "exposure": {
    "verdict": "careful",
    "note": "Judge it as the HTTP service it usually is — cleartext with an admin UI behind it should not face the internet; a plain reverse-proxied app on TLS elsewhere is a different matter."
  },
  "checkCommand": "curl -sS -I -m 5 http://TARGET:48080/",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 48080",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=48080",
      "kind": "iana"
    },
    {
      "title": "nmap/nmap — nmap-services (port frequency database)",
      "url": "https://github.com/nmap/nmap/blob/master/nmap-services",
      "kind": "github"
    }
  ]
}
