An XMPP server's HTTP side — BOSH and WebSocket endpoints for browser-based chat clients.
Registered with IANA in 2009 as xmpp-bosh, this is the HTTP port for Bidirectional-streams Over Synchronous HTTP (XEP-0124), which tunnels an XMPP session through long-polling HTTP requests for clients that cannot hold a raw TCP stream. Prosody uses 5280 as its default plain-HTTP port, serving /http-bind for BOSH and /xmpp-websocket, with 5281 as the HTTPS counterpart. On a scan it responds like a small web server, which is exactly what it is.
Expose with care
Plain HTTP by default — session credentials and messages are cleartext unless you front it with TLS on 5281 or a reverse proxy.
$ curl -sS -o /dev/null -w '%{http_code}\n' http://TARGET:5280/http-bind/Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.