{
  "port": 8010,
  "protocol": "tcp",
  "service": "Buildbot web UI (IANA: Reserved)",
  "oneLiner": "Reserved at IANA; in practice the Buildbot master's web interface.",
  "whatItIs": "IANA marks 8010 Reserved rather than assigning it, which leaves the number to convention. Buildbot's own tutorial has you open `http://localhost:8010/` after starting a master, so a CI host with 8010 open is very often a Buildbot. Nmap's database labels it `xmpp` for XMPP file transfer, another historical use. Both are guesses until you read the response.",
  "exposure": {
    "verdict": "careful",
    "note": "A Buildbot web UI shows build logs, worker names and configuration to anonymous visitors unless authentication is configured, and build output routinely contains internal hostnames and secrets."
  },
  "checkCommand": "curl -sI http://TARGET:8010/",
  "links": [
    {
      "title": "Buildbot — First Run tutorial (web status on port 8010)",
      "url": "https://docs.buildbot.net/current/tutorial/firstrun.html",
      "kind": "official-docs"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 8010 (Reserved)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=8010",
      "kind": "iana"
    }
  ]
}