{
  "port": 8021,
  "protocol": "tcp",
  "service": "FreeSWITCH event socket; FTP proxy",
  "oneLiner": "FreeSWITCH's Event Socket — a text console that controls the whole telephony switch.",
  "whatItIs": "IANA registers 8021 to Intuit as intu-ec-client, but the port's real fame is FreeSWITCH: the stock `event_socket.conf.xml` sets `listen-port` to 8021, and mod_event_socket is how dialplan applications, click-to-call scripts and monitoring tools drive the switch. Nmap also records 8021 as a common FTP proxy port, a much older convention that pairs it with 21. On a VoIP host, assume FreeSWITCH.",
  "exposure": {
    "verdict": "never",
    "note": "The Event Socket is full administrative control of the PBX — originate calls, read channel variables, reload configuration — behind a single password. It is meant for loopback or a tightly ACLed management network."
  },
  "checkCommand": "nc -vz -w 3 TARGET 8021",
  "links": [
    {
      "title": "signalwire/freeswitch — conf/vanilla/autoload_configs/event_socket.conf.xml (listen-port 8021)",
      "url": "https://github.com/signalwire/freeswitch/blob/master/conf/vanilla/autoload_configs/event_socket.conf.xml",
      "kind": "github"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 8021 (intu-ec-client)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=8021",
      "kind": "iana"
    }
  ],
  "ianaName": "intu-ec-client"
}