{
  "port": 808,
  "protocol": "tcp",
  "service": "alternate HTTP / CCProxy / net.tcp",
  "oneLiner": "Unregistered but busy: CCProxy's HTTP proxy, .NET net.tcp services, and assorted alternate web ports.",
  "whatItIs": "IANA has no assignment for 808, but it is one of the more commonly open ports in this range. Nmap names it \"ccproxy-http\" after CCProxy, a Windows HTTP/FTP/Gopher proxy that uses it by default, and an open 808 on a Windows host is often exactly that. It is also the default port for Microsoft's net.tcp:// WCF endpoints and the Net.TCP Port Sharing Service, and a popular hand-picked alternate HTTP port for internal web apps. Which of these you have is decided entirely by fingerprinting, since the three speak completely different protocols.",
  "exposure": {
    "verdict": "never",
    "note": "An open proxy on 808 will be found and abused for relayed traffic within days; WCF endpoints are internal RPC. Neither belongs on a public IP unauthenticated."
  },
  "checkCommand": "curl -sv -x TARGET:808 -o /dev/null http://example.com/",
  "links": [
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml",
      "kind": "iana"
    },
    {
      "title": "Nmap service frequency database (nmap-services)",
      "url": "https://github.com/nmap/nmap/blob/master/nmap-services",
      "kind": "github"
    },
    {
      "title": "Microsoft — Net.TCP Port Sharing (WCF)",
      "url": "https://learn.microsoft.com/en-us/dotnet/framework/wcf/feature-details/net-tcp-port-sharing",
      "kind": "official-docs"
    }
  ]
}