It is Oracle XML DB HTTP Server; disable it as follows:
sqlplus '/ as sysdba'EXEC DBMS_XDB.SETHTTPPORT(0);commit;
You might have to restart Oracle XE (not just the listener).