[
  {
    "description": "File Transfer Protocol \u2014 data channel.",
    "name": "FTP (data)",
    "port": 20,
    "protocol": "TCP"
  },
  {
    "description": "File Transfer Protocol \u2014 command/control channel.",
    "name": "FTP (control)",
    "port": 21,
    "protocol": "TCP"
  },
  {
    "description": "Secure Shell \u2014 remote login, SCP/SFTP, and Git-over-SSH.",
    "name": "SSH",
    "port": 22,
    "protocol": "TCP"
  },
  {
    "description": "Unencrypted remote terminal access \u2014 legacy, avoid using in production.",
    "name": "Telnet",
    "port": 23,
    "protocol": "TCP"
  },
  {
    "description": "Simple Mail Transfer Protocol \u2014 server-to-server email relay.",
    "name": "SMTP",
    "port": 25,
    "protocol": "TCP"
  },
  {
    "description": "Domain Name System \u2014 UDP for typical queries, TCP for zone transfers and large responses.",
    "name": "DNS",
    "port": 53,
    "protocol": "TCP/UDP"
  },
  {
    "description": "Dynamic Host Configuration Protocol \u2014 server listens here.",
    "name": "DHCP (server)",
    "port": 67,
    "protocol": "UDP"
  },
  {
    "description": "Dynamic Host Configuration Protocol \u2014 client listens here.",
    "name": "DHCP (client)",
    "port": 68,
    "protocol": "UDP"
  },
  {
    "description": "Trivial File Transfer Protocol \u2014 simple, unauthenticated file transfer.",
    "name": "TFTP",
    "port": 69,
    "protocol": "UDP"
  },
  {
    "description": "Hypertext Transfer Protocol \u2014 unencrypted web traffic.",
    "name": "HTTP",
    "port": 80,
    "protocol": "TCP"
  },
  {
    "description": "Post Office Protocol v3 \u2014 retrieving email, unencrypted.",
    "name": "POP3",
    "port": 110,
    "protocol": "TCP"
  },
  {
    "description": "ONC RPC portmapper, used by NFS and related services.",
    "name": "RPCbind",
    "port": 111,
    "protocol": "TCP/UDP"
  },
  {
    "description": "Network News Transfer Protocol \u2014 Usenet.",
    "name": "NNTP",
    "port": 119,
    "protocol": "TCP"
  },
  {
    "description": "Network Time Protocol \u2014 clock synchronization.",
    "name": "NTP",
    "port": 123,
    "protocol": "UDP"
  },
  {
    "description": "Microsoft RPC endpoint mapper.",
    "name": "MS RPC",
    "port": 135,
    "protocol": "TCP"
  },
  {
    "description": "Windows/SMB name resolution.",
    "name": "NetBIOS Name Service",
    "port": 137,
    "protocol": "UDP"
  },
  {
    "description": "Windows/SMB datagram service.",
    "name": "NetBIOS Datagram",
    "port": 138,
    "protocol": "UDP"
  },
  {
    "description": "Windows/SMB session service (pre-SMB2).",
    "name": "NetBIOS Session",
    "port": 139,
    "protocol": "TCP"
  },
  {
    "description": "Internet Message Access Protocol \u2014 retrieving email, unencrypted.",
    "name": "IMAP",
    "port": 143,
    "protocol": "TCP"
  },
  {
    "description": "Simple Network Management Protocol \u2014 monitoring/querying devices.",
    "name": "SNMP",
    "port": 161,
    "protocol": "UDP"
  },
  {
    "description": "SNMP asynchronous notifications from managed devices.",
    "name": "SNMP Trap",
    "port": 162,
    "protocol": "UDP"
  },
  {
    "description": "Border Gateway Protocol \u2014 internet routing between autonomous systems.",
    "name": "BGP",
    "port": 179,
    "protocol": "TCP"
  },
  {
    "description": "Internet Relay Chat.",
    "name": "IRC",
    "port": 194,
    "protocol": "TCP"
  },
  {
    "description": "Lightweight Directory Access Protocol \u2014 unencrypted.",
    "name": "LDAP",
    "port": 389,
    "protocol": "TCP/UDP"
  },
  {
    "description": "HTTP over TLS/SSL \u2014 encrypted web traffic.",
    "name": "HTTPS",
    "port": 443,
    "protocol": "TCP"
  },
  {
    "description": "Server Message Block \u2014 Windows file/printer sharing (modern, direct over TCP).",
    "name": "SMB",
    "port": 445,
    "protocol": "TCP"
  },
  {
    "description": "SMTP over TLS (implicit) \u2014 legacy port, still widely used for submission.",
    "name": "SMTPS",
    "port": 465,
    "protocol": "TCP"
  },
  {
    "description": "Internet Key Exchange \u2014 IPsec VPN key negotiation.",
    "name": "IKE",
    "port": 500,
    "protocol": "UDP"
  },
  {
    "description": "System logging protocol.",
    "name": "Syslog",
    "port": 514,
    "protocol": "UDP"
  },
  {
    "description": "Line Printer Daemon \u2014 legacy printing protocol.",
    "name": "LPD",
    "port": 515,
    "protocol": "TCP"
  },
  {
    "description": "Kerberos-authenticated rlogin.",
    "name": "Kerberos login",
    "port": 543,
    "protocol": "TCP"
  },
  {
    "description": "Kerberos-authenticated remote shell.",
    "name": "Kerberos shell",
    "port": 544,
    "protocol": "TCP"
  },
  {
    "description": "DHCP for IPv6 \u2014 client.",
    "name": "DHCPv6 (client)",
    "port": 546,
    "protocol": "UDP"
  },
  {
    "description": "DHCP for IPv6 \u2014 server.",
    "name": "DHCPv6 (server)",
    "port": 547,
    "protocol": "UDP"
  },
  {
    "description": "Real Time Streaming Protocol \u2014 media stream control.",
    "name": "RTSP",
    "port": 554,
    "protocol": "TCP/UDP"
  },
  {
    "description": "Modern email submission from clients, typically with STARTTLS.",
    "name": "SMTP (submission)",
    "port": 587,
    "protocol": "TCP"
  },
  {
    "description": "Internet Printing Protocol \u2014 used by CUPS.",
    "name": "IPP",
    "port": 631,
    "protocol": "TCP/UDP"
  },
  {
    "description": "LDAP over TLS/SSL.",
    "name": "LDAPS",
    "port": 636,
    "protocol": "TCP"
  },
  {
    "description": "rsync daemon protocol (when not tunneled over SSH).",
    "name": "rsync",
    "port": 873,
    "protocol": "TCP"
  },
  {
    "description": "IMAP over TLS/SSL.",
    "name": "IMAPS",
    "port": 993,
    "protocol": "TCP"
  },
  {
    "description": "POP3 over TLS/SSL.",
    "name": "POP3S",
    "port": 995,
    "protocol": "TCP"
  },
  {
    "description": "SOCKS proxy protocol.",
    "name": "SOCKS Proxy",
    "port": 1080,
    "protocol": "TCP"
  },
  {
    "description": "OpenVPN's default port (also commonly run over TCP).",
    "name": "OpenVPN",
    "port": 1194,
    "protocol": "UDP"
  },
  {
    "description": "Microsoft SQL Server default port.",
    "name": "MS SQL Server",
    "port": 1433,
    "protocol": "TCP"
  },
  {
    "description": "Oracle Database default listener port.",
    "name": "Oracle DB",
    "port": 1521,
    "protocol": "TCP"
  },
  {
    "description": "Point-to-Point Tunneling Protocol \u2014 legacy, weak VPN protocol.",
    "name": "PPTP",
    "port": 1723,
    "protocol": "TCP"
  },
  {
    "description": "Lightweight IoT pub/sub messaging protocol, unencrypted.",
    "name": "MQTT",
    "port": 1883,
    "protocol": "TCP"
  },
  {
    "description": "Network File System.",
    "name": "NFS",
    "port": 2049,
    "protocol": "TCP/UDP"
  },
  {
    "description": "Apache ZooKeeper client port.",
    "name": "ZooKeeper",
    "port": 2181,
    "protocol": "TCP"
  },
  {
    "description": "Docker daemon API without TLS \u2014 never expose this publicly.",
    "name": "Docker (unencrypted)",
    "port": 2375,
    "protocol": "TCP"
  },
  {
    "description": "Docker daemon API with TLS.",
    "name": "Docker (TLS)",
    "port": 2376,
    "protocol": "TCP"
  },
  {
    "description": "Common default for Node.js dev servers, Grafana, and similar tools.",
    "name": "Dev server / Grafana",
    "port": 3000,
    "protocol": "TCP"
  },
  {
    "description": "Common default for the Squid caching proxy.",
    "name": "Squid Proxy",
    "port": 3128,
    "protocol": "TCP"
  },
  {
    "description": "MySQL and MariaDB default port.",
    "name": "MySQL / MariaDB",
    "port": 3306,
    "protocol": "TCP"
  },
  {
    "description": "Remote Desktop Protocol \u2014 Windows remote access.",
    "name": "RDP",
    "port": 3389,
    "protocol": "TCP"
  },
  {
    "description": "svnserve protocol.",
    "name": "Subversion (SVN)",
    "port": 3690,
    "protocol": "TCP"
  },
  {
    "description": "NATS messaging system client port.",
    "name": "NATS",
    "port": 4222,
    "protocol": "TCP"
  },
  {
    "description": "Erlang Port Mapper Daemon \u2014 used by RabbitMQ, CouchDB, etc.",
    "name": "EPMD",
    "port": 4369,
    "protocol": "TCP"
  },
  {
    "description": "Common default for Flask/Python dev servers and the Docker Registry API.",
    "name": "Dev server / Docker Registry",
    "port": 5000,
    "protocol": "TCP"
  },
  {
    "description": "Logstash's Beats input plugin (Filebeat, Metricbeat, etc.).",
    "name": "Logstash Beats",
    "port": 5044,
    "protocol": "TCP"
  },
  {
    "description": "Session Initiation Protocol \u2014 VoIP signaling, unencrypted.",
    "name": "SIP",
    "port": 5060,
    "protocol": "TCP/UDP"
  },
  {
    "description": "SIP over TLS.",
    "name": "SIPS",
    "port": 5061,
    "protocol": "TCP"
  },
  {
    "description": "Extensible Messaging and Presence Protocol \u2014 client connections.",
    "name": "XMPP",
    "port": 5222,
    "protocol": "TCP"
  },
  {
    "description": "PostgreSQL default port.",
    "name": "PostgreSQL",
    "port": 5432,
    "protocol": "TCP"
  },
  {
    "description": "Kibana web UI default port.",
    "name": "Kibana",
    "port": 5601,
    "protocol": "TCP"
  },
  {
    "description": "Advanced Message Queuing Protocol \u2014 used by RabbitMQ.",
    "name": "AMQP",
    "port": 5672,
    "protocol": "TCP"
  },
  {
    "description": "Virtual Network Computing \u2014 remote desktop.",
    "name": "VNC",
    "port": 5900,
    "protocol": "TCP"
  },
  {
    "description": "Apache CouchDB HTTP API.",
    "name": "CouchDB",
    "port": 5984,
    "protocol": "TCP"
  },
  {
    "description": "Redis default port, unauthenticated by default \u2014 protect it.",
    "name": "Redis",
    "port": 6379,
    "protocol": "TCP"
  },
  {
    "description": "Kubernetes API server default port.",
    "name": "Kubernetes API",
    "port": 6443,
    "protocol": "TCP"
  },
  {
    "description": "Alternate IRC port range (6660-6669).",
    "name": "IRC (alt)",
    "port": 6660,
    "protocol": "TCP"
  },
  {
    "description": "Apache Cassandra inter-node cluster communication.",
    "name": "Cassandra (inter-node)",
    "port": 7000,
    "protocol": "TCP"
  },
  {
    "description": "Apache Spark standalone cluster master.",
    "name": "Spark Master",
    "port": 7077,
    "protocol": "TCP"
  },
  {
    "description": "Common alternate HTTP port for local development servers.",
    "name": "Dev server (HTTP alt)",
    "port": 8000,
    "protocol": "TCP"
  },
  {
    "description": "Common alternate HTTP port, often used by proxies and app servers behind a reverse proxy.",
    "name": "HTTP Proxy / Alt",
    "port": 8080,
    "protocol": "TCP"
  },
  {
    "description": "InfluxDB HTTP API default port.",
    "name": "InfluxDB",
    "port": 8086,
    "protocol": "TCP"
  },
  {
    "description": "Common alternate HTTPS port, often for admin UIs or app servers.",
    "name": "HTTPS Alt",
    "port": 8443,
    "protocol": "TCP"
  },
  {
    "description": "HashiCorp Consul HTTP API / UI default port.",
    "name": "Consul",
    "port": 8500,
    "protocol": "TCP"
  },
  {
    "description": "Common default for Jupyter Notebook and various dev tools.",
    "name": "Jupyter / Dev server",
    "port": 8888,
    "protocol": "TCP"
  },
  {
    "description": "Common default for PHP-FPM (FastCGI), SonarQube, and MinIO.",
    "name": "PHP-FPM / SonarQube / MinIO",
    "port": 9000,
    "protocol": "TCP"
  },
  {
    "description": "Apache Cassandra native client protocol.",
    "name": "Cassandra (client)",
    "port": 9042,
    "protocol": "TCP"
  },
  {
    "description": "Prometheus web UI / API default port.",
    "name": "Prometheus",
    "port": 9090,
    "protocol": "TCP"
  },
  {
    "description": "Apache Kafka broker default port.",
    "name": "Kafka",
    "port": 9092,
    "protocol": "TCP"
  },
  {
    "description": "Elasticsearch HTTP API default port.",
    "name": "Elasticsearch",
    "port": 9200,
    "protocol": "TCP"
  },
  {
    "description": "Elasticsearch inter-node transport protocol.",
    "name": "Elasticsearch (transport)",
    "port": 9300,
    "protocol": "TCP"
  },
  {
    "description": "Git's own unencrypted protocol (git://) \u2014 prefer SSH or HTTPS instead.",
    "name": "Git",
    "port": 9418,
    "protocol": "TCP"
  },
  {
    "description": "Memcached default port, unauthenticated by default \u2014 protect it.",
    "name": "Memcached",
    "port": 11211,
    "protocol": "TCP/UDP"
  },
  {
    "description": "MongoDB default port.",
    "name": "MongoDB",
    "port": 27017,
    "protocol": "TCP"
  }
]