[{"description":"File Transfer Protocol \u2014 data channel.","name":"FTP (data)","port":20,"protocol":"TCP"},{"description":"File Transfer Protocol \u2014 command/control channel.","name":"FTP (control)","port":21,"protocol":"TCP"},{"description":"Secure Shell \u2014 remote login, SCP/SFTP, and Git-over-SSH.","name":"SSH","port":22,"protocol":"TCP"},{"description":"Unencrypted remote terminal access \u2014 legacy, avoid using in production.","name":"Telnet","port":23,"protocol":"TCP"},{"description":"Simple Mail Transfer Protocol \u2014 server-to-server email relay.","name":"SMTP","port":25,"protocol":"TCP"},{"description":"Domain Name System \u2014 UDP for typical queries, TCP for zone transfers and large responses.","name":"DNS","port":53,"protocol":"TCP/UDP"},{"description":"Dynamic Host Configuration Protocol \u2014 server listens here.","name":"DHCP (server)","port":67,"protocol":"UDP"},{"description":"Dynamic Host Configuration Protocol \u2014 client listens here.","name":"DHCP (client)","port":68,"protocol":"UDP"},{"description":"Trivial File Transfer Protocol \u2014 simple, unauthenticated file transfer.","name":"TFTP","port":69,"protocol":"UDP"},{"description":"Hypertext Transfer Protocol \u2014 unencrypted web traffic.","name":"HTTP","port":80,"protocol":"TCP"},{"description":"Post Office Protocol v3 \u2014 retrieving email, unencrypted.","name":"POP3","port":110,"protocol":"TCP"},{"description":"ONC RPC portmapper, used by NFS and related services.","name":"RPCbind","port":111,"protocol":"TCP/UDP"},{"description":"Network News Transfer Protocol \u2014 Usenet.","name":"NNTP","port":119,"protocol":"TCP"},{"description":"Network Time Protocol \u2014 clock synchronization.","name":"NTP","port":123,"protocol":"UDP"},{"description":"Microsoft RPC endpoint mapper.","name":"MS RPC","port":135,"protocol":"TCP"},{"description":"Windows/SMB name resolution.","name":"NetBIOS Name Service","port":137,"protocol":"UDP"},{"description":"Windows/SMB datagram service.","name":"NetBIOS Datagram","port":138,"protocol":"UDP"},{"description":"Windows/SMB session service (pre-SMB2).","name":"NetBIOS Session","port":139,"protocol":"TCP"},{"description":"Internet Message Access Protocol \u2014 retrieving email, unencrypted.","name":"IMAP","port":143,"protocol":"TCP"},{"description":"Simple Network Management Protocol \u2014 monitoring/querying devices.","name":"SNMP","port":161,"protocol":"UDP"},{"description":"SNMP asynchronous notifications from managed devices.","name":"SNMP Trap","port":162,"protocol":"UDP"},{"description":"Border Gateway Protocol \u2014 internet routing between autonomous systems.","name":"BGP","port":179,"protocol":"TCP"},{"description":"Internet Relay Chat.","name":"IRC","port":194,"protocol":"TCP"},{"description":"Lightweight Directory Access Protocol \u2014 unencrypted.","name":"LDAP","port":389,"protocol":"TCP/UDP"},{"description":"HTTP over TLS/SSL \u2014 encrypted web traffic.","name":"HTTPS","port":443,"protocol":"TCP"},{"description":"Server Message Block \u2014 Windows file/printer sharing (modern, direct over TCP).","name":"SMB","port":445,"protocol":"TCP"},{"description":"SMTP over TLS (implicit) \u2014 legacy port, still widely used for submission.","name":"SMTPS","port":465,"protocol":"TCP"},{"description":"Internet Key Exchange \u2014 IPsec VPN key negotiation.","name":"IKE","port":500,"protocol":"UDP"},{"description":"System logging protocol.","name":"Syslog","port":514,"protocol":"UDP"},{"description":"Line Printer Daemon \u2014 legacy printing protocol.","name":"LPD","port":515,"protocol":"TCP"},{"description":"Kerberos-authenticated rlogin.","name":"Kerberos login","port":543,"protocol":"TCP"},{"description":"Kerberos-authenticated remote shell.","name":"Kerberos shell","port":544,"protocol":"TCP"},{"description":"DHCP for IPv6 \u2014 client.","name":"DHCPv6 (client)","port":546,"protocol":"UDP"},{"description":"DHCP for IPv6 \u2014 server.","name":"DHCPv6 (server)","port":547,"protocol":"UDP"},{"description":"Real Time Streaming Protocol \u2014 media stream control.","name":"RTSP","port":554,"protocol":"TCP/UDP"},{"description":"Modern email submission from clients, typically with STARTTLS.","name":"SMTP (submission)","port":587,"protocol":"TCP"},{"description":"Internet Printing Protocol \u2014 used by CUPS.","name":"IPP","port":631,"protocol":"TCP/UDP"},{"description":"LDAP over TLS/SSL.","name":"LDAPS","port":636,"protocol":"TCP"},{"description":"rsync daemon protocol (when not tunneled over SSH).","name":"rsync","port":873,"protocol":"TCP"},{"description":"IMAP over TLS/SSL.","name":"IMAPS","port":993,"protocol":"TCP"},{"description":"POP3 over TLS/SSL.","name":"POP3S","port":995,"protocol":"TCP"},{"description":"SOCKS proxy protocol.","name":"SOCKS Proxy","port":1080,"protocol":"TCP"},{"description":"OpenVPN's default port (also commonly run over TCP).","name":"OpenVPN","port":1194,"protocol":"UDP"},{"description":"Microsoft SQL Server default port.","name":"MS SQL Server","port":1433,"protocol":"TCP"},{"description":"Oracle Database default listener port.","name":"Oracle DB","port":1521,"protocol":"TCP"},{"description":"Point-to-Point Tunneling Protocol \u2014 legacy, weak VPN protocol.","name":"PPTP","port":1723,"protocol":"TCP"},{"description":"Lightweight IoT pub/sub messaging protocol, unencrypted.","name":"MQTT","port":1883,"protocol":"TCP"},{"description":"Network File System.","name":"NFS","port":2049,"protocol":"TCP/UDP"},{"description":"Apache ZooKeeper client port.","name":"ZooKeeper","port":2181,"protocol":"TCP"},{"description":"Docker daemon API without TLS \u2014 never expose this publicly.","name":"Docker (unencrypted)","port":2375,"protocol":"TCP"},{"description":"Docker daemon API with TLS.","name":"Docker (TLS)","port":2376,"protocol":"TCP"},{"description":"Common default for Node.js dev servers, Grafana, and similar tools.","name":"Dev server / Grafana","port":3000,"protocol":"TCP"},{"description":"Common default for the Squid caching proxy.","name":"Squid Proxy","port":3128,"protocol":"TCP"},{"description":"MySQL and MariaDB default port.","name":"MySQL / MariaDB","port":3306,"protocol":"TCP"},{"description":"Remote Desktop Protocol \u2014 Windows remote access.","name":"RDP","port":3389,"protocol":"TCP"},{"description":"svnserve protocol.","name":"Subversion (SVN)","port":3690,"protocol":"TCP"},{"description":"NATS messaging system client port.","name":"NATS","port":4222,"protocol":"TCP"},{"description":"Erlang Port Mapper Daemon \u2014 used by RabbitMQ, CouchDB, etc.","name":"EPMD","port":4369,"protocol":"TCP"},{"description":"Common default for Flask/Python dev servers and the Docker Registry API.","name":"Dev server / Docker Registry","port":5000,"protocol":"TCP"},{"description":"Logstash's Beats input plugin (Filebeat, Metricbeat, etc.).","name":"Logstash Beats","port":5044,"protocol":"TCP"},{"description":"Session Initiation Protocol \u2014 VoIP signaling, unencrypted.","name":"SIP","port":5060,"protocol":"TCP/UDP"},{"description":"SIP over TLS.","name":"SIPS","port":5061,"protocol":"TCP"},{"description":"Extensible Messaging and Presence Protocol \u2014 client connections.","name":"XMPP","port":5222,"protocol":"TCP"},{"description":"PostgreSQL default port.","name":"PostgreSQL","port":5432,"protocol":"TCP"},{"description":"Kibana web UI default port.","name":"Kibana","port":5601,"protocol":"TCP"},{"description":"Advanced Message Queuing Protocol \u2014 used by RabbitMQ.","name":"AMQP","port":5672,"protocol":"TCP"},{"description":"Virtual Network Computing \u2014 remote desktop.","name":"VNC","port":5900,"protocol":"TCP"},{"description":"Apache CouchDB HTTP API.","name":"CouchDB","port":5984,"protocol":"TCP"},{"description":"Redis default port, unauthenticated by default \u2014 protect it.","name":"Redis","port":6379,"protocol":"TCP"},{"description":"Kubernetes API server default port.","name":"Kubernetes API","port":6443,"protocol":"TCP"},{"description":"Alternate IRC port range (6660-6669).","name":"IRC (alt)","port":6660,"protocol":"TCP"},{"description":"Apache Cassandra inter-node cluster communication.","name":"Cassandra (inter-node)","port":7000,"protocol":"TCP"},{"description":"Apache Spark standalone cluster master.","name":"Spark Master","port":7077,"protocol":"TCP"},{"description":"Common alternate HTTP port for local development servers.","name":"Dev server (HTTP alt)","port":8000,"protocol":"TCP"},{"description":"Common alternate HTTP port, often used by proxies and app servers behind a reverse proxy.","name":"HTTP Proxy / Alt","port":8080,"protocol":"TCP"},{"description":"InfluxDB HTTP API default port.","name":"InfluxDB","port":8086,"protocol":"TCP"},{"description":"Common alternate HTTPS port, often for admin UIs or app servers.","name":"HTTPS Alt","port":8443,"protocol":"TCP"},{"description":"HashiCorp Consul HTTP API / UI default port.","name":"Consul","port":8500,"protocol":"TCP"},{"description":"Common default for Jupyter Notebook and various dev tools.","name":"Jupyter / Dev server","port":8888,"protocol":"TCP"},{"description":"Common default for PHP-FPM (FastCGI), SonarQube, and MinIO.","name":"PHP-FPM / SonarQube / MinIO","port":9000,"protocol":"TCP"},{"description":"Apache Cassandra native client protocol.","name":"Cassandra (client)","port":9042,"protocol":"TCP"},{"description":"Prometheus web UI / API default port.","name":"Prometheus","port":9090,"protocol":"TCP"},{"description":"Apache Kafka broker default port.","name":"Kafka","port":9092,"protocol":"TCP"},{"description":"Elasticsearch HTTP API default port.","name":"Elasticsearch","port":9200,"protocol":"TCP"},{"description":"Elasticsearch inter-node transport protocol.","name":"Elasticsearch (transport)","port":9300,"protocol":"TCP"},{"description":"Git's own unencrypted protocol (git://) \u2014 prefer SSH or HTTPS instead.","name":"Git","port":9418,"protocol":"TCP"},{"description":"Memcached default port, unauthenticated by default \u2014 protect it.","name":"Memcached","port":11211,"protocol":"TCP/UDP"},{"description":"MongoDB default port.","name":"MongoDB","port":27017,"protocol":"TCP"}]