[
 {
  "port": 20,
  "proto": "TCP",
  "desc": "FTP (data transfer)"
 },
 {
  "port": 21,
  "proto": "TCP",
  "desc": "FTP (control)"
 },
 {
  "port": 22,
  "proto": "TCP",
  "desc": "SSH — secure shell, SFTP and port forwarding"
 },
 {
  "port": 23,
  "proto": "TCP",
  "desc": "Telnet (unencrypted remote login, legacy)"
 },
 {
  "port": 25,
  "proto": "TCP",
  "desc": "SMTP — mail transfer between servers"
 },
 {
  "port": 53,
  "proto": "TCP/UDP",
  "desc": "DNS — domain name resolution"
 },
 {
  "port": 67,
  "proto": "UDP",
  "desc": "DHCP server"
 },
 {
  "port": 68,
  "proto": "UDP",
  "desc": "DHCP client"
 },
 {
  "port": 69,
  "proto": "UDP",
  "desc": "TFTP — trivial file transfer"
 },
 {
  "port": 80,
  "proto": "TCP",
  "desc": "HTTP — unencrypted web traffic"
 },
 {
  "port": 110,
  "proto": "TCP",
  "desc": "POP3 — mail retrieval"
 },
 {
  "port": 119,
  "proto": "TCP",
  "desc": "NNTP — Usenet news"
 },
 {
  "port": 123,
  "proto": "UDP",
  "desc": "NTP — network time synchronization"
 },
 {
  "port": 135,
  "proto": "TCP",
  "desc": "Microsoft RPC endpoint mapper"
 },
 {
  "port": 137,
  "proto": "UDP",
  "desc": "NetBIOS name service"
 },
 {
  "port": 139,
  "proto": "TCP",
  "desc": "NetBIOS session service"
 },
 {
  "port": 143,
  "proto": "TCP",
  "desc": "IMAP — mail access"
 },
 {
  "port": 161,
  "proto": "UDP",
  "desc": "SNMP — network monitoring"
 },
 {
  "port": 162,
  "proto": "UDP",
  "desc": "SNMP traps"
 },
 {
  "port": 179,
  "proto": "TCP",
  "desc": "BGP — border gateway protocol routing"
 },
 {
  "port": 194,
  "proto": "TCP",
  "desc": "IRC — internet relay chat"
 },
 {
  "port": 389,
  "proto": "TCP/UDP",
  "desc": "LDAP — directory services"
 },
 {
  "port": 443,
  "proto": "TCP/UDP",
  "desc": "HTTPS — encrypted web traffic (TLS; UDP for HTTP/3 QUIC)"
 },
 {
  "port": 445,
  "proto": "TCP",
  "desc": "SMB — Windows file sharing"
 },
 {
  "port": 465,
  "proto": "TCP",
  "desc": "SMTPS — mail submission over implicit TLS"
 },
 {
  "port": 500,
  "proto": "UDP",
  "desc": "IKE — IPsec key exchange"
 },
 {
  "port": 514,
  "proto": "UDP",
  "desc": "Syslog — system logging"
 },
 {
  "port": 515,
  "proto": "TCP",
  "desc": "LPD — line printer daemon"
 },
 {
  "port": 587,
  "proto": "TCP",
  "desc": "SMTP mail submission (STARTTLS)"
 },
 {
  "port": 631,
  "proto": "TCP/UDP",
  "desc": "IPP — internet printing protocol (CUPS)"
 },
 {
  "port": 636,
  "proto": "TCP",
  "desc": "LDAPS — LDAP over TLS"
 },
 {
  "port": 853,
  "proto": "TCP",
  "desc": "DNS over TLS"
 },
 {
  "port": 873,
  "proto": "TCP",
  "desc": "rsync file synchronization"
 },
 {
  "port": 902,
  "proto": "TCP",
  "desc": "VMware ESXi management"
 },
 {
  "port": 989,
  "proto": "TCP",
  "desc": "FTPS data"
 },
 {
  "port": 990,
  "proto": "TCP",
  "desc": "FTPS control"
 },
 {
  "port": 993,
  "proto": "TCP",
  "desc": "IMAPS — IMAP over TLS"
 },
 {
  "port": 995,
  "proto": "TCP",
  "desc": "POP3S — POP3 over TLS"
 },
 {
  "port": 1080,
  "proto": "TCP",
  "desc": "SOCKS proxy"
 },
 {
  "port": 1194,
  "proto": "TCP/UDP",
  "desc": "OpenVPN"
 },
 {
  "port": 1433,
  "proto": "TCP",
  "desc": "Microsoft SQL Server"
 },
 {
  "port": 1521,
  "proto": "TCP",
  "desc": "Oracle database listener"
 },
 {
  "port": 1701,
  "proto": "UDP",
  "desc": "L2TP VPN tunneling"
 },
 {
  "port": 1723,
  "proto": "TCP",
  "desc": "PPTP VPN (legacy)"
 },
 {
  "port": 1812,
  "proto": "UDP",
  "desc": "RADIUS authentication"
 },
 {
  "port": 1813,
  "proto": "UDP",
  "desc": "RADIUS accounting"
 },
 {
  "port": 1883,
  "proto": "TCP",
  "desc": "MQTT — IoT messaging"
 },
 {
  "port": 2049,
  "proto": "TCP/UDP",
  "desc": "NFS — network file system"
 },
 {
  "port": 2082,
  "proto": "TCP",
  "desc": "cPanel"
 },
 {
  "port": 2083,
  "proto": "TCP",
  "desc": "cPanel over TLS"
 },
 {
  "port": 2181,
  "proto": "TCP",
  "desc": "Apache ZooKeeper"
 },
 {
  "port": 2375,
  "proto": "TCP",
  "desc": "Docker daemon (unencrypted)"
 },
 {
  "port": 2376,
  "proto": "TCP",
  "desc": "Docker daemon (TLS)"
 },
 {
  "port": 3000,
  "proto": "TCP",
  "desc": "Common dev server (Node.js, Rails, Grafana)"
 },
 {
  "port": 3128,
  "proto": "TCP",
  "desc": "Squid proxy"
 },
 {
  "port": 3306,
  "proto": "TCP",
  "desc": "MySQL / MariaDB database"
 },
 {
  "port": 3389,
  "proto": "TCP",
  "desc": "RDP — Windows remote desktop"
 },
 {
  "port": 4369,
  "proto": "TCP",
  "desc": "Erlang port mapper (RabbitMQ)"
 },
 {
  "port": 5060,
  "proto": "TCP/UDP",
  "desc": "SIP — VoIP signaling"
 },
 {
  "port": 5061,
  "proto": "TCP",
  "desc": "SIP over TLS"
 },
 {
  "port": 5222,
  "proto": "TCP",
  "desc": "XMPP — instant messaging client"
 },
 {
  "port": 5353,
  "proto": "UDP",
  "desc": "mDNS — multicast DNS (Bonjour/Avahi)"
 },
 {
  "port": 5432,
  "proto": "TCP",
  "desc": "PostgreSQL database"
 },
 {
  "port": 5671,
  "proto": "TCP",
  "desc": "AMQP over TLS (RabbitMQ)"
 },
 {
  "port": 5672,
  "proto": "TCP",
  "desc": "AMQP (RabbitMQ)"
 },
 {
  "port": 5900,
  "proto": "TCP",
  "desc": "VNC remote desktop"
 },
 {
  "port": 6379,
  "proto": "TCP",
  "desc": "Redis key-value store"
 },
 {
  "port": 6443,
  "proto": "TCP",
  "desc": "Kubernetes API server"
 },
 {
  "port": 6667,
  "proto": "TCP",
  "desc": "IRC (classic)"
 },
 {
  "port": 8000,
  "proto": "TCP",
  "desc": "Common dev/alt HTTP port"
 },
 {
  "port": 8080,
  "proto": "TCP",
  "desc": "HTTP alternate — proxies and app servers"
 },
 {
  "port": 8443,
  "proto": "TCP",
  "desc": "HTTPS alternate"
 },
 {
  "port": 8883,
  "proto": "TCP",
  "desc": "MQTT over TLS"
 },
 {
  "port": 9000,
  "proto": "TCP",
  "desc": "PHP-FPM / SonarQube / MinIO"
 },
 {
  "port": 9090,
  "proto": "TCP",
  "desc": "Prometheus monitoring"
 },
 {
  "port": 9092,
  "proto": "TCP",
  "desc": "Apache Kafka"
 },
 {
  "port": 9200,
  "proto": "TCP",
  "desc": "Elasticsearch REST API"
 },
 {
  "port": 9418,
  "proto": "TCP",
  "desc": "Git protocol"
 },
 {
  "port": 11211,
  "proto": "TCP",
  "desc": "Memcached"
 },
 {
  "port": 27017,
  "proto": "TCP",
  "desc": "MongoDB database"
 }
]