Active Directory / LDAP

:88:389:636:3268#windows#authentication
Open

AD Enumeration

:389:636:445:88#windows#reconnaissance
Open

AD Lateral Movement

:445:5985:5986:135#windows#lateral-movement
Open

AD Trust Attacks

:88:389:445:135#windows#ad
Open

ADCS

:80:443#windows#ad
Open

Adobe ColdFusion

:80:443:8500#web#java
Open

Amazon Redshift

:5439:8191#database#aws
Open

Android Debug Bridge (ADB)

:5555#android#debug
Open

Ansible

:22#ci-cd#automation
Open

Apache httpd

:80:443#web#server
Open

Apache NiFi

:8080:8443#web#data-integration
Open

Apache Tomcat

:8080:8005:8009#web#java
Open

Apple Filing Protocol (AFP)

:548:427#file-share#apple
Open

Asterisk AMI

:5038:5060:5061#voip#pbx
Open

BACnet (Building Automation)

:47808#ics#scada
Open

Bitcoin / Crypto Node

:8333:18333:8332:50001#cryptocurrency#blockchain
Open

BloodHound

:8080:7687#ad#windows
Open

Cacti

:80:443#monitoring#network
Open

Cassandra

:9042:9160:7000:7199#database#nosql
Open

Check Point FireWall-1

:256:55777:18190:443#firewall#security
Open

Cisco Catalyst SD-WAN

:443:22:830#cisco#sdwan
Open

Cisco Smart Install

:4786#cisco#network
Open

CouchDB

:5984:6984#database#nosql
Open

DACL / ACL Attacks

:445:135:389#windows#ad
Open

distcc

:3632#compiler#rce
Open

DNS / BIND

:53#dns#network
Open

Docker API

:2375:2376#container#docker
Open

Docker Registry

:5000:443#container#docker
Open

Drupal

:80:443#web#cms
Open

Echo

:7#network#testing
Open

Elasticsearch

:9200:9300#database#search
Open

EPP

:700#dns#domain
Open

Erlang Port Mapper (epmd)

:4369#erlang#distributed
Open

EtherNet/IP (CIP)

:44818:2222#ics#scada
Open

Exchange / OWA Attacks

:443:80:25:587#windows#mail
Open

fail2ban

:22:80#security#monitoring
Open

FastCGI / PHP-FPM

:9000#web#php
Open

Finger

:79#network#information-disclosure
Open

FreePBX

:80:443:5060#voip#pbx
Open

FTP

:21:20:990:989#file-share#ftp
Open

Gitea / Gogs

:3000:22#ci-cd#git
Open

GitLab

:80:443:22#ci-cd#git
Open

GlusterFS

:24007:49152-49156#file-share#distributed
Open

Gophish

:3333:443:80#web#phishing
Open

Grafana

:3000:443#monitoring#analytics
Open

Hadoop

:50070:8088:9870:9000#distributed#big-data
Open

HashiCorp Vault

:8200:8201#web#secrets
Open

Helm Tiller

:44134:8080#kubernetes#helm
Open

HP/Compaq Insight Manager

:2301:443#monitoring#hp
Open

HSQLDB

:9001#database#java
Open

IBM MQ

:1414:9443#messaging#queue
Open

Ident

:113#network#information-disclosure
Open

IIS

:80:443:8172#web#windows
Open

IMAP / POP3

:143:993:110:995#mail#imap
Open

incron

:22#linux#automation
Open

InfluxDB

:8086:8083:2003#database#time-series
Open

IPMI

:623:443#hardware#management
Open

IPsec / IKE VPN

:500:4500:1701#vpn#network
Open

IRC

:6667:6697:6660-6669#chat#communication
Open

iSCSI

:3260#file-share#storage
Open

Java RMI

:1099:1100-#java#rpc
Open

JBoss / GlassFish

:8080:8009:9990:443#web#java
Open

JDWP (Java Debug Wire Protocol)

:5005:8000#java#debug
Open

Jenkins

:8080:50000#ci-cd#automation
Open

Joomla

:80:443#web#cms
Open

Kerberos

:88:464:749#authentication#windows
Open

Kerberos Attacks

:88#windows#ad
Open

Kibana

:5601#monitoring#analytics
Open

Kubernetes

:6443:10250:10255:2379#container#orchestration
Open

LDAP

:389:636:3268:3269#directory#authentication
Open

Log4Shell (Log4j JNDI)

:80:443:389:1389#web#rce
Open

Mattermost

:8065:443#web#chat
Open

mDNS / DNS-SD

:5353#dns#discovery
Open

Memcached

:11211#cache#distributed
Open

Modbus (ICS/SCADA)

:502#ics#scada
Open

MongoDB

:27017:27018:28017#database#nosql
Open

MQTT

:1883:8883:9001#iot#messaging
Open

MSRPC / WMI

:135:593:445#windows#rpc
Open

MSSQL

:1433:1434#database#microsoft
Open

MSSQL in AD Environments

:1433:445:88#windows#ad
Open

MySQL / MariaDB

:3306#database#mysql
Open

NATS

:4222:6222:8222#messaging#distributed
Open

NDMP

:10000#file-share#backup
Open

NetExec (nxc)

:445:5985:389#windows#ad
Open

Network Printers (JetDirect)

:9100:515:631#hardware#printer
Open

NFS

:2049:111:20048#file-share#linux
Open

nginx

:80:443#web#server
Open

NSClient++

:12489#monitoring#windows
Open

NTLM Relay Attacks

:445:139:80:5985#windows#authentication
Open

NTP

:123#network#time
Open

OMI (OMIGOD)

:5986:1270:443#remote-access#rce
Open

OPC UA

:4840:443#ics#scada
Open

Openfire (XMPP)

:9090:5222:5269:443#web#xmpp
Open

Oracle TNS

:1521:1522-1529:5500#database#oracle
Open

osTicket

:80:443#web#ticketing
Open

PaperCut NG/MF

:80:443:9191#web#print
Open

Portmapper / rpcbind

:111#network#rpc
Open

Postfix / SMTP

:25:587:465#mail#smtp
Open

PostgreSQL

:5432#database#sql
Open

PowerView / SharpView

:389:445:88#windows#ad
Open

PPPP P2P Cameras

:48010#iot#camera
Open

PPTP VPN

:1723:47#vpn#network
Open

PRTG Network Monitor

:80:443#monitoring#network
Open

R-Services

:512:513:514#remote-access#unix
Open

RabbitMQ / AMQP

:5672:15672:25672#messaging#queue
Open

RDP

:3389#remote-access#windows
Open

Redis

:6379#cache#database
Open

Roundcube Webmail

:80:443#mail#webmail
Open

rsync

:873#file-share#sync
Open

RTSP (Streaming / Cameras)

:554:8554#streaming#camera
Open

Rusersd

:1993#network#information-disclosure
Open

SAP

:3200:3300:8000:443#enterprise#erp
Open

SCCM / MECM Attacks

:80:443:445:8530#windows#ad
Open

SIP / VoIP

:5060:5061#voip#telephony
Open

SMB

:445:139#file-share#windows
Open

SMTP

:25:587:465:2525#mail#smtp
Open

SNMP

:161:162#monitoring#network
Open

Splunk

:8000:8089:9997#monitoring#siem
Open

Squid Proxy

:3128:8080#proxy#cache
Open

SSH

:22#remote-access#linux
Open

Subversion (SVN)

:3690:443:8443#ci-cd#version-control
Open

TACACS+

:49#authentication#network
Open

Telnet

:23#remote-access#legacy
Open

TFTP

:69#file-share#network
Open

Umbraco CMS

:80:443#web#cms
Open

VNC

:5900:5901:5800#remote-access#gui
Open

Webmin

:10000:443#web#administration
Open

Werkzeug / Flask Debug Console

:5000:443#web#python
Open

WHOIS

:43:4321#dns#information-disclosure
Open

Windows AV / EDR Evasion

:443:80:445#windows#evasion
Open

WinRM

:5985:5986#remote-access#windows
Open

WordPress

:80:443#web#cms
Open

WS-Discovery

:3702#network#discovery
Open

X11

:6000:6001#remote-access#linux
Open