Editing Networking Concepts (section)

=== Port Overview ===
Understanding ports and services is critical for network reconnaissance and service identification.

{| class="wikitable sortable"
! Port !! Protocol !! Common Service !! Description
|-
| 20, 21 || TCP || [[FTP]] || File Transfer Protocol – used for transferring files
|-
| 22 || TCP || [[SSH]] || Secure Shell – remote access to systems
|-
| 23 || TCP || [[Telnet]] || Unencrypted remote login service
|-
| 25 || TCP || [[SMTP]] || Simple Mail Transfer Protocol – sending emails
|-
| 53 || UDP/TCP || [[DNS]] || Domain Name System – resolves domain names to IP addresses
|-
| 67, 68 || UDP || [[DHCP]] || Assigns IP addresses automatically
|-
| 69 || UDP || [[TFTP]] || Trivial File Transfer Protocol – lightweight file transfers
|-
| 80 || TCP || [[HTTP]] || Standard web traffic
|-
| 110 || TCP || [[POP3]] || Email retrieval
|-
| 123 || UDP || [[NTP]] || Clock synchronization
|-
| 135 || TCP || [[RPC]] || Microsoft Remote Procedure Call
|-
| 137–139 || UDP/TCP || [[NetBIOS]] || Windows NetBIOS services (name resolution, session services)
|-
| 143 || TCP || [[IMAP]] || Internet Message Access Protocol – email
|-
| 161, 162 || UDP || [[SNMP]] || Device monitoring
|-
| 389 || TCP/UDP || [[LDAP]] || Lightweight Directory Access Protocol
|-
| 443 || TCP || [[HTTPS]] || Encrypted HTTP via TLS
|-
| 445 || TCP || [[SMB]] || Windows file/printer sharing
|-
| 465 || TCP || [[SMTPS]] || Secure SMTP (over SSL)
|-
| 514 || UDP || [[Syslog]] || Logging protocol for network devices
|-
| 587 || TCP || [[SMTP Submission]] || Mail submission with STARTTLS
|-
| 636 || TCP || [[LDAPS]] || Secure LDAP (over SSL)
|-
| 993 || TCP || [[IMAPS]] || Secure IMAP (over SSL)
|-
| 995 || TCP || [[POP3S]] || Secure POP3 (over SSL)
|-
| 1433 || TCP || [[MSSQL]] || Microsoft SQL Server
|-
| 1521 || TCP || [[Oracle DB]] || Oracle Database listener
|-
| 1723 || TCP || [[PPTP]] || Point-to-Point Tunneling Protocol (VPN)
|-
| 1883 || TCP || [[MQTT]] || Lightweight messaging protocol for IoT
|-
| 2049 || TCP/UDP || [[NFS]] || Network File System
|-
| 3128 || TCP || [[Squid Proxy]] || Default Squid proxy port
|-
| 3306 || TCP || [[MySQL]] || MySQL database service
|-
| 3389 || TCP || [[RDP]] || Windows remote access
|-
| 3690 || TCP || [[SVN]] || Subversion version control
|-
| 4444 || TCP || [[Metasploit]] || Common port for reverse shells and Metasploit handlers
|-
| 5060 || UDP/TCP || [[SIP]] || Session Initiation Protocol – VoIP signaling
|-
| 5900 || TCP || [[VNC]] || Virtual Network Computing remote desktop
|-
| 5985, 5986 || TCP || [[WinRM]] || Windows Remote Management – HTTP/HTTPS
|-
| 6379 || TCP || [[Redis]] || In-memory key-value data store
|-
| 8000 || TCP || [[HTTP-Alt]] || Alternate HTTP services
|-
| 8080 || TCP || [[HTTP-Alt]] || Proxy or alternate web services
|-
| 8443 || TCP || [[HTTPS-Alt]] || Alternate HTTPS with TLS
|-
| 9000 || TCP || [[PHP-FPM]] || FastCGI Process Manager for PHP
|-
| 9200 || TCP || [[Elasticsearch]] || REST API for Elasticsearch nodes
|-
| 11211 || TCP || [[Memcached]] || High-performance caching system
|-
| 27017 || TCP || [[MongoDB]] || NoSQL database used in many web apps
|}