Usenet news transport and reading — NNTP in the clear, with NNTPS on 563.
NNTP, current spec RFC 3977, moves Usenet articles between news servers and serves readers with commands like GROUP, ARTICLE and POST over a line-oriented text session. INN and Diablo are the common server implementations, and commercial Usenet providers still run large farms of them. Port 119 is the cleartext port; TLS-wrapped NNTPS lives on 563 and is what providers push clients toward. Seeing 119 open usually means a real news server or a peering endpoint, not an accident.
Expose with care
Public read-only news service on 119 is fine by design, but any authenticated feed or posting account should be on 563 so credentials are not sent in the clear.
$ printf 'QUIT\r\n' | nc -v TARGET 119Seen this on your network? Beige Box scans your Wi-Fi and shows every open port on every device — and its Ports tool links straight back here.
Get Beige Box →also available as JSON · Markdown
Corrections or a missing port? Reply @rimrocksystems.