{
  "port": 14000,
  "protocol": "tcp",
  "service": "Hadoop HttpFS (in practice) / scotty-ft (IANA)",
  "oneLiner": "Registered to a SCOTTY file transfer nobody runs; in practice it is Hadoop HttpFS, a REST gateway into HDFS.",
  "whatItIs": "IANA holds 14000 as `scotty-ft`, \"SCOTTY High-Speed Filetransfer\", registered in 2007. What you actually meet on this port is Apache Hadoop's HttpFS: a Tomcat-hosted server that exposes the full WebHDFS REST API — read and write — so clients outside the cluster can reach HDFS through one host instead of talking to every DataNode. Its documented default is `http://httpfs-host:14000/webhdfs/v1/...`, and it is deployed as the file-access front door for clusters behind a firewall. On a Hadoop node, 14000 means HDFS is reachable over HTTP.",
  "exposure": {
    "verdict": "never",
    "note": "HttpFS is filesystem access to the cluster. Without Kerberos it accepts a `user.name` query parameter as identity, which is not authentication. Keep it internal and enable secure mode."
  },
  "checkCommand": "curl -s -o /dev/null -w '%{http_code}\\n' \"http://TARGET:14000/webhdfs/v1/?op=LISTSTATUS\"",
  "links": [
    {
      "title": "Apache Hadoop — HttpFS",
      "url": "https://hadoop.apache.org/docs/stable/hadoop-hdfs-httpfs/index.html",
      "kind": "official-docs"
    },
    {
      "title": "IANA port registry — 14000 (scotty-ft)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=14000",
      "kind": "iana"
    }
  ]
}