{
  "port": 30000,
  "protocol": "tcp",
  "service": "ndmps (IANA) / Kubernetes NodePort",
  "oneLiner": "Registered to a data-management protocol nobody deploys; in practice it is the first Kubernetes NodePort.",
  "whatItIs": "IANA registers 30000/tcp as ndmps, \"Secure Network Data Management Protocol\", with an assignee but no reference document and no widely deployed implementation. The realistic reason you find 30000 open is that it is the bottom of Kubernetes' default NodePort range, 30000–32767, set by the kube-apiserver flag --service-node-port-range, so the first Service of type NodePort on a cluster often lands exactly here. Application dev servers and self-hosted tools also pick 30000 as a round number well clear of the privileged range. Fingerprint what answers rather than trusting the registry name.",
  "exposure": {
    "verdict": "careful",
    "note": "If this is a Kubernetes NodePort, every node in the cluster answers on it and the Service behind it may not expect internet traffic; bind it behind an ingress or a firewall rather than exposing node IPs."
  },
  "checkCommand": "nc -vz -w 3 TARGET 30000",
  "links": [
    {
      "title": "IANA port registry — 30000 (ndmps)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=30000",
      "kind": "iana"
    },
    {
      "title": "Kubernetes documentation — Service type: NodePort",
      "url": "https://kubernetes.io/docs/concepts/services-networking/service/",
      "kind": "official-docs"
    }
  ]
}