{
  "port": 7999,
  "protocol": "tcp",
  "service": "Bitbucket SSH (IANA: irdmi2)",
  "oneLiner": "Git over SSH for Bitbucket Data Center — the port in every `ssh://git@host:7999/` clone URL.",
  "whatItIs": "IANA registers 7999 as irdmi2, a name almost nobody uses. What actually listens here is Bitbucket's embedded SSH server: Atlassian's own Helm chart and Docker instructions default `bitbucket.ports.ssh` to 7999, which is why Bitbucket clone URLs carry the port explicitly while the web UI sits on 7990. It is a normal SSH server implemented in Java, speaking only the Git commands, not a shell.",
  "exposure": {
    "verdict": "fine",
    "note": "Public Git-over-SSH is the intended deployment: it is public-key only, and the SSH server exposes Git upload/receive-pack rather than a login shell. Pair it with the usual SSH hygiene and keep the 7990 web port behind whatever fronts it."
  },
  "checkCommand": "ssh -p 7999 -o BatchMode=yes git@TARGET",
  "links": [
    {
      "title": "Atlassian data-center-helm-charts — Bitbucket chart (bitbucket.ports.ssh defaults to 7999)",
      "url": "https://github.com/atlassian/data-center-helm-charts/blob/main/src/main/charts/bitbucket/README.md",
      "kind": "github"
    },
    {
      "title": "IANA Service Name and Transport Protocol Port Number Registry — 7999",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=7999",
      "kind": "iana"
    }
  ],
  "ianaName": "irdmi2"
}
