Port 2049 (NFS)

Network File System shares.

Transport: TCP/UDP
Internet exposure: Never expose

Should not be reachable from the internet.

Security notes

Exports shared too widely (e.g. to *) let anyone mount them.
With no_root_squash, a remote root user can become root on the share.

When it shows up in your logs

NFS mounts from unexpected hosts are worth checking.

111
445 SMB