TCP-connect sweep across 24 common ports (web, mail, DB, remote admin). Per-port timeout 1.5s, total wall ≤8s.
