Which ports are open/closed in the default security group?

By default all inbound traffic originating from the public internet is blocked. To allow inbound traffic add an additional ingress rule to the "default" security group or create your own security group.