When you create a Lightsail/EC2 instance, some network ports are open by default using AWS cloud firewall.

Source: Linux Today – How To Set Up a Basic Iptables Firewall on Amazon Linux AMI