InfraGuard

Port 123 (NTP) — exposure risk

A standard public service — usually fine to expose, but keep it patched and on TLS.

StandardTime (NTP)

What it is

Time synchronization (123/udp).

Why it is risky

Open NTP can be abused (e.g. monlist) for amplification DDoS.

What to do

Stay patched, disable monlist, and restrict externally if not needed.

Is it listening on your server?

Linuxss -ltnp 'sport = :123'

Track these versions on your own servers

InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.

Weekly exploited-vulnerability digest

The KEV additions that matter for self-hosted servers, once a week. No other mail.