InfraGuard

Port 139 (NetBIOS session) — exposure risk

Exposing this to the internet is an immediate, severe risk — a direct path to data theft or remote takeover.

CriticalFile share

What it is

File-sharing ports: SMB, NFS, FTP, rsync.

Why it is risky

Internet exposure is a conduit for ransomware spread and data leakage; SMB is a perennial worm target (EternalBlue-class).

What to do

Restrict to internal networks / VPN, apply least-privilege shares and patches, and replace FTP with SFTP.

Is it listening on your server?

Linuxss -ltnp 'sport = :139'

Track these versions on your own servers

InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.

Weekly exploited-vulnerability digest

The KEV additions that matter for self-hosted servers, once a week. No other mail.