What it is
Ports where databases (MySQL, PostgreSQL, MongoDB, Oracle …) accept direct connections.
Why it is risky
A DB port open to the internet invites credential brute-force and known-CVE exploitation that can exfiltrate an entire dataset — the shortest path to a breach or ransom.
What to do
Allow access only from app servers / internal networks (private ranges or VPN); close it on public interfaces.
Is it listening on your server?
Linux
ss -ltnp 'sport = :2379'Track these versions on your own servers
InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.