What it is
Automatic IP assignment (67·68).
Why it is risky
It rarely needs to be internet-facing; exposure often signals a network misconfiguration.
What to do
Keep it on internal segments and block it on public interfaces.
Is it listening on your server?
Linux
ss -ltnp 'sport = :67'Track these versions on your own servers
InfraGuard collects installed software versions from every server and flags the ones with known vulnerabilities. Self-hosted — nothing leaves your network.