Protect
Attack surface
Unsafe network services
Hosts exposing high-risk services to the internet: remote-admin ports (RDP, VNC, Telnet, SMB), directly-reachable databases (MySQL, PostgreSQL, MSSQL, Redis, MongoDB, Elasticsearch), or a Shodan-tagged exposed database. Derived from the host-exposure sweep.