---
title: Tip: if you self-host LiteLLM, Ollama, Gotenberg or Gitea, check what's reachable from the internet; PoeLLM is mass-scanning ports 4000 and 3000 | ctxsec
url: https://ctxsec.com/items/tip-self-hosted-ai-services-off-internet
description: ""
status: "tip (based on Lumen PoeLLM research)"
published: 2026-10-18
---

> 

[← Tips & Guides](/tips) · [markdown](/items/tip-self-hosted-ai-services-off-internet.md)

tip (based on Lumen PoeLLM research)

2026-10-18

### Tip: if you self-host LiteLLM, Ollama, Gotenberg or Gitea, check what's reachable from the internet; PoeLLM is mass-scanning ports 4000 and 3000

From outside your network, scan your public IPs for 4000 (LiteLLM), 11434 (Ollama), 3000 (Gotenberg and Gitea's default) and any other ports your AI tools use. Put anything that answers behind a VPN, Tailscale or an authenticating reverse proxy. Gotenberg's own docs say not to expose it to the internet. Update LiteLLM past the CVE-2026-42271 fix, and treat GPU boxes as high-value targets because miners want them. Then check for unexpected outbound traffic to Kryptex mining pools or to ports 3778/5001/5002/9999. Indicators are in the PoeLLM hunt entry.

Sources: [Lumen Black Lotus Labs: PoeLLM](https://www.lumen.com/blog/en-us/canto-incognito-tracking-the-poellm-malware) · [Gotenberg installation docs](https://gotenberg.dev/docs/getting-started/installation)