Open network ports are the easiest entry points to your network. Sometimes, there might be unwanted services running on ports that are externally visible from the internet. In case these services are vulnerable, your network would be at constant threat of an attack as every day the entire internet is being mass scanned for vulnerable services on open ports.