Well, in general it's always advisable to only expose the relevant ports (i.e. 8080, 8008 and 8081).
Also, since the Trains Fileserver is not limited (i.e. no credentials are required to upload/download), we recommend only opening access from your (or your company's/office) IP, not from any IP.