07 December 2023

Over 3.6 million MySQL servers found exposed on the Internet

Over 3.6 million MySQL servers are publicly exposed on the Internet and responding to queries, making them an attractive target to hackers and extortionists. Of these accessible MySQL servers, 2.3 million are connected over IPv4, with 1.3 million devices over IPv6. While it is common for web services and applications to connect to remote databases, these instances should be locked down so only authorized devices can connect to them. 3.6 million exposed MySQL serversIn scans performed last week by cybersecurity research group The Shadowserver Foundation, analysts found 3.6 million exposed MySQL servers using the default port, TCP port 3306.
The country with the most accessible MySQL servers is the United States, surpassing 1.2 million.