Skip to content
whois.me.uk
Menu
Sign in

PORT-RISKY-OPEN

A database, cache or remote-desktop port is open to the internet

What it means

MySQL, PostgreSQL, Redis, Memcached, MongoDB, Elasticsearch, RDP and VNC are built to be reached from trusted networks. Exposed, they are brute-forced within hours and several have no authentication by default.

How to fix it

  1. 1Firewall the port to your own addresses or a VPN (CSF, ufw, security groups).
  2. 2Bind the service to localhost or a private interface if nothing remote needs it.
  3. 3Rotate any credentials the service used while exposed.

Re-check after the change

DNS changes can take up to the record's TTL to be seen; use Re-run on the result page to bypass our 10-minute cache.