What it checks
Whether the common ports of databases and data stores (SQL Server, Oracle, MySQL, PostgreSQL, CouchDB, Redis, Cassandra, Elasticsearch, Memcached and MongoDB) accept a connection from the internet.
A pass means: No common database ports accept connections from the internet.
Possible findings
Database port reachable from the internet
Severity: HighConfidence: Medium confidenceKind: Security issue
What we found
A port normally used by a database accepted a connection from the internet.
Why it matters
Databases are a frequent target of automated attacks. Even with a password, exposing one invites brute-force attempts and exploitation of any unpatched flaw.
How to fix it
Close the port to the internet with a firewall or security group, and reach the database over a private network, VPN or bastion instead. If it must be public, restrict it to known source addresses.