Tutorial
4 min read
How to Find Exposed MySQL Databases
Discover MySQL servers accessible from the internet without proper access controls.
1
Search for MySQL servers
MySQL runs on port 3306 by default.
2
Find by version
Look for specific MySQL versions, especially outdated ones.
lightbulb
MySQL 5.6 reached end of life in 2021.
3
Check for MariaDB
MariaDB is a MySQL fork that also runs on port 3306.
4
Find vulnerable instances
Search for MySQL with known CVEs.
shield Remediation & Hardening
- check_circle Bind MySQL to localhost (bind-address = 127.0.0.1)
- check_circle Use firewall rules to restrict port 3306
- check_circle Disable remote root login
- check_circle Use strong passwords and the validate_password plugin
- check_circle Enable TLS for client connections
- check_circle Keep MySQL updated to the latest stable version
Try It Now
Search for MySQL across 85M+ indexed hosts — free, no registration required.
search Search MySQLlink Related Resources
More How-To Guides
school
How to Find Exposed Redis Servers
school
How to Find Exposed MongoDB Databases
school
How to Find Exposed Elasticsearch Clusters
school
How to Find Exposed Jenkins Servers
school
How to Find Exposed Docker APIs
school
How to Find Exposed RDP Servers
school
How to Find Exposed Kubernetes Clusters