Active Probing & Surface
high Severity
Free Check
Common Open Ports Scan (DB/Admin)
Scans public IP addresses for exposed non-web ports including SSH (22), MySQL (3306), Redis (6379), MongoDB (27017), and RDP (3389).
Why It Matters
Database and cache ports should never be exposed to the public internet; they are vulnerable to brute force and zero-authentication exploits.
How We Check This
We check whether common administrative and database ports are actively accepting connections on target host IPs.
How to Fix & Implement
Copy-paste configuration blocks tailored for your web server or edge proxy.
nginx snippet
# Configure cloud firewall / security group (AWS SG, UFW) to allow only ports 80 and 443 publicly
Frequently Asked Questions
Why would Redis be accessible publicly?
Default Redis configurations bound to 0.0.0.0 without authentication have been responsible for widespread server takeovers.