tfw абуза от хецнера [CERT-Bund#2017011521001121] Dear Sir or Madam Redis is an in-memory database with a simple key-value data structure. memcached is a cache server for easily storing and retrieving data from memory. Redis and memcached are frequently used in conjunction with web applications. Cert-Bund has received information from a reliable source regarding Redis and memcached installations in Germany which are publicly accessible on the Internet without access protection. This enables attackers to potentially spy out information on the systems which are affected such as login credentials for web applications or other confidential content. We are sending you a list of systems affected in your net area. In addition to the IP address, the data includes a timestamp which the open systems have been identified by as well as the port and version number. We kindly request that you examine the situation and take measures to safeguard the systems or inform you customer accordingly. This email is digitally signed using PGP. For information regarding the key used, please see our website at: <https://www.cert-bund.de/reports-sig> This is an automatically generated message. Please do not reply to the sender. 24940 | 1.1.1.1 | 2015-01-09 02:15:49 +0100 | Memcached | 11211 | STAT version 1.4.4 Kind regards Team CERT-Bund Bundesamt für Sicherheit in der Informationstechnik (BSI) Referat C21 - CERT-Bund Godesberger Allee 185-189 D-53175 Bonn