Security alert for our Centos server

Security alert for our Centos server. Subject: [CERT-Bund#2015011528001621] Offene Redis-Datenbanken und Memcached-Server in AS24940 We would like to solve this issue and to investigate how this issue caused adn how we would check these security alerts Return-Path: Received: from [[login to view URL]] (helo=[login to view URL]) by [login to view URL] with esmtps (TLSv1:DHE-RSA-AES256-SHA:256) (Exim 4.74) (envelope-from ) id 1YBk5D-0001KA-Jh for Thu, 15 Jan 2015 14:03:31 +0100 Received: by [login to view URL] with ESMTP id DEDEB15F5BD for ; Thu, 15 Jan 2015 14:03:22 +0100 Date: Thu, 15 Jan 2015 13:03:22 +0000 From: CERT-Bund Reports Message-ID: Subject: [CERT-Bund#2015011528001621] Offene Redis-Datenbanken und Memcached-Server in AS24940 Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Delivery-date: Thu, 15 Jan 2015 14:03:31 +0100 X-Virus-Scanned: Clear (ClamAV 0.98.1/19930/Thu Jan 15 13:00:30 2015) [CERT-Bund#2015011528001621] Dear Sir or Madam Redis is an in-memory database with a simple key-value data structure. memcached is a cache server for easily storing and retrieving data from memory. Redis and memcached are frequently used in conjunction with web applications. Cert-Bund has received information from a reliable source regarding Redis and memcached installations in Germany which are publicly accessible on the Internet without access protection. This enables attackers to potentially spy out information on the systems which are affected such as login credentials for web applications or other confidential content. We are sending you a list of systems affected in your net area. In addition to the IP address, the data includes a timestamp which the open systems have been identified by as well as the port and version number. We kindly request that you examine the situation and take measures to safeguard the systems or inform you customer accordingly. This email is digitally signed using PGP. For information regarding the key used, please see our website at: This is an automatically generated message. Please do not reply to the sender. 24940 | [login to view URL] | 2015-01-09 03:30:21 +0100 | Memcached | 11211 | STAT version 1.4.4 Kind regards Team CERT-Bund Bundesamt fr Sicherheit in der Informationstechnik (BSI) Referat C21 - CERT-Bund Godesberger Allee 185-189 D-53175 Bonn