Databases & cachesTCP 3306 Encrypted
Port 3306: MySQL
MySQL / MariaDB
Default port for MySQL and MariaDB.
How attackers abuse it
- Internet-exposed databases brute forced or dumped.
- Empty or default root passwords.
How to defend it
- Bind to internal interfaces only.
- Strong credentials, TLS, least privilege per application.
Exam tip
Exposed database ports are among the most common findings in internet-wide scans.