消息来自：https://medium.com/%40SergiuSe ... 4af48
因为这个网址不存在，所以搬过来大家一起看看，请自查自家服务器是不是快乐的在裸奔，嘿，要管管了啊。
试试：
https://www.zoomeye.org/search ... Dhost 
https://www.shodan.io/search?query=kibana​ 
 

Over 5,000 Kibana instances exposed on the internet

I’m not a big fan of writing articles so I’ll keep it short… I was using Shodan.io recently for research purposes and while searching for different devices I came across 5,591 Kibana instances exposed over the internet. A significant number of those instances didn’t use any authentication mechanisms and several had +100 million log events recorded.

The query syntax that I used was the following: kibana port:”5601".


 
Risk: Kibana is deployed alone or together with Elasticsearch and Logstash (the ELK Stack) for log management purposes and it gained notoriety in the last couple of years as an open source alternative to more expensive commercial solutions. Log management solutions usually contain sensitive info and should not be exposed over the internet… (people who are familiar with information security know what I’m talking about).

Solution: For all the entities affected please refer to the following link and enable authentication on your Kibana implementations: https://www.elastic.co/guide/e ... .html


 
去年的大规模勒索事件，大家应该还记得吧，什么，ES你也裸奔着，你。。。
 

1. ELK 与 Raspberry Pi 的另类极客玩法  http://t.cn/R9MLk7E
只要你有一个树莓派， 就可以轻松打造一个跑在“云”上的便携式 ELK 集群。

2. Elasticsearch 安全 Search Guard 落地实践  http://t.cn/R9ZeqNp
Search Guard 是一款 Elasticsearch 比较通用且方便的认证插件，这篇文章主要讲解了如何快速接入 Search Guard 插件。

3. Docker Logging with the ELK Stack
Part 1  http://t.cn/R9MUnJS 
Part 2  http://t.cn/R9M4UNz
关于 Docker 日志的采集应该是 ELK 应用最广泛的一面，具体的一些细节可以参考上述文档。该文档共有两部分。

编辑：江水

归档：https://elasticsearch.cn/article/205 
订阅：https://tinyletter.com/elastic-daily