Over 380000 open Kubernetes API servers

We have recently started scanning for accessible Kubernetes API instances that respond with a 200 OK HTTP response to our probes. Kubernetes is a popular open-source system for automating deployment, scaling, and management of containerized applications. We find over 3,80,000 Kubernetes API daily that allows for some form of access out of over 4,50,000 that we can identify.

How to Scan

We scan daily with an HTTP GET request using the /version URI. We scan all of the IPv4 space on ports 6443 and 443. We include only Kubernetes servers that respond with a 200 OK (with accompanying JSON response), and hence disclose version information in their response. We do not perform any intrusive checks to determine the level of access that can be obtained.

For Further Reference: