Half of the 6 Million Internet-Facing FTP Servers Lack Encryption

"Approximately 6 million internet-accessible systems are using FTP today, and almost half of them do not use encryption, exposing enterprises and end users to avoidable risks."

"The number of hosts running an internet-facing FTP service has dropped by 40% since 2024, but the protocol still accounts for 2.72% of all internet-visible systems."

"2.45 million of the observed FTP services show no evidence of encryption, raising concerns about the transmission of files and credentials in cleartext."

"Most of the FTP-visible hosts are in the US, with significant numbers also in China, Germany, Hong Kong, Japan, and France."

FTP remains widely used despite its security vulnerabilities, with 6 million systems still operational. A significant portion, 2.45 million, shows no evidence of encryption, raising concerns about data safety. The number of FTP hosts has decreased by 40% since 2024, yet it still represents 2.72% of all internet-visible systems. The majority of these hosts are located in the US, followed by China and Germany. Pure-FTPd is the most common server software, highlighting the ongoing reliance on outdated protocols.

Read at SecurityWeek