OX Security finds overseas and abandoned infrastructure among MCP servers

OX Security said in a press release that its analysis of 15,465 published Model Context Protocol servers found connections to infrastructure outside enterprise security controls. The research covered 5,095 unique hostnames, with 796 resolving to infrastructure outside the United States, including 19 in China and 18 in Russia.

The company found that 0.45% of hostnames routed through consumer internet providers or personal tunneling tools. Another 2.3% no longer resolved, and six abandoned domains were available for registration for $4 to $12 per year.

In a security test, a malicious MCP server used prompt injection to expand approved file access to an unauthorized .env file. Opus 4.6 and 4.7 detected and blocked the attack, while the test used Claude Code with Haiku 3.5.