2,590 MongoDB, 1,469 Memcached and 387 CouchDB Instances Found Exposed Online

A ZoomEye scan collected on 22 September 2026 found 2,590 MongoDB instances on port 27017, 1,469 Memcached on 11211 and 387 CouchDB on 5984 reachable from the internet. Each service has a different default posture: MongoDB historically allowed unauthenticated connections, Memcached has no authentication by design, and CouchDB exposes an administrative HTTP API.

• ZoomEye found 2,590 MongoDB, 1,469 Memcached and 387 CouchDB instances exposed online
• MongoDB accepted unauthenticated connections before version 3.0
• Memcached has no authentication mechanism; isolation is the only control
• CouchDB on 5984 exposes an admin HTTP endpoint and the Fauxton console