ZoomEye finds 1.89 million exposed MongoDB services

A ZoomEye query for service="mongodb" returned 1,890,595 matches, showing how widely the database protocol is reachable on the internet. The scan cannot tell whether authentication is enabled, so the author urges organizations to audit their own instances and turn on auth.

• ZoomEye returned 1,890,595 matches for service="mongodb"
• The scan shows availability, not whether authentication is enabled
• Recommended: enable auth, bind to internal interfaces, use TLS
• Audit your own IP ranges with a scoped ZoomEye query