Scan finds 3.2M exposed Redis and 1.9M MongoDB services online

ZoomEye queries from October 20, 2026 returned 3.2 million Redis and 1.9 million MongoDB services reachable from the internet. These are not new vulnerabilities but persistent misconfigurations, such as databases bound to all interfaces without authentication. The scan also found 1.09 million LDAP and 16.5 million RDP services.

• ZoomEye: 3,207,842 Redis and 1,923,240 MongoDB services exposed online
• 1.09M LDAP services answer queries without authentication
• An open unauthenticated database risks data theft, tampering and code execution
• No patch fixes it: only bind addresses and firewall policy do