“The interesting part though, is that – by default – MongoDB does not require any authentication whatsoever. If someone has the (great) idea of exposing it on the internet without minimal security optimization, anybody can access its content. A quick search on Shodan48, a global internet search engine, gives an idea of just how many (unrestricted) MongoDBs there are in the wild”