Open MongoDB Report

This report identifies hosts that have the MongoDB NoSQL database running on port 27017/TCP and accessible on the Internet.

While authentication is available for MongoDB, in many instances this authentication is not enabled.

Our initial probe tests to see if MongoDB is accessible on the Internet and collecting the system information that it discloses.
A secondary probe is then performed to determine if a list of databases can be obtained. If an error message is generated in response to this probe, the “visible_databases” field will say “none visible”, but if no error message is generated (indicating that no authentication is in use), the “visible_databases” field will list the first five databases that were returned.

For information on how to configure your MongoDB instance securely, please consult the MongoDB Security Checklist.

Fields

timestamp

Time that the IP was probed in UTC+0
ip

The IP address of the device in question
protocol

Protocol that the MongoDB response came on (always TCP)
port

Port that the MongoDB response came from (usually 27017/TCP)
hostname

Reverse DNS name of the device in question
tag

Will always be mongodb
version

MongoDB version number
asn

ASN of where the device in question resides
geo

Country where the device in question resides
region

State / Province / Administrative region where the device in question resides
city

City in which the device in question resides
naics

North American Industry Classification System Code
sic

Standard Industrial Classification System Code
gitversion

Commit identifier that identifies the state of the code used to build MongoDB
sysinfo

Information about the host running the MongoDB instance
opensslversion

Version of OpenSSL in use (if any)
allocator

Memory Allocator in use
javascriptengine

The JavaScript engine in use by MongoDB
bits

Processor Architecture (32 or 64 bits)
maxbsonobjectsize

Maximum BSON Document Size
ok

This will usually be "1", indicating that the command executed properly
visible_databases

A list of the first five databases running on the instance of MongoDB — if authentication is in use, or for some other reason the list of databases could not be obtained, this will be listed as "none visible"