There are at least 35,000 publicly accessible and insecure MongoDB databases on the Internet. Combined they expose 684.8 terabytes of data to potential theft. John Matherly, the creator of the Shodan search engine for Internet-connected devices, found 5,000 new MongoDB instances since July. MongoDB versions 3.0.0 and newer only listen to “localhost,” so they don’t accept remote connections from the Internet. The majority of the insecure databases are hosted on cloud computing platforms run by DigitalOcean, Amazon.com and Alibaba Group.”]

