whatportis.com
suggest an edit →

Port 27017MongoDB

MongoDB primarily uses port 27017 for client connections to the database server. This port facilitates communication between applications and the database, handling requests for data insertion, querying, updating, and deletion. Due to its widespread deployment in web and cloud services, managing access and security on this port is crucial..

inDatabases
transport
unknown

single transport

in transit
cleartext

payload readable on path

assignment
unofficial

used by convention

risk
4/10

caution

lookups
11,424

rank 359 of 993 · top 36%

Technical Details

what runs on :27017

MongoDB is a popular open-source NoSQL database designed for high performance, scalability, and flexibility. It stores data in JSON-like BSON documents, allowing for dynamic, schema-less data structures that adapt easily to changing requirements. MongoDB’s default port, 27017, listens for incoming client connections, providing access to its database services and management operations.

Clients interact with the database server over port 27017 using the MongoDB Wire Protocol, enabling operations such as data retrieval, updates, insertion, aggregation, and indexing. This port is also used for internal administrative tasks, including replication between nodes in a replica set, sharding operations, and monitoring. While version compatibility influences protocol behaviors, the port remains the primary access route for most MongoDB deployments.

In large, distributed architectures, different components of MongoDB’s ecosystem also use neighboring ports for internal communications, but port 27017 remains central to client-server communications. Properly configuring this port and securing access channels is essential for safe deployment and stable performance of database services across scaling environments.

Security Information

exposure of :27017

risk score

4/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

databases averages 4.0 across 58 ports — this one sits level with it.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

unofficial

used by convention, not registered — what answers here varies by deployment

reachable over

unknown

every listening transport is another surface to filter at the edge

security overview

Common Vulnerabilities:

  • Unauthenticated Access: Historically, many MongoDB instances were left accessible without authentication, exposing sensitive data to the public internet.
  • Data Exfiltration & Ransomware: Attackers have exploited unsecured databases by stealing or encrypting data and demanding ransom.
  • Denial of Service (DoS): Resource exhaustion attacks targeting open MongoDB ports can disrupt services.
  • Misconfigurations: Default configurations often lacked TLS encryption and enabled broad network exposure.

Common Mitigations:

  • Enable Authentication: Enforce strong access control with user authentication and role-based permissions.
  • Network Restrictions: Bind the service to trusted interfaces using firewall rules or internal-only IPs to limit exposure.
  • Encryption: Use TLS/SSL encryption for data in transit to prevent eavesdropping. Encrypt data at rest using native or external solutions.
  • Update Software: Regularly patch MongoDB to mitigate known vulnerabilities.
  • Disable Unused Features: Turn off features like REST interface or HTTP status interface if not needed.
  • Backup & Monitoring: Implement continuous monitoring, auditing, and regular backups to detect suspicious activity early and support recovery.

Related Ports

all 58 in databases →

the 8 most looked-up other ports in databases — 58 ports carry that label.

portservicerisk
:8882Atlasz Secure App Servercaution
:9001ETL Service Managercaution
:2484Oracle SSL Listenercaution
:5495Applix TM1 Admincaution
:591FileMaker Web Sharingcaution
:1521Oracle TNS Listenercaution
:21001AMLFilter Admincaution
:18206Audition FAM DBcaution

risk mix of the 8 listed

  • caution100%

1 of 8 encrypted