I wouldn't blame MongoDB. Any machine connected to the Internet should start with a configuration equivalent to: ufw default deny incoming ufw allow s

I wouldn't blame MongoDB. Any machine connected to the Internet should start with a configuration equivalent to: ufw default deny incoming ufw allow ssh ufw enable And then start punching very specific holes as needed.