# WHATPORT(27017)

## NAME

port 27017 — MongoDB — MongoDB's default port, registered to MongoDB, Inc. since 2019.

Protocol: TCP  
IANA registry

## DESCRIPTION

27017 is the default listening port for `mongod` and `mongos`; sharded and config servers use 27018 and 27019. Access control is not enabled by default, so a server started without --auth and bound beyond localhost hands full read/write to anyone who connects. Point a browser at it and MongoDB answers over HTTP with a note that you are hitting the native driver port, which makes it easy to fingerprint.

## EXPOSURE

**Do not expose.** MongoDB's security checklist calls for enabling access control and restricting net.bindIp to trusted clients — an exposed 27017 is the classic ransomed-database scan hit.

## CHECK

```sh
curl -s http://127.0.0.1:27017/
```

## SEE ALSO

- docs — [MongoDB — Default MongoDB Ports](https://www.mongodb.com/docs/manual/reference/default-mongodb-port/) (mongodb.com)
- docs — [MongoDB — Security Checklist](https://www.mongodb.com/docs/manual/administration/security-checklist/) (mongodb.com)
- source — [mongodb/mongo on GitHub](https://github.com/mongodb/mongo) (github.com)
- iana — [IANA Service Name and Transport Protocol Port Number Registry — 27017 (mongodb)](https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=27017) (iana.org)

---

HTML: <https://whatport.net/27017/> · JSON: <https://whatport.net/27017.json> · full dataset: <https://whatport.net/ports.json>
