&gt;The default configuration for MongoDB is to listen on localhost only<p>That&#x27;s true, but I remember that change was only made recently. Before, mongo would listen on all IPs and had no passwords.