← Port Encyclopedia
28017
MongoDB-Web
TCP
Database
High Risk
MongoDB HTTP interface — web-based database status (deprecated)
🔍 How to Scan Port 28017
nmap -sV -p 28017 target
nmap -sV -sC --script=banner -p 28017 target
nc -zv target 28017
🛡️ Security Considerations
- Scan port 28017 with
nmap -sVto identify the exact service and version - If MongoDB-Web is not needed, close or firewall this port immediately
- Check for default credentials if a management interface runs on this port
- Use
searchsploit mongodb-webto find known exploits - Monitor traffic on port 28017 with Wireshark or tcpdump for anomalies
- Ensure the service is patched to the latest version to prevent known CVE exploitation