> The attacks don't target all MongoDB databases, but only those left accessible via the Internet and without a password on the administrator account

Well now I don't feel sorry for these people :|