Yes. We had passwd & ssh key to acces the server.
What how is ssh related to having no database password?
Many people got hacked this way.
Make sure you apply a password to your databases if you haven't.
@a_5mith I'm sure MongoDB defaults to local access only?
@Scuzz Depending on the package distributor's default setting, but yes, it should default to a sensible localhost access only.
Redis is the same -- Ubuntu binds to localhost only, whereas if compiled from source, will listen on all interfaces, which is... erm... not as good.