Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
103.27.109.179 has a threat confidence score of 87%. This IP address from Hong Kong (AS132883, TOPWAY GLOBAL LIMITED) has been observed in 57 honeypot sessions targeting POSTGRES, MONGODB, MSSQL protocols. First observed on March 19, 2026, most recently active March 21, 2026.
Performs a full MongoDB authentication attempt against the admin database using the SCRAM-SHA-256 mechanism. The behavior combines capability probing via isMaster speculative authentication metadata with explicit saslStart and saslContinue SASL commands, indicating an actor attempting credential-based access to a MongoDB instance through the standard SCRAM authentication workflow.