Loading threats
Client issues the MongoDB buildInfo command to retrieve detailed server version and build metadata, enabling software fingerprinting and environment profiling. This behavior reflects early-stage reconnaissance commonly performed by automated scanners, vulnerability assessment tooling, or exploitation frameworks to identify MongoDB deployment characteristics and determine suitability for subsequent enumeration or attack activity.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 65.49.20.68 | 100% | 4,304 | 3,384 | 🇺🇸 US | AS6939 | 2026-05-01 |
| 65.49.20.66 | 100% | 4,084 | 3,295 | 🇺🇸 US | AS6939 | 2026-05-02 |
| 65.49.20.67 | 100% | 3,958 | 3,171 | 🇺🇸 US | AS6939 | 2026-05-02 |
| 65.49.20.69 | 100% | 3,835 | 2,974 | 🇺🇸 US | AS6939 | 2026-05-02 |
| 74.82.47.5 | 100% | 3,823 | 2,888 | 🇺🇸 US | AS6939 | 2026-05-01 |
| 184.105.247.194 | 100% | 3,672 | 2,719 | 🇺🇸 US | AS6939 | 2026-05-02 |
| 184.105.247.254 | 100% | 3,616 | 2,771 | 🇺🇸 US | AS6939 | 2026-05-02 |
| 184.105.247.252 | 100% | 3,560 | 2,700 | 🇺🇸 US | AS6939 | 2026-05-02 |
| 184.105.247.195 | 100% | 3,537 | 2,628 | 🇺🇸 US | AS6939 | 2026-05-02 |
| 184.105.139.68 | 100% | 3,334 | 2,516 | 🇺🇸 US | AS6939 | 2026-05-01 |
| 184.105.247.196 | 100% | 3,269 | 2,563 | 🇺🇸 US | AS6939 | 2026-05-01 |
| 216.218.206.66 | 100% | 3,249 | 2,510 | 🇺🇸 US | AS6939 | 2026-05-01 |
| 216.218.206.67 | 100% | 3,220 | 2,523 | 🇺🇸 US | AS6939 | 2026-05-02 |
| 74.82.47.4 | 100% | 3,198 | 2,502 | 🇺🇸 US | AS6939 | 2026-05-02 |
| 184.105.139.69 | 100% | 3,079 | 2,332 | 🇺🇸 US | AS6939 | 2026-05-01 |
| 74.82.47.2 | 100% | 3,040 | 2,377 | 🇺🇸 US | AS6939 | 2026-05-02 |
| 184.105.139.67 | 100% | 3,020 | 2,303 | 🇺🇸 US | AS6939 | 2026-05-02 |
| 74.82.47.3 | 100% | 2,991 | 2,309 | 🇺🇸 US | AS6939 | 2026-05-01 |
| 184.105.139.70 | 100% | 2,966 | 2,314 | 🇺🇸 US | AS6939 | 2026-05-02 |
| 216.218.206.68 | 100% | 2,880 | 2,324 | 🇺🇸 US | AS6939 | 2026-05-02 |