Loading threats
Client performs initial MongoDB discovery using isMaster followed by listDatabases and buildinfo, indicating active enumeration of server structure and version details. This pattern goes beyond basic probing and reflects an attempt to map available databases on an exposed instance.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 3.132.23.201 | 100% | 18,733 | 7,245 | 🇺🇸 US | AS16509 | 2026-02-04 |
| 3.130.96.91 | 100% | 18,545 | 6,792 | 🇺🇸 US | AS16509 | 2026-02-04 |
| 3.134.148.59 | 100% | 16,581 | 6,095 | 🇺🇸 US | AS16509 | 2026-02-04 |
| 3.143.33.63 | 100% | 15,834 | 6,238 | 🇺🇸 US | AS16509 | 2026-02-04 |
| 3.149.59.26 | 100% | 14,608 | 5,716 | 🇺🇸 US | AS16509 | 2026-02-04 |
| 3.137.73.221 | 100% | 14,174 | 5,667 | 🇺🇸 US | AS16509 | 2026-02-04 |
| 77.90.185.118 | 97% | 10,914 | 2,042 | 🇮🇷 IR | AS213790 | 2026-03-03 |
| 18.191.106.209 | 99% | 5,454 | 2,146 | 🇺🇸 US | AS16509 | 2026-02-08 |
| 18.191.52.107 | 99% | 5,200 | 1,740 | 🇺🇸 US | AS16509 | 2026-02-08 |
| 3.137.194.242 | 99% | 4,778 | 1,930 | 🇺🇸 US | AS16509 | 2026-02-08 |
| 18.219.216.206 | 97% | 4,308 | 1,568 | 🇺🇸 US | AS16509 | 2026-02-08 |
| 3.148.178.131 | 98% | 4,179 | 1,773 | 🇺🇸 US | AS16509 | 2026-02-08 |
| 13.59.157.137 | 98% | 4,088 | 1,594 | 🇺🇸 US | AS16509 | 2026-02-08 |
| 3.135.20.78 | 97% | 3,726 | 1,431 | 🇺🇸 US | AS16509 | 2026-02-08 |
| 3.14.72.188 | 98% | 3,222 | 1,305 | 🇺🇸 US | AS16509 | 2026-02-08 |
| 18.218.81.94 | 94% | 1,843 | 695 | 🇺🇸 US | AS16509 | 2026-02-07 |
| 104.248.113.59 | 98% | 1,698 | 419 | 🇺🇸 US | AS14061 | 2026-02-08 |
| 134.209.127.21 | 98% | 1,658 | 414 | 🇺🇸 US | AS14061 | 2026-02-06 |
| 157.230.191.69 | 98% | 1,499 | 385 | 🇺🇸 US | AS14061 | 2026-02-06 |
| 137.184.137.160 | 98% | 1,427 | 356 | 🇺🇸 US | AS14061 | 2026-02-08 |