Loading threats
Client issues a MongoDB listDatabases command using BSON numeric encoding semantics ($numberLong) to enumerate all databases present on the server instance. This behavior reflects early-stage database surface mapping and environment discovery activity commonly performed by automated scanners, exploitation tooling, or reconnaissance frameworks to identify available administrative and application datasets prior to targeted enumeration or unauthorized access attempts.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 65.49.20.68 | 100% | 2,984 | 2,068 | 🇺🇸 US | AS6939 | 2026-03-18 |
| 65.49.20.66 | 100% | 2,823 | 2,034 | 🇺🇸 US | AS6939 | 2026-03-18 |
| 65.49.20.67 | 100% | 2,696 | 1,909 | 🇺🇸 US | AS6939 | 2026-03-18 |
| 184.105.247.194 | 100% | 2,664 | 1,711 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 74.82.47.5 | 100% | 2,636 | 1,701 | 🇺🇸 US | AS6939 | 2026-03-18 |
| 184.105.247.195 | 100% | 2,597 | 1,688 | 🇺🇸 US | AS6939 |
| 2026-03-19 |
| 65.49.20.69 | 100% | 2,530 | 1,669 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 184.105.247.252 | 100% | 2,482 | 1,622 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 184.105.247.254 | 100% | 2,340 | 1,495 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 184.105.139.68 | 100% | 2,297 | 1,479 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 74.82.47.4 | 100% | 2,215 | 1,519 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 184.105.247.196 | 100% | 2,207 | 1,501 | 🇺🇸 US | AS6939 | 2026-03-18 |
| 184.105.139.69 | 99% | 2,150 | 1,405 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 216.218.206.66 | 99% | 2,057 | 1,334 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 216.218.206.67 | 100% | 2,051 | 1,354 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 74.82.47.2 | 100% | 2,042 | 1,379 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 184.105.139.67 | 100% | 2,027 | 1,318 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 74.82.47.3 | 99% | 2,000 | 1,319 | 🇺🇸 US | AS6939 | 2026-03-18 |
| 184.105.139.70 | 99% | 1,974 | 1,322 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 216.218.206.68 | 100% | 1,837 | 1,283 | 🇺🇸 US | AS6939 | 2026-03-18 |