Loading threats
Client performs structured MongoDB deployment reconnaissance by first initiating a standard driver handshake (ismaster / hello) disclosing client runtime and platform metadata (PyMongo, CPython, Linux x86_64), followed by an advanced topology-aware handshake request against the admin database including topologyVersion tracking and long-poll await semantics. This sequence reflects automated driver-level service validation and replica-set / cluster state discovery activity commonly associated with scanning frameworks, monitoring tooling, or pre-enumeration reconnaissance workflows preparing for deeper database interaction.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 64.89.163.131 | 100% | 48,651 | 11,736 | 🇬🇧 GB | AS401626 | 2026-04-20 |
| 64.89.163.132 | 100% | 46,630 | 9,649 | 🇬🇧 GB | AS401626 | 2026-04-20 |
| 64.89.163.130 | 100% | 41,789 | 9,107 | 🇬🇧 GB | AS401626 | 2026-04-20 |
| 64.89.163.243 | 100% | 14,341 | 13,928 | 🇬🇧 GB | AS401626 | 2026-04-20 |
| 64.89.163.86 | 100% | 13,786 | 10,286 | 🇬🇧 GB | AS401626 | 2026-04-20 |
| 45.156.87.10 |
| 100% |
| 12,959 |
| 12,844 |
| 🇳🇱 NL |
| AS51396 |
| 2026-04-20 |
| 176.65.132.93 | 100% | 10,609 | 10,432 | 🇩🇪 DE | AS51396 | 2026-04-20 |
| 64.89.163.87 | 100% | 9,694 | 7,825 | 🇬🇧 GB | AS401626 | 2026-04-20 |
| 64.89.163.85 | 100% | 8,895 | 6,262 | 🇬🇧 GB | AS401626 | 2026-04-20 |
| 185.242.3.71 | 100% | 7,011 | 7,005 | 🇳🇱 NL | AS60223 | 2026-04-20 |
| 176.65.132.39 | 100% | 6,078 | 6,005 | 🇩🇪 DE | AS51396 | 2026-04-20 |
| 45.156.87.252 | 100% | 5,628 | 5,409 | 🇳🇱 NL | AS51396 | 2026-04-20 |
| 176.65.132.141 | 100% | 5,580 | 5,496 | 🇩🇪 DE | AS51396 | 2026-04-20 |
| 43.228.157.45 | 100% | 5,403 | 5,270 | 🇵🇰 PK | AS205759 | 2026-04-20 |
| 45.156.87.119 | 100% | 4,567 | 4,566 | 🇳🇱 NL | AS51396 | 2026-04-20 |
| 64.89.163.244 | 100% | 4,376 | 4,299 | 🇬🇧 GB | AS401626 | 2026-04-20 |
| 64.89.163.245 | 100% | 4,189 | 4,078 | 🇬🇧 GB | AS401626 | 2026-04-20 |
| 45.156.87.7 | 100% | 3,827 | 3,788 | 🇳🇱 NL | AS51396 | 2026-04-20 |
| 176.65.132.107 | 100% | 2,992 | 2,992 | 🇩🇪 DE | AS51396 | 2026-04-20 |
| 45.156.87.238 | 98% | 2,312 | 2,244 | 🇳🇱 NL | AS51396 | 2026-03-17 |