Loading threats
Captures execution of the MongoDB {"buildinfo": 1} command against the admin database with an attached logical session identifier (lsid). This primitive reflects server version and build metadata enumeration performed within an authenticated or session-aware context, commonly used by client drivers, automation frameworks, or reconnaissance tooling to fingerprint MongoDB deployment characteristics such as version, compilation environment, and feature support.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 34.34.132.221 | 100% | 1,623 | 545 | 🇧🇪 BE | AS396982 | 2026-03-21 |
| 35.233.95.0 | 100% | 1,504 | 631 | 🇧🇪 BE | AS396982 | 2026-03-20 |
| 34.77.191.38 | 100% | 1,352 | 496 | 🇧🇪 BE | AS396982 | 2026-03-22 |
| 35.195.241.97 | 100% | 1,318 | 612 | 🇧🇪 BE | AS396982 | 2026-03-21 |
| 34.76.111.153 | 100% | 375 | 375 | 🇧🇪 BE | AS396982 | 2026-03-22 |
| 34.76.97.83 | 100% | 372 | 360 | 🇧🇪 BE | AS396982 |
| 2026-03-21 |
| 34.14.33.150 | 100% | 350 | 350 | 🇧🇪 BE | AS396982 | 2026-03-21 |
| 34.79.198.196 | 100% | 318 | 307 | 🇧🇪 BE | AS396982 | 2026-03-21 |
| 35.189.227.206 | 100% | 294 | 294 | 🇧🇪 BE | AS396982 | 2026-03-22 |
| 193.32.126.232 | 71% | 290 | 121 | 🇫🇷 FR | AS39351 | 2026-03-22 |
| 146.148.122.35 | 100% | 267 | 266 | 🇧🇪 BE | AS396982 | 2026-03-22 |
| 104.155.11.101 | 99% | 174 | 174 | 🇧🇪 BE | AS396982 | 2026-03-22 |
| 193.32.127.196 | 67% | 161 | 96 | 🇨🇭 CH | AS39351 | 2026-03-20 |
| 35.241.166.201 | 99% | 159 | 127 | 🇧🇪 BE | AS396982 | 2026-03-22 |
| 34.52.173.82 | 100% | 134 | 134 | 🇧🇪 BE | AS396982 | 2026-03-22 |
| 193.32.249.163 | 68% | 115 | 90 | 🇳🇱 NL | AS39351 | 2026-03-21 |
| 104.199.4.112 | 100% | 113 | 113 | 🇧🇪 BE | AS396982 | 2026-03-22 |
| 35.233.21.145 | 99% | 112 | 97 | 🇧🇪 BE | AS396982 | 2026-03-22 |
| 34.14.59.22 | 99% | 94 | 94 | 🇧🇪 BE | AS396982 | 2026-03-21 |
| 34.77.219.71 | 99% | 74 | 74 | 🇧🇪 BE | AS396982 | 2026-03-21 |