Loading threats
Captures execution of the MongoDB endSessions command targeting the admin database, where a client requests termination of one or more logical session identifiers (lsid). This primitive reflects session lifecycle management activity that may occur during connection teardown, driver cleanup routines, authentication workflow handling, or automated probing sequences that explicitly close server-side sessions after capability or topology interaction.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 91.207.102.163 | 54% | 771 | 191 | 🇷🇴 RO | AS9009 | 2026-03-18 |
| 47.83.221.47 | 100% | 709 | 709 | 🇭🇰 HK | AS45102 | 2026-03-20 |
| 47.83.218.155 | 100% | 698 | 698 | 🇭🇰 HK | AS45102 | 2026-03-20 |
| 47.83.219.117 | 100% | 660 | 660 | 🇭🇰 HK | AS45102 | 2026-03-20 |
| 47.243.183.198 | 100% | 629 | 629 | 🇭🇰 HK | AS45102 | 2026-03-20 |
| 185.66.88.67 | 54% | 616 | 139 | 🇺🇦 UA | AS30860 | 2026-03-18 |
| 47.242.12.112 | 100% | 603 | 603 | 🇭🇰 HK | AS45102 | 2026-03-20 |
| 47.242.168.173 | 100% | 568 | 563 | 🇭🇰 HK | AS45102 | 2026-03-20 |
| 8.217.124.198 | 99% | 524 | 524 | 🇭🇰 HK | AS45102 | 2026-03-20 |
| 47.83.29.85 | 99% | 509 | 509 | 🇭🇰 HK | AS45102 | 2026-03-20 |
| 8.210.84.165 | 100% | 503 | 483 | 🇭🇰 HK | AS45102 | 2026-03-19 |
| 47.239.252.212 | 100% | 455 | 455 | 🇭🇰 HK | AS45102 | 2026-03-20 |
| 185.242.226.92 | 97% | 454 | 412 | 🇺🇸 US | AS202425 | 2026-03-15 |
| 93.177.117.179 | 93% | 299 | 298 | 🇳🇱 NL | AS41745 | 2026-03-16 |
| 35.189.227.206 | 99% | 259 | 259 | 🇧🇪 BE | AS396982 | 2026-03-20 |
| 23.95.43.182 | 58% | 196 | 121 | 🇺🇸 US | AS36352 | 2026-03-05 |
| 171.22.30.234 | 92% | 178 | 178 | 🇳🇱 NL | AS41745 | 2026-03-16 |
| 93.177.117.98 | 92% | 164 | 164 | 🇳🇱 NL | AS41745 | 2026-03-16 |
| 47.242.167.150 | 97% | 162 | 161 | 🇭🇰 HK | AS45102 | 2026-03-20 |
| 93.177.117.21 | 92% | 162 | 162 | 🇳🇱 NL | AS41745 | 2026-03-17 |