Loading threats
Client issues a MongoDB find query against the api_keys collection in the production database using an empty filter, indicating an attempt to enumerate stored API credential records. The request includes a logical session identifier (lsid), reflecting use of modern MongoDB session semantics. This primitive represents sensitive application-credential reconnaissance activity where a client attempts to retrieve authentication tokens, key metadata, or access-control artifacts from a production dataset.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 64.89.163.131 | 100% | 48,651 | 11,736 | 🇬🇧 GB | AS401626 | 2026-04-20 |
| 64.89.163.132 | 100% | 46,630 | 9,649 | 🇬🇧 GB | AS401626 | 2026-04-20 |
| 64.89.163.130 | 100% | 41,789 | 9,107 | 🇬🇧 GB | AS401626 | 2026-04-20 |
| 64.89.163.243 | 100% | 14,341 | 13,928 | 🇬🇧 GB | AS401626 | 2026-04-20 |
| 64.89.163.86 | 100% | 13,756 | 10,256 | 🇬🇧 GB | AS401626 | 2026-04-20 |
| 45.156.87.10 | 100% | 12,959 | 12,844 | 🇳🇱 NL | AS51396 |
| 2026-04-20 |
| 176.65.132.93 | 100% | 10,609 | 10,432 | 🇩🇪 DE | AS51396 | 2026-04-20 |
| 64.89.163.87 | 100% | 9,694 | 7,825 | 🇬🇧 GB | AS401626 | 2026-04-20 |
| 64.89.163.85 | 100% | 8,889 | 6,256 | 🇬🇧 GB | AS401626 | 2026-04-19 |
| 185.242.3.71 | 100% | 7,011 | 7,005 | 🇳🇱 NL | AS60223 | 2026-04-20 |
| 176.65.132.39 | 100% | 6,078 | 6,005 | 🇩🇪 DE | AS51396 | 2026-04-20 |
| 45.156.87.252 | 100% | 5,628 | 5,409 | 🇳🇱 NL | AS51396 | 2026-04-20 |
| 176.65.132.141 | 100% | 5,580 | 5,496 | 🇩🇪 DE | AS51396 | 2026-04-20 |
| 43.228.157.45 | 100% | 5,403 | 5,270 | 🇵🇰 PK | AS205759 | 2026-04-20 |
| 45.156.87.119 | 100% | 4,561 | 4,560 | 🇳🇱 NL | AS51396 | 2026-04-20 |
| 64.89.163.244 | 100% | 4,376 | 4,299 | 🇬🇧 GB | AS401626 | 2026-04-20 |
| 64.89.163.245 | 100% | 4,189 | 4,078 | 🇬🇧 GB | AS401626 | 2026-04-20 |
| 45.156.87.7 | 100% | 3,827 | 3,788 | 🇳🇱 NL | AS51396 | 2026-04-20 |
| 176.65.132.107 | 100% | 2,974 | 2,974 | 🇩🇪 DE | AS51396 | 2026-04-20 |
| 45.153.34.81 | 100% | 1,377 | 1,377 | 🇳🇱 NL | AS51396 | 2026-04-20 |