Loading threats
Client issues a MongoDB find query against the users collection in the production database using an empty filter, indicating an attempt to enumerate all application user records. The request includes a logical session identifier (lsid), reflecting use of modern MongoDB session semantics. This primitive represents application-level data reconnaissance activity where a client attempts to retrieve account data, profile information, or authentication-related records from a production dataset.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 64.89.163.131 | 100% | 49,341 | 12,426 | 🇬🇧 GB | AS401626 | 2026-05-03 |
| 64.89.163.132 | 100% | 47,095 | 10,114 | 🇬🇧 GB | AS401626 | 2026-05-02 |
| 64.89.163.130 | 100% | 42,243 | 9,561 | 🇬🇧 GB | AS401626 | 2026-05-03 |
| 64.89.163.243 | 100% | 14,919 | 14,506 | 🇬🇧 GB | AS401626 | 2026-05-01 |
| 64.89.163.86 | 100% | 14,519 | 11,019 | 🇬🇧 GB | AS401626 | 2026-05-03 |
| 45.156.87.10 | 100% | 13,485 | 13,368 | 🇳🇱 NL | AS51396 |
| 2026-05-02 |
| 176.65.132.93 | 100% | 11,763 | 11,586 | 🇩🇪 DE | AS51396 | 2026-05-03 |
| 64.89.163.87 | 100% | 10,437 | 8,568 | 🇬🇧 GB | AS401626 | 2026-05-02 |
| 64.89.163.85 | 100% | 9,536 | 6,903 | 🇬🇧 GB | AS401626 | 2026-05-03 |
| 185.242.3.71 | 100% | 7,559 | 7,553 | 🇳🇱 NL | AS60223 | 2026-05-03 |
| 176.65.132.39 | 100% | 6,897 | 6,824 | 🇩🇪 DE | AS51396 | 2026-05-01 |
| 43.228.157.45 | 100% | 6,153 | 6,020 | 🇵🇰 PK | AS205759 | 2026-05-03 |
| 176.65.132.141 | 100% | 6,142 | 6,058 | 🇩🇪 DE | AS51396 | 2026-05-03 |
| 45.156.87.252 | 100% | 5,922 | 5,703 | 🇳🇱 NL | AS51396 | 2026-04-27 |
| 64.89.163.244 | 100% | 5,004 | 4,926 | 🇬🇧 GB | AS401626 | 2026-05-03 |
| 45.156.87.119 | 100% | 4,756 | 4,755 | 🇳🇱 NL | AS51396 | 2026-05-02 |
| 64.89.163.245 | 100% | 4,667 | 4,556 | 🇬🇧 GB | AS401626 | 2026-05-02 |
| 45.156.87.7 | 100% | 4,253 | 4,214 | 🇳🇱 NL | AS51396 | 2026-04-27 |
| 176.65.132.107 | 100% | 3,430 | 3,430 | 🇩🇪 DE | AS51396 | 2026-04-27 |
| 45.153.34.81 | 100% | 1,473 | 1,473 | 🇳🇱 NL | AS51396 | 2026-05-03 |