Loading threats
MongoDB isMaster command used by clients to check server status, capabilities, and replica role before running further operations. It’s a normal handshake step in the MongoDB protocol, but when seen from unknown internet sources it often reflects automated discovery or probing of exposed database instances.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 16.58.56.214 | 100% | 50,757 | 48,213 | 🇺🇸 US | AS16509 | 2026-04-16 |
| 18.116.101.220 | 100% | 47,818 | 46,867 | 🇺🇸 US | AS16509 | 2026-04-16 |
| 18.218.118.203 | 100% | 45,838 | 43,204 | 🇺🇸 US | AS16509 | 2026-04-16 |
| 3.129.187.38 | 100% | 45,000 | 43,247 | 🇺🇸 US | AS16509 | 2026-04-16 |
| 3.130.168.2 | 100% | 40,596 | 38,466 | 🇺🇸 US | AS16509 | 2026-04-16 |
| 81.29.142.100 | 100% | 33,020 | 23,850 | 🇷🇺 RU | AS210259 | 2026-04-16 |
| 3.131.220.121 | 100% | 27,001 | 26,108 | 🇺🇸 US | AS16509 | 2026-04-16 |
| 81.29.142.6 | 100% | 24,119 | 18,325 | 🇷🇺 RU | AS210259 | 2026-04-15 |
| 3.132.26.232 | 100% | 19,474 | 19,310 | 🇺🇸 US | AS16509 | 2026-04-16 |
| 3.134.216.108 | 100% | 16,939 | 16,214 | 🇺🇸 US | AS16509 | 2026-04-16 |
| 45.135.193.11 | 100% | 12,632 | 5,002 | 🇩🇪 DE | AS51396 | 2026-02-20 |
| 77.90.185.118 | 99% | 12,036 | 3,160 | 🇮🇷 IR | AS213790 | 2026-04-16 |
| 3.143.162.210 | 100% | 10,889 | 10,814 | 🇺🇸 US | AS16509 | 2026-04-16 |
| 3.151.241.153 | 100% | 9,911 | 9,780 | 🇺🇸 US | AS16509 | 2026-04-16 |
| 167.94.146.56 | 50% | 4,020 | 2,830 | 🇺🇸 US | AS398705 | 2026-04-16 |
| 167.94.146.60 | 50% | 3,961 | 2,938 | 🇺🇸 US | AS398705 | 2026-04-16 |
| 167.94.146.55 | 50% | 3,879 | 2,694 | 🇺🇸 US | AS398705 | 2026-04-16 |
| 167.94.146.57 | 50% | 3,875 | 2,867 | 🇺🇸 US | AS398705 | 2026-04-16 |
| 167.94.146.61 | 50% | 3,836 | 2,681 | 🇺🇸 US | AS398705 | 2026-04-16 |
| 167.94.146.48 | 50% | 3,806 | 2,791 | 🇺🇸 US | AS398705 | 2026-04-16 |