Loading threats
Captures a MongoDB {"isMaster": 1} (hello / topology discovery) command that includes explicit client metadata identifying the mgo driver with version string globalsign, running on a Linux amd64 environment. This primitive reflects client capability negotiation and server topology probing where the actor discloses driver implementation details and operating system architecture as part of the initial connection handshake or automated reconnaissance workflow.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 45.91.64.6 | 100% | 16,497 | 10,116 | 🇷🇺 RU | AS214664 | 2026-04-20 |
| 94.102.49.155 | 100% | 15,353 | 11,351 | 🇳🇱 NL | AS202425 | 2026-04-20 |
| 45.91.64.7 | 100% | 10,605 | 9,503 | 🇷🇺 RU | AS214664 | 2026-04-20 |
| 5.101.64.6 | 100% | 4,783 | 4,506 | 🇷🇺 RU | AS34665 | 2026-04-20 |
| 176.32.195.85 | 100% | 3,709 | 2,666 | 🇦🇲 AM | AS197834 | 2026-03-24 |