Loading threats
Client issues the MongoDB listDatabases command against the admin database with the nameOnly option enabled and a logical session identifier (lsid), indicating an attempt to enumerate database names without retrieving detailed size or metadata information. This primitive represents structured database surface reconnaissance activity where a client attempts to map available administrative and application datasets prior to targeted collection enumeration or data access attempts.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 47.83.218.155 | 100% | 718 | 718 | 🇭🇰 HK | AS45102 | 2026-03-20 |
| 47.83.221.47 | 100% | 712 | 712 | 🇭🇰 HK | AS45102 | 2026-03-20 |
| 47.83.219.117 | 100% | 663 | 663 | 🇭🇰 HK | AS45102 | 2026-03-20 |
| 47.243.183.198 | 100% | 636 | 636 | 🇭🇰 HK | AS45102 | 2026-03-20 |
| 47.242.12.112 | 100% | 604 | 604 | 🇭🇰 HK | AS45102 | 2026-03-20 |
| 47.242.168.173 | 100% | 577 | 572 | 🇭🇰 HK | AS45102 | 2026-03-20 |
| 8.217.124.198 | 99% | 538 | 538 | 🇭🇰 HK | AS45102 | 2026-03-20 |
| 47.83.29.85 | 99% | 513 | 513 | 🇭🇰 HK | AS45102 | 2026-03-20 |
| 8.210.84.165 | 100% | 503 | 483 | 🇭🇰 HK | AS45102 | 2026-03-19 |
| 47.239.252.212 | 100% | 458 | 458 | 🇭🇰 HK | AS45102 | 2026-03-20 |
| 47.242.167.150 | 98% | 170 | 169 | 🇭🇰 HK | AS45102 | 2026-03-20 |
| 47.84.4.29 | 87% | 51 | 51 | 🇸🇬 SG | AS45102 | 2026-03-01 |
| 47.84.177.162 | 74% | 44 | 44 | 🇸🇬 SG | AS45102 | 2026-03-01 |
| 47.84.198.211 | 71% | 31 | 31 | 🇸🇬 SG | AS45102 | 2026-03-01 |
| 43.106.150.45 | 70% | 28 | 28 | 🇸🇬 SG | AS45102 | 2026-03-14 |
| 47.84.179.64 | 73% | 25 | 24 | 🇸🇬 SG | AS45102 | 2026-03-01 |
| 47.84.178.41 | 73% | 22 | 22 | 🇸🇬 SG | AS45102 | 2026-03-01 |
| 47.84.196.3 | 75% | 20 | 20 | 🇸🇬 SG | AS45102 | 2026-02-20 |
| 47.236.193.148 | 79% | 20 | 20 | 🇸🇬 SG | AS45102 | 2026-03-01 |
| 47.84.196.172 | 73% | 19 | 19 | 🇸🇬 SG | AS45102 | 2026-03-01 |