Loading threats
Captures execution of the MongoDB {"listDatabases": 1, "nameOnly": true} command against the admin database within a logical session context (lsid). This primitive reflects database enumeration activity where a client, automated tool, or reconnaissance workflow requests a lightweight listing of available database names without size or statistics metadata, typically used for environment discovery, access validation, or capability assessment.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 64.89.163.131 | 100% | 49,371 | 12,456 | 🇬🇧 GB | AS401626 | 2026-05-05 |
| 64.89.163.132 | 100% | 47,125 | 10,144 | 🇬🇧 GB | AS401626 | 2026-05-05 |
| 64.89.163.130 | 100% | 42,273 | 9,591 | 🇬🇧 GB | AS401626 | 2026-05-04 |
| 64.89.163.243 | 100% | 14,932 | 14,519 | 🇬🇧 GB | AS401626 | 2026-05-05 |
| 64.89.163.86 | 100% | 14,544 | 11,044 | 🇬🇧 GB | AS401626 | 2026-05-04 |
| 45.156.87.10 | 100% | 13,493 | 13,376 | 🇳🇱 NL | AS51396 |
| 2026-05-04 |
| 176.65.132.93 | 100% | 11,877 | 11,700 | 🇩🇪 DE | AS51396 | 2026-05-04 |
| 64.89.163.87 | 100% | 10,468 | 8,599 | 🇬🇧 GB | AS401626 | 2026-05-04 |
| 64.89.163.85 | 100% | 9,584 | 6,951 | 🇬🇧 GB | AS401626 | 2026-05-04 |
| 185.242.3.71 | 100% | 7,589 | 7,583 | 🇳🇱 NL | AS60223 | 2026-05-04 |
| 176.65.132.39 | 100% | 6,905 | 6,832 | 🇩🇪 DE | AS51396 | 2026-05-03 |
| 43.228.157.45 | 100% | 6,190 | 6,057 | 🇵🇰 PK | AS205759 | 2026-05-04 |
| 176.65.132.141 | 100% | 6,172 | 6,088 | 🇩🇪 DE | AS51396 | 2026-05-05 |
| 45.156.87.252 | 100% | 5,922 | 5,703 | 🇳🇱 NL | AS51396 | 2026-04-27 |
| 64.89.163.244 | 100% | 5,008 | 4,930 | 🇬🇧 GB | AS401626 | 2026-05-03 |
| 45.156.87.119 | 100% | 4,768 | 4,767 | 🇳🇱 NL | AS51396 | 2026-05-04 |
| 64.89.163.245 | 100% | 4,673 | 4,562 | 🇬🇧 GB | AS401626 | 2026-05-03 |
| 45.156.87.7 | 100% | 4,253 | 4,214 | 🇳🇱 NL | AS51396 | 2026-04-27 |
| 176.65.132.107 | 100% | 3,430 | 3,430 | 🇩🇪 DE | AS51396 | 2026-04-27 |
| 34.52.219.24 | 100% | 1,824 | 623 | 🇧🇪 BE | AS396982 | 2026-04-27 |