Loading threats
Captures execution of the MongoDB {"listDatabases": 1, "nameOnly": true} command against the admin database within a logical session context (lsid). This primitive reflects database enumeration activity where a client, automated tool, or reconnaissance workflow requests a lightweight listing of available database names without size or statistics metadata, typically used for environment discovery, access validation, or capability assessment.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 64.89.163.132 | 100% | 44,772 | 7,791 | 🇬🇧 GB | AS401626 | 2026-03-19 |
| 64.89.163.131 | 100% | 43,414 | 6,583 | 🇬🇧 GB | AS401626 | 2026-03-19 |
| 64.89.163.130 | 100% | 40,020 | 7,350 | 🇬🇧 GB | AS401626 | 2026-03-19 |
| 45.156.87.10 | 100% | 9,779 | 9,664 | 🇳🇱 NL | AS51396 | 2026-03-19 |
| 64.89.163.86 | 100% | 7,901 | 4,425 | 🇬🇧 GB | AS401626 | 2026-03-19 |
| 64.89.163.85 | 100% | 7,498 | 4,865 | 🇬🇧 GB | AS401626 | 2026-03-19 |
| 64.89.163.87 | 100% | 7,243 | 5,380 | 🇬🇧 GB | AS401626 | 2026-03-19 |
| 64.89.163.243 | 100% | 4,521 | 4,306 | 🇬🇧 GB | AS401626 | 2026-03-19 |
| 176.65.132.93 | 100% | 4,137 | 3,971 | 🇩🇪 DE | AS51396 | 2026-03-19 |
| 176.65.132.141 | 100% | 2,678 | 2,594 | 🇩🇪 DE | AS51396 | 2026-03-19 |
| 45.156.87.252 | 100% | 2,556 | 2,337 | 🇳🇱 NL | AS51396 | 2026-03-19 |
| 176.65.132.39 | 100% | 2,506 | 2,433 | 🇩🇪 DE | AS51396 | 2026-03-19 |
| 185.242.3.71 | 100% | 1,697 | 1,693 | 🇳🇱 NL | AS60223 | 2026-03-19 |
| 45.156.87.119 | 100% | 1,505 | 1,504 | 🇳🇱 NL | AS51396 | 2026-03-19 |
| 35.233.95.0 | 100% | 1,483 | 610 | 🇧🇪 BE | AS396982 | 2026-03-19 |
| 45.156.87.7 | 98% | 1,303 | 1,267 | 🇳🇱 NL | AS51396 | 2026-03-19 |
| 35.195.241.97 | 100% | 1,262 | 556 | 🇧🇪 BE | AS396982 | 2026-03-19 |
| 64.89.163.245 | 99% | 916 | 805 | 🇬🇧 GB | AS401626 | 2026-03-19 |
| 43.228.157.45 | 100% | 661 | 630 | 🇵🇰 PK | AS205759 | 2026-03-19 |
| 45.153.34.81 | 100% | 626 | 626 | 🇳🇱 NL | AS51396 | 2026-03-19 |