Loading threats
Client issues the MongoDB listDatabases command using BSON numeric encoding ($numberLong) to enumerate all databases present on the server instance. This primitive reflects database surface discovery and environment reconnaissance activity where a client attempts to identify available administrative, application, or test datasets prior to targeted enumeration or data access attempts.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 65.49.20.68 | 100% | 2,984 | 2,068 | 🇺🇸 US | AS6939 | 2026-03-18 |
| 65.49.20.66 | 100% | 2,823 | 2,034 | 🇺🇸 US | AS6939 | 2026-03-18 |
| 65.49.20.67 | 100% | 2,696 | 1,909 | 🇺🇸 US | AS6939 | 2026-03-18 |
| 184.105.247.194 | 100% | 2,664 | 1,711 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 74.82.47.5 | 100% | 2,636 | 1,701 | 🇺🇸 US | AS6939 | 2026-03-18 |
| 184.105.247.195 | 100% | 2,597 | 1,688 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 65.49.20.69 | 100% | 2,530 | 1,669 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 184.105.247.252 | 100% | 2,482 | 1,622 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 184.105.247.254 | 100% | 2,340 | 1,495 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 184.105.139.68 | 100% | 2,297 | 1,479 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 74.82.47.4 | 100% | 2,215 | 1,519 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 184.105.247.196 | 100% | 2,207 | 1,501 | 🇺🇸 US | AS6939 | 2026-03-18 |
| 184.105.139.69 | 99% | 2,150 | 1,405 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 216.218.206.66 | 99% | 2,057 | 1,334 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 216.218.206.67 | 100% | 2,051 | 1,354 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 74.82.47.2 | 100% | 2,042 | 1,379 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 184.105.139.67 | 100% | 2,027 | 1,318 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 74.82.47.3 | 99% | 2,000 | 1,319 | 🇺🇸 US | AS6939 | 2026-03-18 |
| 184.105.139.70 | 99% | 1,974 | 1,322 | 🇺🇸 US | AS6939 | 2026-03-19 |
| 216.218.206.68 | 100% | 1,837 | 1,283 | 🇺🇸 US | AS6939 | 2026-03-18 |