Check an IP Address, Domain Name, Subnet, or ASN
106.75.169.149 has a threat confidence score of 32%. This IP address from China (AS58466, CHINANET Guangdong province network) has been observed in 23 honeypot sessions targeting MYSQL, MONGODB, RTSP, ELASTICSEARCH protocols. First observed on January 20, 2026, most recently active April 2, 2026.
Client performs a direct request to the Elasticsearch /_cat/indices endpoint and retrieves a successful response without preceding generic web discovery or multi-protocol probing. This behavior indicates targeted Elasticsearch reconnaissance focused on enumerating available indices, document counts, and storage size to assess data exposure. Unlike broad internet scanners, the interaction is Elasticsearch-aware from the start, suggesting tooling or operators specifically searching for open clusters rather than conducting general service fingerprinting.