Check an IP Address, Domain Name, Subnet, or ASN

138.197.204.242 was found in our database!

$ whois 138.197.204.242

country·🇺🇸 United States

city·Santa Clara

isp·DigitalOcean, LLC

asn·AS14061

network·Standard

$ sikker risk 138.197.204.242scoring →

confidence

58%Medium

first_seen·Mar 1, 2026

last_seen·1h ago

sessions·89

events·89

$ sikker protocols 138.197.204.242

MONGODB

79 / 79

HTTPS

7 / 7

ELASTICSEARCH

3 / 3

$ sikker summary 138.197.204.242

138.197.204.242 has a threat confidence score of 58%. This IP address from United States (AS14061, DigitalOcean, LLC) has been observed in 89 honeypot sessions targeting MONGODB, HTTPS, ELASTICSEARCH protocols. First observed on March 1, 2026, most recently active March 23, 2026.

$ sikker primitives 138.197.204.242

elastic_http_get_request22 elastic_http_bad_request_path_probe12 elastic_root_path_probe4 elastic_nodes_enumeration2 mongodb_ismaster1

$ sikker related 138.197.204.242

🇺🇸·More threats fromUnited States→AS·More threats fromDigitalOcean, LLC→MONG·More threats targetingMONGODB→HTTP·More threats targetingHTTPS→ELAS·More threats targetingELASTICSEARCH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
178.128.10.226	59%	95
104.248.126.175	37%	50
146.190.83.73	87%	339
68.183.135.94	49%	59
68.183.127.209	43%	91

IP Address	Confidence	Events
167.172.122.121	25%	12
159.223.176.109	49%	8
205.210.31.101	96%	296
45.33.102.247	60%	100
167.94.146.58	50%	2,809