Check an IP Address, Domain Name, Subnet, or ASN

172.245.106.222 was found in our database!

$ whois 172.245.106.222

country·🇺🇸 United States

city·Buffalo

isp·HostPapa

asn·AS36352

network·Tor Exit Node

$ sikker risk 172.245.106.222scoring →

confidence

28%Low

first_seen·Apr 14, 2026

last_seen·5h ago

sessions·1

events·1

$ sikker protocols 172.245.106.222

ELASTICSEARCH

1 / 1

$ sikker summary 172.245.106.222

172.245.106.222 has a threat confidence score of 28%. This IP address from United States (AS36352, HostPapa) has been observed in 1 honeypot sessions targeting ELASTICSEARCH protocols. This IP is a known Tor exit node. First observed on April 14, 2026, most recently active April 14, 2026.

$ sikker primitives 172.245.106.222

elastic_root_path_probe1 elastic_http_get_request1

$ sikker related 172.245.106.222

🇺🇸·More threats fromUnited States→AS·More threats fromHostPapa→ELAS·More threats targetingELASTICSEARCH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
192.227.211.252	98%	2,724
107.174.82.77	100%	1,332
172.245.28.15	33%	46
107.175.158.198	36%	27
107.173.30.231	66%	3

IP Address	Confidence	Events
66.132.172.128	100%	723
154.23.188.210	95%	2,843
147.185.133.197	80%	164
52.165.81.253	72%	200
192.227.211.252	98%	2,766