Loading threats
An HTTP GET request to the Elasticsearch /_cluster/stats endpoint. This primitive represents enumeration of cluster-level metadata such as node count, index totals, shard distribution, and storage statistics. Automated scanners and attackers commonly query this endpoint to assess cluster size, exposure level, and potential value before attempting deeper reconnaissance or data access.
| IP Address | Risk | Events | Sessions | Country | ASN | Last Seen |
|---|---|---|---|---|---|---|
| 207.90.244.28 | 100% | 6,693 | 3,819 | 🇺🇸 US | AS174 | 2026-03-04 |
| 207.90.244.14 | 100% | 5,373 | 3,220 | 🇺🇸 US | AS174 | 2026-03-04 |
| 71.6.199.23 | 100% | 5,358 | 3,590 | 🇺🇸 US | AS10439 | 2026-04-20 |
| 93.174.95.106 | 100% | 4,313 | 3,037 | 🇳🇱 NL | AS202425 | 2026-04-21 |
| 80.82.77.139 | 100% | 4,148 | 2,945 | 🇳🇱 NL | AS202425 | 2026-04-21 |
| 167.94.146.56 | 50% | 4,133 | 2,943 | 🇺🇸 US | AS398705 | 2026-04-21 |
| 167.94.146.60 | 50% | 4,115 | 3,092 | 🇺🇸 US | AS398705 | 2026-04-21 |
| 80.82.77.33 | 100% | 4,042 | 2,871 | 🇳🇱 NL | AS202425 | 2026-04-20 |
| 167.94.146.55 | 50% | 4,008 | 2,823 | 🇺🇸 US | AS398705 | 2026-04-21 |
| 167.94.146.61 | 50% | 4,005 | 2,850 | 🇺🇸 US | AS398705 | 2026-04-21 |
| 167.94.146.57 | 50% | 3,977 | 2,969 | 🇺🇸 US | AS398705 | 2026-04-21 |
| 167.94.146.48 | 50% | 3,954 | 2,939 | 🇺🇸 US | AS398705 | 2026-04-21 |
| 71.6.135.131 | 100% | 3,935 | 2,815 | 🇺🇸 US | AS10439 | 2026-04-21 |
| 167.94.146.63 | 50% | 3,921 | 2,840 | 🇺🇸 US | AS398705 | 2026-04-21 |
| 167.94.146.62 | 50% | 3,909 | 2,826 | 🇺🇸 US | AS398705 | 2026-04-21 |
| 167.94.146.52 | 50% | 3,859 | 2,813 | 🇺🇸 US | AS398705 | 2026-04-21 |
| 167.94.146.51 | 50% | 3,825 | 2,806 | 🇺🇸 US | AS398705 | 2026-04-21 |
| 167.94.146.59 | 50% | 3,812 | 2,783 | 🇺🇸 US | AS398705 | 2026-04-21 |
| 167.94.146.58 | 50% | 3,805 | 2,939 | 🇺🇸 US | AS398705 | 2026-04-21 |
| 86.54.31.32 | 100% | 3,753 | 2,503 | 🇨🇦 CA | AS12989 | 2026-04-21 |