Check an IP Address, Domain Name, Subnet, or ASN

105.112.109.41 was found in our database!

$ whois 105.112.109.41

country·🇳🇬 Nigeria

city·Benin City

isp·Celtel Nigeria Limited t.a ZAIN

asn·AS36873

network·Standard

$ sikker risk 105.112.109.41scoring →

confidence

54%Medium

first_seen·Apr 6, 2026

last_seen·1d ago

sessions·1

events·1

$ sikker protocols 105.112.109.41

HTTP

1 / 1

$ sikker summary 105.112.109.41

105.112.109.41 has a threat confidence score of 54%. This IP address from Nigeria (AS36873, Celtel Nigeria Limited t.a ZAIN) has been observed in 1 honeypot sessions targeting HTTP protocols. Detected attack patterns include http dotenv file exposure probe. First observed on April 6, 2026, most recently active April 6, 2026.

$ sikker behaviors 105.112.109.41catalog →

highHttp Dotenv File Exposure Probe1x

Identifies HTTP GET requests targeting the /.env file, indicating attempts to access exposed environment configuration files commonly containing application secrets such as database credentials, API keys, and service tokens.

$ sikker primitives 105.112.109.41

http_method_get1 http_path_dotenv1

$ sikker related 105.112.109.41

🇳🇬·More threats fromNigeria→AS·More threats fromCeltel Nigeria Limited t.a ZAIN→HTTP·More threats targetingHTTP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
105.112.205.53	35%	3
105.119.23.131	39%	4
105.112.68.137	54%	1
105.120.128.194	39%	4
105.113.36.141	35%	3

IP Address	Confidence	Events
102.88.137.213	100%	2,721
102.90.97.223	46%	7
102.90.98.78	35%	3
41.75.89.118	39%	310
129.205.124.208	35%	3