Check an IP Address, Domain Name, Subnet, or ASN

172.68.150.4 was found in our database!

$ whois 172.68.150.4

country·🇺🇸 United States

isp·Cloudflare, Inc.

asn·AS13335

network·Standard

$ sikker risk 172.68.150.4scoring →

confidence

22%Low

first_seen·Mar 25, 2026

last_seen·Mar 30, 2026

sessions·5

events·5

$ sikker protocols 172.68.150.4

HTTP

4 / 4

HTTPS

1 / 1

$ sikker summary 172.68.150.4

172.68.150.4 has a threat confidence score of 22%. This IP address from United States (AS13335, Cloudflare, Inc.) has been observed in 5 honeypot sessions targeting HTTP, HTTPS protocols. Detected attack patterns include http dotenv file exposure probe. First observed on March 25, 2026, most recently active March 30, 2026.

$ sikker behaviors 172.68.150.4catalog →

highHttp Dotenv File Exposure Probe3x

Identifies HTTP GET requests targeting the /.env file, indicating attempts to access exposed environment configuration files commonly containing application secrets such as database credentials, API keys, and service tokens.

$ sikker primitives 172.68.150.4

http_method_get6 http_path_dotenv4 https_path_dotenv1 https_path_config_json1 https_path_dotgit_config1 https_path_dotenv_staging1 https_path_dotbash_history1 https_path_dotenv_production1 https_path_dotenv_development1 http_phpunit_eval_stdin_php_path_access1

$ sikker related 172.68.150.4

🇺🇸·More threats fromUnited States→AS·More threats fromCloudflare, Inc.→HTTP·More threats targetingHTTP→HTTP·More threats targetingHTTPS→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
162.159.104.20	18%	3
104.23.243.195	19%	171
104.23.253.152	17%	14
172.70.94.52	19%	8
172.71.98.163	8%	2

IP Address	Confidence	Events
50.6.170.204	80%	4
104.243.38.137	56%	1
50.6.195.66	91%	9
205.210.31.58	99%	395
184.105.139.67	100%	3,010