Check an IP Address, Domain Name, Subnet, or ASN

172.71.127.159 was found in our database!

$ whois 172.71.127.159

country·🇫🇷 France

city·Paris

isp·Cloudflare, Inc.

asn·AS13335

network·Standard

$ sikker risk 172.71.127.159scoring →

confidence

4%Low

first_seen·Jan 21, 2026

last_seen·1d ago

sessions·9

events·15

$ sikker protocols 172.71.127.159

HTTPS

6 / 12

HTTP

3 / 3

$ sikker summary 172.71.127.159

172.71.127.159 has a threat confidence score of 4%. This IP address from France (AS13335, Cloudflare, Inc.) has been observed in 9 honeypot sessions targeting HTTPS, HTTP protocols. First observed on January 21, 2026, most recently active March 18, 2026.

$ sikker behaviors 172.71.127.159catalog →

mediumHttps Dotgit Repository Configuration Exposure Probe1x

Identifies an HTTPS request targeting the .git/config file within a web-accessible repository directory. Access attempts to /.git/config indicate automated repository exposure scanning intended to retrieve remote origin URLs, repository structure, and potentially credential-bearing configuration data. This is a common reconnaissance technique used to identify misconfigured web servers exposing version control metadata.

$ sikker primitives 172.71.127.159

http_method_get454 https_path_dotgit_config1 http_request_path_aws_s3_config_json1 http_request_path_root_aws_credentials1 http_phpunit_eval_stdin_php_path_access1

$ sikker related 172.71.127.159

🇫🇷·More threats fromFrance→AS·More threats fromCloudflare, Inc.→HTTP·More threats targetingHTTPS→HTTP·More threats targetingHTTP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
162.158.79.18	4%	1
104.23.253.92	5%	3
162.158.95.219	4%	11
162.158.78.30	5%	2
162.158.167.68	4%	2

IP Address	Confidence	Events
51.91.168.102	99%	619,777
91.196.152.74	82%	111
51.83.143.139	90%	69,323
91.196.152.73	69%	71
161.97.132.79	98%	62,340