Check an IP Address, Domain Name, Subnet, or ASN

172.71.170.156 was found in our database!

$ whois 172.71.170.156

country·🇺🇸 United States

city·Dallas

isp·Cloudflare, Inc.

asn·AS13335

network·Standard

$ sikker risk 172.71.170.156scoring →

confidence

16%Low

first_seen·May 1, 2026

last_seen·1h ago

sessions·1

events·1

$ sikker protocols 172.71.170.156

HTTP

1 / 1

$ sikker summary 172.71.170.156

172.71.170.156 has a threat confidence score of 16%. This IP address from United States (AS13335, Cloudflare, Inc.) has been observed in 1 honeypot sessions targeting HTTP protocols. Detected attack patterns include http dotenv file exposure probe. First observed on May 1, 2026, most recently active May 1, 2026.

$ sikker behaviors 172.71.170.156catalog →

highHttp Dotenv File Exposure Probe1x

Identifies HTTP GET requests targeting the /.env file, indicating attempts to access exposed environment configuration files commonly containing application secrets such as database credentials, API keys, and service tokens.

$ sikker primitives 172.71.170.156

http_method_get1 http_path_dotenv1

$ sikker related 172.71.170.156

🇺🇸·More threats fromUnited States→AS·More threats fromCloudflare, Inc.→HTTP·More threats targetingHTTP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
172.69.109.150	11%	14
104.23.209.51	19%	13
172.71.23.112	10%	1
172.70.126.57	9%	5
104.22.64.100	18%	9

IP Address	Confidence	Events
104.236.237.127	97%	28
159.223.189.125	69%	12
47.85.30.238	93%	195
157.254.223.75	95%	4,603
65.49.1.52	100%	2,179