Check an IP Address, Domain Name, Subnet, or ASN

172.71.99.97 was found in our database!

$ whois 172.71.99.97

country·🇳🇱 The Netherlands

city·Amsterdam

isp·Cloudflare, Inc.

asn·AS13335

network·Standard

$ sikker risk 172.71.99.97scoring →

confidence

16%Low

first_seen·Apr 18, 2026

last_seen·1h ago

sessions·1

events·1

$ sikker protocols 172.71.99.97

HTTP

1 / 1

$ sikker summary 172.71.99.97

172.71.99.97 has a threat confidence score of 16%. This IP address from The Netherlands (AS13335, Cloudflare, Inc.) has been observed in 1 honeypot sessions targeting HTTP protocols. Detected attack patterns include http dotenv file exposure probe. First observed on April 18, 2026, most recently active April 18, 2026.

$ sikker behaviors 172.71.99.97catalog →

highHttp Dotenv File Exposure Probe1x

Identifies HTTP GET requests targeting the /.env file, indicating attempts to access exposed environment configuration files commonly containing application secrets such as database credentials, API keys, and service tokens.

$ sikker primitives 172.71.99.97

http_method_get1 http_path_dotenv1

$ sikker related 172.71.99.97

🇳🇱·More threats fromThe Netherlands→AS·More threats fromCloudflare, Inc.→HTTP·More threats targetingHTTP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
172.69.150.76	10%	1
162.158.6.191	5%	26
162.158.6.190	4%	21
172.69.151.105	4%	4
162.158.91.162	15%	5

IP Address	Confidence	Events
130.12.180.174	91%	7,058
45.148.10.192	100%	37,117
103.45.247.79	96%	27
192.42.116.107	49%	22
192.42.116.96	66%	56