Check an IP Address, Domain Name, Subnet, or ASN

194.127.199.11 was found in our database!

$ whois 194.127.199.11

country·🇳🇴 Norway

city·Oslo

isp·Blix Solutions AS

asn·AS50304

network·Standard

$ sikker risk 194.127.199.11scoring →

confidence

54%Medium

first_seen·May 2, 2026

last_seen·3d ago

sessions·1

events·1

$ sikker protocols 194.127.199.11

HTTP

1 / 1

$ sikker summary 194.127.199.11

194.127.199.11 has a threat confidence score of 54%. This IP address from Norway (AS50304, Blix Solutions AS) has been observed in 1 honeypot sessions targeting HTTP protocols. Detected attack patterns include http dotenv file exposure probe. First observed on May 2, 2026, most recently active May 2, 2026.

$ sikker behaviors 194.127.199.11catalog →

highHttp Dotenv File Exposure Probe1x

Identifies HTTP GET requests targeting the /.env file, indicating attempts to access exposed environment configuration files commonly containing application secrets such as database credentials, API keys, and service tokens.

$ sikker primitives 194.127.199.11

http_method_get1 http_path_dotenv1

$ sikker related 194.127.199.11

🇳🇴·More threats fromNorway→AS·More threats fromBlix Solutions AS→HTTP·More threats targetingHTTP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
185.12.59.118	78%	7,777
185.12.59.117	76%	5,190
194.127.199.19	43%	2
31.169.53.38	23%	1
193.138.7.138	12%	8

IP Address	Confidence	Events
162.158.222.21	12%	5
172.64.209.34	12%	5
185.12.59.118	78%	7,777
185.12.59.117	76%	5,190
194.127.199.19	43%	2