Check an IP Address, Domain Name, Subnet, or ASN

45.139.104.147 was found in our database!

$ whois 45.139.104.147

country·🇧🇬 Bulgaria

isp·49.3 Networking LLC

asn·AS399979

network·Standard

$ sikker risk 45.139.104.147scoring →

confidence

63%High

first_seen·Mar 21, 2026

last_seen·2d ago

sessions·3

events·3

$ sikker protocols 45.139.104.147

HTTP

2 / 2

SSH

1 / 1

$ sikker summary 45.139.104.147

45.139.104.147 has a threat confidence score of 63%. This IP address from Bulgaria (AS399979, 49.3 Networking LLC) has been observed in 3 honeypot sessions targeting HTTP, SSH protocols. Detected attack patterns include http dotenv file exposure probe. First observed on March 21, 2026, most recently active March 21, 2026.

$ sikker behaviors 45.139.104.147catalog →

highHttp Dotenv File Exposure Probe1x

Identifies HTTP GET requests targeting the /.env file, indicating attempts to access exposed environment configuration files commonly containing application secrets such as database credentials, API keys, and service tokens.

$ sikker primitives 45.139.104.147

http_method_get2 http_path_dotenv1

$ sikker related 45.139.104.147

🇧🇬·More threats fromBulgaria→AS·More threats from49.3 Networking LLC→HTTP·More threats targetingHTTP→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
45.139.104.6	70%	77
45.139.104.173	47%	8
45.139.104.225	85%	172
45.139.104.152	79%	8
45.139.104.161	84%	472

IP Address	Confidence	Events
195.178.110.30	100%	404,456
94.26.88.29	97%	5,601
45.139.104.6	83%	158
46.238.40.52	59%	821
62.182.118.138	51%	414