Check an IP Address, Domain Name, Subnet, or ASN

45.139.104.152 was found in our database!

$ whois 45.139.104.152

country·🇧🇬 Bulgaria

isp·49.3 Networking LLC

asn·AS399979

network·Standard

$ sikker risk 45.139.104.152scoring →

confidence

79%High

first_seen·Mar 10, 2026

last_seen·11d ago

sessions·8

events·8

$ sikker protocols 45.139.104.152

HTTP

4 / 4

SMTP

4 / 4

$ sikker summary 45.139.104.152

45.139.104.152 has a threat confidence score of 79%. This IP address from Bulgaria (AS399979, 49.3 Networking LLC) has been observed in 8 honeypot sessions targeting HTTP, SMTP protocols. Detected attack patterns include http dotenv file exposure probe. First observed on March 10, 2026, most recently active March 12, 2026.

$ sikker behaviors 45.139.104.152catalog →

highHttp Dotenv File Exposure Probe4x

Identifies HTTP GET requests targeting the /.env file, indicating attempts to access exposed environment configuration files commonly containing application secrets such as database credentials, API keys, and service tokens.

$ sikker primitives 45.139.104.152

http_method_get4 http_path_dotenv4

$ sikker related 45.139.104.152

🇧🇬·More threats fromBulgaria→AS·More threats from49.3 Networking LLC→HTTP·More threats targetingHTTP→SMTP·More threats targetingSMTP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
45.139.104.6	83%	158
45.139.104.147	63%	3
45.139.104.173	47%	8
45.139.104.225	85%	172
45.139.104.161	84%	472

IP Address	Confidence	Events
195.178.110.218	100%	14,304
195.178.110.30	100%	404,496
79.124.40.174	100%	108,411
85.11.167.12	96%	15,411
94.26.88.29	97%	5,601