Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
185.248.85.25 has a very high threat confidence level of 85%, originating from City of London, United Kingdom, on the Owl Limited network (43357). It has been observed across 70 sessions targeting HTTP, HTTPS, MYSQL, FTP, SSH, with detected attack patterns including http dotenv file exposure probe, First observed on February 13, 2026, most recently active February 13, 2026.
Identifies HTTP GET requests targeting the /.env file, indicating attempts to access exposed environment configuration files commonly containing application secrets such as database credentials, API keys, and service tokens.