Check an IP Address, Domain Name, Subnet, or ASN

45.66.35.25 was found in our database!

$ whois 45.66.35.25

country·🇳🇱 The Netherlands

city·Amsterdam

isp·Sabotage LLC

asn·AS61125

network·Tor Exit Node

$ sikker risk 45.66.35.25scoring →

confidence

55%Medium

first_seen·Mar 23, 2026

last_seen·26d ago

sessions·1

events·1

$ sikker protocols 45.66.35.25

HTTP

1 / 1

$ sikker summary 45.66.35.25

45.66.35.25 has a threat confidence score of 55%. This IP address from The Netherlands (AS61125, Sabotage LLC) has been observed in 1 honeypot sessions targeting HTTP protocols. This IP is a known Tor exit node. Detected attack patterns include http dotenv file exposure probe. First observed on March 23, 2026, most recently active March 23, 2026.

$ sikker behaviors 45.66.35.25catalog →

highHttp Dotenv File Exposure Probe1x

Identifies HTTP GET requests targeting the /.env file, indicating attempts to access exposed environment configuration files commonly containing application secrets such as database credentials, API keys, and service tokens.

$ sikker primitives 45.66.35.25

http_method_get3 http_path_dotenv1

$ sikker related 45.66.35.25

🇳🇱·More threats fromThe Netherlands→AS·More threats fromSabotage LLC→HTTP·More threats targetingHTTP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
45.66.35.28	23%	1
45.66.35.33	54%	8
45.66.35.20	23%	1
45.66.35.31	41%	3

IP Address	Confidence	Events
62.164.177.28	97%	27,498
45.148.10.121	97%	257,993
45.148.10.67	69%	120
46.151.178.13	95%	10,283
45.8.17.125	90%	625