IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 105.127.13.62 ip
Score
100
/100
raw: 106.95
Reports
11
Last Reported
2026-11-15 11:35 UTC
Categories
Config Exposure Probe (9)
Web Stack Probe (2)
Network details
ASN
36873
Organization
Celtel Nigeria Limited t.a ZAIN
Country
NG
Threat Intelligence enriched 2026-11-15 11:34 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 11 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-15 11:35 UTC | catch-all-config | direct | GET | /[host]/.env | burst |
| 2026-11-15 11:35 UTC | catch-all-config | direct | GET | /database/.env | burst |
| 2026-11-15 11:35 UTC | catch-all-config | direct | GET | /conf/.env | burst |
| 2026-11-15 11:34 UTC | catch-all-config | direct | GET | /app/config/.env | burst |
| 2026-11-15 11:34 UTC | catch-all-config | direct | GET | /audio/.env | burst |
| 2026-11-15 11:34 UTC | catch-all-config | direct | GET | /crm/.env | burst |
| 2026-11-15 11:34 UTC | catch-all-config | direct | GET | /local/.env | burst |
| 2026-11-15 11:34 UTC | catch-all-config | direct | GET | /old/.env | |
| 2026-11-15 11:34 UTC | wp-admin | direct | GET | /wp-admin/.env | |
| 2026-11-15 11:34 UTC | wp-content | direct | GET | /wp-content/.env | |
| 2026-11-15 11:34 UTC | catch-all-config | direct | GET | /apps/.env |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 46.60.13.195 | ip |
39
|
1 | PS | 2026-11-15 11:48 UTC | 2026-11-15 11:48 UTC |
| 14.192.215.51 | ip |
39
|
1 | MY | 2026-11-15 11:48 UTC | 2026-11-15 11:48 UTC |
| 210.14.103.107 | ip |
39
|
1 | MM | 2026-11-15 11:48 UTC | 2026-11-15 11:48 UTC |
| 223.91.175.1 | ip |
50
|
1 | CN | 2026-11-15 11:47 UTC | 2026-11-15 11:47 UTC |
| 102.180.109.180 | ip |
50
|
1 | BF | 2026-11-15 11:47 UTC | 2026-11-15 11:47 UTC |
| 201.141.28.183 | ip |
50
|
1 | MX | 2026-11-15 11:47 UTC | 2026-11-15 11:47 UTC |
| 187.211.86.109 | ip |
39
|
1 | MX | 2026-11-15 11:46 UTC | 2026-11-15 11:46 UTC |
| 190.102.2.46 | ip |
39
|
1 | SX | 2026-11-15 11:46 UTC | 2026-11-15 11:46 UTC |
| 180.252.162.20 | ip |
39
|
1 | ID | 2026-11-15 11:45 UTC | 2026-11-15 11:45 UTC |
| 121.121.57.24 | ip |
39
|
1 | MY | 2026-11-15 11:45 UTC | 2026-11-15 11:45 UTC |
| 91.223.88.164 | ip |
39
|
1 | UA | 2026-11-15 11:45 UTC | 2026-11-15 11:45 UTC |
| 216.131.82.231 | ip |
50
|
1 | US | 2026-11-15 11:44 UTC | 2026-11-15 11:44 UTC |
| 152.59.87.202 | ip |
39
|
1 | IN | 2026-11-15 11:44 UTC | 2026-11-15 11:44 UTC |
| 191.253.28.189 | ip |
50
|
1 | BR | 2026-11-15 11:43 UTC | 2026-11-15 11:43 UTC |
| 85.113.213.89 | ip |
39
|
1 | RU | 2026-11-15 11:42 UTC | 2026-11-15 11:42 UTC |
| 14.182.242.89 | ip |
50
|
1 | VN | 2026-11-15 11:41 UTC | 2026-11-15 11:41 UTC |
| 187.188.14.6 | ip |
39
|
1 | MX | 2026-11-15 11:41 UTC | 2026-11-15 11:41 UTC |
| 165.50.30.104 | ip |
50
|
1 | TN | 2026-11-15 11:41 UTC | 2026-11-15 11:41 UTC |
| 45.83.94.108 | ip |
50
|
1 | RU | 2026-11-15 11:39 UTC | 2026-11-15 11:39 UTC |
| 106.213.86.59 | ip |
39
|
1 | IN | 2026-11-15 11:39 UTC | 2026-11-15 11:39 UTC |
| 103.151.60.184 | ip |
50
|
1 | BD | 2026-11-15 11:39 UTC | 2026-11-15 11:39 UTC |
| 124.29.226.249 | ip |
50
|
1 | PK | 2026-11-15 11:39 UTC | 2026-11-15 11:39 UTC |
| 165.22.158.50 | ip |
100
|
28 | US | 2026-11-15 11:48 UTC | 2026-11-15 11:38 UTC |
| 149.113.97.104 | ip |
50
|
1 | ID | 2026-11-15 11:37 UTC | 2026-11-15 11:37 UTC |
| 122.54.105.23 | ip |
50
|
1 | PH | 2026-11-15 11:36 UTC | 2026-11-15 11:36 UTC |
Showing 1-25 of 104799 indicators