IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 139.59.102.20 ip
Score
3
/100
raw: 0.31
Reports
15
Last Reported
2026-07-26 15:06 UTC
Categories
Config Exposure Probe (14)
Scanning (1)
Network details
ASN
14061
Organization
DigitalOcean, LLC
Country
SG
Threat Intelligence enriched 2026-11-05 05:11 UTC
DNSBL Status
Clean
Sensor Activity last 14 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-07-26 15:06 UTC | catch-all-config | direct | GET | /.env.prod | |
| 2026-07-26 15:06 UTC | catch-all-config | direct | GET | /.env.dev | |
| 2026-07-26 15:05 UTC | catch-all-config | direct | GET | /.env.development | |
| 2026-07-26 15:05 UTC | catch-all-config | direct | GET | /.env.production | |
| 2026-07-09 06:02 UTC | catch-all-config | direct | GET | /.env.save | |
| 2026-07-09 06:02 UTC | catch-all-config | direct | GET | /.env.backup | |
| 2026-07-09 06:01 UTC | catch-all-config | direct | GET | /.env.staging | |
| 2026-07-09 06:01 UTC | catch-all-config | direct | GET | /.env.test | |
| 2026-07-09 00:35 UTC | catch-all-scan | direct | GET | /env | burst |
| 2026-07-09 00:35 UTC | catch-all-config | direct | GET | /.envrc | |
| 2026-07-09 00:34 UTC | catch-all-config | direct | GET | /.env.test.local | |
| 2026-07-09 00:34 UTC | catch-all-config | direct | GET | /.env.development.local | |
| 2026-07-01 23:51 UTC | catch-all-config | direct | GET | /.env.old | |
| 2026-07-01 11:45 UTC | catch-all-config | direct | GET | /app/.env |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 189.229.146.14 | ip |
39
|
1 | MX | 2026-11-12 01:02 UTC | 2026-11-12 01:02 UTC |
| 105.157.116.191 | ip |
50
|
1 | MA | 2026-11-12 01:02 UTC | 2026-11-12 01:02 UTC |
| 171.236.69.160 | ip |
39
|
1 | VN | 2026-11-12 01:00 UTC | 2026-11-12 01:00 UTC |
| 201.176.206.102 | ip |
50
|
1 | AR | 2026-11-12 00:59 UTC | 2026-11-12 00:59 UTC |
| 177.231.185.227 | ip |
39
|
1 | MX | 2026-11-12 00:58 UTC | 2026-11-12 00:58 UTC |
| 153.67.137.89 | ip |
39
|
1 | CL | 2026-11-12 00:58 UTC | 2026-11-12 00:58 UTC |
| 187.190.105.235 | ip |
39
|
1 | MX | 2026-11-12 00:58 UTC | 2026-11-12 00:58 UTC |
| 108.186.84.67 | ip |
100
|
15 | US | 2026-11-12 01:01 UTC | 2026-11-12 00:57 UTC |
| 154.66.166.120 | ip |
39
|
1 | BF | 2026-11-12 00:56 UTC | 2026-11-12 00:56 UTC |
| 46.60.117.102 | ip |
50
|
1 | PS | 2026-11-12 00:55 UTC | 2026-11-12 00:55 UTC |
| 103.173.173.238 | ip |
39
|
1 | BD | 2026-11-12 00:55 UTC | 2026-11-12 00:55 UTC |
| 45.189.174.130 | ip |
39
|
1 | AR | 2026-11-12 00:54 UTC | 2026-11-12 00:54 UTC |
| 181.78.64.84 | ip |
50
|
1 | CO | 2026-11-12 00:54 UTC | 2026-11-12 00:54 UTC |
| 186.189.112.53 | ip |
39
|
1 | CL | 2026-11-12 00:54 UTC | 2026-11-12 00:54 UTC |
| 126.209.110.155 | ip |
39
|
1 | PH | 2026-11-12 00:53 UTC | 2026-11-12 00:53 UTC |
| 76.34.252.72 | ip |
39
|
1 | US | 2026-11-12 00:52 UTC | 2026-11-12 00:52 UTC |
| 190.90.221.122 | ip |
39
|
1 | CO | 2026-11-12 00:52 UTC | 2026-11-12 00:52 UTC |
| 78.164.53.121 | ip |
39
|
1 | TR | 2026-11-12 00:51 UTC | 2026-11-12 00:51 UTC |
| 216.122.139.109 | ip |
39
|
1 | CA | 2026-11-12 00:49 UTC | 2026-11-12 00:49 UTC |
| 14.192.213.44 | ip |
50
|
1 | MY | 2026-11-12 00:48 UTC | 2026-11-12 00:48 UTC |
| 92.63.188.148 | ip |
39
|
1 | RU | 2026-11-12 00:47 UTC | 2026-11-12 00:47 UTC |
| 187.86.20.78 | ip |
50
|
1 | BR | 2026-11-12 00:47 UTC | 2026-11-12 00:47 UTC |
| 212.47.131.74 | ip |
50
|
1 | AZ | 2026-11-12 00:46 UTC | 2026-11-12 00:46 UTC |
| 189.190.249.152 | ip |
50
|
1 | MX | 2026-11-12 00:46 UTC | 2026-11-12 00:46 UTC |
| 189.203.6.239 | ip |
50
|
1 | MX | 2026-11-12 00:46 UTC | 2026-11-12 00:46 UTC |
Showing 1-25 of 95319 indicators