IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 147.45.135.191 ip
Score
2
/100
raw: 0.17
Reports
11
Last Reported
2026-07-09 20:54 UTC
Categories
Config Exposure Probe (9)
Scanning (2)
Network details
ASN
210976
Organization
Timeweb, LLP
Country
NL
Threat Intelligence enriched 2026-11-05 07:12 UTC
Reverse DNS
8972707-vj98447.twc1.net
DNSBL Status
Clean
Sensor Activity last 10 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-07-09 20:54 UTC | catch-all-config | direct | GET | /.env.tmp | |
| 2026-07-09 20:52 UTC | catch-all-suspicious | direct | GET | /config | |
| 2026-07-09 20:04 UTC | catch-all-config | direct | GET | /.env.development.local | |
| 2026-07-09 20:04 UTC | catch-all-config | direct | GET | /.env.production.local | |
| 2026-07-09 20:04 UTC | catch-all-config | direct | GET | /.env.template | |
| 2026-07-09 20:04 UTC | catch-all-config | direct | GET | /.env.dist | |
| 2026-07-09 16:52 UTC | catch-all-config | direct | GET | /.env.local | |
| 2026-07-09 16:52 UTC | dot-env | direct | GET | /.env | |
| 2026-07-09 16:51 UTC | catch-all-suspicious | direct | GET | /config | |
| 2026-07-09 06:03 UTC | catch-all-config | direct | GET | /.env.sample |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 185.147.102.235 | ip |
50
|
1 | IQ | 2026-11-12 06:27 UTC | 2026-11-12 06:27 UTC |
| 158.140.170.19 | ip |
50
|
1 | ID | 2026-11-12 06:26 UTC | 2026-11-12 06:26 UTC |
| 79.139.181.102 | ip |
50
|
1 | RU | 2026-11-12 06:26 UTC | 2026-11-12 06:26 UTC |
| 34.65.175.57 | ip |
100
|
127 | CH | 2026-11-12 06:28 UTC | 2026-11-12 06:26 UTC |
| 94.158.60.59 | ip |
39
|
1 | UZ | 2026-11-12 06:25 UTC | 2026-11-12 06:25 UTC |
| 180.191.142.34 | ip |
50
|
1 | PH | 2026-11-12 06:25 UTC | 2026-11-12 06:25 UTC |
| 191.116.85.190 | ip |
50
|
1 | CL | 2026-11-12 06:24 UTC | 2026-11-12 06:24 UTC |
| 189.76.71.13 | ip |
39
|
1 | BR | 2026-11-12 06:24 UTC | 2026-11-12 06:24 UTC |
| 161.142.140.241 | ip |
39
|
1 | MY | 2026-11-12 06:24 UTC | 2026-11-12 06:24 UTC |
| 105.154.252.36 | ip |
39
|
1 | MA | 2026-11-12 06:24 UTC | 2026-11-12 06:24 UTC |
| 186.189.112.103 | ip |
39
|
1 | CL | 2026-11-12 06:23 UTC | 2026-11-12 06:23 UTC |
| 142.154.114.41 | ip |
50
|
1 | SA | 2026-11-12 06:22 UTC | 2026-11-12 06:22 UTC |
| 177.138.73.0 | ip |
39
|
1 | BR | 2026-11-12 06:21 UTC | 2026-11-12 06:21 UTC |
| 187.34.78.230 | ip |
50
|
1 | BR | 2026-11-12 06:21 UTC | 2026-11-12 06:21 UTC |
| 167.250.126.226 | ip |
39
|
1 | BR | 2026-11-12 06:20 UTC | 2026-11-12 06:20 UTC |
| 190.112.186.169 | ip |
50
|
1 | AR | 2026-11-12 06:18 UTC | 2026-11-12 06:18 UTC |
| 190.12.121.171 | ip |
39
|
1 | AR | 2026-11-12 06:17 UTC | 2026-11-12 06:17 UTC |
| 223.236.99.220 | ip |
50
|
1 | IN | 2026-11-12 06:17 UTC | 2026-11-12 06:17 UTC |
| 181.160.136.90 | ip |
39
|
1 | CL | 2026-11-12 06:16 UTC | 2026-11-12 06:16 UTC |
| 130.211.217.113 | ip |
85
|
5 | US | 2026-11-12 06:16 UTC | 2026-11-12 06:16 UTC |
| 181.78.75.244 | ip |
50
|
1 | CO | 2026-11-12 06:14 UTC | 2026-11-12 06:14 UTC |
| 103.147.246.39 | ip |
39
|
1 | ID | 2026-11-12 06:14 UTC | 2026-11-12 06:14 UTC |
| 177.245.248.221 | ip |
50
|
1 | MX | 2026-11-12 06:13 UTC | 2026-11-12 06:13 UTC |
| 216.28.231.140 | ip |
50
|
1 | AR | 2026-11-12 06:13 UTC | 2026-11-12 06:13 UTC |
| 122.172.84.28 | ip |
39
|
1 | IN | 2026-11-12 06:13 UTC | 2026-11-12 06:13 UTC |
Showing 1-25 of 96016 indicators