IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 163.176.137.114 ip
Score
2
/100
raw: 0.17
Reports
10
Last Reported
2026-07-25 11:47 UTC
Categories
Config Exposure Probe (10)
Network details
ASN
31898
Organization
Oracle Corporation
Country
BR
Threat Intelligence enriched 2026-11-12 19:04 UTC
DNSBL Status
Clean
Sensor Activity last 10 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-07-25 11:46 UTC | catch-all-config | direct | GET | /.env.local | |
| 2026-07-09 20:07 UTC | catch-all-config | direct | GET | /private/.env | |
| 2026-07-09 20:07 UTC | catch-all-config | direct | GET | /public/.env | |
| 2026-07-09 20:06 UTC | catch-all-config | direct | GET | /web/.env | |
| 2026-07-09 20:06 UTC | catch-all-config | direct | GET | /client/.env | |
| 2026-07-09 06:01 UTC | catch-all-config | direct | GET | /.env.prod | |
| 2026-07-09 06:01 UTC | catch-all-config | direct | GET | /.env.dev | |
| 2026-07-09 06:01 UTC | catch-all-config | direct | GET | /.env.development | |
| 2026-07-09 06:01 UTC | catch-all-config | direct | GET | /.env.production | |
| 2026-07-09 04:41 UTC | catch-all-config | direct | GET | /.env.dev |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 80.80.117.116 | ip |
50
|
1 | RU | 2026-11-13 13:00 UTC | 2026-11-13 13:00 UTC |
| 78.85.247.253 | ip |
50
|
1 | RU | 2026-11-13 13:00 UTC | 2026-11-13 13:00 UTC |
| 5.58.189.218 | ip |
50
|
1 | UA | 2026-11-13 13:00 UTC | 2026-11-13 13:00 UTC |
| 180.74.224.198 | ip |
39
|
1 | MY | 2026-11-13 13:00 UTC | 2026-11-13 13:00 UTC |
| 5.139.229.58 | ip |
39
|
1 | RU | 2026-11-13 13:00 UTC | 2026-11-13 13:00 UTC |
| 37.126.138.135 | ip |
39
|
1 | SA | 2026-11-13 13:00 UTC | 2026-11-13 13:00 UTC |
| 223.181.86.129 | ip |
39
|
1 | IN | 2026-11-13 13:00 UTC | 2026-11-13 13:00 UTC |
| 197.45.139.252 | ip |
39
|
1 | EG | 2026-11-13 12:59 UTC | 2026-11-13 12:59 UTC |
| 175.136.142.118 | ip |
39
|
1 | MY | 2026-11-13 12:59 UTC | 2026-11-13 12:59 UTC |
| 157.85.208.77 | ip |
39
|
1 | ID | 2026-11-13 12:58 UTC | 2026-11-13 12:58 UTC |
| 223.228.176.230 | ip |
39
|
1 | IN | 2026-11-13 12:58 UTC | 2026-11-13 12:58 UTC |
| 143.255.179.152 | ip |
39
|
1 | CL | 2026-11-13 12:58 UTC | 2026-11-13 12:58 UTC |
| 61.245.23.162 | ip |
50
|
1 | PH | 2026-11-13 12:58 UTC | 2026-11-13 12:58 UTC |
| 187.190.189.149 | ip |
39
|
1 | MX | 2026-11-13 12:58 UTC | 2026-11-13 12:58 UTC |
| 189.75.178.188 | ip |
59
|
1 | US | 2026-11-13 12:57 UTC | 2026-11-13 12:57 UTC |
| 103.131.145.213 | ip |
50
|
1 | BD | 2026-11-13 12:57 UTC | 2026-11-13 12:57 UTC |
| 49.148.113.219 | ip |
39
|
1 | PH | 2026-11-13 12:57 UTC | 2026-11-13 12:57 UTC |
| 137.59.230.228 | ip |
50
|
1 | PK | 2026-11-13 12:56 UTC | 2026-11-13 12:56 UTC |
| 178.120.58.160 | ip |
50
|
1 | BY | 2026-11-13 12:56 UTC | 2026-11-13 12:56 UTC |
| 160.178.166.234 | ip |
50
|
1 | MA | 2026-11-13 12:56 UTC | 2026-11-13 12:56 UTC |
| 170.84.8.117 | ip |
50
|
1 | TT | 2026-11-13 12:55 UTC | 2026-11-13 12:55 UTC |
| 175.141.228.178 | ip |
50
|
1 | MY | 2026-11-13 12:55 UTC | 2026-11-13 12:55 UTC |
| 187.251.110.174 | ip |
39
|
1 | MX | 2026-11-13 12:55 UTC | 2026-11-13 12:55 UTC |
| 187.244.114.6 | ip |
50
|
1 | MX | 2026-11-13 12:55 UTC | 2026-11-13 12:55 UTC |
| 169.224.13.56 | ip |
39
|
1 | IQ | 2026-11-13 12:54 UTC | 2026-11-13 12:54 UTC |
Showing 1-25 of 98562 indicators