IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 185.195.59.35 ip
Score
100
/100
raw: 97.94
Reports
12
Last Reported
2026-11-15 12:47 UTC
Categories
Config Exposure Probe (12)
Network details
ASN
62240
Organization
Clouvider Limited
Country
US
Threat Intelligence enriched 2026-11-15 12:45 UTC
DNSBL Status
Clean
Sensor Activity last 12 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-15 12:47 UTC | catch-all-config | direct | GET | /[host]/.env | |
| 2026-11-15 12:47 UTC | catch-all-config | direct | GET | /database/.env | |
| 2026-11-15 12:47 UTC | catch-all-config | direct | GET | /library/.env | |
| 2026-11-15 12:46 UTC | catch-all-config | direct | GET | /protected/.env | |
| 2026-11-15 12:46 UTC | catch-all-config | direct | GET | /crm/.env | burst |
| 2026-11-15 12:46 UTC | catch-all-config | direct | GET | /local/.env | |
| 2026-11-15 12:46 UTC | catch-all-config | direct | GET | /.env.dev | |
| 2026-11-15 12:46 UTC | catch-all-config | direct | GET | /protected/.env | |
| 2026-11-15 12:46 UTC | catch-all-config | direct | GET | /sites/all/libraries/mailchimp/.env | |
| 2026-11-15 12:46 UTC | catch-all-config | direct | GET | /shop/.env | |
| 2026-11-15 12:45 UTC | catch-all-config | direct | GET | /.env_sample | |
| 2026-11-15 12:45 UTC | catch-all-config | direct | GET | /.env_1 |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 35.214.231.158 | ip |
55
|
2 | NL | 2026-11-15 13:05 UTC | 2026-11-15 13:05 UTC |
| 86.38.187.179 | ip |
39
|
1 | LT | 2026-11-15 13:05 UTC | 2026-11-15 13:05 UTC |
| 36.77.189.55 | ip |
39
|
1 | ID | 2026-11-15 13:05 UTC | 2026-11-15 13:05 UTC |
| 31.58.245.178 | ip |
94
|
4 | TR | 2026-11-15 13:05 UTC | 2026-11-15 13:05 UTC |
| 190.142.155.134 | ip |
50
|
1 | VE | 2026-11-15 13:05 UTC | 2026-11-15 13:05 UTC |
| 104.28.231.134 | ip |
70
|
2 | MX | 2026-11-15 13:05 UTC | 2026-11-15 13:05 UTC |
| 38.166.114.159 | ip |
50
|
1 | VE | 2026-11-15 13:04 UTC | 2026-11-15 13:04 UTC |
| 104.28.199.134 | ip |
100
|
9 | MX | 2026-11-15 13:05 UTC | 2026-11-15 13:04 UTC |
| 104.28.231.132 | ip |
100
|
9 | MX | 2026-11-15 13:05 UTC | 2026-11-15 13:04 UTC |
| 104.28.199.135 | ip |
95
|
4 | MX | 2026-11-15 13:05 UTC | 2026-11-15 13:04 UTC |
| 104.28.199.133 | ip |
99
|
6 | MX | 2026-11-15 13:05 UTC | 2026-11-15 13:04 UTC |
| 103.107.78.212 | ip |
39
|
1 | BD | 2026-11-15 13:03 UTC | 2026-11-15 13:03 UTC |
| 103.166.153.47 | ip |
50
|
1 | BD | 2026-11-15 13:03 UTC | 2026-11-15 13:03 UTC |
| 103.181.111.213 | ip |
39
|
1 | IN | 2026-11-15 13:01 UTC | 2026-11-15 13:01 UTC |
| 154.110.163.225 | ip |
50
|
1 | TN | 2026-11-15 13:01 UTC | 2026-11-15 13:01 UTC |
| 49.42.93.15 | ip |
39
|
1 | IN | 2026-11-15 13:01 UTC | 2026-11-15 13:01 UTC |
| 41.248.12.67 | ip |
50
|
1 | MA | 2026-11-15 13:01 UTC | 2026-11-15 13:01 UTC |
| 187.0.233.34 | ip |
39
|
1 | BR | 2026-11-15 13:01 UTC | 2026-11-15 13:01 UTC |
| 147.90.103.185 | ip |
39
|
1 | PK | 2026-11-15 13:01 UTC | 2026-11-15 13:01 UTC |
| 103.69.102.158 | ip |
39
|
1 | IN | 2026-11-15 13:01 UTC | 2026-11-15 13:01 UTC |
| 193.104.179.200 | ip |
50
|
1 | UZ | 2026-11-15 13:00 UTC | 2026-11-15 13:00 UTC |
| 187.233.235.4 | ip |
39
|
1 | MX | 2026-11-15 13:00 UTC | 2026-11-15 13:00 UTC |
| 148.227.115.199 | ip |
50
|
1 | CL | 2026-11-15 12:59 UTC | 2026-11-15 12:59 UTC |
| 103.106.119.37 | ip |
50
|
1 | BD | 2026-11-15 12:59 UTC | 2026-11-15 12:59 UTC |
| 178.69.222.113 | ip |
39
|
1 | RU | 2026-11-15 12:59 UTC | 2026-11-15 12:59 UTC |
Showing 1-25 of 104969 indicators