IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 193.32.126.167 ip

Score
1
/100
raw: 0.08
Reports
36
Last Reported
2026-05-20 10:05 UTC
Categories
Config Exposure Probe (24) Scanning (10) Web Stack Probe (2)

Network details

ASN
39351
Organization
31173 Services AB
Country
FR

Threat Intelligence enriched 2026-11-04 03:03 UTC

DNSBL Status
Listed
zen.spamhaus.org

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-05-20 10:04 UTC aws-creds direct GET /.aws/credentials burst
2026-05-20 10:04 UTC catch-all-suspicious direct GET /config/database.yml burst
2026-05-20 10:04 UTC catch-all-suspicious direct GET /app/config/parameters.yml burst
2026-05-20 10:04 UTC catch-all-script direct GET /settings.php burst
2026-05-20 10:04 UTC catch-all-script direct GET /config.inc.php burst
2026-05-20 10:04 UTC config-php direct GET /config.php burst
2026-05-20 10:04 UTC catch-all-script direct GET /configuration.php burst
2026-05-20 10:04 UTC catch-all-cms direct GET /wp-config.php.txt burst
2026-05-20 10:04 UTC wp-config-backup direct GET /wp-config.php.save burst
2026-05-20 10:03 UTC wp-config-backup direct GET /wp-config.php.old burst
2026-05-20 10:03 UTC wp-config-backup direct GET /wp-config.php.bak burst
2026-05-20 10:03 UTC wp-config direct GET /wp-config.php
2026-05-20 10:03 UTC catch-all-config direct GET /.env.backup
2026-05-20 10:03 UTC catch-all-config direct GET /.env.save
2026-05-20 10:03 UTC catch-all-config direct GET /.env.old
2026-05-20 08:23 UTC aws-creds direct GET /.aws/credentials burst
2026-05-20 08:23 UTC catch-all-suspicious direct GET /config/database.yml burst
2026-05-20 08:23 UTC catch-all-suspicious direct GET /app/config/parameters.yml burst
2026-05-20 08:22 UTC catch-all-script direct GET /settings.php burst
2026-05-20 08:22 UTC catch-all-script direct GET /config.inc.php burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
165.101.119.189 ip
39
 1 PK 2026-11-05 05:23 UTC 2026-11-05 05:23 UTC
45.13.191.201 ip
99
 6 NO 2026-11-05 05:24 UTC 2026-11-05 05:17 UTC
45.13.191.140 ip
75
 2 NO 2026-11-05 05:15 UTC 2026-11-05 05:15 UTC
153.117.48.186 ip
18
 1 PK 2026-11-05 05:11 UTC 2026-11-05 05:11 UTC
45.13.191.164 ip
95
 4 NO 2026-11-05 05:14 UTC 2026-11-05 05:10 UTC
35.210.178.252 ip
55
 2 BE 2026-11-05 05:09 UTC 2026-11-05 05:09 UTC
45.13.191.188 ip
95
 4 NO 2026-11-05 05:12 UTC 2026-11-05 05:09 UTC
45.13.191.155 ip
95
 4 NO 2026-11-05 05:10 UTC 2026-11-05 05:08 UTC
216.70.112.215 ip
100
 21 US 2026-11-05 05:06 UTC 2026-11-05 05:06 UTC
144.172.100.20 ip
45
 1 US 2026-11-05 05:06 UTC 2026-11-05 05:06 UTC
45.13.191.129 ip
98
 5 NO 2026-11-05 05:11 UTC 2026-11-05 05:05 UTC
34.128.113.222 ip
100
 10 ID 2026-11-05 05:05 UTC 2026-11-05 05:04 UTC
45.13.191.227 ip
100
 10 NO 2026-11-05 05:19 UTC 2026-11-05 05:04 UTC
45.13.191.202 ip
95
 4 NO 2026-11-05 05:15 UTC 2026-11-05 05:04 UTC
45.13.191.206 ip
100
 8 NO 2026-11-05 05:24 UTC 2026-11-05 05:03 UTC
45.13.191.149 ip
100
 8 NO 2026-11-05 05:20 UTC 2026-11-05 05:03 UTC
146.120.201.26 ip
39
 1 RU 2026-11-05 05:02 UTC 2026-11-05 05:02 UTC
45.13.191.225 ip
100
 14 NO 2026-11-05 05:25 UTC 2026-11-05 05:02 UTC
45.13.191.207 ip
100
 10 NO 2026-11-05 05:23 UTC 2026-11-05 05:01 UTC
45.13.191.176 ip
100
 20 NO 2026-11-05 05:25 UTC 2026-11-05 05:00 UTC
45.13.191.189 ip
100
 8 NO 2026-11-05 05:23 UTC 2026-11-05 05:00 UTC
45.13.191.230 ip
100
 12 NO 2026-11-05 05:21 UTC 2026-11-05 05:00 UTC
45.13.191.181 ip
100
 8 NO 2026-11-05 05:19 UTC 2026-11-05 05:00 UTC
45.13.191.134 ip
99
 6 NO 2026-11-05 05:07 UTC 2026-11-05 05:00 UTC
45.13.191.171 ip
100
 12 NO 2026-11-05 05:25 UTC 2026-11-05 04:59 UTC

Showing 1-25 of 86927 indicators