IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 213.209.159.175 ip

Score
75
/100
raw: 13.77
Reports
1110
Last Reported
2026-10-28 05:42 UTC
Categories
Config Exposure Probe (585) Scanning (426) Admin Panel Probe (50) API Probe (49)

Network details

ASN
208137
Organization
Feo Prest SRL
Country
DE

Threat Intelligence enriched 2026-11-02 21:06 UTC

DNSBL Status
Listed
zen.spamhaus.org

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-10-28 05:42 UTC dot-env direct GET /.env
2026-10-18 09:23 UTC dot-env direct GET /.env
2026-09-10 15:37 UTC dot-env direct GET /.env
2026-09-10 13:01 UTC dot-env direct GET /.env
2026-09-10 04:26 UTC dot-env direct GET /.env
2026-09-10 04:14 UTC dot-env direct GET /.env
2026-08-05 13:50 UTC dot-env direct GET /.env
2026-07-29 15:55 UTC catch-all-config direct GET /blog/.env
2026-07-29 15:55 UTC catch-all-config direct GET /beta/.env
2026-07-29 15:55 UTC api direct GET /api/v2/.env
2026-07-29 15:55 UTC catch-all-config direct GET /.env.prod
2026-07-29 15:54 UTC catch-all-config direct GET /twilio.env
2026-07-29 15:54 UTC catch-all-config direct GET /system/.env
2026-07-29 15:54 UTC catch-all-config direct GET /support/.env
2026-07-29 15:54 UTC catch-all-config direct GET /doc/.env
2026-07-29 15:54 UTC dashboard direct GET /dashboard/.env
2026-07-29 15:54 UTC catch-all-config direct GET /content/.env
2026-07-29 15:54 UTC catch-all-config direct GET /config.env
2026-07-29 15:53 UTC catch-all-config direct GET /application/.env
2026-07-29 15:53 UTC admin direct GET /admin/phpinfo

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
104.28.195.130 ip
97
 6 BE 2026-11-04 14:17 UTC 2026-11-04 14:17 UTC
182.2.164.169 ip
89
 8 ID 2026-11-04 14:16 UTC 2026-11-04 14:15 UTC
177.23.115.111 ip
96
 5 BR 2026-11-04 14:14 UTC 2026-11-04 14:13 UTC
121.121.57.3 ip
98
 7 MY 2026-11-04 14:14 UTC 2026-11-04 14:13 UTC
49.47.70.55 ip
93
 5 IN 2026-11-04 14:13 UTC 2026-11-04 14:13 UTC
194.220.109.159 ip
93
 5 ES 2026-11-04 14:13 UTC 2026-11-04 14:13 UTC
81.19.216.97 ip
39
 1 NL 2026-11-04 14:13 UTC 2026-11-04 14:13 UTC
43.245.93.30 ip
78
 3 NP 2026-11-04 14:12 UTC 2026-11-04 14:12 UTC
94.255.64.49 ip
39
 1 RU 2026-11-04 14:12 UTC 2026-11-04 14:12 UTC
189.128.211.0 ip
39
 1 MX 2026-11-04 14:12 UTC 2026-11-04 14:12 UTC
103.161.151.9 ip
78
 3 BD 2026-11-04 14:12 UTC 2026-11-04 14:12 UTC
8.243.72.14 ip
86
 4 CO 2026-11-04 14:12 UTC 2026-11-04 14:12 UTC
160.177.120.165 ip
70
 2 MA 2026-11-04 14:12 UTC 2026-11-04 14:12 UTC
143.198.106.254 ip
80
 2 US 2026-11-04 14:11 UTC 2026-11-04 14:11 UTC
180.93.232.115 ip
45
 1 VN 2026-11-04 14:11 UTC 2026-11-04 14:11 UTC
187.91.211.87 ip
100
 20 BR 2026-11-04 14:13 UTC 2026-11-04 14:10 UTC
5.44.169.45 ip
100
 20 RU 2026-11-04 14:13 UTC 2026-11-04 14:10 UTC
41.250.99.126 ip
100
 20 MA 2026-11-04 14:13 UTC 2026-11-04 14:10 UTC
45.216.139.58 ip
100
 11 MA 2026-11-04 14:11 UTC 2026-11-04 14:10 UTC
188.119.39.118 ip
99
 8 TR 2026-11-04 14:11 UTC 2026-11-04 14:10 UTC
187.7.187.154 ip
100
 13 BR 2026-11-04 14:11 UTC 2026-11-04 14:10 UTC
103.87.27.86 ip
63
 2 IN 2026-11-04 14:10 UTC 2026-11-04 14:10 UTC
68.112.201.73 ip
100
 20 US 2026-11-04 14:12 UTC 2026-11-04 14:09 UTC
103.239.83.250 ip
100
 21 BD 2026-11-04 14:12 UTC 2026-11-04 14:09 UTC
163.227.144.23 ip
100
 18 BD 2026-11-04 14:11 UTC 2026-11-04 14:09 UTC

Showing 1-25 of 86659 indicators