IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 23.234.102.173 ip

Score
100
/100
raw: 456.92
Reports
49
Last Reported
2026-11-08 23:05 UTC
Categories
Config Exposure Probe (26) Web Stack Probe (23)

Network details

ASN
11878
Organization
tzulo, inc.
Country
US

Threat Intelligence enriched 2026-11-08 22:26 UTC

Reverse DNS
static-23-234-102-173.cust.tzulo.com
DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-08 23:05 UTC catch-all-cms direct GET /wp-config.php.1 burst
2026-11-08 23:05 UTC catch-all-cms direct GET /wp-config.php.dist burst
2026-11-08 23:05 UTC catch-all-cms direct GET /wp-config.php.dist burst
2026-11-08 23:05 UTC catch-all-cms direct GET /wp-config.php.dist burst
2026-11-08 23:05 UTC catch-all-cms direct GET /wp-config.php.orig burst
2026-11-08 23:05 UTC catch-all-cms direct GET /wp-config.php.orig burst
2026-11-08 23:05 UTC catch-all-cms direct GET /wp-config.php.orig burst
2026-11-08 23:04 UTC catch-all-config direct GET /.env.bak burst
2026-11-08 23:04 UTC catch-all-config direct GET /.env.bak burst
2026-11-08 23:04 UTC catch-all-config direct GET /.env.bak burst
2026-11-08 23:04 UTC catch-all-cms direct GET /wp-config.php.copy burst
2026-11-08 23:04 UTC catch-all-cms direct GET /wp-config.php.copy burst
2026-11-08 23:04 UTC catch-all-cms direct GET /wp-config.php.copy burst
2026-11-08 23:04 UTC catch-all-cms direct GET /wp-config.php.txt burst
2026-11-08 23:04 UTC catch-all-cms direct GET /wp-config.php.txt burst
2026-11-08 23:04 UTC catch-all-cms direct GET /wp-config.php.txt burst
2026-11-08 23:04 UTC catch-all-cms direct GET /wp-config.php.swo burst
2026-11-08 23:04 UTC catch-all-cms direct GET /wp-config.php.swo burst
2026-11-08 23:04 UTC catch-all-cms direct GET /wp-config.php.swo burst
2026-11-08 23:04 UTC wp-config-backup direct GET /wp-config.php~ burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
185.117.103.121 ip
50
 1 UA 2026-11-08 23:04 UTC 2026-11-08 23:04 UTC
186.125.8.97 ip
39
 1 AR 2026-11-08 23:03 UTC 2026-11-08 23:03 UTC
167.88.167.23 ip
100
 31 US 2026-11-08 23:04 UTC 2026-11-08 23:02 UTC
187.223.247.240 ip
50
 1 MX 2026-11-08 23:02 UTC 2026-11-08 23:02 UTC
79.117.187.97 ip
39
 1 ES 2026-11-08 23:01 UTC 2026-11-08 23:01 UTC
168.90.129.177 ip
50
 1 AR 2026-11-08 22:59 UTC 2026-11-08 22:59 UTC
178.205.106.118 ip
50
 1 RU 2026-11-08 22:59 UTC 2026-11-08 22:59 UTC
169.224.33.53 ip
39
 1 IQ 2026-11-08 22:59 UTC 2026-11-08 22:59 UTC
105.157.251.201 ip
50
 1 MA 2026-11-08 22:58 UTC 2026-11-08 22:58 UTC
148.222.205.82 ip
50
 1 CL 2026-11-08 22:57 UTC 2026-11-08 22:57 UTC
188.162.74.32 ip
39
 1 RU 2026-11-08 22:55 UTC 2026-11-08 22:55 UTC
91.221.210.47 ip
50
 1 UA 2026-11-08 22:55 UTC 2026-11-08 22:55 UTC
189.217.207.124 ip
39
 1 MX 2026-11-08 22:55 UTC 2026-11-08 22:55 UTC
2.27.123.2 ip
39
 1 FI 2026-11-08 22:53 UTC 2026-11-08 22:53 UTC
103.166.58.211 ip
39
 1 BD 2026-11-08 22:52 UTC 2026-11-08 22:52 UTC
169.224.9.162 ip
39
 1 IQ 2026-11-08 22:50 UTC 2026-11-08 22:50 UTC
89.151.170.145 ip
39
 1 RU 2026-11-08 22:50 UTC 2026-11-08 22:50 UTC
88.181.112.176 ip
50
 1 FR 2026-11-08 22:50 UTC 2026-11-08 22:50 UTC
200.28.251.136 ip
39
 1 CL 2026-11-08 22:49 UTC 2026-11-08 22:49 UTC
31.43.61.155 ip
39
 1 UA 2026-11-08 22:49 UTC 2026-11-08 22:49 UTC
186.128.18.85 ip
50
 1 AR 2026-11-08 22:49 UTC 2026-11-08 22:49 UTC
104.28.231.135 ip
100
 9 MX 2026-11-08 22:47 UTC 2026-11-08 22:47 UTC
186.33.20.124 ip
50
 1 HN 2026-11-08 22:46 UTC 2026-11-08 22:46 UTC
169.224.7.54 ip
39
 1 IQ 2026-11-08 22:46 UTC 2026-11-08 22:46 UTC
78.111.149.149 ip
50
 1 RU 2026-11-08 22:45 UTC 2026-11-08 22:45 UTC

Showing 1-25 of 89421 indicators