IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 23.234.88.196 ip
Score
100
/100
raw: 95.85
Reports
10
Last Reported
2026-11-02 19:02 UTC
Categories
Config Exposure Probe (7)
Scanning (2)
API Probe (1)
Network details
ASN
11878
Organization
tzulo, inc.
Country
US
Threat Intelligence enriched 2026-11-02 19:01 UTC
Reverse DNS
static-23-234-88-196.cust.tzulo.com
DNSBL Status
Clean
Sensor Activity last 10 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-02 19:02 UTC | catch-all-config | direct | GET | /app/.env | burst |
| 2026-11-02 19:02 UTC | api | direct | GET | /api/.env | burst |
| 2026-11-02 19:02 UTC | catch-all-config | direct | GET | /.env.bak | burst |
| 2026-11-02 19:02 UTC | catch-all-config | direct | GET | /.env.backup | burst |
| 2026-11-02 19:02 UTC | catch-all-suspicious | direct | GET | /config.json | burst |
| 2026-11-02 19:01 UTC | catch-all-scan | direct | GET | /env.js | burst |
| 2026-11-02 19:01 UTC | catch-all-config | direct | GET | /.env.dev | |
| 2026-11-02 19:01 UTC | catch-all-config | direct | GET | /.env.production | |
| 2026-11-02 19:01 UTC | catch-all-config | direct | GET | /.env.local | |
| 2026-11-02 19:01 UTC | dot-env | direct | GET | /.env |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 172.56.217.224 | ip |
50
|
1 | US | 2026-11-02 19:46 UTC | 2026-11-02 19:46 UTC |
| 176.42.140.232 | ip |
50
|
1 | TR | 2026-11-02 19:45 UTC | 2026-11-02 19:45 UTC |
| 89.43.86.94 | ip |
39
|
1 | ES | 2026-11-02 19:44 UTC | 2026-11-02 19:44 UTC |
| 189.4.121.227 | ip |
39
|
1 | BR | 2026-11-02 19:44 UTC | 2026-11-02 19:44 UTC |
| 41.10.206.202 | ip |
39
|
1 | ZA | 2026-11-02 19:44 UTC | 2026-11-02 19:44 UTC |
| 191.99.9.91 | ip |
39
|
1 | EC | 2026-11-02 19:44 UTC | 2026-11-02 19:44 UTC |
| 213.196.103.60 | ip |
39
|
1 | RS | 2026-11-02 19:44 UTC | 2026-11-02 19:44 UTC |
| 105.105.183.196 | ip |
39
|
1 | DZ | 2026-11-02 19:43 UTC | 2026-11-02 19:43 UTC |
| 178.19.40.8 | ip |
50
|
1 | PE | 2026-11-02 19:42 UTC | 2026-11-02 19:42 UTC |
| 24.12.169.192 | ip |
39
|
1 | US | 2026-11-02 19:42 UTC | 2026-11-02 19:42 UTC |
| 71.60.37.90 | ip |
50
|
1 | US | 2026-11-02 19:42 UTC | 2026-11-02 19:42 UTC |
| 167.249.245.7 | ip |
50
|
1 | BR | 2026-11-02 19:42 UTC | 2026-11-02 19:42 UTC |
| 178.68.79.185 | ip |
39
|
1 | RU | 2026-11-02 19:41 UTC | 2026-11-02 19:41 UTC |
| 161.142.158.107 | ip |
50
|
1 | MY | 2026-11-02 19:41 UTC | 2026-11-02 19:41 UTC |
| 24.128.96.197 | ip |
39
|
1 | US | 2026-11-02 19:40 UTC | 2026-11-02 19:40 UTC |
| 200.102.119.255 | ip |
39
|
1 | BR | 2026-11-02 19:40 UTC | 2026-11-02 19:40 UTC |
| 190.248.190.132 | ip |
39
|
1 | CO | 2026-11-02 19:40 UTC | 2026-11-02 19:40 UTC |
| 113.211.215.34 | ip |
50
|
1 | MY | 2026-11-02 19:40 UTC | 2026-11-02 19:40 UTC |
| 5.192.76.1 | ip |
39
|
1 | AE | 2026-11-02 19:40 UTC | 2026-11-02 19:40 UTC |
| 190.114.36.191 | ip |
50
|
1 | CL | 2026-11-02 19:39 UTC | 2026-11-02 19:39 UTC |
| 216.234.223.12 | ip |
39
|
1 | HN | 2026-11-02 19:39 UTC | 2026-11-02 19:39 UTC |
| 45.165.164.219 | ip |
50
|
1 | BR | 2026-11-02 19:39 UTC | 2026-11-02 19:39 UTC |
| 172.64.198.72 | ip |
75
|
2 | PL | 2026-11-02 19:39 UTC | 2026-11-02 19:39 UTC |
| 186.121.144.89 | ip |
39
|
1 | CO | 2026-11-02 19:39 UTC | 2026-11-02 19:39 UTC |
| 88.169.41.123 | ip |
39
|
1 | FR | 2026-11-02 19:39 UTC | 2026-11-02 19:39 UTC |
Showing 1-25 of 84579 indicators