IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 31.76.245.43 ip
Score
1
/100
raw: 0.11
Reports
26
Last Reported
2026-06-09 06:23 UTC
Categories
Scanning (13)
Config Exposure Probe (12)
API Probe (1)
Network details
ASN
201988
Organization
VPSPay Networks LTD
Country
FI
Threat Intelligence enriched 2026-11-04 14:04 UTC
Reverse DNS
31-76-245-43.rdns.vpspay.net
Sensor Activity last 20 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-06-09 06:22 UTC | catch-all-suspicious | direct | HEAD | /.docker/config.json | burst |
| 2026-06-09 06:22 UTC | api | direct | HEAD | /api/config | burst |
| 2026-06-09 06:22 UTC | catch-all-suspicious | direct | HEAD | /.cursor/mcp.json | burst |
| 2026-06-09 06:22 UTC | catch-all-scan | direct | HEAD | /.pgpass | burst |
| 2026-06-09 06:22 UTC | catch-all-suspicious | direct | HEAD | /.continue/config.json | burst |
| 2026-06-09 06:22 UTC | catch-all-suspicious | direct | HEAD | /config.yml | burst |
| 2026-06-09 06:22 UTC | catch-all-suspicious | direct | HEAD | /secrets.yaml | burst |
| 2026-06-09 06:22 UTC | catch-all-script | direct | HEAD | /bootstrap/cache/config.php | burst |
| 2026-06-09 06:22 UTC | catch-all-config | direct | HEAD | /.env.development.local | burst |
| 2026-06-09 06:22 UTC | catch-all-suspicious | direct | HEAD | /config.yaml | burst |
| 2026-06-09 06:22 UTC | catch-all-suspicious | direct | HEAD | /.vscode/settings.json | burst |
| 2026-06-09 06:22 UTC | wp-config-backup | direct | HEAD | /wp-config.php.bak | burst |
| 2026-06-09 06:22 UTC | catch-all-scan | direct | HEAD | /.pypirc | burst |
| 2026-06-09 06:22 UTC | catch-all-suspicious | direct | HEAD | /secrets.json | burst |
| 2026-06-09 06:22 UTC | catch-all-config | direct | HEAD | /.env.old | burst |
| 2026-06-09 06:22 UTC | aws-creds | direct | HEAD | /.aws/credentials | burst |
| 2026-06-09 06:22 UTC | catch-all-suspicious | direct | HEAD | /config.json | burst |
| 2026-06-09 06:22 UTC | catch-all-scan | direct | HEAD | /.dev.vars | burst |
| 2026-06-09 06:22 UTC | git-head | direct | HEAD | /.git/HEAD | burst |
| 2026-06-09 06:22 UTC | git-config | direct | HEAD | /.git/config | burst |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 189.222.206.116 | ip |
39
|
1 | MX | 2026-11-08 20:56 UTC | 2026-11-08 20:56 UTC |
| 103.166.58.197 | ip |
39
|
1 | BD | 2026-11-08 20:56 UTC | 2026-11-08 20:56 UTC |
| 105.100.197.203 | ip |
50
|
1 | DZ | 2026-11-08 20:55 UTC | 2026-11-08 20:55 UTC |
| 45.187.241.32 | ip |
39
|
1 | BR | 2026-11-08 20:55 UTC | 2026-11-08 20:55 UTC |
| 168.144.171.214 | ip |
94
|
4 | US | 2026-11-08 20:53 UTC | 2026-11-08 20:53 UTC |
| 50.60.96.178 | ip |
39
|
1 | SA | 2026-11-08 20:51 UTC | 2026-11-08 20:51 UTC |
| 108.170.187.193 | ip |
50
|
1 | CA | 2026-11-08 20:51 UTC | 2026-11-08 20:51 UTC |
| 177.21.66.229 | ip |
39
|
1 | BR | 2026-11-08 20:50 UTC | 2026-11-08 20:50 UTC |
| 188.129.76.52 | ip |
50
|
1 | HR | 2026-11-08 20:47 UTC | 2026-11-08 20:47 UTC |
| 138.219.146.161 | ip |
50
|
1 | BR | 2026-11-08 20:47 UTC | 2026-11-08 20:47 UTC |
| 177.20.177.218 | ip |
39
|
1 | BR | 2026-11-08 20:47 UTC | 2026-11-08 20:47 UTC |
| 46.146.0.4 | ip |
50
|
1 | RU | 2026-11-08 20:47 UTC | 2026-11-08 20:47 UTC |
| 168.196.89.67 | ip |
39
|
1 | BR | 2026-11-08 20:46 UTC | 2026-11-08 20:46 UTC |
| 179.244.7.228 | ip |
39
|
1 | BR | 2026-11-08 20:46 UTC | 2026-11-08 20:46 UTC |
| 35.229.192.167 | ip |
100
|
64 | TW | 2026-11-08 20:47 UTC | 2026-11-08 20:46 UTC |
| 168.222.198.156 | ip |
39
|
1 | RU | 2026-11-08 20:46 UTC | 2026-11-08 20:46 UTC |
| 46.27.68.25 | ip |
39
|
1 | ES | 2026-11-08 20:45 UTC | 2026-11-08 20:45 UTC |
| 197.185.178.199 | ip |
50
|
1 | ZA | 2026-11-08 20:44 UTC | 2026-11-08 20:44 UTC |
| 81.38.151.11 | ip |
39
|
1 | ES | 2026-11-08 20:44 UTC | 2026-11-08 20:44 UTC |
| 177.39.66.66 | ip |
50
|
1 | BR | 2026-11-08 20:43 UTC | 2026-11-08 20:43 UTC |
| 196.179.159.67 | ip |
50
|
1 | TN | 2026-11-08 20:43 UTC | 2026-11-08 20:43 UTC |
| 38.7.221.173 | ip |
50
|
1 | CL | 2026-11-08 20:42 UTC | 2026-11-08 20:42 UTC |
| 187.188.243.134 | ip |
50
|
1 | MX | 2026-11-08 20:42 UTC | 2026-11-08 20:42 UTC |
| 187.17.251.150 | ip |
39
|
1 | BR | 2026-11-08 20:40 UTC | 2026-11-08 20:40 UTC |
| 192.228.196.83 | ip |
50
|
1 | MY | 2026-11-08 20:40 UTC | 2026-11-08 20:40 UTC |
Showing 1-25 of 89253 indicators