IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 37.46.113.139 ip
Score
0
/100
raw: 0.05
Reports
11
Last Reported
2026-06-09 06:15 UTC
Categories
Scanning (8)
Config Exposure Probe (3)
Network details
ASN
51430
Organization
AltusHost B.V.
Country
LU
Threat Intelligence enriched 2026-11-04 14:04 UTC
Reverse DNS
lux-net-ip.as51430.net
Sensor Activity last 11 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-06-09 06:15 UTC | catch-all-config | direct | GET | /.env.local | burst |
| 2026-06-09 06:15 UTC | catch-all-suspicious | direct | GET | /config.yaml | burst |
| 2026-06-09 06:15 UTC | catch-all-suspicious | direct | GET | /config.json | burst |
| 2026-06-09 06:15 UTC | catch-all-config | direct | GET | /.hermes/.env | burst |
| 2026-06-09 06:15 UTC | catch-all-suspicious | direct | GET | /secrets.yaml | burst |
| 2026-06-09 06:15 UTC | catch-all-suspicious | direct | GET | /.claude/history.jsonl | burst |
| 2026-06-09 06:15 UTC | catch-all-suspicious | direct | GET | /.claude/settings.local.json | burst |
| 2026-06-09 06:15 UTC | catch-all-suspicious | direct | GET | /.bash_history | burst |
| 2026-06-09 06:15 UTC | catch-all-suspicious | direct | GET | /secrets.json | burst |
| 2026-06-09 06:15 UTC | catch-all-suspicious | direct | GET | /config.py | |
| 2026-06-09 06:15 UTC | dot-env | direct | GET | /.env |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 189.222.206.116 | ip |
39
|
1 | MX | 2026-11-08 20:56 UTC | 2026-11-08 20:56 UTC |
| 103.166.58.197 | ip |
39
|
1 | BD | 2026-11-08 20:56 UTC | 2026-11-08 20:56 UTC |
| 105.100.197.203 | ip |
50
|
1 | DZ | 2026-11-08 20:55 UTC | 2026-11-08 20:55 UTC |
| 45.187.241.32 | ip |
39
|
1 | BR | 2026-11-08 20:55 UTC | 2026-11-08 20:55 UTC |
| 168.144.171.214 | ip |
94
|
4 | US | 2026-11-08 20:53 UTC | 2026-11-08 20:53 UTC |
| 50.60.96.178 | ip |
39
|
1 | SA | 2026-11-08 20:51 UTC | 2026-11-08 20:51 UTC |
| 108.170.187.193 | ip |
50
|
1 | CA | 2026-11-08 20:51 UTC | 2026-11-08 20:51 UTC |
| 177.21.66.229 | ip |
39
|
1 | BR | 2026-11-08 20:50 UTC | 2026-11-08 20:50 UTC |
| 188.129.76.52 | ip |
50
|
1 | HR | 2026-11-08 20:47 UTC | 2026-11-08 20:47 UTC |
| 138.219.146.161 | ip |
50
|
1 | BR | 2026-11-08 20:47 UTC | 2026-11-08 20:47 UTC |
| 177.20.177.218 | ip |
39
|
1 | BR | 2026-11-08 20:47 UTC | 2026-11-08 20:47 UTC |
| 46.146.0.4 | ip |
50
|
1 | RU | 2026-11-08 20:47 UTC | 2026-11-08 20:47 UTC |
| 168.196.89.67 | ip |
39
|
1 | BR | 2026-11-08 20:46 UTC | 2026-11-08 20:46 UTC |
| 179.244.7.228 | ip |
39
|
1 | BR | 2026-11-08 20:46 UTC | 2026-11-08 20:46 UTC |
| 35.229.192.167 | ip |
100
|
64 | TW | 2026-11-08 20:47 UTC | 2026-11-08 20:46 UTC |
| 168.222.198.156 | ip |
39
|
1 | RU | 2026-11-08 20:46 UTC | 2026-11-08 20:46 UTC |
| 46.27.68.25 | ip |
39
|
1 | ES | 2026-11-08 20:45 UTC | 2026-11-08 20:45 UTC |
| 197.185.178.199 | ip |
50
|
1 | ZA | 2026-11-08 20:44 UTC | 2026-11-08 20:44 UTC |
| 81.38.151.11 | ip |
39
|
1 | ES | 2026-11-08 20:44 UTC | 2026-11-08 20:44 UTC |
| 177.39.66.66 | ip |
50
|
1 | BR | 2026-11-08 20:43 UTC | 2026-11-08 20:43 UTC |
| 196.179.159.67 | ip |
50
|
1 | TN | 2026-11-08 20:43 UTC | 2026-11-08 20:43 UTC |
| 38.7.221.173 | ip |
50
|
1 | CL | 2026-11-08 20:42 UTC | 2026-11-08 20:42 UTC |
| 187.188.243.134 | ip |
50
|
1 | MX | 2026-11-08 20:42 UTC | 2026-11-08 20:42 UTC |
| 187.17.251.150 | ip |
39
|
1 | BR | 2026-11-08 20:40 UTC | 2026-11-08 20:40 UTC |
| 192.228.196.83 | ip |
50
|
1 | MY | 2026-11-08 20:40 UTC | 2026-11-08 20:40 UTC |
Showing 1-25 of 89253 indicators