IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 45.141.21.238 ip

Score
100
/100
raw: 2509.87
Reports
252
Last Reported
2026-11-12 00:12 UTC
Categories
Config Exposure Probe (224) Web Stack Probe (14) Admin Panel Probe (7) API Probe (7)

Network details

ASN
214961
Organization
Stellar Group SAS
Country
FR

Threat Intelligence enriched 2026-11-11 23:21 UTC

DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-12 00:12 UTC catch-all-config direct GET /[host]/.env burst
2026-11-12 00:11 UTC catch-all-config direct GET /database/.env burst
2026-11-12 00:11 UTC catch-all-config direct GET /conf/.env burst
2026-11-12 00:11 UTC api direct GET /api/.env burst
2026-11-12 00:11 UTC catch-all-config direct GET /app/config/.env burst
2026-11-12 00:11 UTC catch-all-config direct GET /audio/.env burst
2026-11-12 00:11 UTC catch-all-config direct GET /crm/.env burst
2026-11-12 00:11 UTC catch-all-config direct GET /local/.env burst
2026-11-12 00:11 UTC catch-all-config direct GET /old/.env burst
2026-11-12 00:11 UTC catch-all-config direct GET /new/.env burst
2026-11-12 00:11 UTC catch-all-config direct GET /library/.env burst
2026-11-12 00:11 UTC wp-admin direct GET /wp-admin/.env burst
2026-11-12 00:11 UTC wp-content direct GET /wp-content/.env burst
2026-11-12 00:11 UTC catch-all-config direct GET /apps/.env burst
2026-11-12 00:11 UTC catch-all-config direct GET /cgi-bin/.env burst
2026-11-12 00:11 UTC catch-all-config direct GET /src/.env burst
2026-11-12 00:11 UTC catch-all-config direct GET /base/.env burst
2026-11-12 00:11 UTC catch-all-config direct GET /core/.env burst
2026-11-12 00:11 UTC catch-all-config direct GET /protected/.env burst
2026-11-12 00:11 UTC catch-all-config direct GET /www/.env burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
185.137.59.6 ip
39
 1 ES 2026-11-12 00:13 UTC 2026-11-12 00:13 UTC
132.255.22.2 ip
50
 1 CO 2026-11-12 00:12 UTC 2026-11-12 00:12 UTC
91.225.162.104 ip
50
 1 UA 2026-11-12 00:12 UTC 2026-11-12 00:12 UTC
179.238.47.208 ip
39
 1 AR 2026-11-12 00:12 UTC 2026-11-12 00:12 UTC
200.118.81.85 ip
50
 1 CO 2026-11-12 00:11 UTC 2026-11-12 00:11 UTC
91.132.22.80 ip
39
 1 RU 2026-11-12 00:11 UTC 2026-11-12 00:11 UTC
204.157.232.189 ip
50
 1 CO 2026-11-12 00:11 UTC 2026-11-12 00:11 UTC
195.32.113.51 ip
50
 1 IT 2026-11-12 00:10 UTC 2026-11-12 00:10 UTC
85.110.36.244 ip
50
 1 TR 2026-11-12 00:10 UTC 2026-11-12 00:10 UTC
190.173.187.118 ip
39
 1 AR 2026-11-12 00:09 UTC 2026-11-12 00:09 UTC
5.79.196.151 ip
39
 1 RU 2026-11-12 00:09 UTC 2026-11-12 00:09 UTC
181.78.0.186 ip
39
 1 CO 2026-11-12 00:08 UTC 2026-11-12 00:08 UTC
190.14.158.75 ip
39
 1 AR 2026-11-12 00:08 UTC 2026-11-12 00:08 UTC
51.158.144.139 ip
39
 1 NL 2026-11-12 00:08 UTC 2026-11-12 00:08 UTC
80.234.78.70 ip
50
 1 RU 2026-11-12 00:05 UTC 2026-11-12 00:05 UTC
179.38.132.246 ip
39
 1 AR 2026-11-12 00:04 UTC 2026-11-12 00:04 UTC
87.126.25.87 ip
50
 1 BG 2026-11-12 00:04 UTC 2026-11-12 00:04 UTC
201.246.84.215 ip
39
 1 CL 2026-11-12 00:03 UTC 2026-11-12 00:03 UTC
108.28.240.33 ip
50
 1 US 2026-11-12 00:02 UTC 2026-11-12 00:02 UTC
202.165.88.173 ip
50
 1 MM 2026-11-12 00:02 UTC 2026-11-12 00:02 UTC
190.135.132.121 ip
50
 1 UY 2026-11-12 00:01 UTC 2026-11-12 00:01 UTC
125.242.58.48 ip
50
 1 KR 2026-11-12 00:01 UTC 2026-11-12 00:01 UTC
103.186.122.29 ip
50
 1 MM 2026-11-12 00:01 UTC 2026-11-12 00:01 UTC
178.122.107.189 ip
50
 1 BY 2026-11-12 00:00 UTC 2026-11-12 00:00 UTC
45.231.255.243 ip
39
 1 BR 2026-11-11 23:59 UTC 2026-11-11 23:59 UTC

Showing 1-25 of 95219 indicators