IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 45.92.1.26 ip
Score
100
/100
raw: 1515.29
Reports
158
Last Reported
2026-11-11 12:42 UTC
Categories
Config Exposure Probe (106)
Scanning (42)
API Probe (10)
Network details
ASN
210558
Organization
1337 Services GmbH
Country
NL
Threat Intelligence enriched 2026-11-11 12:41 UTC
Reverse DNS
45.92.1.26.powered.by.rdp.sh
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 20 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-11 12:41 UTC | git-config | direct | GET | /.git/config | burst |
| 2026-11-11 12:41 UTC | catch-all-config | direct | GET | /.env.production | burst |
| 2026-11-11 12:41 UTC | aws-creds | direct | GET | /.aws/credentials | burst |
| 2026-11-11 12:41 UTC | wp-config-backup | direct | GET | /wp-config.php.bak | burst |
| 2026-11-11 12:41 UTC | git-head | direct | GET | /.git/HEAD | burst |
| 2026-11-11 12:41 UTC | ds-store | direct | GET | /.DS_Store | burst |
| 2026-11-11 12:41 UTC | svn-probe | direct | GET | /.svn/entries | burst |
| 2026-11-11 12:41 UTC | catch-all-config | direct | GET | /.env.backup | burst |
| 2026-11-11 12:41 UTC | catch-all-suspicious | direct | GET | /config.json | burst |
| 2026-11-11 12:41 UTC | iac-secrets | direct | GET | /terraform.tfstate | burst |
| 2026-11-11 12:41 UTC | catch-all-suspicious | direct | GET | /credentials.json | burst |
| 2026-11-11 12:41 UTC | catch-all-script | direct | GET | /phpinfo.php | burst |
| 2026-11-11 12:41 UTC | catch-all-scan | direct | GET | /aws-exports.js | burst |
| 2026-11-11 12:41 UTC | actuator | direct | GET | /actuator/env | burst |
| 2026-11-11 12:41 UTC | catch-all-scan | direct | GET | /d9f923-30ec9e.txt | burst |
| 2026-11-11 12:41 UTC | catch-all-config | direct | GET | /.env.local | burst |
| 2026-11-11 12:41 UTC | wp-config-backup | direct | GET | /wp-config.php.bak | burst |
| 2026-11-11 12:41 UTC | catch-all-config | direct | GET | /.env.backup | burst |
| 2026-11-11 12:41 UTC | catch-all-script | direct | GET | /phpinfo.php | burst |
| 2026-11-11 12:41 UTC | git-config | direct | GET | /.git/config | burst |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 190.93.13.25 | ip |
50
|
1 | TT | 2026-11-11 13:13 UTC | 2026-11-11 13:13 UTC |
| 183.89.41.199 | ip |
39
|
1 | TH | 2026-11-11 13:13 UTC | 2026-11-11 13:13 UTC |
| 95.25.176.23 | ip |
39
|
1 | RU | 2026-11-11 13:13 UTC | 2026-11-11 13:13 UTC |
| 122.168.4.123 | ip |
50
|
1 | IN | 2026-11-11 13:13 UTC | 2026-11-11 13:13 UTC |
| 41.250.189.12 | ip |
39
|
1 | MA | 2026-11-11 13:12 UTC | 2026-11-11 13:12 UTC |
| 171.252.155.121 | ip |
39
|
1 | VN | 2026-11-11 13:12 UTC | 2026-11-11 13:12 UTC |
| 102.205.85.202 | ip |
50
|
1 | KE | 2026-11-11 13:12 UTC | 2026-11-11 13:12 UTC |
| 213.230.86.57 | ip |
88
|
3 | UZ | 2026-11-11 13:12 UTC | 2026-11-11 13:12 UTC |
| 85.114.204.62 | ip |
50
|
1 | UA | 2026-11-11 13:12 UTC | 2026-11-11 13:12 UTC |
| 103.65.226.195 | ip |
50
|
1 | BD | 2026-11-11 13:12 UTC | 2026-11-11 13:12 UTC |
| 131.196.112.115 | ip |
39
|
1 | EC | 2026-11-11 13:11 UTC | 2026-11-11 13:11 UTC |
| 91.225.162.244 | ip |
50
|
1 | UA | 2026-11-11 13:11 UTC | 2026-11-11 13:11 UTC |
| 179.189.65.5 | ip |
50
|
1 | BR | 2026-11-11 13:11 UTC | 2026-11-11 13:11 UTC |
| 185.169.4.188 | ip |
99
|
7 | GB | 2026-11-11 13:14 UTC | 2026-11-11 13:11 UTC |
| 106.222.234.115 | ip |
39
|
1 | IN | 2026-11-11 13:11 UTC | 2026-11-11 13:11 UTC |
| 91.194.238.31 | ip |
50
|
1 | RU | 2026-11-11 13:10 UTC | 2026-11-11 13:10 UTC |
| 196.3.218.218 | ip |
50
|
1 | BB | 2026-11-11 13:09 UTC | 2026-11-11 13:09 UTC |
| 83.229.24.204 | ip |
39
|
1 | IL | 2026-11-11 13:09 UTC | 2026-11-11 13:09 UTC |
| 37.39.170.248 | ip |
39
|
1 | KW | 2026-11-11 13:09 UTC | 2026-11-11 13:09 UTC |
| 196.39.248.250 | ip |
50
|
1 | ZA | 2026-11-11 13:09 UTC | 2026-11-11 13:09 UTC |
| 39.34.249.187 | ip |
39
|
1 | PK | 2026-11-11 13:08 UTC | 2026-11-11 13:08 UTC |
| 102.23.175.206 | ip |
50
|
1 | ZA | 2026-11-11 13:08 UTC | 2026-11-11 13:08 UTC |
| 37.214.0.11 | ip |
39
|
1 | BY | 2026-11-11 13:07 UTC | 2026-11-11 13:07 UTC |
| 176.29.238.83 | ip |
50
|
1 | JO | 2026-11-11 13:07 UTC | 2026-11-11 13:07 UTC |
| 160.176.195.45 | ip |
50
|
1 | MA | 2026-11-11 13:07 UTC | 2026-11-11 13:07 UTC |
Showing 1-25 of 93668 indicators