IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 128.24.163.105 ip

Score
4
/100
raw: 0.44
Reports
47
Last Reported
2026-06-24 13:49 UTC
Categories
Config Exposure Probe (28) Scanning (16) API Probe (2) Credential Stuffing (1)

Network details

ASN
8075
Organization
Microsoft Corporation
Country
US

Threat Intelligence enriched 2026-11-04 23:13 UTC

DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-06-24 13:48 UTC catch-all-scan direct POST /___proxy_subdomain_whm/login/ burst creds
2026-06-24 13:48 UTC catch-all-backup direct GET /terraform.tfstate.backup burst
2026-06-24 13:47 UTC iac-secrets direct GET /terraform.tfstate burst
2026-06-24 13:47 UTC catch-all-suspicious direct GET /.kube/config burst
2026-06-24 13:47 UTC catch-all-suspicious direct GET /application.yml burst
2026-06-24 13:47 UTC catch-all-suspicious direct GET /appsettings.json burst
2026-06-24 13:47 UTC catch-all-traversal direct GET /proc/self/environ burst
2026-06-24 13:47 UTC catch-all-scan direct GET /.netrc burst
2026-06-24 13:47 UTC catch-all-scan direct GET /.npmrc burst
2026-06-24 13:47 UTC catch-all-scan direct GET /.ssh/id_ed25519 burst
2026-06-24 13:47 UTC catch-all-scan direct GET /.ssh/id_rsa burst
2026-06-24 13:47 UTC catch-all-backup direct GET /data/dump.sql burst
2026-06-24 13:47 UTC backup direct GET /backup/database.sql burst
2026-06-24 13:47 UTC catch-all-backup direct GET /database.sql burst
2026-06-24 13:47 UTC sql-dump direct GET /dump.sql burst
2026-06-24 13:47 UTC sql-dump direct GET /backup.sql burst
2026-06-24 13:47 UTC catch-all-config direct GET /.htpasswd burst
2026-06-24 13:47 UTC catch-all-suspicious direct GET /app/config/parameters.yml burst
2026-06-24 13:47 UTC catch-all-script direct GET /config/database.php burst
2026-06-24 13:47 UTC catch-all-script direct GET /config/config.php burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
61.230.219.146 ip
39
 1 TW 2026-11-11 07:25 UTC 2026-11-11 07:25 UTC
31.43.45.112 ip
50
 1 UA 2026-11-11 07:25 UTC 2026-11-11 07:25 UTC
37.215.13.64 ip
39
 1 BY 2026-11-11 07:25 UTC 2026-11-11 07:25 UTC
176.124.17.254 ip
50
 1 UA 2026-11-11 07:25 UTC 2026-11-11 07:25 UTC
189.241.184.187 ip
39
 1 MX 2026-11-11 07:24 UTC 2026-11-11 07:24 UTC
149.120.104.206 ip
50
 1 US 2026-11-11 07:24 UTC 2026-11-11 07:24 UTC
185.135.181.155 ip
39
 1 UA 2026-11-11 07:24 UTC 2026-11-11 07:24 UTC
189.218.8.219 ip
39
 1 MX 2026-11-11 07:24 UTC 2026-11-11 07:24 UTC
181.177.24.5 ip
50
 1 AR 2026-11-11 07:23 UTC 2026-11-11 07:23 UTC
104.152.52.221 ip
18
 1 US 2026-11-11 07:22 UTC 2026-11-11 07:22 UTC
157.51.73.163 ip
39
 1 IN 2026-11-11 07:22 UTC 2026-11-11 07:22 UTC
106.214.3.167 ip
50
 1 IN 2026-11-11 07:21 UTC 2026-11-11 07:21 UTC
190.97.183.28 ip
50
 1 HN 2026-11-11 07:21 UTC 2026-11-11 07:21 UTC
83.244.3.37 ip
50
 1 PS 2026-11-11 07:21 UTC 2026-11-11 07:21 UTC
38.25.29.6 ip
50
 1 PE 2026-11-11 07:21 UTC 2026-11-11 07:21 UTC
45.235.158.188 ip
50
 1 BR 2026-11-11 07:21 UTC 2026-11-11 07:21 UTC
117.199.222.160 ip
39
 1 IN 2026-11-11 07:20 UTC 2026-11-11 07:20 UTC
103.175.245.125 ip
39
 1 BD 2026-11-11 07:19 UTC 2026-11-11 07:19 UTC
148.222.130.62 ip
39
 1 AR 2026-11-11 07:19 UTC 2026-11-11 07:19 UTC
94.26.106.134 ip
100
 43 DE 2026-11-11 07:25 UTC 2026-11-11 07:18 UTC
153.67.7.38 ip
39
 1 AR 2026-11-11 07:18 UTC 2026-11-11 07:18 UTC
213.230.87.51 ip
39
 1 UZ 2026-11-11 07:18 UTC 2026-11-11 07:18 UTC
103.124.225.203 ip
39
 1 BD 2026-11-11 07:17 UTC 2026-11-11 07:17 UTC
31.129.78.7 ip
39
 1 UA 2026-11-11 07:16 UTC 2026-11-11 07:16 UTC
84.54.71.227 ip
39
 1 UZ 2026-11-11 07:16 UTC 2026-11-11 07:16 UTC

Showing 1-25 of 92867 indicators