IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 141.95.77.222 ip
Score
5
/100
raw: 0.52
Reports
189
Last Reported
2026-05-28 21:36 UTC
Categories
Scanning (144)
Config Exposure Probe (35)
API Probe (9)
Admin Panel Probe (1)
Network details
ASN
16276
Organization
OVH SAS
Country
FR
Threat Intelligence enriched 2026-11-04 08:10 UTC
DNSBL Status
Clean
Sensor Activity last 20 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-05-28 21:35 UTC | catch-all-config | direct | GET | /.env.php | burst |
| 2026-05-28 21:35 UTC | catch-all-suspicious | direct | GET | /aws-creds.json | burst |
| 2026-05-28 21:35 UTC | catch-all-suspicious | direct | GET | /.serverless/cloudformation-template-update-stack.json | burst |
| 2026-05-28 21:35 UTC | aws-creds | direct | GET | /.aws/config | burst |
| 2026-05-28 21:35 UTC | cicd-config | direct | GET | /.github/workflows/deploy.yml | burst |
| 2026-05-28 21:35 UTC | catch-all-suspicious | direct | GET | /src/config.js | burst |
| 2026-05-28 21:35 UTC | catch-all-backup | direct | GET | /database.sql | burst |
| 2026-05-28 21:35 UTC | catch-all-suspicious | direct | GET | /template.yml | burst |
| 2026-05-28 21:35 UTC | catch-all-scan | direct | GET | /src/aws-exports.js | burst |
| 2026-05-28 21:35 UTC | cicd-config | direct | GET | /.gitlab-ci.yml | burst |
| 2026-05-28 21:35 UTC | catch-all-suspicious | direct | GET | /env-config.js | burst |
| 2026-05-28 21:35 UTC | catch-all-suspicious | direct | GET | /config/secrets.yml | burst |
| 2026-05-28 21:35 UTC | catch-all-suspicious | direct | GET | /[host].tfvars.json | burst |
| 2026-05-28 21:35 UTC | catch-all-scan | direct | GET | /terraform.tfvars | burst |
| 2026-05-28 21:35 UTC | catch-all-suspicious | direct | GET | /aws-keys.json | burst |
| 2026-05-28 21:35 UTC | catch-all-suspicious | direct | GET | /aws-cloudformation-template.json | burst |
| 2026-05-28 21:35 UTC | catch-all-script | direct | GET | /config/env.php | burst |
| 2026-05-28 21:35 UTC | catch-all-suspicious | direct | GET | /src/config/aws.ts | burst |
| 2026-05-28 21:35 UTC | git-config | direct | GET | /.git/config | burst |
| 2026-05-28 21:35 UTC | catch-all-scan | direct | GET | /terraform.tfvars.staging | burst |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 187.152.207.202 | ip |
39
|
1 | MX | 2026-11-07 06:40 UTC | 2026-11-07 06:40 UTC |
| 181.24.135.165 | ip |
39
|
1 | AR | 2026-11-07 06:40 UTC | 2026-11-07 06:40 UTC |
| 193.233.122.33 | ip |
97
|
6 | RU | 2026-11-07 06:39 UTC | 2026-11-07 06:38 UTC |
| 181.119.89.164 | ip |
95
|
5 | CL | 2026-11-07 06:39 UTC | 2026-11-07 06:38 UTC |
| 101.255.137.177 | ip |
97
|
6 | ID | 2026-11-07 06:39 UTC | 2026-11-07 06:38 UTC |
| 157.48.73.172 | ip |
39
|
1 | IN | 2026-11-07 06:38 UTC | 2026-11-07 06:38 UTC |
| 5.58.189.216 | ip |
93
|
4 | UA | 2026-11-07 06:38 UTC | 2026-11-07 06:38 UTC |
| 9.165.91.49 | ip |
86
|
3 | SA | 2026-11-07 06:38 UTC | 2026-11-07 06:38 UTC |
| 187.190.51.96 | ip |
86
|
4 | MX | 2026-11-07 06:38 UTC | 2026-11-07 06:38 UTC |
| 39.53.193.178 | ip |
100
|
9 | PK | 2026-11-07 06:37 UTC | 2026-11-07 06:36 UTC |
| 217.25.82.74 | ip |
97
|
6 | UA | 2026-11-07 06:37 UTC | 2026-11-07 06:36 UTC |
| 201.189.54.50 | ip |
100
|
10 | CL | 2026-11-07 06:37 UTC | 2026-11-07 06:36 UTC |
| 203.76.250.130 | ip |
93
|
5 | IN | 2026-11-07 06:36 UTC | 2026-11-07 06:35 UTC |
| 201.251.104.198 | ip |
80
|
3 | AR | 2026-11-07 06:36 UTC | 2026-11-07 06:35 UTC |
| 175.143.59.154 | ip |
93
|
4 | MY | 2026-11-07 06:36 UTC | 2026-11-07 06:35 UTC |
| 104.152.52.104 | ip |
18
|
1 | US | 2026-11-07 06:24 UTC | 2026-11-07 06:24 UTC |
| 213.233.85.195 | ip |
70
|
2 | RO | 2026-11-07 06:26 UTC | 2026-11-07 06:22 UTC |
| 196.251.102.77 | ip |
100
|
29 | SC | 2026-11-07 06:20 UTC | 2026-11-07 06:18 UTC |
| 41.90.172.49 | ip |
39
|
1 | KE | 2026-11-07 06:18 UTC | 2026-11-07 06:18 UTC |
| 181.232.190.116 | ip |
39
|
1 | DO | 2026-11-07 06:18 UTC | 2026-11-07 06:18 UTC |
| 5.165.213.1 | ip |
99
|
7 | RU | 2026-11-07 06:18 UTC | 2026-11-07 06:17 UTC |
| 223.25.16.125 | ip |
97
|
6 | PH | 2026-11-07 06:18 UTC | 2026-11-07 06:17 UTC |
| 103.175.242.152 | ip |
99
|
8 | BD | 2026-11-07 06:18 UTC | 2026-11-07 06:17 UTC |
| 31.128.189.152 | ip |
70
|
2 | UA | 2026-11-07 06:17 UTC | 2026-11-07 06:17 UTC |
| 161.142.233.101 | ip |
63
|
2 | MY | 2026-11-07 06:17 UTC | 2026-11-07 06:17 UTC |
Showing 1-25 of 87857 indicators