IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 141.95.77.222 ip

Score
5
/100
raw: 0.52
Reports
189
Last Reported
2026-05-28 21:36 UTC
Categories
Scanning (144) Config Exposure Probe (35) API Probe (9) Admin Panel Probe (1)

Network details

ASN
16276
Organization
OVH SAS
Country
FR

Threat Intelligence enriched 2026-11-04 08:10 UTC

DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-05-28 21:35 UTC catch-all-config direct GET /.env.php burst
2026-05-28 21:35 UTC catch-all-suspicious direct GET /aws-creds.json burst
2026-05-28 21:35 UTC catch-all-suspicious direct GET /.serverless/cloudformation-template-update-stack.json burst
2026-05-28 21:35 UTC aws-creds direct GET /.aws/config burst
2026-05-28 21:35 UTC cicd-config direct GET /.github/workflows/deploy.yml burst
2026-05-28 21:35 UTC catch-all-suspicious direct GET /src/config.js burst
2026-05-28 21:35 UTC catch-all-backup direct GET /database.sql burst
2026-05-28 21:35 UTC catch-all-suspicious direct GET /template.yml burst
2026-05-28 21:35 UTC catch-all-scan direct GET /src/aws-exports.js burst
2026-05-28 21:35 UTC cicd-config direct GET /.gitlab-ci.yml burst
2026-05-28 21:35 UTC catch-all-suspicious direct GET /env-config.js burst
2026-05-28 21:35 UTC catch-all-suspicious direct GET /config/secrets.yml burst
2026-05-28 21:35 UTC catch-all-suspicious direct GET /[host].tfvars.json burst
2026-05-28 21:35 UTC catch-all-scan direct GET /terraform.tfvars burst
2026-05-28 21:35 UTC catch-all-suspicious direct GET /aws-keys.json burst
2026-05-28 21:35 UTC catch-all-suspicious direct GET /aws-cloudformation-template.json burst
2026-05-28 21:35 UTC catch-all-script direct GET /config/env.php burst
2026-05-28 21:35 UTC catch-all-suspicious direct GET /src/config/aws.ts burst
2026-05-28 21:35 UTC git-config direct GET /.git/config burst
2026-05-28 21:35 UTC catch-all-scan direct GET /terraform.tfvars.staging burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
187.152.207.202 ip
39
1 MX 2026-11-07 06:40 UTC 2026-11-07 06:40 UTC
181.24.135.165 ip
39
1 AR 2026-11-07 06:40 UTC 2026-11-07 06:40 UTC
193.233.122.33 ip
97
6 RU 2026-11-07 06:39 UTC 2026-11-07 06:38 UTC
181.119.89.164 ip
95
5 CL 2026-11-07 06:39 UTC 2026-11-07 06:38 UTC
101.255.137.177 ip
97
6 ID 2026-11-07 06:39 UTC 2026-11-07 06:38 UTC
157.48.73.172 ip
39
1 IN 2026-11-07 06:38 UTC 2026-11-07 06:38 UTC
5.58.189.216 ip
93
4 UA 2026-11-07 06:38 UTC 2026-11-07 06:38 UTC
9.165.91.49 ip
86
3 SA 2026-11-07 06:38 UTC 2026-11-07 06:38 UTC
187.190.51.96 ip
86
4 MX 2026-11-07 06:38 UTC 2026-11-07 06:38 UTC
39.53.193.178 ip
100
9 PK 2026-11-07 06:37 UTC 2026-11-07 06:36 UTC
217.25.82.74 ip
97
6 UA 2026-11-07 06:37 UTC 2026-11-07 06:36 UTC
201.189.54.50 ip
100
10 CL 2026-11-07 06:37 UTC 2026-11-07 06:36 UTC
203.76.250.130 ip
93
5 IN 2026-11-07 06:36 UTC 2026-11-07 06:35 UTC
201.251.104.198 ip
80
3 AR 2026-11-07 06:36 UTC 2026-11-07 06:35 UTC
175.143.59.154 ip
93
4 MY 2026-11-07 06:36 UTC 2026-11-07 06:35 UTC
104.152.52.104 ip
18
1 US 2026-11-07 06:24 UTC 2026-11-07 06:24 UTC
213.233.85.195 ip
70
2 RO 2026-11-07 06:26 UTC 2026-11-07 06:22 UTC
196.251.102.77 ip
100
29 SC 2026-11-07 06:20 UTC 2026-11-07 06:18 UTC
41.90.172.49 ip
39
1 KE 2026-11-07 06:18 UTC 2026-11-07 06:18 UTC
181.232.190.116 ip
39
1 DO 2026-11-07 06:18 UTC 2026-11-07 06:18 UTC
5.165.213.1 ip
99
7 RU 2026-11-07 06:18 UTC 2026-11-07 06:17 UTC
223.25.16.125 ip
97
6 PH 2026-11-07 06:18 UTC 2026-11-07 06:17 UTC
103.175.242.152 ip
99
8 BD 2026-11-07 06:18 UTC 2026-11-07 06:17 UTC
31.128.189.152 ip
70
2 UA 2026-11-07 06:17 UTC 2026-11-07 06:17 UTC
161.142.233.101 ip
63
2 MY 2026-11-07 06:17 UTC 2026-11-07 06:17 UTC

Showing 1-25 of 87857 indicators