IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 148.72.207.188 ip

Score
15
/100
raw: 1.68
Reports
86
Last Reported
2026-07-13 00:29 UTC
Categories
Config Exposure Probe (45) Scanning (37) API Probe (4)

Network details

ASN
26496
Organization
GoDaddy.com, LLC
Country
SG

Threat Intelligence enriched 2026-11-12 20:16 UTC

Reverse DNS
188.207.72.148.host.secureserver.net
DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-07-13 00:28 UTC catch-all-backup direct GET /terraform.tfstate.backup burst
2026-07-13 00:28 UTC catch-all-suspicious direct GET /.kube/config burst
2026-07-13 00:28 UTC catch-all-suspicious direct GET /application.yml burst
2026-07-13 00:28 UTC catch-all-scan direct GET /application.properties burst
2026-07-13 00:28 UTC catch-all-suspicious direct GET /web.config burst
2026-07-13 00:28 UTC catch-all-suspicious direct GET /appsettings.json burst
2026-07-13 00:28 UTC catch-all-traversal direct GET /proc/self/environ burst
2026-07-13 00:28 UTC catch-all-scan direct GET /.netrc burst
2026-07-13 00:28 UTC catch-all-scan direct GET /.npmrc burst
2026-07-13 00:28 UTC catch-all-scan direct GET /.ssh/id_ed25519 burst
2026-07-13 00:28 UTC catch-all-scan direct GET /.ssh/id_rsa burst
2026-07-13 00:28 UTC catch-all-backup direct GET /data/dump.sql burst
2026-07-13 00:28 UTC backup direct GET /backup/database.sql burst
2026-07-13 00:28 UTC catch-all-backup direct GET /database.sql burst
2026-07-13 00:27 UTC sql-dump direct GET /backup.sql burst
2026-07-13 00:27 UTC catch-all-config direct GET /.htpasswd burst
2026-07-13 00:27 UTC catch-all-suspicious direct GET /app/config/parameters.yml burst
2026-07-13 00:27 UTC catch-all-script direct GET /config/database.php burst
2026-07-13 00:27 UTC catch-all-script direct GET /includes/config.php burst
2026-07-13 00:27 UTC catch-all-script direct GET /config/config.php burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
169.0.155.175 ip
50
 1 ZA 2026-11-13 16:57 UTC 2026-11-13 16:57 UTC
37.114.187.212 ip
50
 1 AZ 2026-11-13 16:57 UTC 2026-11-13 16:57 UTC
194.9.70.187 ip
50
 1 UA 2026-11-13 16:57 UTC 2026-11-13 16:57 UTC
187.20.28.130 ip
50
 1 BR 2026-11-13 16:56 UTC 2026-11-13 16:56 UTC
81.56.66.94 ip
39
 1 IT 2026-11-13 16:56 UTC 2026-11-13 16:56 UTC
189.218.8.195 ip
39
 1 MX 2026-11-13 16:55 UTC 2026-11-13 16:55 UTC
210.211.61.43 ip
50
 1 EC 2026-11-13 16:55 UTC 2026-11-13 16:55 UTC
223.184.135.171 ip
50
 1 IN 2026-11-13 16:55 UTC 2026-11-13 16:55 UTC
103.212.130.33 ip
50
 1 IN 2026-11-13 16:54 UTC 2026-11-13 16:54 UTC
118.103.228.214 ip
39
 1 PK 2026-11-13 16:54 UTC 2026-11-13 16:54 UTC
89.19.113.68 ip
50
 1 UA 2026-11-13 16:53 UTC 2026-11-13 16:53 UTC
202.5.63.82 ip
50
 1 BD 2026-11-13 16:53 UTC 2026-11-13 16:53 UTC
84.54.73.44 ip
39
 1 UZ 2026-11-13 16:52 UTC 2026-11-13 16:52 UTC
146.120.230.98 ip
50
 1 KG 2026-11-13 16:52 UTC 2026-11-13 16:52 UTC
105.102.246.51 ip
39
 1 DZ 2026-11-13 16:52 UTC 2026-11-13 16:52 UTC
88.97.166.32 ip
39
 1 GB 2026-11-13 16:52 UTC 2026-11-13 16:52 UTC
89.92.224.61 ip
39
 1 FR 2026-11-13 16:51 UTC 2026-11-13 16:51 UTC
200.176.4.126 ip
50
 1 BR 2026-11-13 16:51 UTC 2026-11-13 16:51 UTC
103.139.141.37 ip
50
 1 PK 2026-11-13 16:50 UTC 2026-11-13 16:50 UTC
5.193.111.172 ip
39
 1 AE 2026-11-13 16:50 UTC 2026-11-13 16:50 UTC
171.5.242.6 ip
39
 1 TH 2026-11-13 16:49 UTC 2026-11-13 16:49 UTC
153.67.107.107 ip
50
 1 BR 2026-11-13 16:49 UTC 2026-11-13 16:49 UTC
171.25.213.229 ip
39
 1 RU 2026-11-13 16:49 UTC 2026-11-13 16:49 UTC
190.185.199.98 ip
50
 1 AR 2026-11-13 16:49 UTC 2026-11-13 16:49 UTC
76.98.79.173 ip
50
 1 US 2026-11-13 16:49 UTC 2026-11-13 16:49 UTC

Showing 1-25 of 99160 indicators