IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 168.61.50.172 ip

Score
100
/100
raw: 127.72
Reports
18
Last Reported
2026-11-05 01:04 UTC
Categories
Scanning (12) Config Exposure Probe (3) API Probe (2) Admin Panel Probe (1)

Network details

ASN
8075
Organization
Microsoft Corporation
Country
US

Threat Intelligence enriched 2026-11-05 01:02 UTC

DNSBL Status
Clean

Sensor Activity last 18 events

Time (UTC) Trap Signal Method Path Flags
2026-11-05 01:04 UTC catch-all-scan direct GET /jolokia burst
2026-11-05 01:04 UTC catch-all-script direct GET /phpinfo.php burst
2026-11-05 01:03 UTC catch-all-backup direct GET /web.config.bak burst
2026-11-05 01:03 UTC catch-all-script direct GET /config.inc.php
2026-11-05 01:03 UTC catch-all-script direct GET /bootstrap/cache/config.php burst
2026-11-05 01:03 UTC catch-all-suspicious direct GET /application-staging.yml burst
2026-11-05 01:03 UTC catch-all-scan direct GET /src/environments/environment.prod.ts burst
2026-11-05 01:03 UTC api-docs direct GET /openapi.json burst
2026-11-05 01:03 UTC catch-all-config direct GET /html/.env burst
2026-11-05 01:03 UTC catch-all-suspicious direct GET /.vscode/sftp.json burst
2026-11-05 01:03 UTC catch-all-scan direct GET /.boto burst
2026-11-05 01:03 UTC catch-all-admin direct GET /firebase-adminsdk.json
2026-11-05 01:02 UTC actuator direct GET /actuator/heapdump
2026-11-05 01:02 UTC cicd-config direct GET /.circleci/config.yml
2026-11-05 01:02 UTC catch-all-backup direct GET /config.bak burst
2026-11-05 01:02 UTC catch-all-suspicious direct GET /appsettings.Production.json
2026-11-05 01:02 UTC catch-all-script direct GET /sites/default/settings.php
2026-11-05 01:01 UTC dot-env direct GET /.env

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
77.67.26.25 ip
39
 1 US 2026-11-05 01:49 UTC 2026-11-05 01:49 UTC
165.22.240.90 ip
100
 35 SG 2026-11-05 01:41 UTC 2026-11-05 01:39 UTC
186.57.236.224 ip
39
 1 AR 2026-11-05 01:39 UTC 2026-11-05 01:39 UTC
42.118.186.203 ip
39
 1 VN 2026-11-05 01:39 UTC 2026-11-05 01:39 UTC
49.42.66.57 ip
39
 1 IN 2026-11-05 01:38 UTC 2026-11-05 01:38 UTC
193.32.249.165 ip
89
 3 NL 2026-11-05 01:38 UTC 2026-11-05 01:37 UTC
162.158.103.223 ip
75
 2 PL 2026-11-05 01:24 UTC 2026-11-05 01:24 UTC
5.183.255.21 ip
50
 1 RU 2026-11-05 01:20 UTC 2026-11-05 01:20 UTC
38.137.31.139 ip
39
 1 IN 2026-11-05 01:09 UTC 2026-11-05 01:09 UTC
85.237.212.66 ip
55
 1 PL 2026-11-05 01:09 UTC 2026-11-05 01:09 UTC
190.114.37.185 ip
39
 1 CL 2026-11-05 01:08 UTC 2026-11-05 01:08 UTC
34.152.62.86 ip
100
 71 CA 2026-11-05 01:08 UTC 2026-11-05 01:08 UTC
61.1.132.175 ip
39
 1 IN 2026-11-05 01:05 UTC 2026-11-05 01:05 UTC
52.234.179.110 ip
100
 16 US 2026-11-05 01:04 UTC 2026-11-05 01:03 UTC
40.114.65.242 ip
100
 18 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
20.85.229.140 ip
100
 19 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
20.169.215.72 ip
100
 22 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
20.121.19.44 ip
100
 13 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
172.190.64.193 ip
100
 19 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
172.191.88.112 ip
100
 21 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
172.190.161.125 ip
100
 20 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
104.211.60.75 ip
100
 15 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
168.61.50.172 ip
100
 18 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
168.61.38.40 ip
100
 22 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
201.79.97.215 ip
99
 7 SG 2026-11-05 00:53 UTC 2026-11-05 00:52 UTC

Showing 1-25 of 86838 indicators