IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 172.182.225.195 ip

Score
4
/100
raw: 0.46
Reports
40
Last Reported
2026-06-28 20:38 UTC
Categories
Config Exposure Probe (21) Scanning (17) API Probe (2)

Network details

ASN
8075
Organization
Microsoft Corporation
Country
US

Threat Intelligence enriched 2026-11-05 02:12 UTC

DNSBL Status
Listed
b.barracudacentral.org

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-06-28 20:37 UTC catch-all-backup direct GET /terraform.tfstate.backup burst
2026-06-28 20:37 UTC catch-all-suspicious direct GET /.kube/config burst
2026-06-28 20:37 UTC catch-all-suspicious direct GET /application.yml burst
2026-06-28 20:36 UTC catch-all-suspicious direct GET /web.config burst
2026-06-28 20:36 UTC catch-all-suspicious direct GET /appsettings.json burst
2026-06-28 20:36 UTC catch-all-traversal direct GET /proc/self/environ burst
2026-06-28 20:36 UTC catch-all-scan direct GET /.netrc burst
2026-06-28 20:36 UTC catch-all-scan direct GET /.npmrc burst
2026-06-28 20:36 UTC catch-all-scan direct GET /.ssh/id_ed25519 burst
2026-06-28 20:36 UTC catch-all-scan direct GET /.ssh/id_rsa burst
2026-06-28 20:36 UTC catch-all-backup direct GET /data/dump.sql burst
2026-06-28 20:36 UTC sql-dump direct GET /dump.sql burst
2026-06-28 20:36 UTC catch-all-config direct GET /.htpasswd burst
2026-06-28 20:36 UTC catch-all-suspicious direct GET /app/config/parameters.yml burst
2026-06-28 20:36 UTC catch-all-script direct GET /config/database.php burst
2026-06-28 20:36 UTC catch-all-script direct GET /includes/config.php burst
2026-06-28 20:36 UTC catch-all-script direct GET /config/config.php burst
2026-06-28 20:36 UTC actuator direct GET /actuator/logfile burst
2026-06-28 20:36 UTC actuator direct GET /actuator/env burst
2026-06-28 20:36 UTC catch-all-script direct GET /info.php burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
90.22.16.63 ip
50
 1 FR 2026-11-11 15:56 UTC 2026-11-11 15:56 UTC
213.5.192.16 ip
39
 1 UA 2026-11-11 15:55 UTC 2026-11-11 15:55 UTC
188.168.3.213 ip
39
 1 RU 2026-11-11 15:55 UTC 2026-11-11 15:55 UTC
89.245.27.160 ip
50
 1 DE 2026-11-11 15:55 UTC 2026-11-11 15:55 UTC
168.121.178.215 ip
50
 1 BR 2026-11-11 15:55 UTC 2026-11-11 15:55 UTC
106.67.180.86 ip
50
 1 IN 2026-11-11 15:54 UTC 2026-11-11 15:54 UTC
189.171.68.4 ip
50
 1 MX 2026-11-11 15:54 UTC 2026-11-11 15:54 UTC
116.100.0.243 ip
39
 1 VN 2026-11-11 15:54 UTC 2026-11-11 15:54 UTC
203.26.240.120 ip
39
 1 BD 2026-11-11 15:53 UTC 2026-11-11 15:53 UTC
163.223.48.19 ip
39
 1 IN 2026-11-11 15:53 UTC 2026-11-11 15:53 UTC
92.63.188.3 ip
39
 1 RU 2026-11-11 15:53 UTC 2026-11-11 15:53 UTC
27.59.108.88 ip
50
 1 IN 2026-11-11 15:52 UTC 2026-11-11 15:52 UTC
189.203.88.167 ip
88
 3 MX 2026-11-11 15:52 UTC 2026-11-11 15:52 UTC
60.53.34.181 ip
50
 1 MY 2026-11-11 15:51 UTC 2026-11-11 15:51 UTC
203.89.127.250 ip
39
 1 BD 2026-11-11 15:51 UTC 2026-11-11 15:51 UTC
126.52.158.103 ip
39
 1 PH 2026-11-11 15:51 UTC 2026-11-11 15:51 UTC
117.241.50.216 ip
50
 1 IN 2026-11-11 15:50 UTC 2026-11-11 15:50 UTC
94.78.242.45 ip
39
 1 RU 2026-11-11 15:50 UTC 2026-11-11 15:50 UTC
103.153.170.8 ip
39
 1 BD 2026-11-11 15:49 UTC 2026-11-11 15:49 UTC
103.74.19.188 ip
88
 3 IN 2026-11-11 15:48 UTC 2026-11-11 15:48 UTC
63.143.95.117 ip
50
 1 JM 2026-11-11 15:48 UTC 2026-11-11 15:48 UTC
45.67.216.103 ip
50
 1 FR 2026-11-11 15:47 UTC 2026-11-11 15:47 UTC
102.207.170.185 ip
50
 1 KE 2026-11-11 15:46 UTC 2026-11-11 15:46 UTC
190.173.111.214 ip
50
 1 AR 2026-11-11 15:46 UTC 2026-11-11 15:46 UTC
84.54.72.89 ip
39
 1 UZ 2026-11-11 15:46 UTC 2026-11-11 15:46 UTC

Showing 1-25 of 94049 indicators