IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 172.184.210.40 ip

Score
5
/100
raw: 0.52
Reports
44
Last Reported
2026-07-28 18:36 UTC
Categories
Config Exposure Probe (26) Scanning (16) API Probe (1) Credential Stuffing (1)

Network details

ASN
8075
Organization
Microsoft Corporation
Country
US

Threat Intelligence enriched 2026-11-05 04:12 UTC

DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-06-29 16:37 UTC catch-all-scan direct POST /___proxy_subdomain_whm/login/ burst creds
2026-06-29 16:37 UTC catch-all-backup direct GET /terraform.tfstate.backup burst
2026-06-29 16:37 UTC iac-secrets direct GET /terraform.tfstate burst
2026-06-29 16:37 UTC catch-all-suspicious direct GET /.kube/config burst
2026-06-29 16:37 UTC catch-all-suspicious direct GET /application.yml burst
2026-06-29 16:37 UTC catch-all-scan direct GET /application.properties burst
2026-06-29 16:37 UTC catch-all-suspicious direct GET /web.config burst
2026-06-29 16:36 UTC catch-all-traversal direct GET /proc/self/environ burst
2026-06-29 16:36 UTC catch-all-scan direct GET /.npmrc burst
2026-06-29 16:36 UTC catch-all-scan direct GET /.ssh/id_rsa burst
2026-06-29 16:36 UTC catch-all-backup direct GET /data/dump.sql burst
2026-06-29 16:36 UTC backup direct GET /backup/database.sql burst
2026-06-29 16:36 UTC catch-all-backup direct GET /database.sql burst
2026-06-29 16:36 UTC sql-dump direct GET /dump.sql burst
2026-06-29 16:36 UTC sql-dump direct GET /backup.sql burst
2026-06-29 16:36 UTC catch-all-config direct GET /.htpasswd burst
2026-06-29 16:36 UTC catch-all-script direct GET /config/database.php burst
2026-06-29 16:36 UTC catch-all-script direct GET /includes/config.php burst
2026-06-29 16:36 UTC catch-all-script direct GET /config/config.php burst
2026-06-29 16:36 UTC actuator direct GET /actuator/logfile burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
103.127.56.49 ip
50
 1 BD 2026-11-11 20:40 UTC 2026-11-11 20:40 UTC
185.209.56.176 ip
39
 1 UA 2026-11-11 20:40 UTC 2026-11-11 20:40 UTC
46.153.72.142 ip
50
 1 SA 2026-11-11 20:40 UTC 2026-11-11 20:40 UTC
190.61.40.234 ip
39
 1 CO 2026-11-11 20:39 UTC 2026-11-11 20:39 UTC
185.177.104.163 ip
50
 1 AM 2026-11-11 20:38 UTC 2026-11-11 20:38 UTC
190.104.36.212 ip
50
 1 AR 2026-11-11 20:38 UTC 2026-11-11 20:38 UTC
186.129.20.180 ip
50
 1 AR 2026-11-11 20:38 UTC 2026-11-11 20:38 UTC
187.147.56.205 ip
50
 1 MX 2026-11-11 20:37 UTC 2026-11-11 20:37 UTC
149.113.120.253 ip
39
 1 ID 2026-11-11 20:37 UTC 2026-11-11 20:37 UTC
136.34.254.227 ip
39
 1 US 2026-11-11 20:36 UTC 2026-11-11 20:36 UTC
91.214.208.143 ip
39
 1 UA 2026-11-11 20:36 UTC 2026-11-11 20:36 UTC
185.109.205.103 ip
39
 1 UA 2026-11-11 20:36 UTC 2026-11-11 20:36 UTC
147.235.197.206 ip
50
 1 IL 2026-11-11 20:36 UTC 2026-11-11 20:36 UTC
188.0.31.147 ip
39
 1 RU 2026-11-11 20:35 UTC 2026-11-11 20:35 UTC
45.232.95.111 ip
39
 1 CL 2026-11-11 20:34 UTC 2026-11-11 20:34 UTC
186.232.234.227 ip
39
 1 BR 2026-11-11 20:34 UTC 2026-11-11 20:34 UTC
165.50.54.153 ip
50
 1 TN 2026-11-11 20:34 UTC 2026-11-11 20:34 UTC
69.160.113.69 ip
39
 1 JM 2026-11-11 20:34 UTC 2026-11-11 20:34 UTC
86.126.173.50 ip
50
 1 RO 2026-11-11 20:34 UTC 2026-11-11 20:34 UTC
45.231.235.136 ip
50
 1 BR 2026-11-11 20:33 UTC 2026-11-11 20:33 UTC
38.44.241.99 ip
88
 3 DO 2026-11-11 20:34 UTC 2026-11-11 20:33 UTC
191.34.81.144 ip
39
 1 BR 2026-11-11 20:33 UTC 2026-11-11 20:33 UTC
197.184.98.86 ip
39
 1 ZA 2026-11-11 20:33 UTC 2026-11-11 20:33 UTC
80.41.221.229 ip
39
 1 GB 2026-11-11 20:32 UTC 2026-11-11 20:32 UTC
178.213.1.198 ip
39
 1 UA 2026-11-11 20:32 UTC 2026-11-11 20:32 UTC

Showing 1-25 of 94728 indicators