IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 172.190.64.193 ip

Score
100
/100
raw: 129.71
Reports
19
Last Reported
2026-11-05 01:04 UTC
Categories
Scanning (13) Config Exposure Probe (5) API Probe (1)

Network details

ASN
8075
Organization
Microsoft Corporation
Country
US

Threat Intelligence enriched 2026-11-05 01:02 UTC

DNSBL Status
Clean

Sensor Activity last 19 events

Time (UTC) Trap Signal Method Path Flags
2026-11-05 01:03 UTC catch-all-backup direct GET /terraform.tfstate.backup
2026-11-05 01:03 UTC catch-all-script direct GET /app/etc/env.php
2026-11-05 01:03 UTC catch-all-scan direct GET /application-staging.properties burst
2026-11-05 01:03 UTC catch-all-config direct GET /www/.env
2026-11-05 01:03 UTC catch-all-suspicious direct GET /service-account.json
2026-11-05 01:03 UTC git-probe direct GET /.git/refs/heads/main
2026-11-05 01:02 UTC catch-all-suspicious direct GET /config.yaml burst
2026-11-05 01:02 UTC catch-all-suspicious direct GET /secrets.json burst
2026-11-05 01:02 UTC catch-all-suspicious direct GET /application-local.yml burst
2026-11-05 01:02 UTC catch-all-suspicious direct GET /config/master.key burst
2026-11-05 01:02 UTC catch-all-suspicious direct GET /parameters.yml burst
2026-11-05 01:02 UTC catch-all-script direct GET /database.php burst
2026-11-05 01:02 UTC catch-all-script direct GET /settings.php burst
2026-11-05 01:02 UTC catch-all-script direct GET /config.php.bak burst
2026-11-05 01:02 UTC catch-all-scan direct GET /.ssh/id_ed25519 burst
2026-11-05 01:02 UTC catch-all-config direct GET /current/.env
2026-11-05 01:02 UTC api direct GET /api/.env
2026-11-05 01:02 UTC catch-all-config direct GET /.env.test
2026-11-05 01:01 UTC catch-all-config direct GET /.env.local

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
181.160.179.118 ip
39
 1 CL 2026-11-05 02:08 UTC 2026-11-05 02:08 UTC
77.67.26.25 ip
39
 1 US 2026-11-05 01:49 UTC 2026-11-05 01:49 UTC
165.22.240.90 ip
100
 35 SG 2026-11-05 01:41 UTC 2026-11-05 01:39 UTC
186.57.236.224 ip
39
 1 AR 2026-11-05 01:39 UTC 2026-11-05 01:39 UTC
42.118.186.203 ip
39
 1 VN 2026-11-05 01:39 UTC 2026-11-05 01:39 UTC
49.42.66.57 ip
39
 1 IN 2026-11-05 01:38 UTC 2026-11-05 01:38 UTC
193.32.249.165 ip
89
 3 NL 2026-11-05 01:38 UTC 2026-11-05 01:37 UTC
162.158.103.223 ip
75
 2 PL 2026-11-05 01:24 UTC 2026-11-05 01:24 UTC
5.183.255.21 ip
50
 1 RU 2026-11-05 01:20 UTC 2026-11-05 01:20 UTC
38.137.31.139 ip
39
 1 IN 2026-11-05 01:09 UTC 2026-11-05 01:09 UTC
85.237.212.66 ip
55
 1 PL 2026-11-05 01:09 UTC 2026-11-05 01:09 UTC
190.114.37.185 ip
39
 1 CL 2026-11-05 01:08 UTC 2026-11-05 01:08 UTC
34.152.62.86 ip
100
 71 CA 2026-11-05 01:08 UTC 2026-11-05 01:08 UTC
61.1.132.175 ip
39
 1 IN 2026-11-05 01:05 UTC 2026-11-05 01:05 UTC
52.234.179.110 ip
100
 16 US 2026-11-05 01:04 UTC 2026-11-05 01:03 UTC
40.114.65.242 ip
100
 18 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
20.85.229.140 ip
100
 19 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
20.169.215.72 ip
100
 22 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
20.121.19.44 ip
100
 13 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
172.190.64.193 ip
100
 19 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
172.191.88.112 ip
100
 21 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
172.190.161.125 ip
100
 20 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
104.211.60.75 ip
100
 15 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
168.61.50.172 ip
100
 18 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
168.61.38.40 ip
100
 22 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC

Showing 1-25 of 86839 indicators