IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 172.191.88.112 ip

Score
100
/100
raw: 144.69
Reports
21
Last Reported
2026-11-05 01:04 UTC
Categories
Scanning (13) Config Exposure Probe (6) Admin Panel Probe (2)

Network details

ASN
8075
Organization
Microsoft Corporation
Country
US

Threat Intelligence enriched 2026-11-05 01:02 UTC

DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-05 01:04 UTC catch-all-suspicious direct GET /env-config.js burst
2026-11-05 01:04 UTC catch-all-script direct GET /app_dev.php
2026-11-05 01:04 UTC debug-panel direct GET /_debugbar/open
2026-11-05 01:04 UTC catch-all-script direct GET /infophp.php
2026-11-05 01:03 UTC catch-all-suspicious direct GET /.remote-sync.json
2026-11-05 01:03 UTC catch-all-suspicious direct GET /google-credentials.json
2026-11-05 01:03 UTC debug-panel direct GET /elmah.axd
2026-11-05 01:02 UTC catch-all-suspicious direct GET /compose.yml burst
2026-11-05 01:02 UTC catch-all-suspicious direct GET /appsettings.json burst
2026-11-05 01:02 UTC catch-all-suspicious direct GET /application.yml burst
2026-11-05 01:02 UTC catch-all-suspicious direct GET /database.yml burst
2026-11-05 01:02 UTC catch-all-script direct GET /configuration.php.bak burst
2026-11-05 01:02 UTC catch-all-script direct GET /configuration.php burst
2026-11-05 01:02 UTC config-php direct GET /config.php burst
2026-11-05 01:02 UTC catch-all-scan direct GET /authorized_keys burst
2026-11-05 01:02 UTC catch-all-suspicious direct GET /.yarnrc.yml burst
2026-11-05 01:02 UTC aws-creds direct GET /.aws/config burst
2026-11-05 01:02 UTC git-config direct GET /.git/config
2026-11-05 01:02 UTC catch-all-config direct GET /backend/.env
2026-11-05 01:01 UTC catch-all-config direct GET /.env.prod

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
77.67.26.25 ip
39
 1 US 2026-11-05 01:49 UTC 2026-11-05 01:49 UTC
165.22.240.90 ip
100
 35 SG 2026-11-05 01:41 UTC 2026-11-05 01:39 UTC
186.57.236.224 ip
39
 1 AR 2026-11-05 01:39 UTC 2026-11-05 01:39 UTC
42.118.186.203 ip
39
 1 VN 2026-11-05 01:39 UTC 2026-11-05 01:39 UTC
49.42.66.57 ip
39
 1 IN 2026-11-05 01:38 UTC 2026-11-05 01:38 UTC
193.32.249.165 ip
89
 3 NL 2026-11-05 01:38 UTC 2026-11-05 01:37 UTC
162.158.103.223 ip
75
 2 PL 2026-11-05 01:24 UTC 2026-11-05 01:24 UTC
5.183.255.21 ip
50
 1 RU 2026-11-05 01:20 UTC 2026-11-05 01:20 UTC
38.137.31.139 ip
39
 1 IN 2026-11-05 01:09 UTC 2026-11-05 01:09 UTC
85.237.212.66 ip
55
 1 PL 2026-11-05 01:09 UTC 2026-11-05 01:09 UTC
190.114.37.185 ip
39
 1 CL 2026-11-05 01:08 UTC 2026-11-05 01:08 UTC
34.152.62.86 ip
100
 71 CA 2026-11-05 01:08 UTC 2026-11-05 01:08 UTC
61.1.132.175 ip
39
 1 IN 2026-11-05 01:05 UTC 2026-11-05 01:05 UTC
52.234.179.110 ip
100
 16 US 2026-11-05 01:04 UTC 2026-11-05 01:03 UTC
40.114.65.242 ip
100
 18 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
20.85.229.140 ip
100
 19 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
20.169.215.72 ip
100
 22 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
20.121.19.44 ip
100
 13 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
172.190.64.193 ip
100
 19 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
172.191.88.112 ip
100
 21 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
172.190.161.125 ip
100
 20 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
104.211.60.75 ip
100
 15 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
168.61.50.172 ip
100
 18 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
168.61.38.40 ip
100
 22 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
201.79.97.215 ip
99
 7 SG 2026-11-05 00:53 UTC 2026-11-05 00:52 UTC

Showing 1-25 of 86838 indicators