IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 172.203.195.8 ip
Score
1
/100
raw: 0.06
Reports
11
Last Reported
2026-06-10 13:32 UTC
Categories
Config Exposure Probe (8)
Scanning (2)
Credential Stuffing (1)
Network details
ASN
8075
Organization
Microsoft Corporation
Country
US
Threat Intelligence enriched 2026-11-04 14:13 UTC
DNSBL Status
Clean
Sensor Activity last 11 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-06-10 13:31 UTC | catch-all-scan | direct | POST | /___proxy_subdomain_whm/login/ | burst creds |
| 2026-06-10 13:31 UTC | sql-dump | direct | GET | /dump.sql | burst |
| 2026-06-10 13:31 UTC | sql-dump | direct | GET | /backup.sql | burst |
| 2026-06-10 13:31 UTC | catch-all-config | direct | GET | /.htpasswd | burst |
| 2026-06-10 13:31 UTC | catch-all-suspicious | direct | GET | /app/config/parameters.yml | burst |
| 2026-06-10 13:31 UTC | ds-store | direct | GET | /.DS_Store | burst |
| 2026-06-10 13:31 UTC | catch-all-script | direct | GET | /phpinfo.php | burst |
| 2026-06-10 13:30 UTC | catch-all-config | direct | GET | /.env.production | |
| 2026-06-10 13:30 UTC | dot-env | direct | GET | /.env | |
| 2026-06-10 13:30 UTC | git-config | direct | GET | /.git/config | |
| 2026-06-10 13:30 UTC | git-head | direct | GET | /.git/HEAD |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 108.16.112.236 | ip |
39
|
1 | US | 2026-11-09 00:19 UTC | 2026-11-09 00:19 UTC |
| 181.78.3.114 | ip |
50
|
1 | CO | 2026-11-09 00:19 UTC | 2026-11-09 00:19 UTC |
| 82.215.103.35 | ip |
50
|
1 | UZ | 2026-11-09 00:18 UTC | 2026-11-09 00:18 UTC |
| 46.196.253.99 | ip |
39
|
1 | TR | 2026-11-09 00:18 UTC | 2026-11-09 00:18 UTC |
| 179.0.119.240 | ip |
39
|
1 | BR | 2026-11-09 00:18 UTC | 2026-11-09 00:18 UTC |
| 45.172.142.188 | ip |
39
|
1 | AR | 2026-11-09 00:17 UTC | 2026-11-09 00:17 UTC |
| 45.178.0.41 | ip |
39
|
1 | AR | 2026-11-09 00:16 UTC | 2026-11-09 00:16 UTC |
| 37.104.146.128 | ip |
50
|
1 | SA | 2026-11-09 00:14 UTC | 2026-11-09 00:14 UTC |
| 2.44.142.108 | ip |
39
|
1 | IT | 2026-11-09 00:13 UTC | 2026-11-09 00:13 UTC |
| 143.105.17.96 | ip |
50
|
1 | MX | 2026-11-09 00:13 UTC | 2026-11-09 00:13 UTC |
| 102.209.223.177 | ip |
39
|
1 | CI | 2026-11-09 00:12 UTC | 2026-11-09 00:12 UTC |
| 190.150.67.100 | ip |
50
|
1 | SV | 2026-11-09 00:12 UTC | 2026-11-09 00:12 UTC |
| 177.226.161.14 | ip |
39
|
1 | MX | 2026-11-09 00:10 UTC | 2026-11-09 00:10 UTC |
| 77.83.3.72 | ip |
39
|
1 | RU | 2026-11-09 00:08 UTC | 2026-11-09 00:08 UTC |
| 179.60.72.52 | ip |
50
|
1 | CL | 2026-11-09 00:07 UTC | 2026-11-09 00:07 UTC |
| 27.145.148.121 | ip |
50
|
1 | TH | 2026-11-09 00:07 UTC | 2026-11-09 00:07 UTC |
| 167.250.40.100 | ip |
50
|
1 | BR | 2026-11-09 00:07 UTC | 2026-11-09 00:07 UTC |
| 91.235.227.246 | ip |
50
|
1 | UA | 2026-11-09 00:06 UTC | 2026-11-09 00:06 UTC |
| 161.142.146.0 | ip |
39
|
1 | MY | 2026-11-09 00:05 UTC | 2026-11-09 00:05 UTC |
| 79.117.194.129 | ip |
50
|
1 | ES | 2026-11-09 00:05 UTC | 2026-11-09 00:05 UTC |
| 190.83.116.46 | ip |
50
|
1 | HN | 2026-11-09 00:05 UTC | 2026-11-09 00:05 UTC |
| 178.151.254.56 | ip |
50
|
1 | UA | 2026-11-09 00:04 UTC | 2026-11-09 00:04 UTC |
| 105.246.241.157 | ip |
39
|
1 | ZA | 2026-11-09 00:04 UTC | 2026-11-09 00:04 UTC |
| 187.189.172.204 | ip |
50
|
1 | MX | 2026-11-09 00:02 UTC | 2026-11-09 00:02 UTC |
| 38.211.69.25 | ip |
39
|
1 | CO | 2026-11-09 00:02 UTC | 2026-11-09 00:02 UTC |
Showing 1-25 of 89526 indicators