IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 176.65.144.128 ip

Score
15
/100
raw: 1.66
Reports
356
Last Reported
2026-06-12 13:30 UTC
Categories
Config Exposure Probe (255) Scanning (88) Web Stack Probe (11) API Probe (2)

Network details

ASN
209413
Organization
Dedik Services Limited
Country
CH

Threat Intelligence enriched 2026-11-04 10:05 UTC

DNSBL Status
Listed
zen.spamhaus.org

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-06-12 13:29 UTC catch-all-scan direct GET /local_settings.py burst
2026-06-12 13:29 UTC catch-all-config direct GET /.env.saved burst
2026-06-12 13:29 UTC catch-all-config direct GET /.env.default burst
2026-06-12 13:29 UTC cicd-config direct GET /.circleci/config.yml burst
2026-06-12 13:29 UTC catch-all-config direct GET /.env~ burst
2026-06-12 13:29 UTC docker-compose direct GET /docker-compose.override.yml burst
2026-06-12 13:29 UTC catch-all-config direct GET /.env.production.local burst
2026-06-12 13:29 UTC catch-all-config direct GET /.env.local burst
2026-06-12 13:29 UTC catch-all-config direct GET /.htaccess burst
2026-06-12 13:29 UTC cicd-config direct GET /Jenkinsfile burst
2026-06-12 13:29 UTC git-probe direct GET /.git/index burst
2026-06-12 13:29 UTC git-config direct GET /.git/config burst
2026-06-12 13:29 UTC catch-all-config direct GET /.env.bak~ burst
2026-06-12 13:29 UTC catch-all-config direct GET /compose/.env burst
2026-06-12 13:29 UTC dockerenv direct GET /.dockerenv burst
2026-06-12 13:29 UTC config-php direct GET /config.php burst
2026-06-12 13:29 UTC docker-compose direct GET /docker-compose.yml burst
2026-06-12 13:29 UTC catch-all-script direct GET /config/database.php burst
2026-06-12 13:29 UTC catch-all-suspicious direct GET /.travis.yml burst
2026-06-12 13:29 UTC catch-all-config direct GET /.htpasswd burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
196.196.222.101 ip
50
 1 EE 2026-11-07 21:54 UTC 2026-11-07 21:54 UTC
43.152.247.68 ip
100
 279 TH 2026-11-07 22:04 UTC 2026-11-07 21:44 UTC
77.105.138.81 ip
55
 1 NL 2026-11-07 21:44 UTC 2026-11-07 21:44 UTC
34.146.42.78 ip
100
 161 JP 2026-11-07 21:37 UTC 2026-11-07 21:34 UTC
20.200.64.201 ip
97
 6 CA 2026-11-07 21:19 UTC 2026-11-07 21:18 UTC
172.71.164.4 ip
70
 2 DE 2026-11-07 21:17 UTC 2026-11-07 21:17 UTC
172.70.47.122 ip
70
 2 NL 2026-11-07 21:11 UTC 2026-11-07 21:11 UTC
147.185.133.213 ip
39
 1 US 2026-11-07 21:07 UTC 2026-11-07 21:07 UTC
103.66.148.220 ip
18
 1 PK 2026-11-07 21:06 UTC 2026-11-07 21:06 UTC
43.247.43.14 ip
50
 1 IN 2026-11-07 20:55 UTC 2026-11-07 20:55 UTC
170.64.215.150 ip
94
 4 AU 2026-11-07 20:51 UTC 2026-11-07 20:51 UTC
16.5.0.141 ip
50
 1 BR 2026-11-07 20:43 UTC 2026-11-07 20:43 UTC
89.213.153.230 ip
55
 1 SG 2026-11-07 20:42 UTC 2026-11-07 20:42 UTC
16.5.0.226 ip
50
 1 BR 2026-11-07 20:27 UTC 2026-11-07 20:27 UTC
223.205.218.123 ip
39
 1 TH 2026-11-07 20:17 UTC 2026-11-07 20:17 UTC
201.208.9.133 ip
50
 1 VE 2026-11-07 20:16 UTC 2026-11-07 20:16 UTC
37.52.213.108 ip
50
 1 UA 2026-11-07 20:16 UTC 2026-11-07 20:16 UTC
158.140.180.48 ip
50
 1 ID 2026-11-07 20:16 UTC 2026-11-07 20:16 UTC
189.90.225.221 ip
39
 1 BR 2026-11-07 20:16 UTC 2026-11-07 20:16 UTC
185.233.194.241 ip
39
 1 RU 2026-11-07 20:13 UTC 2026-11-07 20:13 UTC
176.115.148.195 ip
39
 1 RU 2026-11-07 20:12 UTC 2026-11-07 20:12 UTC
178.73.113.37 ip
50
 1 SA 2026-11-07 20:10 UTC 2026-11-07 20:10 UTC
46.32.162.10 ip
50
 1 AZ 2026-11-07 20:08 UTC 2026-11-07 20:08 UTC
208.113.200.65 ip
100
 15 US 2026-11-07 20:07 UTC 2026-11-07 20:07 UTC
179.238.43.224 ip
39
 1 AR 2026-11-07 20:05 UTC 2026-11-07 20:05 UTC

Showing 1-25 of 88240 indicators