IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 185.192.71.112 ip

Score
100
/100
raw: 434.24
Reports
57
Last Reported
2026-11-09 08:20 UTC
Categories
Scanning (40) Config Exposure Probe (17)

Network details

ASN
206092
Organization
F.n.s. Holdings Limited
Country
GB

Threat Intelligence enriched 2026-11-09 08:18 UTC

DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-09 08:19 UTC catch-all-suspicious direct GET /application.yaml.dist burst
2026-11-09 08:19 UTC catch-all-suspicious direct GET /application.yaml.example burst
2026-11-09 08:19 UTC catch-all-suspicious direct GET /application.yaml~ burst
2026-11-09 08:19 UTC catch-all-backup direct GET /application.yml.backup burst
2026-11-09 08:19 UTC catch-all-backup direct GET /application.yml.save burst
2026-11-09 08:19 UTC catch-all-suspicious direct GET /app.config.prod burst
2026-11-09 08:19 UTC catch-all-backup direct GET /config.json.bak.dev burst
2026-11-09 08:19 UTC catch-all-backup direct GET /config.json.bak.default burst
2026-11-09 08:19 UTC catch-all-backup direct GET /config.json.bak.map burst
2026-11-09 08:19 UTC catch-all-script direct GET /config.php.bak.json burst
2026-11-09 08:19 UTC catch-all-script direct GET /config.php.bak~ burst
2026-11-09 08:19 UTC catch-all-script direct GET /config.php.bak.old burst
2026-11-09 08:19 UTC catch-all-config direct GET /config.env.bak burst
2026-11-09 08:19 UTC catch-all-suspicious direct GET /config.yaml.prod burst
2026-11-09 08:19 UTC catch-all-suspicious direct GET /config.yaml.dist burst
2026-11-09 08:19 UTC catch-all-backup direct GET /config.old.sample burst
2026-11-09 08:19 UTC catch-all-backup direct GET /config.old.map burst
2026-11-09 08:19 UTC catch-all-backup direct GET /config.old.backup burst
2026-11-09 08:19 UTC catch-all-backup direct GET /conf.json.orig burst
2026-11-09 08:19 UTC catch-all-backup direct GET /conf.json.old burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
108.181.55.159 ip
97
4 US 2026-11-09 09:03 UTC 2026-11-09 09:03 UTC
162.240.57.158 ip
97
4 US 2026-11-09 09:00 UTC 2026-11-09 09:00 UTC
103.143.243.62 ip
86
4 BD 2026-11-09 08:58 UTC 2026-11-09 08:58 UTC
138.204.24.126 ip
82
3 BR 2026-11-09 08:58 UTC 2026-11-09 08:58 UTC
45.84.185.110 ip
63
2 BG 2026-11-09 08:58 UTC 2026-11-09 08:58 UTC
190.49.126.205 ip
89
4 AR 2026-11-09 08:58 UTC 2026-11-09 08:58 UTC
49.36.218.68 ip
80
3 IN 2026-11-09 08:58 UTC 2026-11-09 08:58 UTC
113.211.208.231 ip
94
5 MY 2026-11-09 08:57 UTC 2026-11-09 08:57 UTC
45.230.243.21 ip
93
5 EC 2026-11-09 08:57 UTC 2026-11-09 08:57 UTC
14.160.243.35 ip
73
3 VN 2026-11-09 08:58 UTC 2026-11-09 08:57 UTC
191.112.189.35 ip
91
4 CL 2026-11-09 08:58 UTC 2026-11-09 08:57 UTC
109.165.97.144 ip
80
3 RU 2026-11-09 08:55 UTC 2026-11-09 08:55 UTC
103.151.189.182 ip
73
3 IN 2026-11-09 08:55 UTC 2026-11-09 08:55 UTC
195.184.241.22 ip
39
1 PT 2026-11-09 08:55 UTC 2026-11-09 08:55 UTC
217.25.82.243 ip
91
4 UA 2026-11-09 08:55 UTC 2026-11-09 08:55 UTC
93.120.176.187 ip
93
5 RU 2026-11-09 08:55 UTC 2026-11-09 08:55 UTC
200.24.114.156 ip
89
4 BR 2026-11-09 08:55 UTC 2026-11-09 08:55 UTC
152.59.35.171 ip
85
4 IN 2026-11-09 08:55 UTC 2026-11-09 08:55 UTC
194.230.147.232 ip
94
5 CH 2026-11-09 08:54 UTC 2026-11-09 08:54 UTC
139.47.120.203 ip
93
5 ES 2026-11-09 08:54 UTC 2026-11-09 08:54 UTC
154.110.126.37 ip
78
3 TN 2026-11-09 08:53 UTC 2026-11-09 08:53 UTC
106.222.0.165 ip
89
4 IN 2026-11-09 08:53 UTC 2026-11-09 08:53 UTC
110.235.229.118 ip
80
3 IN 2026-11-09 08:52 UTC 2026-11-09 08:52 UTC
189.203.228.203 ip
82
3 MX 2026-11-09 08:52 UTC 2026-11-09 08:52 UTC
187.188.155.20 ip
85
3 MX 2026-11-09 08:52 UTC 2026-11-09 08:52 UTC

Showing 1-25 of 90122 indicators