IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 2.27.248.91 ip
Score
99
/100
raw: 45.94
Reports
9
Last Reported
2026-10-29 08:52 UTC
Categories
Scanning (9)
Network details
ASN
207043
Organization
Dedik Services Limited
Country
PL
Threat Intelligence enriched 2026-10-29 08:51 UTC
DNSBL Status
Clean
Sensor Activity last 9 events
| Time (UTC) | Trap | Signal | Method | Path | Flags | Sensor |
|---|---|---|---|---|---|---|
| 2026-10-29 08:52 UTC | catch-all-scan | direct | GET | /logonpoint/ | burst | EU West Sensor 3 |
| 2026-10-29 08:52 UTC | catch-all-scan | direct | GET | /vpn/tmindex.html | burst | EU West Sensor 3 |
| 2026-10-29 08:52 UTC | catch-all-script | direct | GET | /dana-na/auth/url_default/welcome.cgi | burst | EU West Sensor 3 |
| 2026-10-29 08:51 UTC | catch-all-scan | direct | GET | /+CSCOE+/logon.html | burst | EU West Sensor 3 |
| 2026-10-29 08:51 UTC | catch-all-script | direct | GET | /RDWeb/Pages/en-US/login.aspx | burst | EU West Sensor 3 |
| 2026-10-29 08:51 UTC | catch-all-scan | direct | GET | /logonpoint/ | burst | EU West Sensor 3 |
| 2026-10-29 08:51 UTC | catch-all-scan | direct | GET | /global-protect/login.esp | burst | EU West Sensor 3 |
| 2026-10-29 08:51 UTC | catch-all-script | direct | GET | /dana-na/auth/url_default/welcome.cgi | EU West Sensor 3 | |
| 2026-10-29 08:51 UTC | catch-all-script | direct | GET | /RDWeb/Pages/en-US/login.aspx | EU West Sensor 3 |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 44.213.166.56 | ip |
70
|
2 | US | 2026-10-29 09:15 UTC | 2026-10-29 09:14 UTC |
| 134.122.107.84 | ip |
70
|
2 | CA | 2026-10-29 09:07 UTC | 2026-10-29 09:07 UTC |
| 93.152.221.41 | ip |
100
|
282 | DE | 2026-10-29 09:06 UTC | 2026-10-29 09:03 UTC |
| 46.45.239.113 | ip |
70
|
2 | RU | 2026-10-29 09:01 UTC | 2026-10-29 09:01 UTC |
| 161.142.118.95 | ip |
39
|
1 | MY | 2026-10-29 09:01 UTC | 2026-10-29 09:01 UTC |
| 49.36.221.32 | ip |
70
|
2 | IN | 2026-10-29 09:01 UTC | 2026-10-29 09:01 UTC |
| 179.41.129.248 | ip |
70
|
2 | AR | 2026-10-29 08:54 UTC | 2026-10-29 08:54 UTC |
| 158.140.180.37 | ip |
39
|
1 | ID | 2026-10-29 08:54 UTC | 2026-10-29 08:54 UTC |
| 115.66.183.149 | ip |
39
|
1 | SG | 2026-10-29 08:53 UTC | 2026-10-29 08:53 UTC |
| 45.183.182.45 | ip |
70
|
2 | BR | 2026-10-29 08:53 UTC | 2026-10-29 08:53 UTC |
| 178.57.116.43 | ip |
39
|
1 | RU | 2026-10-29 08:53 UTC | 2026-10-29 08:53 UTC |
| 51.81.169.116 | ip |
18
|
1 | CA | 2026-10-29 08:52 UTC | 2026-10-29 08:52 UTC |
| 2.27.248.91 | ip |
99
|
9 | PL | 2026-10-29 08:52 UTC | 2026-10-29 08:51 UTC |
| 103.107.77.97 | ip |
70
|
2 | BD | 2026-10-29 08:32 UTC | 2026-10-29 08:32 UTC |
| 203.89.126.144 | ip |
39
|
1 | BD | 2026-10-29 08:32 UTC | 2026-10-29 08:32 UTC |
| 122.99.98.44 | ip |
70
|
2 | BD | 2026-10-29 08:32 UTC | 2026-10-29 08:32 UTC |
| 161.35.206.208 | ip |
18
|
1 | CA | 2026-10-29 08:22 UTC | 2026-10-29 08:22 UTC |
| 81.19.216.101 | ip |
39
|
1 | GB | 2026-10-29 08:15 UTC | 2026-10-29 08:15 UTC |
| 216.180.246.15 | ip |
39
|
1 | SG | 2026-10-29 08:14 UTC | 2026-10-29 08:14 UTC |
| 95.69.53.88 | ip |
39
|
1 | PT | 2026-10-29 07:51 UTC | 2026-10-29 07:51 UTC |
| 103.85.183.228 | ip |
39
|
1 | BD | 2026-10-29 07:51 UTC | 2026-10-29 07:51 UTC |
| 118.102.90.2 | ip |
50
|
1 | AU | 2026-10-29 07:51 UTC | 2026-10-29 07:51 UTC |
| 157.100.89.50 | ip |
50
|
1 | EC | 2026-10-29 07:50 UTC | 2026-10-29 07:50 UTC |
| 109.165.70.145 | ip |
50
|
1 | RU | 2026-10-29 07:50 UTC | 2026-10-29 07:50 UTC |
| 70.170.226.94 | ip |
50
|
1 | US | 2026-10-29 07:50 UTC | 2026-10-29 07:50 UTC |
Showing 1-25 of 76580 indicators