IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 2.56.245.49 ip

Score
100
/100
raw: 10602.85
Reports
1253
Last Reported
2026-11-11 19:28 UTC
Categories
Scanning (631) Config Exposure Probe (385) API Probe (167) Admin Panel Probe (43) Web Stack Probe (21) Credential Stuffing (5) Web Probe (1)

Network details

ASN
213250
Organization
ITP-Solutions GmbH & Co. KG
Country
DE

Threat Intelligence enriched 2026-11-11 19:22 UTC

Reverse DNS
snowflake.adrian2023.de
DNSBL Status
Listed
b.barracudacentral.org

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-11 19:27 UTC api direct GET /api/v1/license/keys-status burst
2026-11-11 19:27 UTC api direct GET /api/license/keys-status burst
2026-11-11 19:27 UTC catch-all-script direct GET /SetupWizard.aspx burst
2026-11-11 19:27 UTC catch-all-suspicious direct POST /cgi-bin/php burst
2026-11-11 19:27 UTC catch-all-traversal direct GET /SetupWizard.aspx/../../App_Web_dummy.ascx burst
2026-11-11 19:27 UTC catch-all-script direct POST /php.cgi burst
2026-11-11 19:27 UTC catch-all-scan direct GET /app/rest/users burst
2026-11-11 19:27 UTC catch-all-scan direct GET /app/rest/builds burst
2026-11-11 19:27 UTC catch-all-scan direct GET /app/rest/server burst
2026-11-11 19:27 UTC catch-all-suspicious direct POST /php-cgi/php-cgi.exe burst
2026-11-11 19:27 UTC api direct GET /api/private burst
2026-11-11 19:27 UTC catch-all-script direct POST /cgi-bin/php.cgi burst
2026-11-11 19:27 UTC dashboard direct GET /dashboard burst
2026-11-11 19:27 UTC api direct GET /api/admin burst
2026-11-11 19:27 UTC admin direct GET /admin burst
2026-11-11 19:27 UTC api direct POST /api/v1/user burst creds
2026-11-11 19:27 UTC api direct POST /api/register burst creds
2026-11-11 19:27 UTC api direct POST /api/v1/register burst creds
2026-11-11 19:27 UTC api direct POST /api/scheduler burst
2026-11-11 19:27 UTC api direct POST /api/user burst creds

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
190.104.115.55 ip
50
1 GT 2026-11-11 20:01 UTC 2026-11-11 20:01 UTC
190.22.168.190 ip
39
1 CL 2026-11-11 20:00 UTC 2026-11-11 20:00 UTC
195.96.143.118 ip
50
1 UA 2026-11-11 20:00 UTC 2026-11-11 20:00 UTC
85.87.161.118 ip
50
1 ES 2026-11-11 20:00 UTC 2026-11-11 20:00 UTC
179.93.134.167 ip
39
1 BR 2026-11-11 20:00 UTC 2026-11-11 20:00 UTC
41.141.110.206 ip
50
1 MA 2026-11-11 20:00 UTC 2026-11-11 20:00 UTC
66.49.215.153 ip
39
1 CA 2026-11-11 20:00 UTC 2026-11-11 20:00 UTC
181.161.255.204 ip
50
1 CL 2026-11-11 19:59 UTC 2026-11-11 19:59 UTC
160.178.42.113 ip
50
1 MA 2026-11-11 19:59 UTC 2026-11-11 19:59 UTC
91.236.139.21 ip
50
1 UA 2026-11-11 19:59 UTC 2026-11-11 19:59 UTC
176.174.17.110 ip
50
1 FR 2026-11-11 19:59 UTC 2026-11-11 19:59 UTC
103.231.94.199 ip
50
1 MM 2026-11-11 19:58 UTC 2026-11-11 19:58 UTC
77.90.185.243 ip
50
1 DE 2026-11-11 19:58 UTC 2026-11-11 19:58 UTC
45.161.5.198 ip
39
1 BR 2026-11-11 19:57 UTC 2026-11-11 19:57 UTC
38.183.214.10 ip
39
1 VE 2026-11-11 19:57 UTC 2026-11-11 19:57 UTC
109.207.117.38 ip
39
1 UA 2026-11-11 19:57 UTC 2026-11-11 19:57 UTC
31.185.10.48 ip
50
1 RU 2026-11-11 19:56 UTC 2026-11-11 19:56 UTC
190.197.48.174 ip
50
1 BZ 2026-11-11 19:56 UTC 2026-11-11 19:56 UTC
91.225.162.85 ip
39
1 UA 2026-11-11 19:56 UTC 2026-11-11 19:56 UTC
193.201.105.60 ip
39
1 UA 2026-11-11 19:56 UTC 2026-11-11 19:56 UTC
111.92.128.136 ip
39
1 PK 2026-11-11 19:56 UTC 2026-11-11 19:56 UTC
190.80.50.200 ip
39
1 GY 2026-11-11 19:55 UTC 2026-11-11 19:55 UTC
105.156.106.77 ip
39
1 MA 2026-11-11 19:54 UTC 2026-11-11 19:54 UTC
31.203.147.117 ip
50
1 KW 2026-11-11 19:54 UTC 2026-11-11 19:54 UTC
105.105.66.255 ip
39
1 DZ 2026-11-11 19:53 UTC 2026-11-11 19:53 UTC

Showing 1-25 of 94640 indicators