IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 206.214.216.68 ip

Score
1
/100
raw: 0.05
Reports
18
Last Reported
2026-05-27 12:20 UTC
Categories
Config Exposure Probe (13) Scanning (2) Admin Panel Probe (1) API Probe (1) Credential Stuffing (1)

Network details

ASN
30633
Organization
Leaseweb USA, Inc.
Country
US

Threat Intelligence enriched 2026-11-04 07:12 UTC

Reverse DNS
arch5.5archcodecompliance.com
DNSBL Status
Clean

Sensor Activity last 18 events

Time (UTC) Trap Signal Method Path Flags
2026-05-27 12:19 UTC catch-all-scan direct POST /___proxy_subdomain_whm/login/ burst creds
2026-05-27 12:19 UTC sql-dump direct GET /backup.sql burst
2026-05-27 12:19 UTC catch-all-config direct GET /.htpasswd burst
2026-05-27 12:19 UTC config-php direct GET /config.php burst
2026-05-27 12:19 UTC ds-store direct GET /.DS_Store burst
2026-05-27 12:19 UTC actuator direct GET /actuator/env burst
2026-05-27 12:19 UTC server-status direct GET /server-status burst
2026-05-27 12:19 UTC catch-all-script direct GET /phpinfo.php burst
2026-05-27 12:19 UTC catch-all-suspicious direct GET /config/database.yml burst
2026-05-27 12:19 UTC aws-creds direct GET /.aws/credentials burst
2026-05-27 12:19 UTC wp-config-backup direct GET /wp-config.php.bak burst
2026-05-27 12:19 UTC wp-config direct GET /wp-config.php burst
2026-05-27 12:19 UTC catch-all-config direct GET /.env.save burst
2026-05-27 12:19 UTC catch-all-config direct GET /.env.backup burst
2026-05-27 12:19 UTC catch-all-config direct GET /.env.production
2026-05-27 12:18 UTC dot-env direct GET /.env
2026-05-27 12:18 UTC git-config direct GET /.git/config
2026-05-27 12:18 UTC git-head direct GET /.git/HEAD

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
153.117.38.162 ip
18
 1 PK 2026-11-06 23:39 UTC 2026-11-06 23:39 UTC
34.22.44.66 ip
70
 6 US 2026-11-06 23:34 UTC 2026-11-06 23:33 UTC
172.68.195.236 ip
70
 2 DE 2026-11-06 23:21 UTC 2026-11-06 23:21 UTC
212.87.216.119 ip
50
 1 US 2026-11-06 22:50 UTC 2026-11-06 22:50 UTC
157.230.88.27 ip
45
 1 US 2026-11-06 22:26 UTC 2026-11-06 22:26 UTC
45.92.229.161 ip
93
 3 US 2026-11-06 22:25 UTC 2026-11-06 22:24 UTC
45.130.83.57 ip
45
 1 US 2026-11-06 22:24 UTC 2026-11-06 22:24 UTC
91.233.0.14 ip
45
 1 US 2026-11-06 22:19 UTC 2026-11-06 22:19 UTC
91.233.0.106 ip
97
 4 US 2026-11-06 22:20 UTC 2026-11-06 22:19 UTC
43.229.167.3 ip
96
 6 PK 2026-11-06 22:20 UTC 2026-11-06 22:19 UTC
180.75.44.1 ip
98
 7 MY 2026-11-06 22:20 UTC 2026-11-06 22:19 UTC
103.172.139.119 ip
99
 7 BD 2026-11-06 22:20 UTC 2026-11-06 22:19 UTC
90.28.224.173 ip
86
 4 FR 2026-11-06 22:19 UTC 2026-11-06 22:19 UTC
27.50.12.133 ip
94
 4 EC 2026-11-06 22:19 UTC 2026-11-06 22:19 UTC
189.203.205.32 ip
39
 1 MX 2026-11-06 22:19 UTC 2026-11-06 22:19 UTC
113.178.98.80 ip
98
 7 VN 2026-11-06 22:19 UTC 2026-11-06 22:18 UTC
73.22.233.98 ip
100
 8 US 2026-11-06 22:19 UTC 2026-11-06 22:18 UTC
213.6.93.197 ip
99
 7 PS 2026-11-06 22:18 UTC 2026-11-06 22:17 UTC
170.246.157.73 ip
91
 4 CR 2026-11-06 22:17 UTC 2026-11-06 22:17 UTC
186.57.18.155 ip
97
 5 AR 2026-11-06 22:18 UTC 2026-11-06 22:17 UTC
178.218.25.76 ip
82
 3 RU 2026-11-06 22:17 UTC 2026-11-06 22:17 UTC
168.196.31.60 ip
92
 4 BR 2026-11-06 22:17 UTC 2026-11-06 22:17 UTC
4.232.93.50 ip
100
 182 IT 2026-11-06 22:41 UTC 2026-11-06 22:16 UTC
170.245.132.211 ip
82
 3 PY 2026-11-06 22:17 UTC 2026-11-06 22:16 UTC
94.28.174.206 ip
75
 3 RU 2026-11-06 22:17 UTC 2026-11-06 22:16 UTC

Showing 1-25 of 87629 indicators