IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 212.56.53.141 ip

Score
3
/100
raw: 0.27
Reports
60
Last Reported
2026-06-07 05:48 UTC
Categories
Scanning (31) Config Exposure Probe (22) Admin Panel Probe (3) API Probe (2) Web Stack Probe (2)

Network details

ASN
4213
Organization
Krypt Technologies
Country
US

Threat Intelligence enriched 2026-11-04 13:04 UTC

DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-06-07 05:48 UTC catch-all-suspicious direct GET /.docker/config.json
2026-06-07 05:47 UTC catch-all-config direct GET /.env.prod
2026-06-07 05:45 UTC wp-content direct GET /wp-content/mail.php burst
2026-06-07 05:45 UTC api direct GET /api/mail.php burst
2026-06-07 05:45 UTC catch-all-script direct GET /mail/send.php burst
2026-06-07 05:45 UTC catch-all-script direct GET /email.php burst
2026-06-07 05:45 UTC catch-all-script direct GET /testmail.php burst
2026-06-07 05:45 UTC catch-all-script direct GET /phpmailer.php burst
2026-06-07 05:45 UTC catch-all-script direct GET /smtp.php burst
2026-06-07 05:45 UTC catch-all-script direct GET /contact.php burst
2026-06-07 05:45 UTC catch-all-script direct GET /sendmail.php burst
2026-06-07 05:45 UTC catch-all-script direct GET /mail.php burst
2026-06-07 05:45 UTC catch-all-script direct GET /mailer.php burst
2026-06-07 05:45 UTC uploads direct GET /uploads/shell.php burst
2026-06-07 05:45 UTC admin direct GET /admin/shell.php burst
2026-06-07 05:45 UTC catch-all-script direct GET /_shell.php burst
2026-06-07 05:45 UTC catch-all-script direct GET /cmd.php burst
2026-06-07 05:45 UTC catch-all-script direct GET /upload.php burst
2026-06-07 05:45 UTC wp-admin direct GET /wp-admin/admin-ajax.php burst
2026-06-07 05:45 UTC catch-all-script direct GET /sniper.php burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
45.8.68.168 ip
100
 11 DE 2026-11-08 17:14 UTC 2026-11-08 17:13 UTC
41.223.73.251 ip
50
 1 BW 2026-11-08 17:12 UTC 2026-11-08 17:12 UTC
2.91.244.4 ip
39
 1 SA 2026-11-08 17:12 UTC 2026-11-08 17:12 UTC
201.188.117.205 ip
50
 1 CL 2026-11-08 17:12 UTC 2026-11-08 17:12 UTC
38.43.254.57 ip
50
 1 VE 2026-11-08 17:11 UTC 2026-11-08 17:11 UTC
5.225.234.52 ip
50
 1 ES 2026-11-08 17:11 UTC 2026-11-08 17:11 UTC
61.6.32.64 ip
39
 1 MY 2026-11-08 17:11 UTC 2026-11-08 17:11 UTC
189.138.122.248 ip
39
 1 MX 2026-11-08 17:08 UTC 2026-11-08 17:08 UTC
84.54.70.119 ip
50
 1 UZ 2026-11-08 17:08 UTC 2026-11-08 17:08 UTC
105.246.242.199 ip
50
 1 ZA 2026-11-08 17:07 UTC 2026-11-08 17:07 UTC
85.173.145.81 ip
39
 1 RU 2026-11-08 17:07 UTC 2026-11-08 17:07 UTC
189.143.114.187 ip
39
 1 MX 2026-11-08 17:07 UTC 2026-11-08 17:07 UTC
122.179.88.14 ip
39
 1 IN 2026-11-08 17:06 UTC 2026-11-08 17:06 UTC
94.178.205.159 ip
50
 1 UA 2026-11-08 17:06 UTC 2026-11-08 17:06 UTC
195.28.188.40 ip
50
 1 AM 2026-11-08 17:05 UTC 2026-11-08 17:05 UTC
146.158.113.205 ip
50
 1 RU 2026-11-08 17:05 UTC 2026-11-08 17:05 UTC
186.233.179.5 ip
39
 1 BR 2026-11-08 17:03 UTC 2026-11-08 17:03 UTC
157.119.184.72 ip
39
 1 BD 2026-11-08 17:03 UTC 2026-11-08 17:03 UTC
46.36.123.134 ip
39
 1 AM 2026-11-08 17:03 UTC 2026-11-08 17:03 UTC
223.185.59.231 ip
39
 1 IN 2026-11-08 17:02 UTC 2026-11-08 17:02 UTC
181.51.32.46 ip
39
 1 CO 2026-11-08 17:02 UTC 2026-11-08 17:02 UTC
37.236.226.79 ip
50
 1 IQ 2026-11-08 17:01 UTC 2026-11-08 17:01 UTC
103.247.22.225 ip
39
 1 ID 2026-11-08 17:00 UTC 2026-11-08 17:00 UTC
103.137.66.140 ip
50
 1 BD 2026-11-08 16:59 UTC 2026-11-08 16:59 UTC
35.205.202.64 ip
100
 73 BE 2026-11-08 16:59 UTC 2026-11-08 16:58 UTC

Showing 1-25 of 88949 indicators