IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 212.56.54.58 ip

Score
94
/100
raw: 27.85
Reports
5118
Last Reported
2026-06-11 01:55 UTC
Categories
Config Exposure Probe (2580) Scanning (2038) API Probe (390) Admin Panel Probe (80) Web Stack Probe (30)

Network details

ASN
4213
Organization
Krypt Technologies
Country
US

Threat Intelligence enriched 2026-11-04 14:13 UTC

DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-06-11 01:53 UTC catch-all-config direct GET /kubernetes/.env burst
2026-06-11 01:53 UTC catch-all-suspicious direct GET /backend/aws.json burst
2026-06-11 01:53 UTC catch-all-suspicious direct GET /backend/service-account.json burst
2026-06-11 01:53 UTC catch-all-config direct GET /.env-1.old burst
2026-06-11 01:53 UTC catch-all-suspicious direct GET /app.yml burst
2026-06-11 01:53 UTC catch-all-suspicious direct GET /configprops burst
2026-06-11 01:53 UTC catch-all-suspicious direct GET /.config/gcloud/credentials.db burst
2026-06-11 01:53 UTC catch-all-config direct GET /core/.env burst
2026-06-11 01:53 UTC catch-all-suspicious direct GET /cloud.json burst
2026-06-11 01:53 UTC catch-all-config direct GET /apps/.env burst
2026-06-11 01:53 UTC debug-panel direct GET /_profiler/open burst
2026-06-11 01:53 UTC catch-all-backup direct GET /sql/db.sql burst
2026-06-11 01:53 UTC catch-all-config direct GET /.env.old burst
2026-06-11 01:53 UTC catch-all-suspicious direct GET /logs/application.log burst
2026-06-11 01:53 UTC api direct GET /api/application.yml burst
2026-06-11 01:53 UTC catch-all-config direct GET /.env.ini burst
2026-06-11 01:53 UTC catch-all-config direct GET /.env.copy burst
2026-06-11 01:53 UTC catch-all-scan direct GET /.npmrc burst
2026-06-11 01:53 UTC catch-all-config direct GET /.env.production burst
2026-06-11 01:53 UTC docker-compose direct GET /docker-compose.override.yml burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
108.16.112.236 ip
39
 1 US 2026-11-09 00:19 UTC 2026-11-09 00:19 UTC
181.78.3.114 ip
50
 1 CO 2026-11-09 00:19 UTC 2026-11-09 00:19 UTC
82.215.103.35 ip
50
 1 UZ 2026-11-09 00:18 UTC 2026-11-09 00:18 UTC
46.196.253.99 ip
39
 1 TR 2026-11-09 00:18 UTC 2026-11-09 00:18 UTC
179.0.119.240 ip
39
 1 BR 2026-11-09 00:18 UTC 2026-11-09 00:18 UTC
45.172.142.188 ip
39
 1 AR 2026-11-09 00:17 UTC 2026-11-09 00:17 UTC
45.178.0.41 ip
39
 1 AR 2026-11-09 00:16 UTC 2026-11-09 00:16 UTC
37.104.146.128 ip
50
 1 SA 2026-11-09 00:14 UTC 2026-11-09 00:14 UTC
2.44.142.108 ip
39
 1 IT 2026-11-09 00:13 UTC 2026-11-09 00:13 UTC
143.105.17.96 ip
50
 1 MX 2026-11-09 00:13 UTC 2026-11-09 00:13 UTC
102.209.223.177 ip
39
 1 CI 2026-11-09 00:12 UTC 2026-11-09 00:12 UTC
190.150.67.100 ip
50
 1 SV 2026-11-09 00:12 UTC 2026-11-09 00:12 UTC
177.226.161.14 ip
39
 1 MX 2026-11-09 00:10 UTC 2026-11-09 00:10 UTC
77.83.3.72 ip
39
 1 RU 2026-11-09 00:08 UTC 2026-11-09 00:08 UTC
179.60.72.52 ip
50
 1 CL 2026-11-09 00:07 UTC 2026-11-09 00:07 UTC
27.145.148.121 ip
50
 1 TH 2026-11-09 00:07 UTC 2026-11-09 00:07 UTC
167.250.40.100 ip
50
 1 BR 2026-11-09 00:07 UTC 2026-11-09 00:07 UTC
91.235.227.246 ip
50
 1 UA 2026-11-09 00:06 UTC 2026-11-09 00:06 UTC
161.142.146.0 ip
39
 1 MY 2026-11-09 00:05 UTC 2026-11-09 00:05 UTC
79.117.194.129 ip
50
 1 ES 2026-11-09 00:05 UTC 2026-11-09 00:05 UTC
190.83.116.46 ip
50
 1 HN 2026-11-09 00:05 UTC 2026-11-09 00:05 UTC
178.151.254.56 ip
50
 1 UA 2026-11-09 00:04 UTC 2026-11-09 00:04 UTC
105.246.241.157 ip
39
 1 ZA 2026-11-09 00:04 UTC 2026-11-09 00:04 UTC
187.189.172.204 ip
50
 1 MX 2026-11-09 00:02 UTC 2026-11-09 00:02 UTC
38.211.69.25 ip
39
 1 CO 2026-11-09 00:02 UTC 2026-11-09 00:02 UTC

Showing 1-25 of 89526 indicators