IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 38.127.60.25 ip
Score
2
/100
raw: 0.18
Reports
9
Last Reported
2026-07-31 15:24 UTC
Categories
Scanning (9)
Network details
ASN
18978
Organization
Enzu Inc
Country
US
Threat Intelligence enriched 2026-04-19 18:57 UTC
Reverse DNS
25.60-127-38.rdns.scalabledns.com
Sensor Activity last 6 events
| Time (UTC) | Trap | Signal | Method | Path | Flags | Sensor |
|---|---|---|---|---|---|---|
| 2026-07-31 15:24 UTC | catch-all-suspicious | direct | GET | /.mcp.json | burst | OC East Sensor |
| 2026-07-31 15:23 UTC | catch-all-suspicious | direct | GET | /.claude/mcp-claudeq.json | OC East Sensor | |
| 2026-07-31 15:23 UTC | catch-all-suspicious | direct | GET | /.claude/history.jsonl | OC East Sensor | |
| 2026-07-31 15:23 UTC | catch-all-suspicious | direct | GET | /.claude/settings.local.json | OC East Sensor | |
| 2026-07-31 15:23 UTC | catch-all-suspicious | direct | GET | /.claude/settings.json | OC East Sensor | |
| 2026-04-19 21:55 UTC | catch-all-scan | direct | GET | /assets/img/favicon.png | scanner | US West Sensor |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 209.59.138.129 | ip |
50
|
1 | US | 2026-10-31 09:20 UTC | 2026-10-31 09:20 UTC |
| 116.120.97.12 | ip |
39
|
1 | KR | 2026-10-31 09:13 UTC | 2026-10-31 09:13 UTC |
| 13.143.164.206 | ip |
18
|
1 | US | 2026-10-31 09:11 UTC | 2026-10-31 09:11 UTC |
| 165.227.28.66 | ip |
18
|
1 | CA | 2026-10-31 09:10 UTC | 2026-10-31 09:10 UTC |
| 104.23.223.134 | ip |
70
|
2 | SG | 2026-10-31 08:59 UTC | 2026-10-31 08:59 UTC |
| 35.234.34.186 | ip |
18
|
1 | SG | 2026-10-31 08:53 UTC | 2026-10-31 08:53 UTC |
| 165.22.52.72 | ip |
99
|
7 | CA | 2026-10-31 08:53 UTC | 2026-10-31 08:52 UTC |
| 192.144.87.29 | ip |
63
|
2 | BD | 2026-10-31 08:50 UTC | 2026-10-31 08:50 UTC |
| 212.47.137.204 | ip |
78
|
3 | AZ | 2026-10-31 08:50 UTC | 2026-10-31 08:49 UTC |
| 181.232.225.27 | ip |
67
|
2 | BR | 2026-10-31 08:50 UTC | 2026-10-31 08:49 UTC |
| 89.212.8.212 | ip |
50
|
1 | SI | 2026-10-31 08:37 UTC | 2026-10-31 08:37 UTC |
| 202.185.96.224 | ip |
100
|
14 | MY | 2026-10-31 08:39 UTC | 2026-10-31 08:36 UTC |
| 45.177.205.250 | ip |
100
|
18 | PY | 2026-10-31 08:39 UTC | 2026-10-31 08:36 UTC |
| 116.206.122.4 | ip |
100
|
12 | MM | 2026-10-31 08:39 UTC | 2026-10-31 08:36 UTC |
| 38.25.159.20 | ip |
92
|
4 | VE | 2026-10-31 08:35 UTC | 2026-10-31 08:34 UTC |
| 190.194.192.60 | ip |
94
|
4 | AR | 2026-10-31 08:35 UTC | 2026-10-31 08:34 UTC |
| 170.82.210.10 | ip |
93
|
5 | TT | 2026-10-31 08:34 UTC | 2026-10-31 08:34 UTC |
| 86.127.228.51 | ip |
88
|
4 | ES | 2026-10-31 08:34 UTC | 2026-10-31 08:34 UTC |
| 177.10.174.112 | ip |
94
|
4 | BR | 2026-10-31 08:35 UTC | 2026-10-31 08:34 UTC |
| 102.223.59.228 | ip |
39
|
1 | ZA | 2026-10-31 08:34 UTC | 2026-10-31 08:34 UTC |
| 62.171.143.175 | ip |
55
|
1 | FR | 2026-10-31 08:26 UTC | 2026-10-31 08:26 UTC |
| 31.39.131.27 | ip |
100
|
15 | FR | 2026-10-31 08:28 UTC | 2026-10-31 08:26 UTC |
| 223.181.23.171 | ip |
100
|
14 | IN | 2026-10-31 08:28 UTC | 2026-10-31 08:26 UTC |
| 197.95.182.90 | ip |
100
|
15 | ZA | 2026-10-31 08:28 UTC | 2026-10-31 08:26 UTC |
| 131.161.153.23 | ip |
100
|
13 | AR | 2026-10-31 08:28 UTC | 2026-10-31 08:26 UTC |
Showing 1-25 of 79696 indicators