IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 4.236.158.87 ip

Score
1
/100
raw: 0.1
Reports
18
Last Reported
2026-06-10 22:16 UTC
Categories
Config Exposure Probe (13) Scanning (3) Admin Panel Probe (1) Credential Stuffing (1)

Network details

ASN
8075
Organization
Microsoft Corporation
Country
US

Threat Intelligence enriched 2026-11-04 15:04 UTC

Sensor Activity last 18 events

Time (UTC) Trap Signal Method Path Flags
2026-06-10 22:15 UTC catch-all-scan direct POST /___proxy_subdomain_whm/login/ burst creds
2026-06-10 22:15 UTC sql-dump direct GET /dump.sql burst
2026-06-10 22:15 UTC sql-dump direct GET /backup.sql burst
2026-06-10 22:15 UTC catch-all-suspicious direct GET /app/config/parameters.yml burst
2026-06-10 22:15 UTC config-php direct GET /config.php burst
2026-06-10 22:15 UTC ds-store direct GET /.DS_Store burst
2026-06-10 22:15 UTC server-status direct GET /server-status burst
2026-06-10 22:15 UTC catch-all-script direct GET /phpinfo.php burst
2026-06-10 22:15 UTC catch-all-suspicious direct GET /config/database.yml burst
2026-06-10 22:15 UTC aws-creds direct GET /.aws/credentials burst
2026-06-10 22:15 UTC wp-config-backup direct GET /wp-config.php.bak burst
2026-06-10 22:15 UTC wp-config direct GET /wp-config.php burst
2026-06-10 22:15 UTC catch-all-config direct GET /.env.save burst
2026-06-10 22:15 UTC catch-all-config direct GET /.env.backup burst
2026-06-10 22:15 UTC catch-all-config direct GET /.env.production
2026-06-10 22:15 UTC catch-all-config direct GET /.env.local
2026-06-10 22:15 UTC dot-env direct GET /.env
2026-06-10 22:15 UTC git-head direct GET /.git/HEAD

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
201.180.159.76 ip
50
 1 AR 2026-11-09 02:06 UTC 2026-11-09 02:06 UTC
189.169.81.184 ip
39
 1 MX 2026-11-09 02:06 UTC 2026-11-09 02:06 UTC
186.5.2.237 ip
50
 1 EC 2026-11-09 02:04 UTC 2026-11-09 02:04 UTC
121.121.57.54 ip
39
 1 MY 2026-11-09 02:04 UTC 2026-11-09 02:04 UTC
14.192.212.120 ip
39
 1 MY 2026-11-09 02:04 UTC 2026-11-09 02:04 UTC
181.14.40.94 ip
50
 1 AR 2026-11-09 02:04 UTC 2026-11-09 02:04 UTC
181.41.151.18 ip
50
 1 ES 2026-11-09 02:03 UTC 2026-11-09 02:03 UTC
186.46.16.253 ip
39
 1 EC 2026-11-09 02:03 UTC 2026-11-09 02:03 UTC
178.57.116.134 ip
50
 1 RU 2026-11-09 02:00 UTC 2026-11-09 02:00 UTC
49.245.9.21 ip
50
 1 SG 2026-11-09 02:00 UTC 2026-11-09 02:00 UTC
45.126.75.149 ip
50
 1 BD 2026-11-09 02:00 UTC 2026-11-09 02:00 UTC
73.6.89.169 ip
50
 1 US 2026-11-09 01:58 UTC 2026-11-09 01:58 UTC
210.195.155.210 ip
50
 1 MY 2026-11-09 01:58 UTC 2026-11-09 01:58 UTC
170.239.73.37 ip
50
 1 BR 2026-11-09 01:57 UTC 2026-11-09 01:57 UTC
136.169.151.87 ip
39
 1 RU 2026-11-09 01:57 UTC 2026-11-09 01:57 UTC
105.175.244.114 ip
39
 1 AO 2026-11-09 01:56 UTC 2026-11-09 01:56 UTC
46.98.61.13 ip
39
 1 UA 2026-11-09 01:54 UTC 2026-11-09 01:54 UTC
190.104.33.179 ip
39
 1 AR 2026-11-09 01:53 UTC 2026-11-09 01:53 UTC
38.183.7.226 ip
39
 1 IN 2026-11-09 01:52 UTC 2026-11-09 01:52 UTC
45.88.217.236 ip
100
 56 US 2026-11-09 01:56 UTC 2026-11-09 01:52 UTC
106.200.5.250 ip
50
 1 IN 2026-11-09 01:50 UTC 2026-11-09 01:50 UTC
191.243.89.144 ip
50
 1 BR 2026-11-09 01:50 UTC 2026-11-09 01:50 UTC
103.78.226.104 ip
39
 1 BD 2026-11-09 01:50 UTC 2026-11-09 01:50 UTC
186.139.172.82 ip
39
 1 AR 2026-11-09 01:49 UTC 2026-11-09 01:49 UTC
176.101.194.105 ip
50
 1 UA 2026-11-09 01:48 UTC 2026-11-09 01:48 UTC

Showing 1-25 of 89685 indicators