IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 40.114.65.242 ip

Score
100
/100
raw: 130.72
Reports
18
Last Reported
2026-11-05 01:04 UTC
Categories
Scanning (10) Config Exposure Probe (5) Admin Panel Probe (2) API Probe (1)

Network details

ASN
8075
Organization
Microsoft Corporation
Country
US

Threat Intelligence enriched 2026-11-05 01:02 UTC

DNSBL Status
Clean

Sensor Activity last 18 events

Time (UTC) Trap Signal Method Path Flags
2026-11-05 01:04 UTC server-status direct GET /server-status
2026-11-05 01:04 UTC debug-panel direct GET /_profiler/phpinfo
2026-11-05 01:03 UTC catch-all-scan direct GET /.my.cnf burst
2026-11-05 01:03 UTC catch-all-suspicious direct GET /connectionstrings.config burst
2026-11-05 01:03 UTC catch-all-script direct GET /config/filesystems.php burst
2026-11-05 01:03 UTC catch-all-suspicious direct GET /src/config.js burst
2026-11-05 01:03 UTC catch-all-scan direct GET /.pnpmfile.cjs burst
2026-11-05 01:03 UTC catch-all-suspicious direct GET /nuxt.config.ts burst
2026-11-05 01:03 UTC api-docs direct GET /swagger.json burst
2026-11-05 01:03 UTC catch-all-config direct GET /.env.local.php burst
2026-11-05 01:03 UTC catch-all-suspicious direct GET /sftp-config.json burst
2026-11-05 01:03 UTC catch-all-backup direct GET /database.sql burst
2026-11-05 01:03 UTC sql-dump direct GET /dump.sql
2026-11-05 01:02 UTC catch-all-suspicious direct GET /ansible.cfg
2026-11-05 01:02 UTC catch-all-suspicious direct GET /config/database.yml
2026-11-05 01:02 UTC wp-config-backup direct GET /wp-config.php.old
2026-11-05 01:01 UTC catch-all-config direct GET /.env~
2026-11-05 01:01 UTC catch-all-config direct GET /.env.save

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
77.67.26.25 ip
39
 1 US 2026-11-05 01:49 UTC 2026-11-05 01:49 UTC
165.22.240.90 ip
100
 35 SG 2026-11-05 01:41 UTC 2026-11-05 01:39 UTC
186.57.236.224 ip
39
 1 AR 2026-11-05 01:39 UTC 2026-11-05 01:39 UTC
42.118.186.203 ip
39
 1 VN 2026-11-05 01:39 UTC 2026-11-05 01:39 UTC
49.42.66.57 ip
39
 1 IN 2026-11-05 01:38 UTC 2026-11-05 01:38 UTC
193.32.249.165 ip
89
 3 NL 2026-11-05 01:38 UTC 2026-11-05 01:37 UTC
162.158.103.223 ip
75
 2 PL 2026-11-05 01:24 UTC 2026-11-05 01:24 UTC
5.183.255.21 ip
50
 1 RU 2026-11-05 01:20 UTC 2026-11-05 01:20 UTC
38.137.31.139 ip
39
 1 IN 2026-11-05 01:09 UTC 2026-11-05 01:09 UTC
85.237.212.66 ip
55
 1 PL 2026-11-05 01:09 UTC 2026-11-05 01:09 UTC
190.114.37.185 ip
39
 1 CL 2026-11-05 01:08 UTC 2026-11-05 01:08 UTC
34.152.62.86 ip
100
 71 CA 2026-11-05 01:08 UTC 2026-11-05 01:08 UTC
61.1.132.175 ip
39
 1 IN 2026-11-05 01:05 UTC 2026-11-05 01:05 UTC
52.234.179.110 ip
100
 16 US 2026-11-05 01:04 UTC 2026-11-05 01:03 UTC
40.114.65.242 ip
100
 18 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
20.85.229.140 ip
100
 19 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
20.169.215.72 ip
100
 22 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
20.121.19.44 ip
100
 13 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
172.190.64.193 ip
100
 19 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
172.191.88.112 ip
100
 21 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
172.190.161.125 ip
100
 20 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
104.211.60.75 ip
100
 15 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
168.61.50.172 ip
100
 18 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
168.61.38.40 ip
100
 22 US 2026-11-05 01:04 UTC 2026-11-05 01:02 UTC
201.79.97.215 ip
99
 7 SG 2026-11-05 00:53 UTC 2026-11-05 00:52 UTC

Showing 1-25 of 86838 indicators