IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 40.65.59.114 ip

Score
1
/100
raw: 0.1
Reports
17
Last Reported
2026-06-13 09:06 UTC
Categories
Config Exposure Probe (11) Scanning (3) Admin Panel Probe (1) API Probe (1) Credential Stuffing (1)

Network details

ASN
8075
Organization
Microsoft Corporation
Country
US

Threat Intelligence enriched 2026-11-04 17:07 UTC

DNSBL Status
Clean

Sensor Activity last 17 events

Time (UTC) Trap Signal Method Path Flags
2026-06-13 09:06 UTC catch-all-scan direct POST /___proxy_subdomain_whm/login/ burst creds
2026-06-13 09:06 UTC sql-dump direct GET /dump.sql burst
2026-06-13 09:06 UTC sql-dump direct GET /backup.sql burst
2026-06-13 09:06 UTC catch-all-config direct GET /.htpasswd burst
2026-06-13 09:06 UTC catch-all-suspicious direct GET /app/config/parameters.yml burst
2026-06-13 09:06 UTC actuator direct GET /actuator/env burst
2026-06-13 09:06 UTC server-status direct GET /server-status burst
2026-06-13 09:06 UTC catch-all-script direct GET /phpinfo.php burst
2026-06-13 09:06 UTC catch-all-suspicious direct GET /config/database.yml burst
2026-06-13 09:05 UTC aws-creds direct GET /.aws/credentials burst
2026-06-13 09:05 UTC wp-config-backup direct GET /wp-config.php.bak burst
2026-06-13 09:05 UTC catch-all-config direct GET /.env.save burst
2026-06-13 09:05 UTC catch-all-config direct GET /.env.backup burst
2026-06-13 09:05 UTC catch-all-config direct GET /.env.production
2026-06-13 09:05 UTC dot-env direct GET /.env
2026-06-13 09:05 UTC git-config direct GET /.git/config
2026-06-13 09:05 UTC git-head direct GET /.git/HEAD

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
136.110.59.103 ip
39
 1 SG 2026-11-09 13:40 UTC 2026-11-09 13:40 UTC
175.24.73.57 ip
33
 2 CN 2026-11-09 13:17 UTC 2026-11-09 13:17 UTC
46.216.225.28 ip
55
 1 BY 2026-11-09 12:59 UTC 2026-11-09 12:59 UTC
143.255.84.189 ip
39
 1 VE 2026-11-09 12:40 UTC 2026-11-09 12:40 UTC
186.57.213.25 ip
39
 1 AR 2026-11-09 12:39 UTC 2026-11-09 12:39 UTC
194.44.50.87 ip
70
 2 UA 2026-11-09 12:39 UTC 2026-11-09 12:39 UTC
114.119.130.99 ip
18
 1 SG 2026-11-09 12:26 UTC 2026-11-09 12:26 UTC
64.205.72.196 ip
39
 1 US 2026-11-09 12:10 UTC 2026-11-09 12:10 UTC
188.132.150.51 ip
70
 2 TR 2026-11-09 12:03 UTC 2026-11-09 12:03 UTC
138.59.142.184 ip
39
 1 AR 2026-11-09 12:03 UTC 2026-11-09 12:03 UTC
85.208.96.195 ip
33
 2 US 2026-11-09 11:58 UTC 2026-11-09 11:58 UTC
167.172.30.140 ip
100
 10 US 2026-11-09 11:55 UTC 2026-11-09 11:54 UTC
79.103.19.19 ip
39
 1 GR 2026-11-09 11:47 UTC 2026-11-09 11:47 UTC
45.188.167.178 ip
39
 1 MX 2026-11-09 11:47 UTC 2026-11-09 11:47 UTC
168.144.41.236 ip
97
 12 SG 2026-11-09 11:38 UTC 2026-11-09 11:35 UTC
103.108.130.169 ip
39
 1 ID 2026-11-09 11:34 UTC 2026-11-09 11:34 UTC
143.105.135.251 ip
39
 1 AR 2026-11-09 11:34 UTC 2026-11-09 11:34 UTC
94.158.58.24 ip
70
 2 UZ 2026-11-09 11:34 UTC 2026-11-09 11:34 UTC
139.59.255.125 ip
97
 12 SG 2026-11-09 11:34 UTC 2026-11-09 11:30 UTC
159.65.1.19 ip
99
 7 SG 2026-11-09 11:29 UTC 2026-11-09 11:27 UTC
152.42.232.255 ip
97
 12 SG 2026-11-09 11:19 UTC 2026-11-09 11:16 UTC
34.15.148.197 ip
100
 131 TH 2026-11-09 11:11 UTC 2026-11-09 11:09 UTC
51.81.163.28 ip
18
 1 US 2026-11-09 11:07 UTC 2026-11-09 11:07 UTC
91.90.11.16 ip
86
 4 UA 2026-11-09 10:37 UTC 2026-11-09 10:37 UTC
91.186.248.232 ip
90
 3 JO 2026-11-09 10:37 UTC 2026-11-09 10:37 UTC

Showing 1-25 of 90220 indicators