IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 43.228.157.244 ip

Score
100
/100
raw: 3502.58
Reports
366
Last Reported
2026-11-14 11:43 UTC
Categories
Config Exposure Probe (294) Scanning (41) API Probe (24) Admin Panel Probe (7)

Network details

ASN
403005
Organization
Blatant
Country
PK

Threat Intelligence enriched 2026-11-14 11:28 UTC

DNSBL Status
Listed
zen.spamhaus.org

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-14 11:43 UTC wp-config-backup direct GET /wp-config.php~ burst
2026-11-14 11:43 UTC build-artifact direct GET /package.json burst
2026-11-14 11:43 UTC catch-all-scan direct GET /env burst
2026-11-14 11:43 UTC cicd-config direct GET /.gitlab-ci.yml burst
2026-11-14 11:43 UTC catch-all-config direct GET /web/.env burst
2026-11-14 11:43 UTC cicd-config direct GET /Jenkinsfile burst
2026-11-14 11:43 UTC catch-all-config direct GET /app/.env burst
2026-11-14 11:43 UTC wp-config-backup direct GET /wp-config.php.bak burst
2026-11-14 11:43 UTC catch-all-config direct GET /ecommerce/.env burst
2026-11-14 11:43 UTC catch-all-config direct GET /main/.env burst
2026-11-14 11:43 UTC catch-all-config direct GET /.env.development burst
2026-11-14 11:43 UTC catch-all-config direct GET /.env_example burst
2026-11-14 11:43 UTC api direct GET /api/settings burst
2026-11-14 11:43 UTC catch-all-config direct GET /src/.env burst
2026-11-14 11:43 UTC catch-all-config direct GET /cms/.env burst
2026-11-14 11:43 UTC catch-all-config direct GET /ecommerce/.env burst
2026-11-14 11:43 UTC catch-all-config direct GET /application/.env burst
2026-11-14 11:43 UTC catch-all-config direct GET /mailer/.env burst
2026-11-14 11:43 UTC api direct GET /api/v1/.env burst
2026-11-14 11:43 UTC catch-all-suspicious direct GET /appsettings.json burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
175.138.197.85 ip
39
 1 MY 2026-11-14 11:46 UTC 2026-11-14 11:46 UTC
103.35.212.92 ip
50
 1 PK 2026-11-14 11:45 UTC 2026-11-14 11:45 UTC
86.249.228.233 ip
39
 1 FR 2026-11-14 11:44 UTC 2026-11-14 11:44 UTC
106.215.165.178 ip
88
 3 IN 2026-11-14 11:44 UTC 2026-11-14 11:44 UTC
185.12.142.247 ip
39
 1 UA 2026-11-14 11:44 UTC 2026-11-14 11:44 UTC
102.219.208.164 ip
39
 1 KE 2026-11-14 11:43 UTC 2026-11-14 11:43 UTC
103.23.207.56 ip
39
 1 BD 2026-11-14 11:41 UTC 2026-11-14 11:41 UTC
185.176.255.82 ip
100
 170 DE 2026-11-14 11:40 UTC 2026-11-14 11:40 UTC
187.191.36.157 ip
39
 1 MX 2026-11-14 11:40 UTC 2026-11-14 11:40 UTC
212.47.137.179 ip
88
 3 AZ 2026-11-14 11:41 UTC 2026-11-14 11:40 UTC
189.85.34.141 ip
39
 1 BR 2026-11-14 11:40 UTC 2026-11-14 11:40 UTC
122.183.42.152 ip
39
 1 IN 2026-11-14 11:39 UTC 2026-11-14 11:39 UTC
40.74.209.135 ip
18
 1 US 2026-11-14 11:39 UTC 2026-11-14 11:39 UTC
60.51.46.240 ip
39
 1 MY 2026-11-14 11:39 UTC 2026-11-14 11:39 UTC
20.84.40.178 ip
18
 1 US 2026-11-14 11:39 UTC 2026-11-14 11:39 UTC
20.83.36.88 ip
18
 1 US 2026-11-14 11:38 UTC 2026-11-14 11:38 UTC
146.158.112.168 ip
50
 1 RU 2026-11-14 11:38 UTC 2026-11-14 11:38 UTC
136.158.58.224 ip
39
 1 PH 2026-11-14 11:38 UTC 2026-11-14 11:38 UTC
112.134.217.184 ip
50
 1 LK 2026-11-14 11:38 UTC 2026-11-14 11:38 UTC
20.118.250.192 ip
18
 1 US 2026-11-14 11:38 UTC 2026-11-14 11:38 UTC
31.41.88.141 ip
50
 1 UA 2026-11-14 11:38 UTC 2026-11-14 11:38 UTC
179.63.37.103 ip
39
 1 VE 2026-11-14 11:38 UTC 2026-11-14 11:38 UTC
219.92.220.32 ip
39
 1 MY 2026-11-14 11:37 UTC 2026-11-14 11:37 UTC
103.148.149.47 ip
39
 1 BD 2026-11-14 11:37 UTC 2026-11-14 11:37 UTC
113.211.215.119 ip
50
 1 MY 2026-11-14 11:36 UTC 2026-11-14 11:36 UTC

Showing 1-25 of 101727 indicators