IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 47.237.108.40 ip
Score
2
/100
raw: 0.17
Reports
54
Last Reported
2026-06-06 03:36 UTC
Categories
Scanning (30)
Config Exposure Probe (24)
Network details
ASN
45102
Organization
Alibaba US Technology Co., Ltd.
Country
SG
Threat Intelligence enriched 2026-11-04 11:06 UTC
DNSBL Status
Clean
Sensor Activity last 20 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-06-06 03:36 UTC | catch-all-script | direct | GET | /settings.php | burst |
| 2026-06-06 03:36 UTC | build-artifact | direct | GET | /composer.json | burst |
| 2026-06-06 03:36 UTC | catch-all-suspicious | direct | GET | /web.config | burst |
| 2026-06-06 03:36 UTC | catch-all-config | direct | GET | /.gitconfig | burst |
| 2026-06-06 03:36 UTC | catch-all-suspicious | direct | GET | /config.js | burst |
| 2026-06-06 03:36 UTC | catch-all-script | direct | GET | /db.php | burst |
| 2026-06-06 03:36 UTC | catch-all-script | direct | GET | /database.php | |
| 2026-06-06 03:36 UTC | catch-all-config | direct | GET | /.env.bak | |
| 2026-06-06 03:36 UTC | docker-compose | direct | GET | /docker-compose.yml | |
| 2026-06-06 03:36 UTC | catch-all-suspicious | direct | GET | /application.yml | |
| 2026-06-06 03:32 UTC | catch-all-scan | direct | GET | /app.js | burst |
| 2026-06-06 03:32 UTC | catch-all-suspicious | direct | GET | /appsettings.json | burst |
| 2026-06-06 03:32 UTC | dot-env | direct | GET | /.env | burst |
| 2026-06-06 03:32 UTC | catch-all-script | direct | GET | /phpinfo.php | burst |
| 2026-06-06 03:32 UTC | wp-config | direct | GET | /wp-config.php | burst |
| 2026-06-06 03:32 UTC | git-config | direct | GET | /.git/config | |
| 2026-06-06 03:32 UTC | catch-all-script | direct | GET | /info.php | |
| 2026-06-06 03:32 UTC | config-php | direct | GET | /config.php | |
| 2026-06-04 15:00 UTC | catch-all-suspicious | direct | GET | /config.js | burst |
| 2026-06-04 15:00 UTC | catch-all-script | direct | GET | /db.php | burst |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 5.53.115.158 | ip |
50
|
1 | UA | 2026-11-08 10:41 UTC | 2026-11-08 10:41 UTC |
| 139.5.248.5 | ip |
50
|
1 | IN | 2026-11-08 10:41 UTC | 2026-11-08 10:41 UTC |
| 210.56.5.220 | ip |
39
|
1 | PK | 2026-11-08 10:40 UTC | 2026-11-08 10:40 UTC |
| 99.103.134.61 | ip |
39
|
1 | US | 2026-11-08 10:39 UTC | 2026-11-08 10:39 UTC |
| 103.77.16.67 | ip |
39
|
1 | BD | 2026-11-08 10:37 UTC | 2026-11-08 10:37 UTC |
| 86.220.244.193 | ip |
39
|
1 | FR | 2026-11-08 10:37 UTC | 2026-11-08 10:37 UTC |
| 103.122.91.106 | ip |
50
|
1 | BD | 2026-11-08 10:35 UTC | 2026-11-08 10:35 UTC |
| 186.189.100.184 | ip |
50
|
1 | CL | 2026-11-08 10:35 UTC | 2026-11-08 10:35 UTC |
| 49.159.73.4 | ip |
39
|
1 | TW | 2026-11-08 10:35 UTC | 2026-11-08 10:35 UTC |
| 103.191.162.201 | ip |
39
|
1 | BD | 2026-11-08 10:35 UTC | 2026-11-08 10:35 UTC |
| 110.39.14.140 | ip |
50
|
1 | PK | 2026-11-08 10:34 UTC | 2026-11-08 10:34 UTC |
| 91.202.130.110 | ip |
39
|
1 | UA | 2026-11-08 10:33 UTC | 2026-11-08 10:33 UTC |
| 157.50.171.96 | ip |
50
|
1 | IN | 2026-11-08 10:31 UTC | 2026-11-08 10:31 UTC |
| 223.204.220.98 | ip |
50
|
1 | TH | 2026-11-08 10:31 UTC | 2026-11-08 10:31 UTC |
| 14.192.215.180 | ip |
50
|
1 | MY | 2026-11-08 10:31 UTC | 2026-11-08 10:31 UTC |
| 172.64.198.12 | ip |
45
|
1 | PL | 2026-11-08 10:31 UTC | 2026-11-08 10:31 UTC |
| 114.119.138.130 | ip |
18
|
1 | SG | 2026-11-08 10:29 UTC | 2026-11-08 10:29 UTC |
| 177.245.233.232 | ip |
50
|
1 | MX | 2026-11-08 10:28 UTC | 2026-11-08 10:28 UTC |
| 103.89.240.46 | ip |
39
|
1 | BD | 2026-11-08 10:28 UTC | 2026-11-08 10:28 UTC |
| 186.4.217.78 | ip |
39
|
1 | EC | 2026-11-08 10:27 UTC | 2026-11-08 10:27 UTC |
| 61.6.143.212 | ip |
50
|
1 | MY | 2026-11-08 10:27 UTC | 2026-11-08 10:27 UTC |
| 65.75.121.196 | ip |
50
|
1 | BS | 2026-11-08 10:27 UTC | 2026-11-08 10:27 UTC |
| 77.246.68.250 | ip |
50
|
1 | LB | 2026-11-08 10:27 UTC | 2026-11-08 10:27 UTC |
| 103.153.170.165 | ip |
39
|
1 | BD | 2026-11-08 10:26 UTC | 2026-11-08 10:26 UTC |
| 162.158.86.31 | ip |
70
|
2 | DE | 2026-11-08 10:26 UTC | 2026-11-08 10:26 UTC |
Showing 1-25 of 88434 indicators