IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 48.217.251.134 ip

Score
3
/100
raw: 0.31
Reports
45
Last Reported
2026-07-20 21:35 UTC
Categories
Config Exposure Probe (22) Scanning (20) API Probe (2) Credential Stuffing (1)

Network details

ASN
8075
Organization
Microsoft Corporation
Country
US

Threat Intelligence enriched 2026-11-04 19:16 UTC

DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-06-16 20:21 UTC catch-all-scan direct POST /___proxy_subdomain_whm/login/ burst creds
2026-06-16 20:21 UTC catch-all-suspicious direct GET /.kube/config burst
2026-06-16 20:21 UTC catch-all-suspicious direct GET /application.yml burst
2026-06-16 20:21 UTC catch-all-scan direct GET /application.properties burst
2026-06-16 20:21 UTC catch-all-suspicious direct GET /web.config burst
2026-06-16 20:21 UTC catch-all-suspicious direct GET /appsettings.json burst
2026-06-16 20:21 UTC catch-all-scan direct GET /.netrc burst
2026-06-16 20:21 UTC catch-all-scan direct GET /.npmrc burst
2026-06-16 20:21 UTC catch-all-scan direct GET /.ssh/id_ed25519 burst
2026-06-16 20:21 UTC catch-all-scan direct GET /.ssh/id_rsa burst
2026-06-16 20:21 UTC catch-all-backup direct GET /data/dump.sql burst
2026-06-16 20:21 UTC backup direct GET /backup/database.sql burst
2026-06-16 20:20 UTC catch-all-backup direct GET /database.sql burst
2026-06-16 20:20 UTC sql-dump direct GET /backup.sql burst
2026-06-16 20:20 UTC catch-all-config direct GET /.htpasswd burst
2026-06-16 20:20 UTC catch-all-suspicious direct GET /app/config/parameters.yml burst
2026-06-16 20:20 UTC catch-all-script direct GET /config/database.php burst
2026-06-16 20:20 UTC catch-all-script direct GET /includes/config.php burst
2026-06-16 20:20 UTC catch-all-script direct GET /config/config.php burst
2026-06-16 20:20 UTC config-php direct GET /config.php burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
85.65.177.114 ip
50
 1 IL 2026-11-10 03:15 UTC 2026-11-10 03:15 UTC
61.9.9.104 ip
50
 1 PH 2026-11-10 03:12 UTC 2026-11-10 03:12 UTC
132.251.229.169 ip
50
 1 BO 2026-11-10 03:12 UTC 2026-11-10 03:12 UTC
187.189.242.239 ip
50
 1 MX 2026-11-10 03:11 UTC 2026-11-10 03:11 UTC
181.78.95.49 ip
50
 1 PY 2026-11-10 03:10 UTC 2026-11-10 03:10 UTC
138.185.73.144 ip
50
 1 BR 2026-11-10 03:09 UTC 2026-11-10 03:09 UTC
35.160.56.209 ip
100
 10 US 2026-11-10 03:10 UTC 2026-11-10 03:09 UTC
118.179.76.242 ip
50
 1 BD 2026-11-10 03:08 UTC 2026-11-10 03:08 UTC
93.189.22.70 ip
50
 1 RU 2026-11-10 03:07 UTC 2026-11-10 03:07 UTC
143.44.248.61 ip
50
 1 PH 2026-11-10 03:06 UTC 2026-11-10 03:06 UTC
195.19.124.55 ip
50
 1 RU 2026-11-10 03:06 UTC 2026-11-10 03:06 UTC
195.250.64.66 ip
50
 1 AM 2026-11-10 03:05 UTC 2026-11-10 03:05 UTC
5.188.87.29 ip
98
 6 BR 2026-11-10 03:06 UTC 2026-11-10 03:05 UTC
186.85.186.29 ip
50
 1 CO 2026-11-10 03:04 UTC 2026-11-10 03:04 UTC
45.71.122.39 ip
50
 1 BR 2026-11-10 03:03 UTC 2026-11-10 03:03 UTC
5.62.147.214 ip
50
 1 IQ 2026-11-10 03:03 UTC 2026-11-10 03:03 UTC
196.115.149.138 ip
50
 1 MA 2026-11-10 03:03 UTC 2026-11-10 03:03 UTC
45.91.23.16 ip
50
 1 CA 2026-11-10 03:01 UTC 2026-11-10 03:01 UTC
109.186.196.201 ip
50
 1 IL 2026-11-10 03:01 UTC 2026-11-10 03:01 UTC
146.59.135.41 ip
50
 1 FR 2026-11-10 03:01 UTC 2026-11-10 03:01 UTC
186.227.114.69 ip
50
 1 BR 2026-11-10 03:01 UTC 2026-11-10 03:01 UTC
171.247.240.108 ip
50
 1 VN 2026-11-10 02:59 UTC 2026-11-10 02:59 UTC
191.113.16.229 ip
50
 1 CL 2026-11-10 02:59 UTC 2026-11-10 02:59 UTC
103.163.43.182 ip
50
 1 IN 2026-11-10 02:57 UTC 2026-11-10 02:57 UTC
41.188.104.92 ip
50
 1 MR 2026-11-10 02:57 UTC 2026-11-10 02:57 UTC

Showing 1-25 of 91346 indicators