IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 57.151.121.200 ip
Score
0
/100
raw: 0.03
Reports
8
Last Reported
2026-06-02 00:52 UTC
Categories
Config Exposure Probe (5)
Scanning (2)
Credential Stuffing (1)
Network details
ASN
8075
Organization
Microsoft Corporation
Country
US
Threat Intelligence enriched 2026-11-04 10:07 UTC
DNSBL Status
Clean
Sensor Activity last 8 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-06-02 00:52 UTC | catch-all-scan | direct | POST | /___proxy_subdomain_whm/login/ | burst creds |
| 2026-06-02 00:51 UTC | catch-all-suspicious | direct | GET | /app/config/parameters.yml | burst |
| 2026-06-02 00:51 UTC | config-php | direct | GET | /config.php | burst |
| 2026-06-02 00:51 UTC | ds-store | direct | GET | /.DS_Store | burst |
| 2026-06-02 00:51 UTC | catch-all-script | direct | GET | /phpinfo.php | |
| 2026-06-02 00:51 UTC | aws-creds | direct | GET | /.aws/credentials | |
| 2026-06-02 00:51 UTC | catch-all-config | direct | GET | /.env.production | |
| 2026-06-02 00:51 UTC | git-head | direct | GET | /.git/HEAD |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 43.155.169.154 | ip |
100
|
75 | KR | 2026-11-08 00:04 UTC | 2026-11-07 23:59 UTC |
| 172.64.198.86 | ip |
45
|
1 | PL | 2026-11-07 23:35 UTC | 2026-11-07 23:35 UTC |
| 172.64.198.16 | ip |
45
|
1 | PL | 2026-11-07 23:35 UTC | 2026-11-07 23:35 UTC |
| 77.67.26.137 | ip |
39
|
1 | US | 2026-11-07 23:21 UTC | 2026-11-07 23:21 UTC |
| 172.68.159.133 | ip |
75
|
2 | PL | 2026-11-07 22:54 UTC | 2026-11-07 22:54 UTC |
| 34.140.69.197 | ip |
100
|
242 | BE | 2026-11-07 22:56 UTC | 2026-11-07 22:52 UTC |
| 34.38.220.175 | ip |
100
|
241 | BE | 2026-11-07 22:56 UTC | 2026-11-07 22:51 UTC |
| 34.77.153.177 | ip |
100
|
241 | BE | 2026-11-07 22:54 UTC | 2026-11-07 22:51 UTC |
| 43.155.196.54 | ip |
100
|
670 | KR | 2026-11-07 23:12 UTC | 2026-11-07 22:47 UTC |
| 207.175.237.228 | ip |
100
|
240 | BE | 2026-11-07 22:52 UTC | 2026-11-07 22:47 UTC |
| 34.53.218.24 | ip |
100
|
120 | BE | 2026-11-07 22:35 UTC | 2026-11-07 22:35 UTC |
| 34.52.251.89 | ip |
100
|
120 | BE | 2026-11-07 22:34 UTC | 2026-11-07 22:34 UTC |
| 35.233.97.20 | ip |
100
|
120 | BE | 2026-11-07 22:33 UTC | 2026-11-07 22:33 UTC |
| 34.22.146.232 | ip |
100
|
122 | BE | 2026-11-07 22:32 UTC | 2026-11-07 22:32 UTC |
| 16.5.0.159 | ip |
97
|
5 | BR | 2026-11-07 22:26 UTC | 2026-11-07 22:26 UTC |
| 175.107.216.102 | ip |
18
|
1 | PK | 2026-11-07 22:13 UTC | 2026-11-07 22:13 UTC |
| 196.196.222.101 | ip |
50
|
1 | EE | 2026-11-07 21:54 UTC | 2026-11-07 21:54 UTC |
| 43.152.247.68 | ip |
100
|
326 | TH | 2026-11-07 22:08 UTC | 2026-11-07 21:44 UTC |
| 77.105.138.81 | ip |
55
|
1 | NL | 2026-11-07 21:44 UTC | 2026-11-07 21:44 UTC |
| 34.146.42.78 | ip |
100
|
161 | JP | 2026-11-07 21:37 UTC | 2026-11-07 21:34 UTC |
| 20.200.64.201 | ip |
97
|
6 | CA | 2026-11-07 21:19 UTC | 2026-11-07 21:18 UTC |
| 172.71.164.4 | ip |
70
|
2 | DE | 2026-11-07 21:17 UTC | 2026-11-07 21:17 UTC |
| 172.70.47.122 | ip |
70
|
2 | NL | 2026-11-07 21:11 UTC | 2026-11-07 21:11 UTC |
| 147.185.133.213 | ip |
39
|
1 | US | 2026-11-07 21:07 UTC | 2026-11-07 21:07 UTC |
| 103.66.148.220 | ip |
18
|
1 | PK | 2026-11-07 21:06 UTC | 2026-11-07 21:06 UTC |
Showing 1-25 of 88256 indicators