IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 8.215.24.140 ip
Score
82
/100
raw: 17.29
Reports
70
Last Reported
2026-09-24 13:18 UTC
Categories
Web Stack Probe (26)
Admin Panel Probe (18)
Scanning (11)
Config Exposure Probe (9)
Credential Stuffing (3)
API Probe (3)
Network details
ASN
45102
Organization
Alibaba US Technology Co., Ltd.
Country
ID
Threat Intelligence enriched 2026-05-14 14:18 UTC
Sensor Activity last 12 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-09-24 13:17 UTC | catch-all-admin | direct | GET | /assets/file-manager/initialize/ | |
| 2026-09-24 13:17 UTC | catch-all-admin | direct | GET | /file-manager/initialize/ | |
| 2026-09-24 13:16 UTC | catch-all-script | direct | GET | /emergency.php | |
| 2026-09-24 13:16 UTC | catch-all-cms | direct | GET | /wordpres/wp-admin/setup-config.php | |
| 2026-09-24 13:16 UTC | wp-admin | direct | GET | /wp-admin/setup-config.php | |
| 2026-09-24 13:15 UTC | catch-all-cms | direct | GET | /wordpres/wp-admin/install.php | |
| 2026-09-24 13:14 UTC | api | direct | GET | /api/.env | |
| 2026-09-24 13:13 UTC | catch-all-config | direct | GET | /dev/.env | |
| 2026-09-24 13:13 UTC | dot-env | direct | GET | /.env | |
| 2026-09-24 13:12 UTC | admin | direct | POST | /admin/index.php | creds |
| 2026-09-24 13:12 UTC | catch-all-admin | direct | GET | /administrator/index.php | |
| 2026-09-24 13:11 UTC | wp-login | direct | GET | /wp-login.php |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 191.253.50.166 | ip |
39
|
1 | BR | 2026-11-03 00:51 UTC | 2026-11-03 00:51 UTC |
| 149.78.146.19 | ip |
39
|
1 | AR | 2026-11-03 00:50 UTC | 2026-11-03 00:50 UTC |
| 195.64.239.80 | ip |
50
|
1 | UA | 2026-11-03 00:50 UTC | 2026-11-03 00:50 UTC |
| 186.189.89.233 | ip |
39
|
1 | CL | 2026-11-03 00:50 UTC | 2026-11-03 00:50 UTC |
| 190.229.28.213 | ip |
39
|
1 | AR | 2026-11-03 00:50 UTC | 2026-11-03 00:50 UTC |
| 115.135.26.125 | ip |
50
|
1 | MY | 2026-11-03 00:49 UTC | 2026-11-03 00:49 UTC |
| 170.244.255.191 | ip |
50
|
1 | BR | 2026-11-03 00:49 UTC | 2026-11-03 00:49 UTC |
| 190.108.78.152 | ip |
50
|
1 | CO | 2026-11-03 00:48 UTC | 2026-11-03 00:48 UTC |
| 178.151.116.252 | ip |
50
|
1 | UA | 2026-11-03 00:47 UTC | 2026-11-03 00:47 UTC |
| 5.29.8.68 | ip |
50
|
1 | IL | 2026-11-03 00:47 UTC | 2026-11-03 00:47 UTC |
| 200.61.165.140 | ip |
39
|
1 | AR | 2026-11-03 00:47 UTC | 2026-11-03 00:47 UTC |
| 97.113.85.43 | ip |
39
|
1 | US | 2026-11-03 00:47 UTC | 2026-11-03 00:47 UTC |
| 170.245.159.88 | ip |
39
|
1 | CO | 2026-11-03 00:47 UTC | 2026-11-03 00:47 UTC |
| 38.171.16.127 | ip |
39
|
1 | VE | 2026-11-03 00:46 UTC | 2026-11-03 00:46 UTC |
| 103.158.119.137 | ip |
50
|
1 | BD | 2026-11-03 00:45 UTC | 2026-11-03 00:45 UTC |
| 213.230.87.74 | ip |
50
|
1 | UZ | 2026-11-03 00:45 UTC | 2026-11-03 00:45 UTC |
| 103.184.94.210 | ip |
50
|
1 | BD | 2026-11-03 00:45 UTC | 2026-11-03 00:45 UTC |
| 154.208.49.243 | ip |
50
|
1 | PK | 2026-11-03 00:45 UTC | 2026-11-03 00:45 UTC |
| 38.52.198.36 | ip |
39
|
1 | MX | 2026-11-03 00:45 UTC | 2026-11-03 00:45 UTC |
| 102.98.72.101 | ip |
39
|
1 | MA | 2026-11-03 00:45 UTC | 2026-11-03 00:45 UTC |
| 103.110.34.136 | ip |
50
|
1 | ID | 2026-11-03 00:43 UTC | 2026-11-03 00:43 UTC |
| 181.199.44.89 | ip |
39
|
1 | EC | 2026-11-03 00:43 UTC | 2026-11-03 00:43 UTC |
| 185.177.191.196 | ip |
39
|
1 | UA | 2026-11-03 00:42 UTC | 2026-11-03 00:42 UTC |
| 104.23.223.109 | ip |
45
|
1 | SE | 2026-11-03 00:41 UTC | 2026-11-03 00:41 UTC |
| 156.59.166.213 | ip |
99
|
5 | MY | 2026-11-03 00:42 UTC | 2026-11-03 00:41 UTC |
Showing 1-25 of 85248 indicators