IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 85.155.14.31 ip

Score
100
/100
raw: 3219.37
Reports
356
Last Reported
2026-11-02 22:32 UTC
Categories
Scanning (327) Config Exposure Probe (29)

Network details

ASN
199457
Organization
SolidCore - SolidCore Hosting LTD, VG
Country
DE APNIC

Threat Intelligence enriched 2026-11-02 22:08 UTC

DNSBL Status
Listed
zen.spamhaus.org

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-02 22:31 UTC catch-all-suspicious direct GET /compose.yaml burst
2026-11-02 22:31 UTC catch-all-suspicious direct GET /compose.yml burst
2026-11-02 22:31 UTC docker-compose direct GET /docker-compose.override.yml burst
2026-11-02 22:31 UTC docker-compose direct GET /docker-compose.yml burst
2026-11-02 22:31 UTC catch-all-scan direct GET /[host] burst
2026-11-02 22:31 UTC catch-all-scan direct GET /*.auto.tfvars burst
2026-11-02 22:31 UTC catch-all-scan direct GET /*.tfvars burst
2026-11-02 22:31 UTC iac-secrets direct GET /terraform.tfstate burst
2026-11-02 22:30 UTC catch-all-scan direct GET /terraform.tfvars burst
2026-11-02 22:30 UTC catch-all-scan direct GET /credentials.txt burst
2026-11-02 22:30 UTC catch-all-suspicious direct GET /credentials.json burst
2026-11-02 22:30 UTC catch-all-suspicious direct GET /credentials.yml burst
2026-11-02 22:30 UTC catch-all-suspicious direct GET /secrets.yml burst
2026-11-02 22:30 UTC catch-all-suspicious direct GET /parameters.yml burst
2026-11-02 22:30 UTC catch-all-scan direct GET /application.properties burst
2026-11-02 22:30 UTC catch-all-suspicious direct GET /application.yaml burst
2026-11-02 22:30 UTC catch-all-suspicious direct GET /application.yml burst
2026-11-02 22:30 UTC catch-all-suspicious direct GET /appsettings.json burst
2026-11-02 22:30 UTC catch-all-suspicious direct GET /.pg_service.conf burst
2026-11-02 22:30 UTC catch-all-scan direct GET /my.cnf burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
189.217.101.214 ip
50
 1 MX 2026-11-02 23:01 UTC 2026-11-02 23:01 UTC
115.42.121.6 ip
50
 1 PH 2026-11-02 23:01 UTC 2026-11-02 23:01 UTC
197.31.19.196 ip
50
 1 TN 2026-11-02 23:00 UTC 2026-11-02 23:00 UTC
38.137.29.71 ip
39
 1 IN 2026-11-02 22:59 UTC 2026-11-02 22:59 UTC
115.164.119.132 ip
39
 1 MY 2026-11-02 22:59 UTC 2026-11-02 22:59 UTC
186.198.146.167 ip
50
 1 BR 2026-11-02 22:58 UTC 2026-11-02 22:58 UTC
181.160.133.161 ip
50
 1 CL 2026-11-02 22:58 UTC 2026-11-02 22:58 UTC
177.158.89.88 ip
50
 1 BR 2026-11-02 22:57 UTC 2026-11-02 22:57 UTC
217.199.232.177 ip
39
 1 UA 2026-11-02 22:57 UTC 2026-11-02 22:57 UTC
216.172.156.171 ip
50
 1 US 2026-11-02 22:56 UTC 2026-11-02 22:56 UTC
37.233.4.204 ip
50
 1 MD 2026-11-02 22:55 UTC 2026-11-02 22:55 UTC
95.23.128.175 ip
39
 1 ES 2026-11-02 22:55 UTC 2026-11-02 22:55 UTC
177.226.168.130 ip
39
 1 MX 2026-11-02 22:55 UTC 2026-11-02 22:55 UTC
200.225.116.206 ip
50
 1 AR 2026-11-02 22:55 UTC 2026-11-02 22:55 UTC
82.64.247.35 ip
50
 1 FR 2026-11-02 22:55 UTC 2026-11-02 22:55 UTC
177.86.20.65 ip
50
 1 BR 2026-11-02 22:54 UTC 2026-11-02 22:54 UTC
38.255.105.61 ip
50
 1 PE 2026-11-02 22:54 UTC 2026-11-02 22:54 UTC
213.198.233.97 ip
39
 1 RS 2026-11-02 22:53 UTC 2026-11-02 22:53 UTC
181.78.80.210 ip
50
 1 CO 2026-11-02 22:53 UTC 2026-11-02 22:53 UTC
200.88.229.45 ip
100
 50 DO 2026-11-02 23:01 UTC 2026-11-02 22:53 UTC
65.75.114.221 ip
50
 1 BS 2026-11-02 22:52 UTC 2026-11-02 22:52 UTC
187.84.242.141 ip
50
 1 BR 2026-11-02 22:51 UTC 2026-11-02 22:51 UTC
181.78.175.18 ip
50
 1 CO 2026-11-02 22:51 UTC 2026-11-02 22:51 UTC
76.87.0.19 ip
39
 1 US 2026-11-02 22:51 UTC 2026-11-02 22:51 UTC
113.211.215.6 ip
39
 1 MY 2026-11-02 22:51 UTC 2026-11-02 22:51 UTC

Showing 1-25 of 85009 indicators