IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 91.230.225.71 ip
Score
100
/100
raw: 298.45
Reports
39
Last Reported
2026-11-09 08:20 UTC
Categories
Scanning (26)
Config Exposure Probe (10)
Admin Panel Probe (2)
Web Stack Probe (1)
Network details
ASN
206092
Organization
F.n.s. Holdings Limited
Country
GB
Threat Intelligence enriched 2026-11-09 08:18 UTC
DNSBL Status
Clean
Sensor Activity last 20 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-09 08:19 UTC | catch-all-suspicious | direct | GET | /appsettings.json.example | burst |
| 2026-11-09 08:19 UTC | catch-all-suspicious | direct | GET | /application.yaml.sample | burst |
| 2026-11-09 08:19 UTC | catch-all-backup | direct | GET | /application.yaml.save | burst |
| 2026-11-09 08:19 UTC | catch-all-backup | direct | GET | /application.yml.orig | burst |
| 2026-11-09 08:19 UTC | catch-all-suspicious | direct | GET | /app.config.default | burst |
| 2026-11-09 08:19 UTC | catch-all-backup | direct | GET | /config.json.bak.local | burst |
| 2026-11-09 08:19 UTC | catch-all-backup | direct | GET | /config.json.bak~ | burst |
| 2026-11-09 08:19 UTC | catch-all-script | direct | GET | /config.php.bak.txt | burst |
| 2026-11-09 08:19 UTC | catch-all-config | direct | GET | /config.env.prod | burst |
| 2026-11-09 08:19 UTC | catch-all-suspicious | direct | GET | /config.yaml.1 | burst |
| 2026-11-09 08:19 UTC | catch-all-suspicious | direct | GET | /config.yaml.map | burst |
| 2026-11-09 08:19 UTC | catch-all-backup | direct | GET | /config.old.example | burst |
| 2026-11-09 08:19 UTC | catch-all-backup | direct | GET | /config.old.old | burst |
| 2026-11-09 08:19 UTC | catch-all-backup | direct | GET | /conf.json.save | burst |
| 2026-11-09 08:19 UTC | catch-all-suspicious | direct | GET | /mail.json.dist | burst |
| 2026-11-09 08:18 UTC | catch-all-suspicious | direct | GET | /config.ini.default | burst |
| 2026-11-09 08:18 UTC | catch-all-backup | direct | GET | /config.ini.backup | burst |
| 2026-11-09 08:18 UTC | catch-all-suspicious | direct | GET | /config.xml~ | burst |
| 2026-11-09 08:18 UTC | catch-all-suspicious | direct | GET | /config.json.dev | burst |
| 2026-11-09 08:18 UTC | catch-all-config | direct | GET | /.environment.dev | burst |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 101.0.41.142 | ip |
63
|
2 | IN | 2026-11-09 09:11 UTC | 2026-11-09 09:11 UTC |
| 189.203.236.79 | ip |
91
|
4 | MX | 2026-11-09 09:11 UTC | 2026-11-09 09:11 UTC |
| 175.136.6.156 | ip |
86
|
4 | MY | 2026-11-09 09:11 UTC | 2026-11-09 09:11 UTC |
| 87.121.155.176 | ip |
88
|
4 | BG | 2026-11-09 09:11 UTC | 2026-11-09 09:10 UTC |
| 153.117.57.47 | ip |
94
|
5 | PK | 2026-11-09 09:10 UTC | 2026-11-09 09:10 UTC |
| 124.120.34.149 | ip |
91
|
4 | TH | 2026-11-09 09:10 UTC | 2026-11-09 09:10 UTC |
| 62.217.157.198 | ip |
73
|
3 | AZ | 2026-11-09 09:10 UTC | 2026-11-09 09:10 UTC |
| 190.211.113.237 | ip |
93
|
5 | CR | 2026-11-09 09:10 UTC | 2026-11-09 09:10 UTC |
| 108.181.55.159 | ip |
97
|
4 | US | 2026-11-09 09:03 UTC | 2026-11-09 09:03 UTC |
| 162.240.57.158 | ip |
97
|
4 | US | 2026-11-09 09:00 UTC | 2026-11-09 09:00 UTC |
| 103.143.243.62 | ip |
86
|
4 | BD | 2026-11-09 08:58 UTC | 2026-11-09 08:58 UTC |
| 138.204.24.126 | ip |
82
|
3 | BR | 2026-11-09 08:58 UTC | 2026-11-09 08:58 UTC |
| 45.84.185.110 | ip |
63
|
2 | BG | 2026-11-09 08:58 UTC | 2026-11-09 08:58 UTC |
| 190.49.126.205 | ip |
89
|
4 | AR | 2026-11-09 08:58 UTC | 2026-11-09 08:58 UTC |
| 49.36.218.68 | ip |
80
|
3 | IN | 2026-11-09 08:58 UTC | 2026-11-09 08:58 UTC |
| 113.211.208.231 | ip |
94
|
5 | MY | 2026-11-09 08:57 UTC | 2026-11-09 08:57 UTC |
| 45.230.243.21 | ip |
93
|
5 | EC | 2026-11-09 08:57 UTC | 2026-11-09 08:57 UTC |
| 14.160.243.35 | ip |
73
|
3 | VN | 2026-11-09 08:58 UTC | 2026-11-09 08:57 UTC |
| 191.112.189.35 | ip |
91
|
4 | CL | 2026-11-09 08:58 UTC | 2026-11-09 08:57 UTC |
| 109.165.97.144 | ip |
80
|
3 | RU | 2026-11-09 08:55 UTC | 2026-11-09 08:55 UTC |
| 103.151.189.182 | ip |
73
|
3 | IN | 2026-11-09 08:55 UTC | 2026-11-09 08:55 UTC |
| 195.184.241.22 | ip |
39
|
1 | PT | 2026-11-09 08:55 UTC | 2026-11-09 08:55 UTC |
| 217.25.82.243 | ip |
91
|
4 | UA | 2026-11-09 08:55 UTC | 2026-11-09 08:55 UTC |
| 93.120.176.187 | ip |
93
|
5 | RU | 2026-11-09 08:55 UTC | 2026-11-09 08:55 UTC |
| 200.24.114.156 | ip |
89
|
4 | BR | 2026-11-09 08:55 UTC | 2026-11-09 08:55 UTC |
Showing 1-25 of 90130 indicators