IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 91.92.42.120 ip

Score
46
/100
raw: 6.15
Reports
846
Last Reported
2026-07-17 10:08 UTC
Categories
Scanning (577) Config Exposure Probe (269)

Network details

ASN
197170
Organization
TechTies Inc.
Country
NL

Threat Intelligence enriched 2026-11-04 04:08 UTC

DNSBL Status
Listed
zen.spamhaus.org

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-07-03 22:46 UTC catch-all-suspicious direct GET /web.config burst
2026-07-03 22:46 UTC catch-all-suspicious direct GET /application.yml burst
2026-07-03 22:46 UTC catch-all-script direct GET /db.php burst
2026-07-03 22:46 UTC catch-all-config direct GET /.gitconfig burst
2026-07-03 22:46 UTC catch-all-config direct GET /.env.bak burst
2026-07-03 22:46 UTC catch-all-suspicious direct GET /config.js burst
2026-07-03 22:46 UTC catch-all-script direct GET /settings.php
2026-07-03 22:46 UTC docker-compose direct GET /docker-compose.yml
2026-07-03 22:46 UTC build-artifact direct GET /composer.json
2026-07-03 22:46 UTC catch-all-script direct GET /database.php
2026-07-03 22:42 UTC catch-all-suspicious direct GET /appsettings.json burst
2026-07-03 22:42 UTC config-php direct GET /config.php burst
2026-07-03 22:42 UTC dot-env direct GET /.env burst
2026-07-03 22:42 UTC catch-all-script direct GET /info.php burst
2026-07-03 22:42 UTC git-config direct GET /.git/config burst
2026-07-03 22:42 UTC catch-all-script direct GET /phpinfo.php
2026-07-03 22:42 UTC wp-config direct GET /wp-config.php
2026-07-02 11:25 UTC catch-all-suspicious direct GET /config/application.yml burst
2026-07-02 11:25 UTC catch-all-suspicious direct GET /config.json burst
2026-07-02 11:25 UTC catch-all-suspicious direct GET /app/config/parameters.yml burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
200.39.136.108 ip
39
 1 CL 2026-11-05 22:08 UTC 2026-11-05 22:08 UTC
77.211.7.8 ip
39
 1 ES 2026-11-05 22:04 UTC 2026-11-05 22:04 UTC
34.187.91.87 ip
63
 5 NL 2026-11-05 21:58 UTC 2026-11-05 21:58 UTC
160.20.40.25 ip
39
 1 PH 2026-11-05 21:52 UTC 2026-11-05 21:52 UTC
194.5.49.146 ip
100
 171 DE 2026-11-05 21:42 UTC 2026-11-05 21:41 UTC
168.81.72.39 ip
26
 1 IN 2026-11-05 21:32 UTC 2026-11-05 21:32 UTC
149.248.76.75 ip
75
 4 US 2026-11-05 21:29 UTC 2026-11-05 21:29 UTC
197.203.208.71 ip
39
 1 DZ 2026-11-05 21:17 UTC 2026-11-05 21:17 UTC
34.178.240.202 ip
39
 1 NL 2026-11-05 20:59 UTC 2026-11-05 20:59 UTC
190.114.43.108 ip
39
 1 CL 2026-11-05 20:58 UTC 2026-11-05 20:58 UTC
170.64.192.106 ip
94
 4 AU 2026-11-05 20:51 UTC 2026-11-05 20:51 UTC
83.228.254.162 ip
50
 1 CH 2026-11-05 20:49 UTC 2026-11-05 20:49 UTC
172.71.234.27 ip
70
 2 BR 2026-11-05 20:44 UTC 2026-11-05 20:44 UTC
148.224.8.254 ip
39
 1 MX 2026-11-05 20:43 UTC 2026-11-05 20:43 UTC
186.109.120.142 ip
39
 1 AR 2026-11-05 20:39 UTC 2026-11-05 20:39 UTC
110.138.81.37 ip
39
 1 ID 2026-11-05 20:37 UTC 2026-11-05 20:37 UTC
182.10.66.35 ip
18
 1 ID 2026-11-05 20:33 UTC 2026-11-05 20:33 UTC
193.149.190.86 ip
75
 4 GB 2026-11-05 20:27 UTC 2026-11-05 20:27 UTC
105.77.200.214 ip
39
 1 MA 2026-11-05 20:25 UTC 2026-11-05 20:25 UTC
142.93.166.142 ip
18
 1 DE 2026-11-05 20:23 UTC 2026-11-05 20:23 UTC
153.117.34.200 ip
18
 1 PK 2026-11-05 20:18 UTC 2026-11-05 20:18 UTC
194.146.92.58 ip
100
 12 ES 2026-11-05 20:16 UTC 2026-11-05 20:16 UTC
161.35.27.28 ip
18
 1 DE 2026-11-05 20:16 UTC 2026-11-05 20:16 UTC
213.230.93.54 ip
39
 1 UZ 2026-11-05 20:09 UTC 2026-11-05 20:09 UTC
197.15.222.89 ip
39
 1 TN 2026-11-05 20:09 UTC 2026-11-05 20:09 UTC

Showing 1-25 of 87152 indicators