IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 93.123.109.101 ip

Score
100
/100
raw: 3491.1
Reports
3114
Last Reported
2026-11-08 01:42 UTC
Categories
Scanning (1452) Config Exposure Probe (782) Web Stack Probe (351) API Probe (286) Admin Panel Probe (243)

Network details

ASN
48090
Organization
Techoff Srv Limited
Country
BG

Threat Intelligence enriched 2026-11-04 12:16 UTC

DNSBL Status
Listed
zen.spamhaus.org

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-08 01:42 UTC git-head direct GET /.git/HEAD burst
2026-11-08 01:42 UTC api direct GET /api/invoke burst
2026-11-08 01:42 UTC wp-json direct POST / burst
2026-11-08 01:41 UTC catch-all-suspicious direct GET /anthropic/config.json burst
2026-11-08 01:41 UTC catch-all-suspicious direct GET /gpt/config.json burst
2026-11-08 01:41 UTC catch-all-suspicious direct GET /config/litellm.yaml burst
2026-11-08 01:41 UTC catch-all-suspicious direct GET /config/bedrock.yaml burst
2026-11-08 01:41 UTC catch-all-suspicious direct GET /config/ai.yaml burst
2026-11-08 01:41 UTC catch-all-scan direct GET /model/invoke burst
2026-11-08 01:41 UTC catch-all-scan direct GET /bedrock-runtime burst
2026-11-08 01:41 UTC api direct GET /api/bedrock-runtime burst
2026-11-08 01:41 UTC api direct GET /api/v1/bedrock-runtime burst
2026-11-08 01:41 UTC catch-all-scan direct GET /aws/bedrock burst
2026-11-08 01:41 UTC api direct GET /api/aws/bedrock burst
2026-11-08 01:41 UTC api direct GET /api/v1/aws/bedrock burst
2026-11-08 01:41 UTC catch-all-suspicious direct GET /config/bedrock.json burst
2026-11-08 01:41 UTC catch-all-scan direct GET /bedrockruntime burst
2026-11-08 01:41 UTC catch-all-suspicious direct GET /config/bedrock.toml burst
2026-11-08 01:41 UTC catch-all-suspicious direct GET /config/ai.json burst
2026-11-08 01:41 UTC catch-all-suspicious direct GET /config/llm.yaml burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
187.148.140.139 ip
50
 1 MX 2026-11-08 16:15 UTC 2026-11-08 16:15 UTC
179.60.90.232 ip
50
 1 CL 2026-11-08 16:15 UTC 2026-11-08 16:15 UTC
144.124.192.114 ip
39
 1 UZ 2026-11-08 16:15 UTC 2026-11-08 16:15 UTC
37.105.134.137 ip
39
 1 SA 2026-11-08 16:14 UTC 2026-11-08 16:14 UTC
190.122.201.34 ip
39
 1 AR 2026-11-08 16:13 UTC 2026-11-08 16:13 UTC
41.62.127.41 ip
39
 1 TN 2026-11-08 16:12 UTC 2026-11-08 16:12 UTC
154.118.241.190 ip
50
 1 SO 2026-11-08 16:12 UTC 2026-11-08 16:12 UTC
187.14.108.40 ip
33
 2 FR 2026-11-08 16:12 UTC 2026-11-08 16:12 UTC
103.58.74.94 ip
39
 1 BD 2026-11-08 16:11 UTC 2026-11-08 16:11 UTC
194.44.56.189 ip
39
 1 UA 2026-11-08 16:10 UTC 2026-11-08 16:10 UTC
59.153.30.163 ip
50
 1 BD 2026-11-08 16:09 UTC 2026-11-08 16:09 UTC
103.217.116.197 ip
39
 1 IN 2026-11-08 16:09 UTC 2026-11-08 16:09 UTC
5.36.140.144 ip
39
 1 OM 2026-11-08 16:09 UTC 2026-11-08 16:09 UTC
190.164.113.198 ip
50
 1 CL 2026-11-08 16:06 UTC 2026-11-08 16:06 UTC
190.174.127.227 ip
50
 1 AR 2026-11-08 16:06 UTC 2026-11-08 16:06 UTC
109.105.209.57 ip
18
 1 PT 2026-11-08 16:05 UTC 2026-11-08 16:05 UTC
88.167.202.151 ip
50
 1 FR 2026-11-08 16:05 UTC 2026-11-08 16:05 UTC
45.176.235.199 ip
39
 1 CO 2026-11-08 16:05 UTC 2026-11-08 16:05 UTC
152.59.120.229 ip
50
 1 IN 2026-11-08 16:05 UTC 2026-11-08 16:05 UTC
35.226.25.46 ip
100
 63 US 2026-11-08 16:05 UTC 2026-11-08 16:04 UTC
35.226.151.57 ip
100
 66 US 2026-11-08 16:03 UTC 2026-11-08 16:02 UTC
106.222.218.169 ip
39
 1 IN 2026-11-08 16:02 UTC 2026-11-08 16:02 UTC
109.175.99.143 ip
39
 1 BA 2026-11-08 16:02 UTC 2026-11-08 16:02 UTC
103.113.192.226 ip
39
 1 BD 2026-11-08 16:01 UTC 2026-11-08 16:01 UTC
153.117.1.185 ip
18
 1 PK 2026-11-08 15:59 UTC 2026-11-08 15:59 UTC

Showing 1-25 of 88867 indicators