IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 93.123.109.103 ip
Score
100
/100
raw: 6496.1
Reports
3171
Last Reported
2026-11-06 10:21 UTC
Categories
Scanning (1878)
Config Exposure Probe (618)
API Probe (329)
Admin Panel Probe (186)
Web Stack Probe (158)
Web Probe (2)
Network details
ASN
48090
Organization
Techoff Srv Limited
Country
BG
Threat Intelligence enriched 2026-11-04 12:16 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 20 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-06 10:20 UTC | sql-dump | robots-followed | GET | /backup.sql | scanner burst |
| 2026-11-06 10:20 UTC | catch-all-backup | robots-followed | GET | /backup.sql.gz | scanner burst |
| 2026-11-06 10:20 UTC | catch-all-backup | robots-followed | GET | /db_backup.sql | scanner burst |
| 2026-11-06 10:20 UTC | catch-all-backup | robots-followed | GET | /mysql.sql | scanner burst |
| 2026-11-06 10:20 UTC | catch-all-backup | robots-followed | GET | /postgres.sql | scanner burst |
| 2026-11-06 10:20 UTC | catch-all-suspicious | robots-followed | GET | /dump.tar.gz | scanner burst |
| 2026-11-06 10:20 UTC | catch-all-suspicious | robots-followed | GET | /config/database.json | scanner burst |
| 2026-11-06 10:20 UTC | catch-all-suspicious | robots-followed | GET | /config/database.yml | scanner burst |
| 2026-11-06 10:20 UTC | catch-all-backup | robots-followed | GET | /config/database.yml.backup | scanner burst |
| 2026-11-06 10:20 UTC | catch-all-suspicious | robots-followed | GET | /cloud-sql-credentials.json | scanner burst |
| 2026-11-06 10:20 UTC | catch-all-suspicious | robots-followed | GET | /mongo.json | scanner burst |
| 2026-11-06 10:20 UTC | build-artifact | robots-followed | GET | /composer.json | scanner burst |
| 2026-11-06 10:20 UTC | catch-all-config | robots-followed | GET | /.env.testing | scanner burst |
| 2026-11-06 10:20 UTC | catch-all-config | robots-followed | GET | /.htpasswd | scanner burst |
| 2026-11-06 10:20 UTC | catch-all-config | robots-followed | GET | /wp/.env | scanner burst |
| 2026-11-06 10:20 UTC | debug-panel | robots-followed | GET | /_profiler/phpinfo | scanner burst |
| 2026-11-06 10:20 UTC | catch-all-suspicious | robots-followed | GET | /app/etc/local.xml | scanner burst |
| 2026-11-06 10:20 UTC | catch-all-suspicious | robots-followed | GET | /config/services.yaml | scanner burst |
| 2026-11-06 10:20 UTC | catch-all-suspicious | robots-followed | GET | /config/packages/prod/parameters.yaml | scanner burst |
| 2026-11-06 10:20 UTC | catch-all-script | robots-followed | GET | /config/secrets/prod/prod.decrypt.private.php | scanner burst |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 187.148.140.139 | ip |
50
|
1 | MX | 2026-11-08 16:15 UTC | 2026-11-08 16:15 UTC |
| 179.60.90.232 | ip |
50
|
1 | CL | 2026-11-08 16:15 UTC | 2026-11-08 16:15 UTC |
| 144.124.192.114 | ip |
39
|
1 | UZ | 2026-11-08 16:15 UTC | 2026-11-08 16:15 UTC |
| 37.105.134.137 | ip |
39
|
1 | SA | 2026-11-08 16:14 UTC | 2026-11-08 16:14 UTC |
| 190.122.201.34 | ip |
39
|
1 | AR | 2026-11-08 16:13 UTC | 2026-11-08 16:13 UTC |
| 41.62.127.41 | ip |
39
|
1 | TN | 2026-11-08 16:12 UTC | 2026-11-08 16:12 UTC |
| 154.118.241.190 | ip |
50
|
1 | SO | 2026-11-08 16:12 UTC | 2026-11-08 16:12 UTC |
| 187.14.108.40 | ip |
33
|
2 | FR | 2026-11-08 16:12 UTC | 2026-11-08 16:12 UTC |
| 103.58.74.94 | ip |
39
|
1 | BD | 2026-11-08 16:11 UTC | 2026-11-08 16:11 UTC |
| 194.44.56.189 | ip |
39
|
1 | UA | 2026-11-08 16:10 UTC | 2026-11-08 16:10 UTC |
| 59.153.30.163 | ip |
50
|
1 | BD | 2026-11-08 16:09 UTC | 2026-11-08 16:09 UTC |
| 103.217.116.197 | ip |
39
|
1 | IN | 2026-11-08 16:09 UTC | 2026-11-08 16:09 UTC |
| 5.36.140.144 | ip |
39
|
1 | OM | 2026-11-08 16:09 UTC | 2026-11-08 16:09 UTC |
| 190.164.113.198 | ip |
50
|
1 | CL | 2026-11-08 16:06 UTC | 2026-11-08 16:06 UTC |
| 190.174.127.227 | ip |
50
|
1 | AR | 2026-11-08 16:06 UTC | 2026-11-08 16:06 UTC |
| 109.105.209.57 | ip |
18
|
1 | PT | 2026-11-08 16:05 UTC | 2026-11-08 16:05 UTC |
| 88.167.202.151 | ip |
50
|
1 | FR | 2026-11-08 16:05 UTC | 2026-11-08 16:05 UTC |
| 45.176.235.199 | ip |
39
|
1 | CO | 2026-11-08 16:05 UTC | 2026-11-08 16:05 UTC |
| 152.59.120.229 | ip |
50
|
1 | IN | 2026-11-08 16:05 UTC | 2026-11-08 16:05 UTC |
| 35.226.25.46 | ip |
100
|
63 | US | 2026-11-08 16:05 UTC | 2026-11-08 16:04 UTC |
| 35.226.151.57 | ip |
100
|
66 | US | 2026-11-08 16:03 UTC | 2026-11-08 16:02 UTC |
| 106.222.218.169 | ip |
39
|
1 | IN | 2026-11-08 16:02 UTC | 2026-11-08 16:02 UTC |
| 109.175.99.143 | ip |
39
|
1 | BA | 2026-11-08 16:02 UTC | 2026-11-08 16:02 UTC |
| 103.113.192.226 | ip |
39
|
1 | BD | 2026-11-08 16:01 UTC | 2026-11-08 16:01 UTC |
| 153.117.1.185 | ip |
18
|
1 | PK | 2026-11-08 15:59 UTC | 2026-11-08 15:59 UTC |
Showing 1-25 of 88867 indicators