IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 95.128.61.243 ip

Score
4
/100
raw: 0.36
Reports
24
Last Reported
2026-07-25 04:10 UTC
Categories
Config Exposure Probe (16) Scanning (3) API Probe (3) Admin Panel Probe (1) Credential Stuffing (1)

Network details

ASN
48737
Organization
Dorabase Veri Merkezi Hizmetleri A.S.
Country
TR

Threat Intelligence enriched 2026-11-05 02:10 UTC

Reverse DNS
ns02.domaintescil.com
DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-07-25 04:09 UTC api direct GET /api/org
2026-07-25 04:08 UTC catch-all-traversal direct GET /proc/self/environ
2026-07-25 04:08 UTC api direct GET /api/v1/flows
2026-06-28 13:19 UTC catch-all-scan direct POST /___proxy_subdomain_whm/login/ burst creds
2026-06-28 13:19 UTC sql-dump direct GET /dump.sql burst
2026-06-28 13:19 UTC sql-dump direct GET /backup.sql burst
2026-06-28 13:19 UTC catch-all-config direct GET /.htpasswd burst
2026-06-28 13:19 UTC catch-all-suspicious direct GET /app/config/parameters.yml burst
2026-06-28 13:19 UTC config-php direct GET /config.php burst
2026-06-28 13:19 UTC ds-store direct GET /.DS_Store burst
2026-06-28 13:19 UTC actuator direct GET /actuator/env burst
2026-06-28 13:19 UTC server-status direct GET /server-status burst
2026-06-28 13:19 UTC catch-all-script direct GET /phpinfo.php burst
2026-06-28 13:19 UTC catch-all-suspicious direct GET /config/database.yml burst
2026-06-28 13:19 UTC aws-creds direct GET /.aws/credentials burst
2026-06-28 13:19 UTC wp-config-backup direct GET /wp-config.php.bak burst
2026-06-28 13:19 UTC wp-config direct GET /wp-config.php burst
2026-06-28 13:19 UTC catch-all-config direct GET /.env.save burst
2026-06-28 13:19 UTC catch-all-config direct GET /.env.backup burst
2026-06-28 13:19 UTC catch-all-config direct GET /.env.production burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
58.136.197.237 ip
39
 1 TH 2026-11-11 15:18 UTC 2026-11-11 15:18 UTC
37.239.217.128 ip
39
 1 IQ 2026-11-11 15:17 UTC 2026-11-11 15:17 UTC
109.87.213.133 ip
39
 1 UA 2026-11-11 15:17 UTC 2026-11-11 15:17 UTC
201.131.237.253 ip
39
 1 MX 2026-11-11 15:17 UTC 2026-11-11 15:17 UTC
154.27.140.104 ip
39
 1 VE 2026-11-11 15:17 UTC 2026-11-11 15:17 UTC
203.76.223.69 ip
50
 1 BD 2026-11-11 15:17 UTC 2026-11-11 15:17 UTC
223.185.46.0 ip
50
 1 IN 2026-11-11 15:17 UTC 2026-11-11 15:17 UTC
212.237.121.25 ip
50
 1 IQ 2026-11-11 15:17 UTC 2026-11-11 15:17 UTC
14.192.212.229 ip
39
 1 MY 2026-11-11 15:17 UTC 2026-11-11 15:17 UTC
157.49.69.229 ip
50
 1 IN 2026-11-11 15:16 UTC 2026-11-11 15:16 UTC
154.0.186.192 ip
39
 1 GA 2026-11-11 15:16 UTC 2026-11-11 15:16 UTC
182.182.13.82 ip
39
 1 PK 2026-11-11 15:16 UTC 2026-11-11 15:16 UTC
178.178.103.76 ip
50
 1 RU 2026-11-11 15:16 UTC 2026-11-11 15:16 UTC
37.212.9.69 ip
39
 1 BY 2026-11-11 15:16 UTC 2026-11-11 15:16 UTC
181.234.69.247 ip
39
 1 CO 2026-11-11 15:15 UTC 2026-11-11 15:15 UTC
179.125.130.153 ip
39
 1 BR 2026-11-11 15:15 UTC 2026-11-11 15:15 UTC
131.117.143.166 ip
50
 1 AZ 2026-11-11 15:14 UTC 2026-11-11 15:14 UTC
59.91.16.53 ip
39
 1 IN 2026-11-11 15:14 UTC 2026-11-11 15:14 UTC
102.64.161.114 ip
39
 1 TG 2026-11-11 15:14 UTC 2026-11-11 15:14 UTC
31.59.101.4 ip
50
 1 IQ 2026-11-11 15:13 UTC 2026-11-11 15:13 UTC
152.59.121.209 ip
50
 1 IN 2026-11-11 15:13 UTC 2026-11-11 15:13 UTC
201.153.184.200 ip
50
 1 MX 2026-11-11 15:13 UTC 2026-11-11 15:13 UTC
103.97.161.116 ip
39
 1 BD 2026-11-11 15:12 UTC 2026-11-11 15:12 UTC
27.97.179.77 ip
50
 1 IN 2026-11-11 15:12 UTC 2026-11-11 15:12 UTC
91.203.143.167 ip
39
 1 UA 2026-11-11 15:12 UTC 2026-11-11 15:12 UTC

Showing 1-25 of 93963 indicators