IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 111.9.42.6 ip

Score
5
/100
raw: 0.53
Reports
42
Last Reported
2026-07-13 05:39 UTC
Categories
Scanning (32) Web Stack Probe (6) Config Exposure Probe (2) API Probe (1) Admin Panel Probe (1)

Network details

ASN
9808
Organization
China Mobile Communications Group Co., Ltd.
Country
CN

Threat Intelligence enriched 2026-11-12 22:04 UTC

DNSBL Status
Clean

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-07-13 05:38 UTC catch-all-script direct GET /index.php
2026-07-13 05:38 UTC catch-all-script direct GET /index.php
2026-07-13 05:38 UTC catch-all-script direct GET /public/index.php
2026-07-13 05:38 UTC catch-all-script direct GET /index.php
2026-07-13 05:38 UTC catch-all-script direct GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-07-13 05:37 UTC catch-all-script direct GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-07-13 05:37 UTC catch-all-script direct GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-07-13 05:37 UTC catch-all-script direct GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-07-13 05:37 UTC catch-all-cms direct GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-07-13 05:37 UTC catch-all-script direct GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-07-13 05:37 UTC backup direct GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-07-13 05:37 UTC admin direct GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-07-13 05:36 UTC catch-all-script direct GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-07-13 05:36 UTC catch-all-script direct GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-07-13 05:36 UTC catch-all-script direct GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-07-13 05:36 UTC api direct GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-07-13 05:36 UTC catch-all-script direct GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-07-13 05:36 UTC catch-all-script direct GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-07-13 05:36 UTC catch-all-script direct GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-07-13 05:35 UTC catch-all-script direct GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
170.64.149.139 ip
88
 3 AU 2026-11-13 20:55 UTC 2026-11-13 20:55 UTC
81.56.174.237 ip
50
 1 IT 2026-11-13 20:55 UTC 2026-11-13 20:55 UTC
143.105.135.143 ip
39
 1 AR 2026-11-13 20:55 UTC 2026-11-13 20:55 UTC
103.191.159.113 ip
50
 1 BD 2026-11-13 20:55 UTC 2026-11-13 20:55 UTC
217.196.163.61 ip
50
 1 UA 2026-11-13 20:54 UTC 2026-11-13 20:54 UTC
178.159.211.204 ip
50
 1 UA 2026-11-13 20:54 UTC 2026-11-13 20:54 UTC
148.222.112.194 ip
50
 1 PE 2026-11-13 20:54 UTC 2026-11-13 20:54 UTC
187.189.141.234 ip
39
 1 MX 2026-11-13 20:53 UTC 2026-11-13 20:53 UTC
105.69.124.147 ip
39
 1 MA 2026-11-13 20:53 UTC 2026-11-13 20:53 UTC
103.224.55.209 ip
50
 1 BD 2026-11-13 20:52 UTC 2026-11-13 20:52 UTC
138.186.41.226 ip
50
 1 BR 2026-11-13 20:52 UTC 2026-11-13 20:52 UTC
181.128.156.234 ip
39
 1 CO 2026-11-13 20:51 UTC 2026-11-13 20:51 UTC
102.105.43.74 ip
50
 1 TN 2026-11-13 20:51 UTC 2026-11-13 20:51 UTC
174.140.8.210 ip
50
 1 SA 2026-11-13 20:50 UTC 2026-11-13 20:50 UTC
185.146.112.132 ip
39
 1 AZ 2026-11-13 20:50 UTC 2026-11-13 20:50 UTC
41.71.43.110 ip
39
 1 ZA 2026-11-13 20:49 UTC 2026-11-13 20:49 UTC
87.9.59.229 ip
50
 1 IT 2026-11-13 20:49 UTC 2026-11-13 20:49 UTC
116.206.58.236 ip
50
 1 BD 2026-11-13 20:47 UTC 2026-11-13 20:47 UTC
153.67.129.136 ip
50
 1 BW 2026-11-13 20:47 UTC 2026-11-13 20:47 UTC
31.181.13.148 ip
39
 1 RU 2026-11-13 20:47 UTC 2026-11-13 20:47 UTC
194.11.19.151 ip
39
 1 ES 2026-11-13 20:47 UTC 2026-11-13 20:47 UTC
90.189.175.170 ip
50
 1 RU 2026-11-13 20:47 UTC 2026-11-13 20:47 UTC
190.249.158.150 ip
39
 1 CO 2026-11-13 20:46 UTC 2026-11-13 20:46 UTC
103.31.11.12 ip
39
 1 BD 2026-11-13 20:46 UTC 2026-11-13 20:46 UTC
167.250.36.11 ip
39
 1 PY 2026-11-13 20:45 UTC 2026-11-13 20:45 UTC

Showing 1-25 of 99646 indicators