IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 118.196.74.89 ip
Score
0
/100
raw: 0.02
Reports
114
Last Reported
2026-04-16 17:58 UTC
Categories
Scanning (88)
Web Stack Probe (20)
API Probe (2)
Admin Panel Probe (2)
Config Exposure Probe (2)
Network details
ASN
4811
Organization
China Telecom Group
Country
CN
Sensor Activity last 20 events
| Time (UTC) | Trap | Signal | Method | Path | Flags | Sensor |
|---|---|---|---|---|---|---|
| 2026-04-16 17:57 UTC | catch-all-suspicious | direct | GET | /vendor/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php | EU West Sensor 4 | |
| 2026-04-16 17:57 UTC | phpunit | direct | GET | /vendor/phpunit/phpunit/LICENSE/eval-stdin.php | EU West Sensor 4 | |
| 2026-04-16 17:57 UTC | phpunit | direct | GET | /vendor/phpunit/Util/PHP/eval-stdin.php | EU West Sensor 4 | |
| 2026-04-16 17:57 UTC | phpunit | direct | GET | /vendor/phpunit/src/Util/PHP/eval-stdin.php | burst | EU West Sensor 4 |
| 2026-04-16 17:57 UTC | phpunit | direct | GET | /vendor/phpunit/phpunit/Util/PHP/eval-stdin.php | burst | EU West Sensor 4 |
| 2026-04-16 17:56 UTC | phpunit | direct | GET | /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php | EU West Sensor 4 | |
| 2026-04-16 17:56 UTC | catch-all-suspicious | direct | POST | /cgi-bin/../../../../../../../../../../bin/sh | EU West Sensor 4 | |
| 2026-04-08 11:06 UTC | catch-all-suspicious | direct | GET | /index.php | EU West Sensor 3 | |
| 2026-04-08 11:05 UTC | catch-all-suspicious | direct | GET | /index.php | EU West Sensor 3 | |
| 2026-04-08 11:05 UTC | catch-all-suspicious | direct | GET | /public/index.php | EU West Sensor 3 | |
| 2026-04-08 11:05 UTC | catch-all-suspicious | direct | GET | /index.php | EU West Sensor 3 | |
| 2026-04-08 11:05 UTC | catch-all-suspicious | direct | GET | /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php | EU West Sensor 3 | |
| 2026-04-08 11:05 UTC | catch-all-suspicious | direct | GET | /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php | EU West Sensor 3 | |
| 2026-04-08 11:05 UTC | catch-all-suspicious | direct | GET | /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php | EU West Sensor 3 | |
| 2026-04-08 11:05 UTC | catch-all-suspicious | direct | GET | /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php | EU West Sensor 3 | |
| 2026-04-08 11:04 UTC | catch-all-suspicious | direct | GET | /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php | EU West Sensor 3 | |
| 2026-04-08 11:04 UTC | catch-all-suspicious | direct | GET | /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php | EU West Sensor 3 | |
| 2026-04-08 11:04 UTC | backup | direct | GET | /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php | EU West Sensor 3 | |
| 2026-04-08 11:04 UTC | admin | direct | GET | /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php | EU West Sensor 3 | |
| 2026-04-08 11:04 UTC | catch-all-suspicious | direct | GET | /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php | EU West Sensor 3 |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 103.166.231.190 | ip |
50
|
1 | BD | 2026-10-30 06:30 UTC | 2026-10-30 06:30 UTC |
| 66.179.30.126 | ip |
33
|
2 | US | 2026-10-30 06:30 UTC | 2026-10-30 06:30 UTC |
| 105.243.37.182 | ip |
50
|
1 | ZA | 2026-10-30 06:29 UTC | 2026-10-30 06:29 UTC |
| 27.49.17.32 | ip |
39
|
1 | PH | 2026-10-30 06:28 UTC | 2026-10-30 06:28 UTC |
| 181.231.222.34 | ip |
50
|
1 | AR | 2026-10-30 06:27 UTC | 2026-10-30 06:27 UTC |
| 103.214.45.241 | ip |
39
|
1 | US | 2026-10-30 06:27 UTC | 2026-10-30 06:27 UTC |
| 89.237.197.5 | ip |
50
|
1 | KG | 2026-10-30 06:25 UTC | 2026-10-30 06:25 UTC |
| 35.206.189.197 | ip |
55
|
2 | BE | 2026-10-30 06:24 UTC | 2026-10-30 06:24 UTC |
| 195.96.143.198 | ip |
39
|
1 | UA | 2026-10-30 06:23 UTC | 2026-10-30 06:23 UTC |
| 190.104.105.250 | ip |
39
|
1 | CW | 2026-10-30 06:22 UTC | 2026-10-30 06:22 UTC |
| 27.125.244.40 | ip |
39
|
1 | MY | 2026-10-30 06:22 UTC | 2026-10-30 06:22 UTC |
| 45.65.156.152 | ip |
50
|
1 | BR | 2026-10-30 06:22 UTC | 2026-10-30 06:22 UTC |
| 38.41.187.158 | ip |
39
|
1 | PY | 2026-10-30 06:22 UTC | 2026-10-30 06:22 UTC |
| 123.253.65.147 | ip |
39
|
1 | BD | 2026-10-30 06:21 UTC | 2026-10-30 06:21 UTC |
| 39.34.38.68 | ip |
50
|
1 | PK | 2026-10-30 06:21 UTC | 2026-10-30 06:21 UTC |
| 5.164.238.1 | ip |
50
|
1 | RU | 2026-10-30 06:21 UTC | 2026-10-30 06:21 UTC |
| 181.23.145.207 | ip |
50
|
1 | AR | 2026-10-30 06:20 UTC | 2026-10-30 06:20 UTC |
| 188.29.95.28 | ip |
39
|
1 | GB | 2026-10-30 06:19 UTC | 2026-10-30 06:19 UTC |
| 165.73.161.24 | ip |
39
|
1 | ZA | 2026-10-30 06:19 UTC | 2026-10-30 06:19 UTC |
| 176.128.232.181 | ip |
39
|
1 | FR | 2026-10-30 06:19 UTC | 2026-10-30 06:19 UTC |
| 103.77.117.100 | ip |
50
|
1 | BD | 2026-10-30 06:18 UTC | 2026-10-30 06:18 UTC |
| 1.20.186.122 | ip |
50
|
1 | TH | 2026-10-30 06:18 UTC | 2026-10-30 06:18 UTC |
| 178.223.6.112 | ip |
39
|
1 | RS | 2026-10-30 06:17 UTC | 2026-10-30 06:17 UTC |
| 185.212.251.25 | ip |
50
|
1 | UA | 2026-10-30 06:16 UTC | 2026-10-30 06:16 UTC |
| 203.76.222.43 | ip |
39
|
1 | BD | 2026-10-30 06:15 UTC | 2026-10-30 06:15 UTC |
Showing 1-25 of 77517 indicators