IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 134.209.111.173 ip
Score
100
/100
raw: 68.87
Reports
10
Last Reported
2026-11-09 16:42 UTC
Categories
Scanning (7)
API Probe (2)
Web Stack Probe (1)
Network details
ASN
14061
Organization
DigitalOcean, LLC
Country
SG
Threat Intelligence enriched 2026-11-09 16:41 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 10 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-09 16:41 UTC | catch-all-script | direct | PUT | /s4be6df2422544923.aspx | burst |
| 2026-11-09 16:41 UTC | catch-all-script | direct | PUT | /shell_4be6df2422544923.jsp | burst |
| 2026-11-09 16:41 UTC | catch-all-scan | direct | GET | /crumbIssuer/api/json | burst |
| 2026-11-09 16:41 UTC | catch-all-scan | direct | POST | /run | burst |
| 2026-11-09 16:41 UTC | catch-all-scan | direct | POST | /code/blocks/exec/start | burst |
| 2026-11-09 16:41 UTC | api | direct | POST | /api/v1/code/blocks/exec/start | burst |
| 2026-11-09 16:41 UTC | catch-all-scan | direct | POST | /code/blocks/exec/code | burst |
| 2026-11-09 16:41 UTC | api | direct | POST | /api/v1/code/blocks/exec/code | |
| 2026-11-09 16:41 UTC | catch-all-script | direct | GET | /foo.jsp | scanner |
| 2026-11-09 16:41 UTC | wp-json | direct | POST | / |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 197.6.142.121 | ip |
50
|
1 | TN | 2026-11-09 17:36 UTC | 2026-11-09 17:36 UTC |
| 190.161.73.175 | ip |
50
|
1 | CL | 2026-11-09 17:34 UTC | 2026-11-09 17:34 UTC |
| 2.152.248.154 | ip |
50
|
1 | PY | 2026-11-09 17:33 UTC | 2026-11-09 17:33 UTC |
| 190.143.254.80 | ip |
50
|
1 | NI | 2026-11-09 17:33 UTC | 2026-11-09 17:33 UTC |
| 188.0.175.137 | ip |
50
|
1 | RU | 2026-11-09 17:32 UTC | 2026-11-09 17:32 UTC |
| 83.142.15.247 | ip |
50
|
1 | RU | 2026-11-09 17:31 UTC | 2026-11-09 17:31 UTC |
| 223.181.35.85 | ip |
50
|
1 | IN | 2026-11-09 17:31 UTC | 2026-11-09 17:31 UTC |
| 179.238.35.37 | ip |
50
|
1 | CL | 2026-11-09 17:30 UTC | 2026-11-09 17:30 UTC |
| 139.135.43.173 | ip |
18
|
1 | PK | 2026-11-09 17:29 UTC | 2026-11-09 17:29 UTC |
| 178.255.187.251 | ip |
50
|
1 | IT | 2026-11-09 17:29 UTC | 2026-11-09 17:29 UTC |
| 152.231.29.205 | ip |
50
|
1 | CO | 2026-11-09 17:27 UTC | 2026-11-09 17:27 UTC |
| 187.110.242.208 | ip |
50
|
1 | BR | 2026-11-09 17:24 UTC | 2026-11-09 17:24 UTC |
| 94.31.68.63 | ip |
50
|
1 | DE | 2026-11-09 17:23 UTC | 2026-11-09 17:23 UTC |
| 91.225.198.180 | ip |
50
|
1 | UA | 2026-11-09 17:22 UTC | 2026-11-09 17:22 UTC |
| 14.192.213.222 | ip |
50
|
1 | MY | 2026-11-09 17:22 UTC | 2026-11-09 17:22 UTC |
| 86.110.15.65 | ip |
50
|
1 | RU | 2026-11-09 17:21 UTC | 2026-11-09 17:21 UTC |
| 83.171.206.211 | ip |
50
|
1 | IQ | 2026-11-09 17:20 UTC | 2026-11-09 17:20 UTC |
| 5.189.138.117 | ip |
99
|
6 | FR | 2026-11-09 17:20 UTC | 2026-11-09 17:19 UTC |
| 186.58.43.60 | ip |
50
|
1 | AR | 2026-11-09 17:19 UTC | 2026-11-09 17:19 UTC |
| 113.211.214.39 | ip |
50
|
1 | MY | 2026-11-09 17:17 UTC | 2026-11-09 17:17 UTC |
| 151.115.166.132 | ip |
33
|
2 | IT | 2026-11-09 17:16 UTC | 2026-11-09 17:16 UTC |
| 117.96.43.228 | ip |
50
|
1 | IN | 2026-11-09 17:15 UTC | 2026-11-09 17:15 UTC |
| 190.9.199.252 | ip |
50
|
1 | CO | 2026-11-09 17:14 UTC | 2026-11-09 17:14 UTC |
| 62.217.158.99 | ip |
50
|
1 | AZ | 2026-11-09 17:14 UTC | 2026-11-09 17:14 UTC |
| 68.118.80.42 | ip |
50
|
1 | US | 2026-11-09 17:13 UTC | 2026-11-09 17:13 UTC |
Showing 1-25 of 90472 indicators