IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 134.209.202.148 ip
Score
100
/100
raw: 68.91
Reports
10
Last Reported
2026-11-14 00:15 UTC
Categories
Scanning (7)
API Probe (2)
Web Stack Probe (1)
Network details
ASN
14061
Organization
DigitalOcean, LLC
Country
NL
Threat Intelligence enriched 2026-11-14 00:15 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 10 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-14 00:14 UTC | catch-all-script | direct | PUT | /s8e6c5b52acbf07eb.aspx | burst |
| 2026-11-14 00:14 UTC | catch-all-script | direct | PUT | /shell_8e6c5b52acbf07eb.jsp | burst |
| 2026-11-14 00:14 UTC | catch-all-scan | direct | GET | /crumbIssuer/api/json | burst |
| 2026-11-14 00:14 UTC | catch-all-scan | direct | POST | /run | burst |
| 2026-11-14 00:14 UTC | catch-all-scan | direct | POST | /code/blocks/exec/start | burst |
| 2026-11-14 00:14 UTC | api | direct | POST | /api/v1/code/blocks/exec/start | burst |
| 2026-11-14 00:14 UTC | catch-all-scan | direct | POST | /code/blocks/exec/code | burst |
| 2026-11-14 00:14 UTC | api | direct | POST | /api/v1/code/blocks/exec/code | |
| 2026-11-14 00:14 UTC | catch-all-script | direct | GET | /foo.jsp | scanner |
| 2026-11-14 00:14 UTC | wp-json | direct | POST | / |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 105.76.186.47 | ip |
39
|
1 | MA | 2026-11-14 00:52 UTC | 2026-11-14 00:52 UTC |
| 2.88.251.80 | ip |
39
|
1 | SA | 2026-11-14 00:52 UTC | 2026-11-14 00:52 UTC |
| 181.199.60.92 | ip |
39
|
1 | EC | 2026-11-14 00:52 UTC | 2026-11-14 00:52 UTC |
| 60.50.200.35 | ip |
50
|
1 | MY | 2026-11-14 00:52 UTC | 2026-11-14 00:52 UTC |
| 177.193.225.10 | ip |
39
|
1 | BR | 2026-11-14 00:52 UTC | 2026-11-14 00:52 UTC |
| 186.28.217.70 | ip |
50
|
1 | CO | 2026-11-14 00:52 UTC | 2026-11-14 00:52 UTC |
| 120.159.46.24 | ip |
39
|
1 | AU | 2026-11-14 00:52 UTC | 2026-11-14 00:52 UTC |
| 31.43.49.45 | ip |
50
|
1 | UA | 2026-11-14 00:52 UTC | 2026-11-14 00:52 UTC |
| 210.195.210.120 | ip |
39
|
1 | MY | 2026-11-14 00:51 UTC | 2026-11-14 00:51 UTC |
| 187.246.1.201 | ip |
50
|
1 | MX | 2026-11-14 00:50 UTC | 2026-11-14 00:50 UTC |
| 179.56.123.22 | ip |
50
|
1 | CL | 2026-11-14 00:50 UTC | 2026-11-14 00:50 UTC |
| 103.137.74.251 | ip |
39
|
1 | BD | 2026-11-14 00:50 UTC | 2026-11-14 00:50 UTC |
| 181.209.79.141 | ip |
39
|
1 | AR | 2026-11-14 00:50 UTC | 2026-11-14 00:50 UTC |
| 194.44.50.24 | ip |
50
|
1 | UA | 2026-11-14 00:50 UTC | 2026-11-14 00:50 UTC |
| 115.133.77.186 | ip |
50
|
1 | MY | 2026-11-14 00:49 UTC | 2026-11-14 00:49 UTC |
| 129.224.215.196 | ip |
39
|
1 | AR | 2026-11-14 00:49 UTC | 2026-11-14 00:49 UTC |
| 31.223.59.144 | ip |
50
|
1 | TR | 2026-11-14 00:48 UTC | 2026-11-14 00:48 UTC |
| 191.36.219.12 | ip |
39
|
1 | BR | 2026-11-14 00:48 UTC | 2026-11-14 00:48 UTC |
| 45.119.135.101 | ip |
39
|
1 | KH | 2026-11-14 00:47 UTC | 2026-11-14 00:47 UTC |
| 45.144.113.28 | ip |
50
|
1 | US | 2026-11-14 00:47 UTC | 2026-11-14 00:47 UTC |
| 179.28.156.227 | ip |
39
|
1 | UY | 2026-11-14 00:47 UTC | 2026-11-14 00:47 UTC |
| 188.71.238.225 | ip |
50
|
1 | KW | 2026-11-14 00:46 UTC | 2026-11-14 00:46 UTC |
| 186.29.105.215 | ip |
39
|
1 | CO | 2026-11-14 00:46 UTC | 2026-11-14 00:46 UTC |
| 167.58.75.155 | ip |
39
|
1 | UY | 2026-11-14 00:46 UTC | 2026-11-14 00:46 UTC |
| 103.124.99.222 | ip |
39
|
1 | NP | 2026-11-14 00:45 UTC | 2026-11-14 00:45 UTC |
Showing 1-25 of 100205 indicators