IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 147.185.132.109 ip
Score
57
/100
raw: 8.52
Reports
14
Last Reported
2026-10-24 18:04 UTC
Categories
Scanning (7)
Web Stack Probe (7)
Network details
ASN
396982
Organization
Google LLC
Country
US
Threat Intelligence enriched 2026-11-04 11:08 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 11 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-10-24 18:04 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-10-24 00:53 UTC | catch-all-script | direct | GET | /webshell.php | |
| 2026-10-12 16:24 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-10-07 00:52 UTC | catch-all-suspicious | direct | GET | /shell | |
| 2026-10-04 06:17 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-10-03 18:18 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-10-03 18:15 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-09-30 18:19 UTC | wp-json | direct | GET | /wp-json/ | |
| 2026-08-04 00:19 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-07-01 00:13 UTC | catch-all-script | direct | GET | /shell.php | |
| 2026-06-04 00:31 UTC | catch-all-script | direct | GET | /webshell.php |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 5.57.13.136 | ip |
50
|
1 | KG | 2026-11-09 02:27 UTC | 2026-11-09 02:27 UTC |
| 150.228.106.200 | ip |
39
|
1 | SY | 2026-11-09 02:26 UTC | 2026-11-09 02:26 UTC |
| 91.188.171.196 | ip |
39
|
1 | RU | 2026-11-09 02:26 UTC | 2026-11-09 02:26 UTC |
| 85.172.95.160 | ip |
50
|
1 | RU | 2026-11-09 02:26 UTC | 2026-11-09 02:26 UTC |
| 181.26.95.92 | ip |
50
|
1 | AR | 2026-11-09 02:26 UTC | 2026-11-09 02:26 UTC |
| 103.134.216.74 | ip |
39
|
1 | NP | 2026-11-09 02:26 UTC | 2026-11-09 02:26 UTC |
| 213.24.125.162 | ip |
39
|
1 | RU | 2026-11-09 02:26 UTC | 2026-11-09 02:26 UTC |
| 45.235.158.247 | ip |
50
|
1 | BR | 2026-11-09 02:26 UTC | 2026-11-09 02:26 UTC |
| 202.188.206.63 | ip |
50
|
1 | MY | 2026-11-09 02:25 UTC | 2026-11-09 02:25 UTC |
| 103.239.105.197 | ip |
50
|
1 | MM | 2026-11-09 02:23 UTC | 2026-11-09 02:23 UTC |
| 181.189.103.161 | ip |
50
|
1 | BR | 2026-11-09 02:23 UTC | 2026-11-09 02:23 UTC |
| 122.183.49.46 | ip |
50
|
1 | IN | 2026-11-09 02:22 UTC | 2026-11-09 02:22 UTC |
| 38.210.96.49 | ip |
50
|
1 | CO | 2026-11-09 02:22 UTC | 2026-11-09 02:22 UTC |
| 95.215.238.221 | ip |
50
|
1 | RU | 2026-11-09 02:21 UTC | 2026-11-09 02:21 UTC |
| 157.100.139.221 | ip |
50
|
1 | EC | 2026-11-09 02:20 UTC | 2026-11-09 02:20 UTC |
| 38.79.43.201 | ip |
39
|
1 | PY | 2026-11-09 02:20 UTC | 2026-11-09 02:20 UTC |
| 45.172.218.219 | ip |
39
|
1 | CO | 2026-11-09 02:18 UTC | 2026-11-09 02:18 UTC |
| 142.163.4.145 | ip |
39
|
1 | CA | 2026-11-09 02:17 UTC | 2026-11-09 02:17 UTC |
| 37.248.179.155 | ip |
39
|
1 | PL | 2026-11-09 02:16 UTC | 2026-11-09 02:16 UTC |
| 181.160.177.68 | ip |
50
|
1 | CL | 2026-11-09 02:13 UTC | 2026-11-09 02:13 UTC |
| 187.233.75.95 | ip |
50
|
1 | MX | 2026-11-09 02:12 UTC | 2026-11-09 02:12 UTC |
| 41.100.102.209 | ip |
39
|
1 | DZ | 2026-11-09 02:12 UTC | 2026-11-09 02:12 UTC |
| 23.234.103.77 | ip |
100
|
61 | US | 2026-11-09 02:26 UTC | 2026-11-09 02:11 UTC |
| 190.12.109.202 | ip |
50
|
1 | AR | 2026-11-09 02:10 UTC | 2026-11-09 02:10 UTC |
| 182.62.32.7 | ip |
39
|
1 | MY | 2026-11-09 02:10 UTC | 2026-11-09 02:10 UTC |
Showing 1-25 of 89713 indicators