IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 147.185.132.252 ip
Score
67
/100
raw: 11.18
Reports
16
Last Reported
2026-10-25 21:44 UTC
Categories
Scanning (9)
Web Stack Probe (7)
Network details
ASN
396982
Organization
Google LLC
Country
SG
Threat Intelligence enriched 2026-04-19 15:07 UTC
Sensor Activity last 12 events
| Time (UTC) | Trap | Signal | Method | Path | Flags | Sensor |
|---|---|---|---|---|---|---|
| 2026-10-25 21:44 UTC | xmlrpc | direct | GET | /xmlrpc.php | OC East Sensor | |
| 2026-10-17 21:19 UTC | xmlrpc | direct | GET | /xmlrpc.php | OC East Sensor | |
| 2026-10-17 21:18 UTC | xmlrpc | direct | GET | /xmlrpc.php | EU West Sensor 4 | |
| 2026-10-08 00:48 UTC | catch-all-suspicious | direct | GET | /shell | US West Sensor | |
| 2026-09-30 00:35 UTC | catch-all-script | direct | GET | /shell.php | EU West Sensor 4 | |
| 2026-09-19 18:07 UTC | wp-json | direct | GET | /wp-json/ | US West Sensor | |
| 2026-09-19 00:48 UTC | catch-all-script | direct | GET | /shell.php | US West Sensor | |
| 2026-08-27 15:16 UTC | wp-login | direct | GET | /wp-login.php | EU West Sensor 3 | |
| 2026-07-29 00:13 UTC | catch-all-script | direct | GET | /webshell.php | US West Sensor | |
| 2026-07-25 00:11 UTC | catch-all-script | direct | GET | /shell.php | EU West Sensor 4 | |
| 2026-07-17 06:10 UTC | wp-login | direct | GET | /wp-login.php | OC East Sensor | |
| 2026-05-30 00:17 UTC | catch-all-suspicious | direct | GET | /webshell | EU West Sensor 3 |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 89.212.8.212 | ip |
50
|
1 | SI | 2026-10-31 08:37 UTC | 2026-10-31 08:37 UTC |
| 202.185.96.224 | ip |
100
|
14 | MY | 2026-10-31 08:39 UTC | 2026-10-31 08:36 UTC |
| 45.177.205.250 | ip |
100
|
18 | PY | 2026-10-31 08:39 UTC | 2026-10-31 08:36 UTC |
| 116.206.122.4 | ip |
100
|
12 | MM | 2026-10-31 08:39 UTC | 2026-10-31 08:36 UTC |
| 38.25.159.20 | ip |
92
|
4 | VE | 2026-10-31 08:35 UTC | 2026-10-31 08:34 UTC |
| 190.194.192.60 | ip |
94
|
4 | AR | 2026-10-31 08:35 UTC | 2026-10-31 08:34 UTC |
| 170.82.210.10 | ip |
93
|
5 | TT | 2026-10-31 08:34 UTC | 2026-10-31 08:34 UTC |
| 86.127.228.51 | ip |
88
|
4 | ES | 2026-10-31 08:34 UTC | 2026-10-31 08:34 UTC |
| 177.10.174.112 | ip |
94
|
4 | BR | 2026-10-31 08:35 UTC | 2026-10-31 08:34 UTC |
| 102.223.59.228 | ip |
39
|
1 | ZA | 2026-10-31 08:34 UTC | 2026-10-31 08:34 UTC |
| 62.171.143.175 | ip |
55
|
1 | FR | 2026-10-31 08:26 UTC | 2026-10-31 08:26 UTC |
| 31.39.131.27 | ip |
100
|
15 | FR | 2026-10-31 08:28 UTC | 2026-10-31 08:26 UTC |
| 223.181.23.171 | ip |
100
|
14 | IN | 2026-10-31 08:28 UTC | 2026-10-31 08:26 UTC |
| 197.95.182.90 | ip |
100
|
15 | ZA | 2026-10-31 08:28 UTC | 2026-10-31 08:26 UTC |
| 131.161.153.23 | ip |
100
|
13 | AR | 2026-10-31 08:28 UTC | 2026-10-31 08:26 UTC |
| 202.187.152.164 | ip |
100
|
14 | MY | 2026-10-31 08:28 UTC | 2026-10-31 08:26 UTC |
| 66.9.161.214 | ip |
100
|
13 | IQ | 2026-10-31 08:28 UTC | 2026-10-31 08:26 UTC |
| 217.60.76.38 | ip |
55
|
1 | GB | 2026-10-31 08:24 UTC | 2026-10-31 08:24 UTC |
| 200.138.46.130 | ip |
39
|
1 | GB | 2026-10-31 08:21 UTC | 2026-10-31 08:21 UTC |
| 197.221.14.2 | ip |
50
|
1 | ZA | 2026-10-31 08:14 UTC | 2026-10-31 08:14 UTC |
| 69.197.168.239 | ip |
50
|
1 | US | 2026-10-31 08:14 UTC | 2026-10-31 08:14 UTC |
| 103.167.122.13 | ip |
70
|
2 | IN | 2026-10-31 08:06 UTC | 2026-10-31 08:06 UTC |
| 160.187.191.164 | ip |
59
|
2 | BD | 2026-10-31 08:06 UTC | 2026-10-31 08:06 UTC |
| 181.78.94.20 | ip |
82
|
3 | BR | 2026-10-31 08:06 UTC | 2026-10-31 08:06 UTC |
| 191.84.242.28 | ip |
59
|
2 | AR | 2026-10-31 08:06 UTC | 2026-10-31 08:06 UTC |
Showing 1-25 of 79686 indicators