IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 147.185.132.78 ip
Score
44
/100
raw: 5.8
Reports
16
Last Reported
2026-11-03 00:35 UTC
Categories
Scanning (13)
Web Stack Probe (3)
Network details
ASN
396982
Organization
Google LLC
Country
US
Threat Intelligence enriched 2026-11-04 12:11 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 12 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-03 00:34 UTC | catch-all-suspicious | direct | GET | /shell | |
| 2026-10-21 00:34 UTC | catch-all-suspicious | direct | GET | /webshell | |
| 2026-10-17 01:12 UTC | catch-all-script | direct | GET | /webshell.php | |
| 2026-10-07 18:11 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-10-03 01:12 UTC | catch-all-suspicious | direct | GET | /shell | |
| 2026-10-03 01:09 UTC | catch-all-suspicious | direct | GET | /webshell | |
| 2026-09-19 21:16 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-09-19 21:10 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-09-02 00:22 UTC | catch-all-suspicious | direct | GET | /shell | |
| 2026-08-31 00:15 UTC | catch-all-script | direct | GET | /shell.php | |
| 2026-08-31 00:15 UTC | catch-all-suspicious | direct | GET | /webshell | |
| 2026-06-24 00:11 UTC | catch-all-script | direct | GET | /shell.php |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 45.140.27.146 | ip |
39
|
1 | KG | 2026-11-08 14:17 UTC | 2026-11-08 14:17 UTC |
| 201.102.147.37 | ip |
50
|
1 | MX | 2026-11-08 14:17 UTC | 2026-11-08 14:17 UTC |
| 170.84.172.62 | ip |
39
|
1 | PY | 2026-11-08 14:17 UTC | 2026-11-08 14:17 UTC |
| 114.130.156.139 | ip |
50
|
1 | BD | 2026-11-08 14:15 UTC | 2026-11-08 14:15 UTC |
| 177.128.30.192 | ip |
50
|
1 | BR | 2026-11-08 14:13 UTC | 2026-11-08 14:13 UTC |
| 103.118.77.149 | ip |
50
|
1 | BD | 2026-11-08 14:12 UTC | 2026-11-08 14:12 UTC |
| 187.191.7.149 | ip |
50
|
1 | MX | 2026-11-08 14:11 UTC | 2026-11-08 14:11 UTC |
| 86.111.79.47 | ip |
39
|
1 | UA | 2026-11-08 14:11 UTC | 2026-11-08 14:11 UTC |
| 103.135.252.14 | ip |
39
|
1 | BD | 2026-11-08 14:10 UTC | 2026-11-08 14:10 UTC |
| 181.84.161.38 | ip |
50
|
1 | AR | 2026-11-08 14:10 UTC | 2026-11-08 14:10 UTC |
| 45.71.114.152 | ip |
39
|
1 | EC | 2026-11-08 14:09 UTC | 2026-11-08 14:09 UTC |
| 91.193.172.232 | ip |
50
|
1 | UA | 2026-11-08 14:08 UTC | 2026-11-08 14:08 UTC |
| 125.161.230.191 | ip |
50
|
1 | ID | 2026-11-08 14:07 UTC | 2026-11-08 14:07 UTC |
| 103.161.99.37 | ip |
39
|
1 | IN | 2026-11-08 14:07 UTC | 2026-11-08 14:07 UTC |
| 175.142.242.177 | ip |
39
|
1 | MY | 2026-11-08 14:06 UTC | 2026-11-08 14:06 UTC |
| 49.156.77.161 | ip |
39
|
1 | IN | 2026-11-08 14:06 UTC | 2026-11-08 14:06 UTC |
| 46.147.36.39 | ip |
39
|
1 | RU | 2026-11-08 14:06 UTC | 2026-11-08 14:06 UTC |
| 90.202.70.252 | ip |
39
|
1 | GB | 2026-11-08 14:05 UTC | 2026-11-08 14:05 UTC |
| 94.28.188.217 | ip |
39
|
1 | RU | 2026-11-08 14:05 UTC | 2026-11-08 14:05 UTC |
| 2.57.36.132 | ip |
50
|
1 | UA | 2026-11-08 14:03 UTC | 2026-11-08 14:03 UTC |
| 202.47.165.241 | ip |
50
|
1 | BD | 2026-11-08 14:02 UTC | 2026-11-08 14:02 UTC |
| 82.167.37.117 | ip |
39
|
1 | SA | 2026-11-08 14:01 UTC | 2026-11-08 14:01 UTC |
| 212.164.27.171 | ip |
50
|
1 | RU | 2026-11-08 14:01 UTC | 2026-11-08 14:01 UTC |
| 84.53.248.246 | ip |
39
|
1 | RU | 2026-11-08 13:59 UTC | 2026-11-08 13:59 UTC |
| 171.22.104.21 | ip |
50
|
1 | GB | 2026-11-08 13:57 UTC | 2026-11-08 13:57 UTC |
Showing 1-25 of 88710 indicators