IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 147.185.132.99 ip
Score
57
/100
raw: 8.48
Reports
17
Last Reported
2026-10-20 18:39 UTC
Categories
Scanning (10)
Web Stack Probe (7)
Network details
ASN
396982
Organization
Google LLC
Country
US
Threat Intelligence enriched 2026-11-04 01:07 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 14 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-10-20 18:38 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-10-17 01:31 UTC | catch-all-script | direct | GET | /webshell.php | |
| 2026-10-15 01:29 UTC | catch-all-script | direct | GET | /webshell.php | |
| 2026-10-15 00:59 UTC | catch-all-script | direct | GET | /shell.php | |
| 2026-10-14 12:15 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-09-22 18:12 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-09-13 18:18 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-09-13 18:18 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-09-08 15:21 UTC | wp-json | direct | GET | /wp-json/ | |
| 2026-08-16 00:14 UTC | catch-all-script | direct | GET | /shell.php | |
| 2026-08-02 00:10 UTC | catch-all-script | direct | GET | /shell.php | |
| 2026-07-29 00:16 UTC | catch-all-suspicious | direct | GET | /shell | |
| 2026-07-01 00:32 UTC | catch-all-suspicious | direct | GET | /webshell | |
| 2026-06-03 00:37 UTC | catch-all-suspicious | direct | GET | /webshell |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 43.130.102.223 | ip |
39
|
1 | US | 2026-11-04 06:40 UTC | 2026-11-04 06:40 UTC |
| 172.64.198.60 | ip |
45
|
1 | PL | 2026-11-04 06:38 UTC | 2026-11-04 06:38 UTC |
| 172.64.198.61 | ip |
45
|
1 | PL | 2026-11-04 06:38 UTC | 2026-11-04 06:38 UTC |
| 20.164.214.25 | ip |
100
|
63 | ZA | 2026-11-04 06:46 UTC | 2026-11-04 06:38 UTC |
| 223.166.226.192 | ip |
18
|
1 | CN | 2026-11-04 06:37 UTC | 2026-11-04 06:37 UTC |
| 45.198.224.230 | ip |
86
|
5 | US | 2026-11-04 06:27 UTC | 2026-11-04 06:27 UTC |
| 151.243.11.208 | ip |
86
|
5 | AE | 2026-11-04 06:27 UTC | 2026-11-04 06:27 UTC |
| 151.243.11.203 | ip |
86
|
5 | AE | 2026-11-04 06:27 UTC | 2026-11-04 06:27 UTC |
| 35.210.137.3 | ip |
55
|
2 | BE | 2026-11-04 06:16 UTC | 2026-11-04 06:16 UTC |
| 47.84.60.55 | ip |
98
|
5 | SG | 2026-11-04 06:14 UTC | 2026-11-04 06:13 UTC |
| 46.183.117.121 | ip |
45
|
1 | ES | 2026-11-04 06:12 UTC | 2026-11-04 06:12 UTC |
| 103.67.78.129 | ip |
100
|
7 | ID | 2026-11-04 06:13 UTC | 2026-11-04 06:12 UTC |
| 185.247.224.43 | ip |
55
|
1 | RO | 2026-11-04 06:08 UTC | 2026-11-04 06:08 UTC |
| 104.248.61.156 | ip |
18
|
1 | US | 2026-11-04 06:04 UTC | 2026-11-04 06:04 UTC |
| 103.93.219.166 | ip |
100
|
42 | PK | 2026-11-04 06:29 UTC | 2026-11-04 05:59 UTC |
| 34.23.219.146 | ip |
100
|
26 | US | 2026-11-04 05:54 UTC | 2026-11-04 05:53 UTC |
| 47.101.171.159 | ip |
99
|
6 | CN | 2026-11-04 05:51 UTC | 2026-11-04 05:50 UTC |
| 86.48.2.136 | ip |
100
|
14 | FR | 2026-11-04 05:47 UTC | 2026-11-04 05:47 UTC |
| 8.134.95.40 | ip |
88
|
3 | CN | 2026-11-04 05:46 UTC | 2026-11-04 05:46 UTC |
| 147.182.165.92 | ip |
55
|
2 | US | 2026-11-04 05:25 UTC | 2026-11-04 05:25 UTC |
| 159.89.142.101 | ip |
18
|
1 | US | 2026-11-04 05:25 UTC | 2026-11-04 05:25 UTC |
| 178.128.11.78 | ip |
33
|
1 | US | 2026-11-04 05:25 UTC | 2026-11-04 05:25 UTC |
| 138.68.53.28 | ip |
50
|
1 | US | 2026-11-04 05:24 UTC | 2026-11-04 05:24 UTC |
| 52.187.224.173 | ip |
100
|
103 | AU | 2026-11-04 05:34 UTC | 2026-11-04 05:17 UTC |
| 51.255.165.74 | ip |
100
|
11 | FR | 2026-11-04 05:16 UTC | 2026-11-04 05:15 UTC |
Showing 1-25 of 86502 indicators