IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 157.245.157.191 ip

Score
100
/100
raw: 102.9
Reports
15
Last Reported
2026-11-09 04:08 UTC
Categories
Scanning (12) Credential Stuffing (2) API Probe (1)

Network details

ASN
14061
Organization
DigitalOcean, LLC
Country
SG

Threat Intelligence enriched 2026-11-09 04:07 UTC

DNSBL Status
Clean

Sensor Activity last 15 events

Time (UTC) Trap Signal Method Path Flags
2026-11-09 04:07 UTC catch-all-script direct POST /cgi-bin/diagnostic.cgi burst
2026-11-09 04:07 UTC api direct POST /api/sys/set_sys_time burst
2026-11-09 04:07 UTC catch-all-suspicious direct GET /shell burst
2026-11-09 04:07 UTC catch-all-scan direct GET /device.rsp burst
2026-11-09 04:07 UTC catch-all-script direct GET /cgi-bin/supervisor/Factory.cgi burst
2026-11-09 04:07 UTC catch-all-scan direct POST /goform/WriteFacMac burst
2026-11-09 04:07 UTC catch-all-scan direct POST /goform/setUsbUnload burst
2026-11-09 04:07 UTC catch-all-scan direct PUT /SDK/webLanguage burst
2026-11-09 04:07 UTC catch-all-script direct POST /cgi-bin/system_mgr.cgi burst
2026-11-09 04:07 UTC catch-all-scan direct POST /HNAP1/ burst
2026-11-09 04:06 UTC catch-all-scan direct POST /ping.ccp burst
2026-11-09 04:06 UTC catch-all-script direct POST /cgi-bin/weblogin.cgi burst creds
2026-11-09 04:06 UTC catch-all-script direct GET /cgi-bin/;setup.cgi
2026-11-09 04:06 UTC catch-all-suspicious direct POST /cgi-bin/luci/;stok=/locale
2026-11-09 04:06 UTC catch-all-suspicious direct POST /cgi-bin/luci/;stok=/login creds

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
31.57.184.232 ip
18
 1 US 2026-11-09 04:36 UTC 2026-11-09 04:36 UTC
189.203.98.12 ip
50
 1 MX 2026-11-09 04:35 UTC 2026-11-09 04:35 UTC
202.164.135.173 ip
50
 1 IN 2026-11-09 04:34 UTC 2026-11-09 04:34 UTC
187.189.95.185 ip
39
 1 MX 2026-11-09 04:34 UTC 2026-11-09 04:34 UTC
149.109.75.228 ip
39
 1 SA 2026-11-09 04:34 UTC 2026-11-09 04:34 UTC
189.6.16.67 ip
39
 1 BR 2026-11-09 04:33 UTC 2026-11-09 04:33 UTC
5.51.53.167 ip
39
 1 FR 2026-11-09 04:33 UTC 2026-11-09 04:33 UTC
115.133.214.151 ip
50
 1 MY 2026-11-09 04:32 UTC 2026-11-09 04:32 UTC
180.190.222.7 ip
50
 1 PH 2026-11-09 04:32 UTC 2026-11-09 04:32 UTC
103.113.149.48 ip
39
 1 BD 2026-11-09 04:31 UTC 2026-11-09 04:31 UTC
49.144.106.146 ip
50
 1 PH 2026-11-09 04:29 UTC 2026-11-09 04:29 UTC
200.83.152.119 ip
39
 1 CL 2026-11-09 04:29 UTC 2026-11-09 04:29 UTC
61.6.153.203 ip
39
 1 MY 2026-11-09 04:28 UTC 2026-11-09 04:28 UTC
187.182.131.253 ip
50
 1 BR 2026-11-09 04:28 UTC 2026-11-09 04:28 UTC
5.164.254.8 ip
50
 1 RU 2026-11-09 04:28 UTC 2026-11-09 04:28 UTC
201.145.147.4 ip
50
 1 MX 2026-11-09 04:27 UTC 2026-11-09 04:27 UTC
177.236.72.225 ip
39
 1 MX 2026-11-09 04:27 UTC 2026-11-09 04:27 UTC
45.87.144.36 ip
39
 1 RU 2026-11-09 04:24 UTC 2026-11-09 04:24 UTC
178.234.135.45 ip
39
 1 RU 2026-11-09 04:24 UTC 2026-11-09 04:24 UTC
190.90.221.178 ip
39
 1 CO 2026-11-09 04:23 UTC 2026-11-09 04:23 UTC
103.73.107.167 ip
50
 1 BD 2026-11-09 04:23 UTC 2026-11-09 04:23 UTC
213.222.233.150 ip
39
 1 RU 2026-11-09 04:22 UTC 2026-11-09 04:22 UTC
103.184.56.57 ip
50
 1 ID 2026-11-09 04:19 UTC 2026-11-09 04:19 UTC
27.125.246.224 ip
39
 1 MY 2026-11-09 04:19 UTC 2026-11-09 04:19 UTC
190.48.26.244 ip
39
 1 AR 2026-11-09 04:18 UTC 2026-11-09 04:18 UTC

Showing 1-25 of 89886 indicators