IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 165.154.20.228 ip

Score
3
/100
raw: 0.35
Reports
168
Last Reported
2026-06-04 21:32 UTC
Categories
Scanning (128) Web Stack Probe (24) Config Exposure Probe (8) API Probe (4) Admin Panel Probe (4)

Network details

ASN
135377
Organization
UCLOUD INFORMATION TECHNOLOGY HK LIMITED
Country
HK

Threat Intelligence enriched 2026-11-04 05:13 UTC

DNSBL Status
Listed
zen.spamhaus.org

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-06-04 21:32 UTC catch-all-script direct GET /index.php
2026-06-04 21:31 UTC catch-all-script direct GET /index.php
2026-06-04 21:31 UTC catch-all-script direct GET /public/index.php
2026-06-04 21:31 UTC catch-all-script direct GET /index.php
2026-06-04 21:31 UTC catch-all-script direct GET /app/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-06-04 21:31 UTC catch-all-script direct GET /apps/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-06-04 21:31 UTC catch-all-script direct GET /public/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-06-04 21:31 UTC catch-all-script direct GET /panel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-06-04 21:30 UTC catch-all-cms direct GET /workspace/drupal/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-06-04 21:30 UTC catch-all-script direct GET /blog/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-06-04 21:30 UTC backup direct GET /backup/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-06-04 21:30 UTC admin direct GET /admin/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-06-04 21:30 UTC catch-all-script direct GET /crm/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-06-04 21:30 UTC catch-all-script direct GET /cms/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-06-04 21:30 UTC catch-all-script direct GET /demo/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-06-04 21:29 UTC api direct GET /api/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-06-04 21:29 UTC catch-all-script direct GET /testing/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-06-04 21:29 UTC catch-all-script direct GET /test/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-06-04 21:29 UTC catch-all-script direct GET /tests/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
2026-06-04 21:29 UTC catch-all-script direct GET /V2/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
89.21.67.137 ip
39
 1 NL 2026-11-06 08:38 UTC 2026-11-06 08:38 UTC
107.172.62.122 ip
50
 1 US 2026-11-06 08:32 UTC 2026-11-06 08:32 UTC
206.189.19.57 ip
100
 26 GB 2026-11-06 08:44 UTC 2026-11-06 08:26 UTC
172.121.183.199 ip
39
 1 US 2026-11-06 08:24 UTC 2026-11-06 08:24 UTC
172.83.253.111 ip
39
 1 US 2026-11-06 08:24 UTC 2026-11-06 08:24 UTC
174.138.85.171 ip
100
 15 US 2026-11-06 08:44 UTC 2026-11-06 08:13 UTC
146.190.237.77 ip
100
 9 NL 2026-11-06 08:41 UTC 2026-11-06 08:12 UTC
186.205.21.133 ip
39
 1 BR 2026-11-06 08:11 UTC 2026-11-06 08:11 UTC
175.136.142.13 ip
39
 1 MY 2026-11-06 08:11 UTC 2026-11-06 08:11 UTC
187.89.122.83 ip
100
 13 BR 2026-11-06 08:11 UTC 2026-11-06 08:10 UTC
157.119.186.168 ip
100
 9 BD 2026-11-06 08:11 UTC 2026-11-06 08:10 UTC
1.2.167.97 ip
100
 8 TH 2026-11-06 08:11 UTC 2026-11-06 08:10 UTC
106.207.208.192 ip
70
 2 IN 2026-11-06 08:10 UTC 2026-11-06 08:09 UTC
187.213.42.144 ip
63
 2 MX 2026-11-06 08:09 UTC 2026-11-06 08:09 UTC
89.19.113.1 ip
86
 4 UA 2026-11-06 08:09 UTC 2026-11-06 08:09 UTC
94.181.135.122 ip
94
 4 RU 2026-11-06 08:09 UTC 2026-11-06 08:09 UTC
45.71.120.236 ip
89
 4 BR 2026-11-06 08:09 UTC 2026-11-06 08:09 UTC
45.65.236.116 ip
95
 5 BR 2026-11-06 08:09 UTC 2026-11-06 08:08 UTC
174.16.152.19 ip
98
 6 US 2026-11-06 08:09 UTC 2026-11-06 08:08 UTC
148.227.121.193 ip
98
 7 AR 2026-11-06 08:09 UTC 2026-11-06 08:08 UTC
46.72.216.107 ip
39
 1 RU 2026-11-06 08:08 UTC 2026-11-06 08:08 UTC
45.161.238.116 ip
78
 3 PY 2026-11-06 08:08 UTC 2026-11-06 08:08 UTC
85.241.247.129 ip
99
 7 PT 2026-11-06 08:08 UTC 2026-11-06 08:07 UTC
181.118.47.178 ip
99
 7 TT 2026-11-06 08:08 UTC 2026-11-06 08:07 UTC
170.150.156.23 ip
99
 7 CL 2026-11-06 08:08 UTC 2026-11-06 08:07 UTC

Showing 1-25 of 87322 indicators