IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 167.172.30.140 ip
Score
100
/100
raw: 68.85
Reports
10
Last Reported
2026-11-09 11:55 UTC
Categories
Scanning (7)
API Probe (2)
Web Stack Probe (1)
Network details
ASN
14061
Organization
DigitalOcean, LLC
Country
US
Threat Intelligence enriched 2026-11-09 11:54 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 10 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-09 11:54 UTC | catch-all-script | direct | PUT | /s16f030c655f8e033.aspx | burst |
| 2026-11-09 11:54 UTC | catch-all-script | direct | PUT | /shell_16f030c655f8e033.jsp | burst |
| 2026-11-09 11:54 UTC | catch-all-scan | direct | GET | /crumbIssuer/api/json | burst |
| 2026-11-09 11:54 UTC | catch-all-scan | direct | POST | /run | burst |
| 2026-11-09 11:54 UTC | catch-all-scan | direct | POST | /code/blocks/exec/start | burst |
| 2026-11-09 11:54 UTC | api | direct | POST | /api/v1/code/blocks/exec/start | burst |
| 2026-11-09 11:54 UTC | catch-all-scan | direct | POST | /code/blocks/exec/code | burst |
| 2026-11-09 11:54 UTC | api | direct | POST | /api/v1/code/blocks/exec/code | |
| 2026-11-09 11:54 UTC | catch-all-script | direct | GET | /foo.jsp | scanner |
| 2026-11-09 11:54 UTC | wp-json | direct | POST | / |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 143.255.84.189 | ip |
39
|
1 | VE | 2026-11-09 12:40 UTC | 2026-11-09 12:40 UTC |
| 186.57.213.25 | ip |
39
|
1 | AR | 2026-11-09 12:39 UTC | 2026-11-09 12:39 UTC |
| 194.44.50.87 | ip |
70
|
2 | UA | 2026-11-09 12:39 UTC | 2026-11-09 12:39 UTC |
| 114.119.130.99 | ip |
18
|
1 | SG | 2026-11-09 12:26 UTC | 2026-11-09 12:26 UTC |
| 64.205.72.196 | ip |
39
|
1 | US | 2026-11-09 12:10 UTC | 2026-11-09 12:10 UTC |
| 188.132.150.51 | ip |
70
|
2 | TR | 2026-11-09 12:03 UTC | 2026-11-09 12:03 UTC |
| 138.59.142.184 | ip |
39
|
1 | AR | 2026-11-09 12:03 UTC | 2026-11-09 12:03 UTC |
| 85.208.96.195 | ip |
33
|
2 | US | 2026-11-09 11:58 UTC | 2026-11-09 11:58 UTC |
| 167.172.30.140 | ip |
100
|
10 | US | 2026-11-09 11:55 UTC | 2026-11-09 11:54 UTC |
| 79.103.19.19 | ip |
39
|
1 | GR | 2026-11-09 11:47 UTC | 2026-11-09 11:47 UTC |
| 45.188.167.178 | ip |
39
|
1 | MX | 2026-11-09 11:47 UTC | 2026-11-09 11:47 UTC |
| 168.144.41.236 | ip |
97
|
12 | SG | 2026-11-09 11:38 UTC | 2026-11-09 11:35 UTC |
| 103.108.130.169 | ip |
39
|
1 | ID | 2026-11-09 11:34 UTC | 2026-11-09 11:34 UTC |
| 143.105.135.251 | ip |
39
|
1 | AR | 2026-11-09 11:34 UTC | 2026-11-09 11:34 UTC |
| 94.158.58.24 | ip |
70
|
2 | UZ | 2026-11-09 11:34 UTC | 2026-11-09 11:34 UTC |
| 139.59.255.125 | ip |
97
|
12 | SG | 2026-11-09 11:34 UTC | 2026-11-09 11:30 UTC |
| 159.65.1.19 | ip |
99
|
7 | SG | 2026-11-09 11:29 UTC | 2026-11-09 11:27 UTC |
| 152.42.232.255 | ip |
97
|
12 | SG | 2026-11-09 11:19 UTC | 2026-11-09 11:16 UTC |
| 34.15.148.197 | ip |
100
|
131 | TH | 2026-11-09 11:11 UTC | 2026-11-09 11:09 UTC |
| 51.81.163.28 | ip |
18
|
1 | US | 2026-11-09 11:07 UTC | 2026-11-09 11:07 UTC |
| 91.90.11.16 | ip |
86
|
4 | UA | 2026-11-09 10:37 UTC | 2026-11-09 10:37 UTC |
| 91.186.248.232 | ip |
90
|
3 | JO | 2026-11-09 10:37 UTC | 2026-11-09 10:37 UTC |
| 5.58.140.202 | ip |
39
|
1 | UA | 2026-11-09 10:37 UTC | 2026-11-09 10:37 UTC |
| 1.20.215.230 | ip |
93
|
5 | TH | 2026-11-09 10:37 UTC | 2026-11-09 10:37 UTC |
| 41.174.145.101 | ip |
85
|
3 | CD | 2026-11-09 10:37 UTC | 2026-11-09 10:37 UTC |
Showing 1-25 of 90217 indicators