IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 172.94.9.223 ip

Score
67
/100
raw: 11.01
Reports
584
Last Reported
2026-09-22 00:37 UTC
Categories
Web Stack Probe (519) Scanning (40) Config Exposure Probe (14) Credential Stuffing (9) API Probe (2)

Network details

ASN
213790
Organization
Limited Network LTD
Country
US

Threat Intelligence enriched 2026-11-04 22:15 UTC

DNSBL Status
Listed
zen.spamhaus.org

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-09-22 00:37 UTC wp-login direct POST /wp-login.php creds
2026-09-22 00:23 UTC wp-login direct POST /wp-login.php creds
2026-09-22 00:12 UTC wp-login direct POST /wp-login.php creds
2026-09-21 21:27 UTC wp-login direct POST /wp-login.php creds
2026-09-21 21:27 UTC wp-login direct POST /wp-login.php creds
2026-09-21 21:23 UTC wp-login direct POST /wp-login.php creds
2026-09-21 21:23 UTC wp-login direct POST /wp-login.php creds
2026-09-21 20:10 UTC wp-login direct POST /wp-login.php creds
2026-09-21 19:07 UTC wp-login direct POST /wp-login.php creds
2026-07-07 19:32 UTC wp-login direct GET /wp-login.php burst
2026-07-07 19:32 UTC wp-login direct GET /wp-login.php burst
2026-07-07 19:32 UTC wp-login direct GET /wp-login.php burst
2026-07-07 19:32 UTC wp-login direct GET /wp-login.php burst
2026-07-07 19:31 UTC wp-admin direct GET /wp-admin/setup-config.php burst
2026-07-07 19:31 UTC wp-login direct GET /wp-login.php burst
2026-07-07 19:31 UTC catch-all-cms direct GET /wp-mail.php burst
2026-07-07 19:31 UTC catch-all-cms direct GET /wp-trackback.php burst
2026-07-07 19:31 UTC catch-all-scan direct GET /license.txt burst
2026-07-07 19:31 UTC catch-all-scan direct GET /readme.html burst
2026-07-07 19:31 UTC wp-content direct GET /wp-content/themes/ burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
45.234.86.211 ip
39
 1 PY 2026-11-11 05:25 UTC 2026-11-11 05:25 UTC
186.17.126.25 ip
39
 1 PY 2026-11-11 05:25 UTC 2026-11-11 05:25 UTC
152.58.81.149 ip
50
 1 IN 2026-11-11 05:23 UTC 2026-11-11 05:23 UTC
187.15.139.232 ip
50
 1 CA 2026-11-11 05:23 UTC 2026-11-11 05:23 UTC
177.139.52.92 ip
50
 1 BR 2026-11-11 05:23 UTC 2026-11-11 05:23 UTC
186.39.121.36 ip
50
 1 AR 2026-11-11 05:23 UTC 2026-11-11 05:23 UTC
84.54.70.73 ip
39
 1 UZ 2026-11-11 05:23 UTC 2026-11-11 05:23 UTC
45.233.26.98 ip
50
 1 BR 2026-11-11 05:23 UTC 2026-11-11 05:23 UTC
84.54.72.76 ip
50
 1 UZ 2026-11-11 05:22 UTC 2026-11-11 05:22 UTC
175.145.216.215 ip
39
 1 MY 2026-11-11 05:22 UTC 2026-11-11 05:22 UTC
88.168.185.190 ip
39
 1 FR 2026-11-11 05:22 UTC 2026-11-11 05:22 UTC
102.203.137.40 ip
39
 1 KE 2026-11-11 05:22 UTC 2026-11-11 05:22 UTC
169.224.88.4 ip
50
 1 IQ 2026-11-11 05:22 UTC 2026-11-11 05:22 UTC
79.139.162.8 ip
50
 1 RU 2026-11-11 05:22 UTC 2026-11-11 05:22 UTC
182.77.67.84 ip
39
 1 IN 2026-11-11 05:21 UTC 2026-11-11 05:21 UTC
190.97.245.55 ip
39
 1 VE 2026-11-11 05:21 UTC 2026-11-11 05:21 UTC
59.178.50.218 ip
39
 1 IN 2026-11-11 05:18 UTC 2026-11-11 05:18 UTC
165.0.101.206 ip
39
 1 ZA 2026-11-11 05:18 UTC 2026-11-11 05:18 UTC
161.18.144.154 ip
39
 1 CO 2026-11-11 05:18 UTC 2026-11-11 05:18 UTC
202.141.82.17 ip
39
 1 IN 2026-11-11 05:18 UTC 2026-11-11 05:18 UTC
176.224.36.27 ip
39
 1 SA 2026-11-11 05:18 UTC 2026-11-11 05:18 UTC
59.125.102.226 ip
50
 1 TW 2026-11-11 05:17 UTC 2026-11-11 05:17 UTC
191.110.118.221 ip
50
 1 CO 2026-11-11 05:17 UTC 2026-11-11 05:17 UTC
129.222.247.159 ip
39
 1 CA 2026-11-11 05:17 UTC 2026-11-11 05:17 UTC
170.150.156.28 ip
50
 1 CL 2026-11-11 05:17 UTC 2026-11-11 05:17 UTC

Showing 1-25 of 92571 indicators