IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 185.226.197.27 ip
Score
11
/100
raw: 1.21
Reports
10
Last Reported
2026-10-03 21:20 UTC
Categories
Scanning (10)
Network details
ASN
21859
Organization
Zenlayer Inc
Country
JP
Threat Intelligence enriched 2026-05-07 06:42 UTC
Reverse DNS
zl-amsc-nl-gp1-wk127a.internet-census.org
Sensor Activity last 8 events
| Time (UTC) | Trap | Signal | Method | Path | Flags | Sensor |
|---|---|---|---|---|---|---|
| 2026-10-03 21:20 UTC | catch-all-scan | direct | GET | /sse | scanner | EU West Sensor 4 |
| 2026-10-03 21:20 UTC | catch-all-scan | direct | POST | /mcp | scanner | EU West Sensor 4 |
| 2026-08-27 06:21 UTC | catch-all-scan | direct | GET | /sse | scanner | EU West Sensor 3 |
| 2026-08-27 06:21 UTC | catch-all-scan | direct | POST | /mcp | scanner | EU West Sensor 3 |
| 2026-08-20 05:38 UTC | catch-all-scan | direct | GET | /sse | scanner | EU West Sensor 3 |
| 2026-08-20 05:38 UTC | catch-all-scan | direct | POST | /mcp | scanner | EU West Sensor 3 |
| 2026-07-21 08:11 UTC | catch-all-scan | direct | GET | /sse | scanner | US West Sensor |
| 2026-07-21 08:11 UTC | catch-all-scan | direct | POST | /mcp | scanner | US West Sensor |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 45.239.61.210 | ip |
39
|
1 | AR | 2026-11-02 05:49 UTC | 2026-11-02 05:49 UTC |
| 103.111.225.150 | ip |
39
|
1 | BD | 2026-11-02 05:49 UTC | 2026-11-02 05:49 UTC |
| 194.44.50.120 | ip |
50
|
1 | UA | 2026-11-02 05:48 UTC | 2026-11-02 05:48 UTC |
| 95.58.151.59 | ip |
50
|
1 | KZ | 2026-11-02 05:47 UTC | 2026-11-02 05:47 UTC |
| 103.155.21.139 | ip |
39
|
1 | NP | 2026-11-02 05:46 UTC | 2026-11-02 05:46 UTC |
| 172.64.200.59 | ip |
45
|
1 | SG | 2026-11-02 05:46 UTC | 2026-11-02 05:46 UTC |
| 172.64.200.58 | ip |
45
|
1 | SG | 2026-11-02 05:46 UTC | 2026-11-02 05:46 UTC |
| 82.228.197.138 | ip |
50
|
1 | FR | 2026-11-02 05:45 UTC | 2026-11-02 05:45 UTC |
| 152.42.215.23 | ip |
100
|
42 | CA | 2026-11-02 05:46 UTC | 2026-11-02 05:45 UTC |
| 129.222.91.135 | ip |
50
|
1 | IQ | 2026-11-02 05:45 UTC | 2026-11-02 05:45 UTC |
| 27.34.66.44 | ip |
39
|
1 | NP | 2026-11-02 05:45 UTC | 2026-11-02 05:45 UTC |
| 41.208.172.101 | ip |
50
|
1 | SN | 2026-11-02 05:43 UTC | 2026-11-02 05:43 UTC |
| 165.73.182.152 | ip |
50
|
1 | ZA | 2026-11-02 05:43 UTC | 2026-11-02 05:43 UTC |
| 169.224.98.179 | ip |
39
|
1 | IQ | 2026-11-02 05:42 UTC | 2026-11-02 05:42 UTC |
| 187.190.166.102 | ip |
50
|
1 | MX | 2026-11-02 05:40 UTC | 2026-11-02 05:40 UTC |
| 188.0.179.153 | ip |
39
|
1 | RU | 2026-11-02 05:39 UTC | 2026-11-02 05:39 UTC |
| 47.144.86.152 | ip |
50
|
1 | US | 2026-11-02 05:38 UTC | 2026-11-02 05:38 UTC |
| 65.75.115.104 | ip |
39
|
1 | BS | 2026-11-02 05:37 UTC | 2026-11-02 05:37 UTC |
| 103.190.47.21 | ip |
39
|
1 | ID | 2026-11-02 05:36 UTC | 2026-11-02 05:36 UTC |
| 167.0.47.75 | ip |
50
|
1 | CO | 2026-11-02 05:36 UTC | 2026-11-02 05:36 UTC |
| 91.204.151.211 | ip |
39
|
1 | RU | 2026-11-02 05:36 UTC | 2026-11-02 05:36 UTC |
| 78.163.142.146 | ip |
50
|
1 | TR | 2026-11-02 05:36 UTC | 2026-11-02 05:36 UTC |
| 200.104.100.23 | ip |
39
|
1 | CL | 2026-11-02 05:35 UTC | 2026-11-02 05:35 UTC |
| 103.238.108.254 | ip |
50
|
1 | IN | 2026-11-02 05:34 UTC | 2026-11-02 05:34 UTC |
| 106.202.99.84 | ip |
50
|
1 | IN | 2026-11-02 05:34 UTC | 2026-11-02 05:34 UTC |
Showing 1-25 of 82793 indicators