IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 192.42.116.18 ip

Score
98
/100
raw: 41.86
Reports
33
Last Reported
2026-09-30 19:50 UTC
Categories
Web Stack Probe (16) Scanning (13) Admin Panel Probe (2) API Probe (1) Credential Stuffing (1)

Network details

ASN
215125
Organization
Church of Cyberology
Country
NL

Threat Intelligence enriched 2026-11-04 01:11 UTC

Reverse DNS
this-is-a-tor-exit-node-hviv118.hviv.nl
DNSBL Status
Listed
zen.spamhaus.org bl.spamcop.net b.barracudacentral.org

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-09-30 19:49 UTC catch-all-script direct GET /dompdf.php burst
2026-09-30 19:49 UTC catch-all-script direct GET /PhpSpreadsheet/Writer/PDF/DomPDF.php
2026-09-30 19:49 UTC wp-content direct GET /wp-content/plugins/dhtmlxspreadsheet/codebase/spreadsheet.php
2026-09-30 19:49 UTC wp-content direct GET /wp-content/plugins/duplicator/readme.txt
2026-09-29 23:57 UTC catch-all-admin direct GET /jmx-console/
2026-09-29 23:56 UTC wp-login direct GET /wp-login.php
2026-09-29 22:16 UTC wp-content direct GET /wp-content/plugins/dzs-videogallery/readme burst
2026-09-29 22:16 UTC catch-all-cms direct POST /wp-content/plugins/sexy-contact-form/includes/fileupload/index.php burst
2026-09-29 22:16 UTC wp-content direct GET /wp-content/plugins/ultimate-weather-plugin/readme.txt burst
2026-09-29 22:16 UTC wp-content direct GET /wp-content/plugins/wp-planet/rss.class/scripts/magpie_debug.php burst
2026-09-29 22:16 UTC catch-all-suspicious direct GET /cgi-bin/status burst
2026-09-29 22:16 UTC catch-all-suspicious direct GET /cgi-bin/test-cgi burst
2026-09-29 22:15 UTC wp-content direct GET /wp-content/plugins//wp-planet/readme.txt burst
2026-09-29 22:15 UTC catch-all-script direct GET /cgi-bin/status/status.cgi burst
2026-09-29 22:15 UTC catch-all-admin direct GET /debug.cgi burst
2026-09-29 22:15 UTC catch-all-script direct GET /test.cgi
2026-09-29 22:15 UTC catch-all-suspicious direct GET /cgi-bin/stats
2026-09-29 22:15 UTC catch-all-script direct GET /cgi-bin/test.cgi
2026-09-29 22:15 UTC catch-all-suspicious direct GET /cgi-bin/test
2026-09-29 22:14 UTC wp-content direct GET /wp-content/plugins/sniplets/readme.txt burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
38.60.250.156 ip
26
 1 DE 2026-11-04 10:49 UTC 2026-11-04 10:49 UTC
46.188.195.194 ip
100
 13 HR 2026-11-04 10:46 UTC 2026-11-04 10:44 UTC
153.76.64.114 ip
100
 10 ID 2026-11-04 10:46 UTC 2026-11-04 10:44 UTC
103.191.162.200 ip
100
 11 BD 2026-11-04 10:46 UTC 2026-11-04 10:44 UTC
47.152.213.250 ip
100
 12 US 2026-11-04 10:44 UTC 2026-11-04 10:43 UTC
45.162.179.40 ip
100
 13 BR 2026-11-04 10:44 UTC 2026-11-04 10:43 UTC
186.109.171.151 ip
100
 10 AR 2026-11-04 10:43 UTC 2026-11-04 10:42 UTC
103.151.43.91 ip
99
 7 PK 2026-11-04 10:42 UTC 2026-11-04 10:42 UTC
179.36.186.206 ip
100
 9 AR 2026-11-04 10:42 UTC 2026-11-04 10:42 UTC
200.155.182.151 ip
63
 2 BR 2026-11-04 10:23 UTC 2026-11-04 10:23 UTC
114.130.156.140 ip
63
 2 BD 2026-11-04 10:23 UTC 2026-11-04 10:23 UTC
91.229.163.5 ip
93
 5 UZ 2026-11-04 10:22 UTC 2026-11-04 10:22 UTC
103.121.223.43 ip
100
 8 BD 2026-11-04 10:23 UTC 2026-11-04 10:22 UTC
46.63.125.125 ip
99
 9 UA 2026-11-04 10:23 UTC 2026-11-04 10:22 UTC
189.203.231.18 ip
100
 8 MX 2026-11-04 10:22 UTC 2026-11-04 10:21 UTC
181.160.71.43 ip
100
 9 CL 2026-11-04 10:21 UTC 2026-11-04 10:21 UTC
196.189.56.204 ip
93
 4 ET 2026-11-04 10:20 UTC 2026-11-04 10:20 UTC
188.64.10.38 ip
98
 7 AZ 2026-11-04 10:21 UTC 2026-11-04 10:20 UTC
185.177.189.251 ip
86
 4 UA 2026-11-04 10:20 UTC 2026-11-04 10:20 UTC
182.253.124.109 ip
97
 6 ID 2026-11-04 10:21 UTC 2026-11-04 10:20 UTC
103.152.103.84 ip
99
 7 BD 2026-11-04 10:20 UTC 2026-11-04 10:19 UTC
39.63.240.138 ip
99
 7 PK 2026-11-04 10:20 UTC 2026-11-04 10:19 UTC
85.11.167.204 ip
33
 2 NL 2026-11-04 10:12 UTC 2026-11-04 10:12 UTC
168.144.100.200 ip
18
 1 SG 2026-11-04 09:44 UTC 2026-11-04 09:44 UTC
34.152.63.171 ip
100
 71 CA 2026-11-04 09:36 UTC 2026-11-04 09:35 UTC

Showing 1-25 of 86574 indicators