IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 192.42.116.52 ip

Score
100
/100
raw: 80.81
Reports
60
Last Reported
2026-09-30 22:00 UTC
Categories
Web Stack Probe (33) Scanning (24) Credential Stuffing (2) Admin Panel Probe (1)

Network details

ASN
215125
Organization
Church of Cyberology
Country
NL

Threat Intelligence enriched 2026-11-04 01:11 UTC

DNSBL Status
Listed
zen.spamhaus.org bl.spamcop.net b.barracudacentral.org

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-09-30 22:00 UTC wp-content direct GET /wp-content/plugins/movies/readme.txt
2026-09-30 22:00 UTC wp-content direct GET /wp-content/plugins/infusionsoft/readme.txt
2026-09-30 22:00 UTC wp-content direct GET /wp-content/plugins/activehelper-livehelp/readme.txt
2026-09-30 20:43 UTC wp-content direct GET /wp-content/plugins/movies/readme.txt
2026-09-30 08:47 UTC wp-content direct GET /wp-content/plugins/sniplets/readme.txt burst
2026-09-30 08:47 UTC catch-all-scan direct GET /reports/rwservlet burst
2026-09-30 08:47 UTC wp-content direct GET /wp-content/plugins/advanced-text-widget/advancedtext.php burst
2026-09-30 08:47 UTC wp-content direct GET /wp-content/plugins/flash-album-gallery/readme.txt burst
2026-09-30 08:47 UTC wp-content direct GET /wp-content/plugins/clickdesk-live-support-chat/readme.txt burst
2026-09-30 08:47 UTC wp-content direct GET /wp-content/plugins/skysa-official/readme.txt burst
2026-09-30 08:47 UTC wp-content direct GET /wp-content/plugins/all-in-one-event-calendar/readme.txt burst
2026-09-30 08:47 UTC catch-all-script direct POST /index.php burst
2026-09-30 08:47 UTC wp-content direct GET /wp-content/plugins/advanced-text-widget/readme.txt burst
2026-09-30 08:47 UTC catch-all-scan direct GET /reports/rwservlet/showenv burst
2026-09-30 08:47 UTC catch-all-suspicious direct POST /_vti_bin/shtml.dll/_vti_rpc burst
2026-09-30 08:47 UTC catch-all-suspicious direct POST /_vti_bin/shtml.exe/_vti_rpc burst
2026-09-30 08:47 UTC catch-all-script direct GET /bitrix/redirect.php burst
2026-09-30 08:47 UTC catch-all-script direct GET /bitrix/tools/track_mail_click.php burst
2026-09-30 08:47 UTC catch-all-script direct GET /bitrix/redirect.php burst
2026-09-30 08:47 UTC catch-all-script direct GET /bitrix/redirect.php burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
38.60.250.156 ip
26
 1 DE 2026-11-04 10:49 UTC 2026-11-04 10:49 UTC
46.188.195.194 ip
100
 13 HR 2026-11-04 10:46 UTC 2026-11-04 10:44 UTC
153.76.64.114 ip
100
 10 ID 2026-11-04 10:46 UTC 2026-11-04 10:44 UTC
103.191.162.200 ip
100
 11 BD 2026-11-04 10:46 UTC 2026-11-04 10:44 UTC
47.152.213.250 ip
100
 12 US 2026-11-04 10:44 UTC 2026-11-04 10:43 UTC
45.162.179.40 ip
100
 13 BR 2026-11-04 10:44 UTC 2026-11-04 10:43 UTC
186.109.171.151 ip
100
 10 AR 2026-11-04 10:43 UTC 2026-11-04 10:42 UTC
103.151.43.91 ip
99
 7 PK 2026-11-04 10:42 UTC 2026-11-04 10:42 UTC
179.36.186.206 ip
100
 9 AR 2026-11-04 10:42 UTC 2026-11-04 10:42 UTC
200.155.182.151 ip
63
 2 BR 2026-11-04 10:23 UTC 2026-11-04 10:23 UTC
114.130.156.140 ip
63
 2 BD 2026-11-04 10:23 UTC 2026-11-04 10:23 UTC
91.229.163.5 ip
93
 5 UZ 2026-11-04 10:22 UTC 2026-11-04 10:22 UTC
103.121.223.43 ip
100
 8 BD 2026-11-04 10:23 UTC 2026-11-04 10:22 UTC
46.63.125.125 ip
99
 9 UA 2026-11-04 10:23 UTC 2026-11-04 10:22 UTC
189.203.231.18 ip
100
 8 MX 2026-11-04 10:22 UTC 2026-11-04 10:21 UTC
181.160.71.43 ip
100
 9 CL 2026-11-04 10:21 UTC 2026-11-04 10:21 UTC
196.189.56.204 ip
93
 4 ET 2026-11-04 10:20 UTC 2026-11-04 10:20 UTC
188.64.10.38 ip
98
 7 AZ 2026-11-04 10:21 UTC 2026-11-04 10:20 UTC
185.177.189.251 ip
86
 4 UA 2026-11-04 10:20 UTC 2026-11-04 10:20 UTC
182.253.124.109 ip
97
 6 ID 2026-11-04 10:21 UTC 2026-11-04 10:20 UTC
103.152.103.84 ip
99
 7 BD 2026-11-04 10:20 UTC 2026-11-04 10:19 UTC
39.63.240.138 ip
99
 7 PK 2026-11-04 10:20 UTC 2026-11-04 10:19 UTC
85.11.167.204 ip
33
 2 NL 2026-11-04 10:12 UTC 2026-11-04 10:12 UTC
168.144.100.200 ip
18
 1 SG 2026-11-04 09:44 UTC 2026-11-04 09:44 UTC
34.152.63.171 ip
100
 71 CA 2026-11-04 09:36 UTC 2026-11-04 09:35 UTC

Showing 1-25 of 86574 indicators