IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 43.173.252.202 ip

Score
100
/100
raw: 1573.03
Reports
163
Last Reported
2026-11-09 23:19 UTC
Categories
Config Exposure Probe (126) Scanning (24) Admin Panel Probe (8) API Probe (5)

Network details

ASN
132203
Organization
Tencent Building, Kejizhongyi Avenue
Country
TH

Threat Intelligence enriched 2026-11-09 22:56 UTC

DNSBL Status
Listed
zen.spamhaus.org

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-09 23:18 UTC catch-all-script direct GET /smtp/phpinfo.php
2026-11-09 23:18 UTC catch-all-admin direct GET /webmail/phpinfo.php
2026-11-09 23:18 UTC catch-all-script direct GET /hosting/phpinfo.php burst
2026-11-09 23:18 UTC catch-all-admin direct GET /cpanel/phpinfo.php burst
2026-11-09 23:18 UTC catch-all-script direct GET /mail/phpinfo.php burst
2026-11-09 23:18 UTC catch-all-script direct GET /webroot/index.php/_environment burst
2026-11-09 23:18 UTC debug-panel direct GET /_profiler/phpinfo
2026-11-09 23:17 UTC catch-all-script direct GET /server-status.php
2026-11-09 23:17 UTC catch-all-script direct GET /server-info.php
2026-11-09 23:17 UTC catch-all-script direct GET /old_phpinfo.php burst
2026-11-09 23:17 UTC catch-all-script direct GET /_phpinfo.php burst
2026-11-09 23:17 UTC catch-all-script direct GET /phpversion.php burst
2026-11-09 23:17 UTC catch-all-script direct GET /php-info.php burst
2026-11-09 23:17 UTC catch-all-script direct GET /public/phpinfo.php
2026-11-09 23:16 UTC catch-all-script direct GET /tmp/phpinfo.php
2026-11-09 23:16 UTC catch-all-script direct GET /old/phpinfo.php
2026-11-09 23:16 UTC catch-all-script direct GET /dev/phpinfo.php
2026-11-09 23:16 UTC catch-all-script direct GET /test/phpinfo.php burst
2026-11-09 23:16 UTC admin direct GET /admin/phpinfo.php burst
2026-11-09 23:16 UTC catch-all-admin direct GET /debug.php burst

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
181.78.86.235 ip
50
 1 CO 2026-11-09 23:43 UTC 2026-11-09 23:43 UTC
45.232.247.176 ip
50
 1 BR 2026-11-09 23:43 UTC 2026-11-09 23:43 UTC
151.158.196.27 ip
50
 1 BD 2026-11-09 23:41 UTC 2026-11-09 23:41 UTC
181.79.158.10 ip
50
 1 CO 2026-11-09 23:38 UTC 2026-11-09 23:38 UTC
35.210.207.250 ip
55
 2 BE 2026-11-09 23:38 UTC 2026-11-09 23:38 UTC
201.102.112.73 ip
50
 1 MX 2026-11-09 23:38 UTC 2026-11-09 23:38 UTC
148.222.203.18 ip
50
 1 AR 2026-11-09 23:37 UTC 2026-11-09 23:37 UTC
90.160.152.234 ip
50
 1 ES 2026-11-09 23:36 UTC 2026-11-09 23:36 UTC
190.71.186.98 ip
50
 1 CO 2026-11-09 23:36 UTC 2026-11-09 23:36 UTC
45.230.60.17 ip
50
 1 AR 2026-11-09 23:36 UTC 2026-11-09 23:36 UTC
94.33.124.229 ip
50
 1 IT 2026-11-09 23:35 UTC 2026-11-09 23:35 UTC
34.22.204.254 ip
100
 120 BE 2026-11-09 23:35 UTC 2026-11-09 23:35 UTC
213.230.92.82 ip
50
 1 UZ 2026-11-09 23:33 UTC 2026-11-09 23:33 UTC
190.250.181.202 ip
50
 1 CO 2026-11-09 23:33 UTC 2026-11-09 23:33 UTC
186.1.175.41 ip
50
 1 CO 2026-11-09 23:32 UTC 2026-11-09 23:32 UTC
23.132.164.151 ip
100
 38 US 2026-11-09 23:35 UTC 2026-11-09 23:32 UTC
46.8.148.253 ip
50
 1 RU 2026-11-09 23:32 UTC 2026-11-09 23:32 UTC
95.188.155.60 ip
50
 1 RU 2026-11-09 23:32 UTC 2026-11-09 23:32 UTC
45.233.26.118 ip
50
 1 BR 2026-11-09 23:31 UTC 2026-11-09 23:31 UTC
178.122.149.181 ip
50
 1 BY 2026-11-09 23:29 UTC 2026-11-09 23:29 UTC
154.124.203.51 ip
50
 1 SN 2026-11-09 23:29 UTC 2026-11-09 23:29 UTC
196.65.231.134 ip
50
 1 MA 2026-11-09 23:29 UTC 2026-11-09 23:28 UTC
91.219.138.89 ip
50
 1 RU 2026-11-09 23:29 UTC 2026-11-09 23:28 UTC
187.190.164.77 ip
50
 1 MX 2026-11-09 23:28 UTC 2026-11-09 23:28 UTC
93.70.85.88 ip
50
 1 IT 2026-11-09 23:27 UTC 2026-11-09 23:27 UTC

Showing 1-25 of 91066 indicators