IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 45.144.52.239 ip
Score
100
/100
raw: 623.31
Reports
92
Last Reported
2026-11-04 19:32 UTC
Categories
Scanning (91)
Credential Stuffing (1)
Network details
ASN
215730
Organization
H2nexus Ltd
Country
FI
Threat Intelligence enriched 2026-11-04 19:32 UTC
Reverse DNS
116190.h2.nexus
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 20 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-04 19:32 UTC | catch-all-script | direct | POST | /zend/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php | scanner burst |
| 2026-11-04 19:32 UTC | catch-all-script | direct | POST | /lib/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php | scanner burst |
| 2026-11-04 19:31 UTC | catch-all-script | direct | POST | /laravel52/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php | scanner burst |
| 2026-11-04 19:31 UTC | catch-all-script | direct | POST | /laravel/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php | scanner burst |
| 2026-11-04 19:31 UTC | catch-all-suspicious | direct | POST | /cgi-bin/luci/rpc/auth | scanner burst |
| 2026-11-04 19:31 UTC | catch-all-script | direct | GET | /backupmgt/pre_connect_check.php | scanner burst |
| 2026-11-04 19:31 UTC | catch-all-script | direct | POST | /yii/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php | scanner burst |
| 2026-11-04 19:31 UTC | catch-all-script | direct | GET | /objects/getSpiritsFromVideo.php | scanner burst |
| 2026-11-04 19:31 UTC | catch-all-suspicious | direct | POST | /cgi-bin/luci/rpc/auth | scanner burst |
| 2026-11-04 19:31 UTC | catch-all-script | direct | POST | /cgi-bin/prog.cgi | scanner burst |
| 2026-11-04 19:31 UTC | catch-all-suspicious | direct | POST | /ztp/cgi-bin/handler | scanner burst |
| 2026-11-04 19:31 UTC | catch-all-script | direct | GET | /adv,/cgi-bin/weblogin.cgi | scanner burst |
| 2026-11-04 19:31 UTC | catch-all-script | direct | GET | /backupmgt/localJob.php | scanner burst |
| 2026-11-04 19:31 UTC | catch-all-script | direct | POST | /cgi-bin/system_mgr.cgi | scanner burst |
| 2026-11-04 19:31 UTC | api | direct | GET | /api/auth/validate-sso/../../../proxy/users/api/v2/ucs/update/latest_package | scanner burst |
| 2026-11-04 19:31 UTC | catch-all-scan | direct | POST | /Collector/diagnostics/trace_route | scanner burst |
| 2026-11-04 19:31 UTC | phpunit | direct | POST | /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php | scanner burst |
| 2026-11-04 19:31 UTC | catch-all-script | direct | GET | /cgi-bin/touchlist_sync.cgi | scanner burst |
| 2026-11-04 19:31 UTC | catch-all-script | direct | POST | /res.php | scanner burst |
| 2026-11-04 19:31 UTC | catch-all-scan | direct | GET | /Collector/nms/addModifyZTDProxy | scanner burst |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 38.211.32.158 | ip |
39
|
1 | AR | 2026-11-04 20:43 UTC | 2026-11-04 20:43 UTC |
| 185.65.255.101 | ip |
39
|
1 | IQ | 2026-11-04 20:42 UTC | 2026-11-04 20:42 UTC |
| 45.136.26.202 | ip |
50
|
1 | US | 2026-11-04 20:41 UTC | 2026-11-04 20:41 UTC |
| 172.239.39.134 | ip |
99
|
6 | US | 2026-11-04 20:24 UTC | 2026-11-04 20:23 UTC |
| 200.50.159.55 | ip |
39
|
1 | PY | 2026-11-04 20:21 UTC | 2026-11-04 20:21 UTC |
| 176.146.78.23 | ip |
39
|
1 | FR | 2026-11-04 20:13 UTC | 2026-11-04 20:13 UTC |
| 2.90.98.131 | ip |
39
|
1 | SA | 2026-11-04 20:08 UTC | 2026-11-04 20:08 UTC |
| 158.173.77.33 | ip |
100
|
122 | IT | 2026-11-04 19:56 UTC | 2026-11-04 19:55 UTC |
| 190.109.123.110 | ip |
39
|
1 | EC | 2026-11-04 19:48 UTC | 2026-11-04 19:48 UTC |
| 170.150.23.83 | ip |
39
|
1 | BR | 2026-11-04 19:44 UTC | 2026-11-04 19:44 UTC |
| 179.191.44.38 | ip |
39
|
1 | BR | 2026-11-04 19:35 UTC | 2026-11-04 19:35 UTC |
| 45.144.52.239 | ip |
100
|
92 | FI | 2026-11-04 19:32 UTC | 2026-11-04 19:32 UTC |
| 20.65.170.194 | ip |
18
|
1 | US | 2026-11-04 19:30 UTC | 2026-11-04 19:30 UTC |
| 172.81.135.182 | ip |
55
|
1 | US | 2026-11-04 19:26 UTC | 2026-11-04 19:26 UTC |
| 52.248.43.16 | ip |
18
|
1 | US | 2026-11-04 19:26 UTC | 2026-11-04 19:26 UTC |
| 14.192.214.206 | ip |
39
|
1 | MY | 2026-11-04 19:17 UTC | 2026-11-04 19:17 UTC |
| 103.138.123.21 | ip |
39
|
1 | BD | 2026-11-04 19:15 UTC | 2026-11-04 19:15 UTC |
| 107.178.215.235 | ip |
100
|
24 | US | 2026-11-04 19:15 UTC | 2026-11-04 19:14 UTC |
| 34.150.111.203 | ip |
100
|
160 | HK | 2026-11-04 19:06 UTC | 2026-11-04 19:04 UTC |
| 91.225.4.22 | ip |
39
|
1 | UA | 2026-11-04 19:01 UTC | 2026-11-04 19:01 UTC |
| 164.92.181.190 | ip |
80
|
6 | DE | 2026-11-04 18:58 UTC | 2026-11-04 18:58 UTC |
| 198.54.114.5 | ip |
45
|
1 | US | 2026-11-04 18:55 UTC | 2026-11-04 18:55 UTC |
| 212.47.136.128 | ip |
39
|
1 | AZ | 2026-11-04 18:45 UTC | 2026-11-04 18:45 UTC |
| 150.228.104.112 | ip |
39
|
1 | IQ | 2026-11-04 18:44 UTC | 2026-11-04 18:44 UTC |
| 32.200.235.18 | ip |
45
|
1 | US | 2026-11-04 18:44 UTC | 2026-11-04 18:44 UTC |
Showing 1-25 of 86770 indicators