IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 94.154.43.243 ip
Score
1
/100
raw: 0.1
Reports
18
Last Reported
2026-07-23 14:43 UTC
Categories
Scanning (18)
Network details
ASN
219502
Organization
STORMCLOUD-AS - Storm Industries LLC, US
Country
NL
RIPENCC
Threat Intelligence enriched 2026-11-12 22:04 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 10 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-07-23 14:40 UTC | catch-all-suspicious | direct | GET | /cgi-bin/luci/;stok=/locale | scanner |
| 2026-07-23 13:36 UTC | catch-all-suspicious | direct | GET | /cgi-bin/luci/;stok=/locale | scanner |
| 2026-07-23 12:42 UTC | catch-all-suspicious | direct | GET | /cgi-bin/luci/;stok=/locale | scanner |
| 2026-07-17 20:39 UTC | catch-all-suspicious | direct | GET | /cgi-bin/luci/;stok=/locale | scanner |
| 2026-07-15 21:10 UTC | catch-all-suspicious | direct | GET | /cgi-bin/luci/;stok=/locale | scanner |
| 2026-07-13 09:26 UTC | catch-all-suspicious | direct | GET | /cgi-bin/luci/;stok=/locale | scanner |
| 2026-07-13 09:13 UTC | catch-all-suspicious | direct | GET | /cgi-bin/luci/;stok=/locale | scanner |
| 2026-07-13 07:55 UTC | catch-all-suspicious | direct | GET | /cgi-bin/luci/;stok=/locale | scanner |
| 2026-07-13 06:57 UTC | catch-all-suspicious | direct | GET | /cgi-bin/luci/;stok=/locale | scanner |
| 2026-07-13 06:11 UTC | catch-all-suspicious | direct | GET | /cgi-bin/luci/;stok=/locale | scanner |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 170.64.149.139 | ip |
88
|
3 | AU | 2026-11-13 20:55 UTC | 2026-11-13 20:55 UTC |
| 81.56.174.237 | ip |
50
|
1 | IT | 2026-11-13 20:55 UTC | 2026-11-13 20:55 UTC |
| 143.105.135.143 | ip |
39
|
1 | AR | 2026-11-13 20:55 UTC | 2026-11-13 20:55 UTC |
| 103.191.159.113 | ip |
50
|
1 | BD | 2026-11-13 20:55 UTC | 2026-11-13 20:55 UTC |
| 217.196.163.61 | ip |
50
|
1 | UA | 2026-11-13 20:54 UTC | 2026-11-13 20:54 UTC |
| 178.159.211.204 | ip |
50
|
1 | UA | 2026-11-13 20:54 UTC | 2026-11-13 20:54 UTC |
| 148.222.112.194 | ip |
50
|
1 | PE | 2026-11-13 20:54 UTC | 2026-11-13 20:54 UTC |
| 187.189.141.234 | ip |
39
|
1 | MX | 2026-11-13 20:53 UTC | 2026-11-13 20:53 UTC |
| 105.69.124.147 | ip |
39
|
1 | MA | 2026-11-13 20:53 UTC | 2026-11-13 20:53 UTC |
| 103.224.55.209 | ip |
50
|
1 | BD | 2026-11-13 20:52 UTC | 2026-11-13 20:52 UTC |
| 138.186.41.226 | ip |
50
|
1 | BR | 2026-11-13 20:52 UTC | 2026-11-13 20:52 UTC |
| 181.128.156.234 | ip |
39
|
1 | CO | 2026-11-13 20:51 UTC | 2026-11-13 20:51 UTC |
| 102.105.43.74 | ip |
50
|
1 | TN | 2026-11-13 20:51 UTC | 2026-11-13 20:51 UTC |
| 174.140.8.210 | ip |
50
|
1 | SA | 2026-11-13 20:50 UTC | 2026-11-13 20:50 UTC |
| 185.146.112.132 | ip |
39
|
1 | AZ | 2026-11-13 20:50 UTC | 2026-11-13 20:50 UTC |
| 41.71.43.110 | ip |
39
|
1 | ZA | 2026-11-13 20:49 UTC | 2026-11-13 20:49 UTC |
| 87.9.59.229 | ip |
50
|
1 | IT | 2026-11-13 20:49 UTC | 2026-11-13 20:49 UTC |
| 116.206.58.236 | ip |
50
|
1 | BD | 2026-11-13 20:47 UTC | 2026-11-13 20:47 UTC |
| 153.67.129.136 | ip |
50
|
1 | BW | 2026-11-13 20:47 UTC | 2026-11-13 20:47 UTC |
| 31.181.13.148 | ip |
39
|
1 | RU | 2026-11-13 20:47 UTC | 2026-11-13 20:47 UTC |
| 194.11.19.151 | ip |
39
|
1 | ES | 2026-11-13 20:47 UTC | 2026-11-13 20:47 UTC |
| 90.189.175.170 | ip |
50
|
1 | RU | 2026-11-13 20:47 UTC | 2026-11-13 20:47 UTC |
| 190.249.158.150 | ip |
39
|
1 | CO | 2026-11-13 20:46 UTC | 2026-11-13 20:46 UTC |
| 103.31.11.12 | ip |
39
|
1 | BD | 2026-11-13 20:46 UTC | 2026-11-13 20:46 UTC |
| 167.250.36.11 | ip |
39
|
1 | PY | 2026-11-13 20:45 UTC | 2026-11-13 20:45 UTC |
Showing 1-25 of 99646 indicators