IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 103.158.170.173 ip
Score
100
/100
raw: 61.91
Reports
8
Last Reported
2026-10-29 23:36 UTC
Categories
Web Stack Probe (8)
Network details
ASN
17665
Organization
ONEOTT INTERTAINMENT LIMITED
Country
IN
Threat Intelligence enriched 2026-10-29 23:35 UTC
DNSBL Status
Clean
Sensor Activity last 8 events
| Time (UTC) | Trap | Signal | Method | Path | Flags | Sensor |
|---|---|---|---|---|---|---|
| 2026-10-29 23:36 UTC | wp-json | direct | GET | /wp-json/wp-user-manager/v1/users | EU West Sensor 4 | |
| 2026-10-29 23:35 UTC | wp-json | direct | GET | /wp-json/wp/v2/users/me | EU West Sensor 4 | |
| 2026-10-29 23:35 UTC | wp-json | direct | GET | /wp-json/ldlms/v2/users | EU West Sensor 4 | |
| 2026-10-29 23:35 UTC | xmlrpc | direct | POST | /xmlrpc.php | burst | EU West Sensor 4 |
| 2026-10-29 23:35 UTC | wp-json | direct | GET | /wp-json/webmention/1.0 | EU West Sensor 4 | |
| 2026-10-29 23:35 UTC | wp-json | direct | GET | /wp-json/wp/v2/users/me | EU West Sensor 4 | |
| 2026-10-29 23:35 UTC | wp-login | direct | GET | /wp-login.php | EU West Sensor 4 | |
| 2026-10-29 23:35 UTC | wp-admin | direct | POST | /wp-admin/admin-ajax.php | EU West Sensor 4 |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 41.203.16.12 | ip |
50
|
1 | ZA | 2026-10-30 00:16 UTC | 2026-10-30 00:16 UTC |
| 177.185.118.136 | ip |
100
|
30 | BR | 2026-10-30 00:13 UTC | 2026-10-30 00:09 UTC |
| 27.130.102.191 | ip |
100
|
30 | TH | 2026-10-30 00:13 UTC | 2026-10-30 00:09 UTC |
| 189.131.63.227 | ip |
100
|
31 | MX | 2026-10-30 00:13 UTC | 2026-10-30 00:09 UTC |
| 200.53.202.121 | ip |
99
|
8 | BR | 2026-10-30 00:09 UTC | 2026-10-30 00:08 UTC |
| 5.37.222.112 | ip |
99
|
8 | OM | 2026-10-30 00:09 UTC | 2026-10-30 00:08 UTC |
| 46.149.61.251 | ip |
100
|
12 | UA | 2026-10-30 00:08 UTC | 2026-10-30 00:07 UTC |
| 200.40.67.2 | ip |
100
|
11 | UY | 2026-10-30 00:08 UTC | 2026-10-30 00:07 UTC |
| 102.68.122.220 | ip |
99
|
6 | ZA | 2026-10-30 00:08 UTC | 2026-10-30 00:07 UTC |
| 82.199.220.63 | ip |
100
|
17 | IQ | 2026-10-30 00:07 UTC | 2026-10-30 00:05 UTC |
| 201.219.164.2 | ip |
92
|
5 | AR | 2026-10-30 00:05 UTC | 2026-10-30 00:05 UTC |
| 176.180.53.110 | ip |
100
|
18 | FR | 2026-10-30 00:07 UTC | 2026-10-30 00:04 UTC |
| 190.5.58.134 | ip |
100
|
27 | CL | 2026-10-30 00:08 UTC | 2026-10-30 00:03 UTC |
| 200.225.116.224 | ip |
100
|
27 | AR | 2026-10-30 00:08 UTC | 2026-10-30 00:03 UTC |
| 179.221.245.135 | ip |
100
|
28 | BR | 2026-10-30 00:08 UTC | 2026-10-30 00:03 UTC |
| 187.137.21.18 | ip |
93
|
5 | MX | 2026-10-30 00:03 UTC | 2026-10-30 00:03 UTC |
| 219.93.174.201 | ip |
89
|
4 | MY | 2026-10-30 00:03 UTC | 2026-10-30 00:03 UTC |
| 180.73.7.9 | ip |
100
|
30 | MY | 2026-10-30 00:06 UTC | 2026-10-30 00:02 UTC |
| 95.43.202.102 | ip |
100
|
31 | BG | 2026-10-30 00:07 UTC | 2026-10-30 00:02 UTC |
| 187.190.26.124 | ip |
100
|
30 | MX | 2026-10-30 00:06 UTC | 2026-10-30 00:02 UTC |
| 131.196.110.132 | ip |
100
|
22 | BR | 2026-10-30 00:05 UTC | 2026-10-30 00:02 UTC |
| 187.208.100.168 | ip |
100
|
22 | MX | 2026-10-30 00:05 UTC | 2026-10-30 00:02 UTC |
| 13.140.233.153 | ip |
100
|
45 | US | 2026-10-30 00:08 UTC | 2026-10-30 00:02 UTC |
| 143.105.137.18 | ip |
100
|
11 | IQ | 2026-10-30 00:02 UTC | 2026-10-30 00:00 UTC |
| 177.221.231.105 | ip |
100
|
11 | BR | 2026-10-30 00:02 UTC | 2026-10-30 00:00 UTC |
Showing 1-25 of 76989 indicators