IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 112.202.121.191 ip

Score
100
/100
raw: 208.7
Reports
27
Last Reported
2026-11-12 15:03 UTC
Categories
Web Stack Probe (25) Scanning (2)

Network details

ASN
9299
Organization
Philippine Long Distance Telephone Company
Country
PH

Threat Intelligence enriched 2026-11-12 15:00 UTC

Reverse DNS
112.202.121.191.pldt.net
DNSBL Status
Listed
zen.spamhaus.org

Sensor Activity last 20 events

Time (UTC) Trap Signal Method Path Flags
2026-11-12 15:02 UTC wp-json direct GET /wp-json/wp-user-manager/v1/users
2026-11-12 15:02 UTC wp-json direct GET /wp-json/wp/v2/users/me
2026-11-12 15:02 UTC wp-json direct GET /wp-json/ultimate-member/v1/users
2026-11-12 15:02 UTC xmlrpc direct POST /xmlrpc.php
2026-11-12 15:02 UTC wp-json direct GET /wp-json/webmention/1.0
2026-11-12 15:01 UTC wp-json direct GET /wp-json/wp/v2/users/me
2026-11-12 15:01 UTC wp-json direct GET /wp-json/wpml/tm/v1/languages
2026-11-12 15:01 UTC wp-json direct GET /wp-json/wp/v2/users
2026-11-12 15:01 UTC wp-json direct GET /wp-json/ldlms/v1/users
2026-11-12 15:01 UTC wp-json direct GET /wp-json/ldlms/v2/users
2026-11-12 15:01 UTC wp-admin direct POST /wp-admin/admin-ajax.php
2026-11-12 15:01 UTC wp-admin direct POST /wp-admin/admin-ajax.php
2026-11-12 15:00 UTC wp-json direct GET /wp-json/kirki/v1/forgot-password
2026-11-12 15:00 UTC wp-json direct GET /wp-json/crm-memberships/v1/reset
2026-11-12 15:00 UTC wp-json direct GET /wp-json/peprodev/v1/reset-password
2026-11-12 15:00 UTC wp-json direct GET /wp-json/login-register-forms/v1/lost-password
2026-11-12 15:00 UTC wp-user-enum direct GET /
2026-11-12 15:00 UTC wp-user-enum direct GET /
2026-11-12 15:00 UTC wp-user-enum direct GET /
2026-11-12 14:59 UTC wp-json direct GET /

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
45.3.48.38 ip
59
 1 US 2026-11-12 15:37 UTC 2026-11-12 15:37 UTC
65.111.6.56 ip
59
 1 US 2026-11-12 15:37 UTC 2026-11-12 15:37 UTC
209.50.166.107 ip
59
 1 US 2026-11-12 15:37 UTC 2026-11-12 15:37 UTC
103.65.185.20 ip
100
 14 PH 2026-11-12 15:39 UTC 2026-11-12 15:37 UTC
216.26.234.242 ip
50
 1 US 2026-11-12 15:36 UTC 2026-11-12 15:36 UTC
104.207.32.152 ip
59
 1 US 2026-11-12 15:36 UTC 2026-11-12 15:36 UTC
104.167.19.11 ip
50
 1 US 2026-11-12 15:36 UTC 2026-11-12 15:36 UTC
104.207.43.98 ip
50
 1 US 2026-11-12 15:36 UTC 2026-11-12 15:36 UTC
91.225.179.8 ip
100
 29 PL 2026-11-12 15:39 UTC 2026-11-12 15:36 UTC
188.161.11.238 ip
100
 28 PS 2026-11-12 15:39 UTC 2026-11-12 15:36 UTC
186.81.124.138 ip
100
 10 CO 2026-11-12 15:37 UTC 2026-11-12 15:36 UTC
103.147.209.156 ip
39
 1 IN 2026-11-12 15:36 UTC 2026-11-12 15:36 UTC
34.143.228.148 ip
39
 1 SG 2026-11-12 15:35 UTC 2026-11-12 15:35 UTC
161.35.110.139 ip
94
 4 US 2026-11-12 15:31 UTC 2026-11-12 15:31 UTC
49.43.89.109 ip
39
 1 IN 2026-11-12 15:29 UTC 2026-11-12 15:29 UTC
213.230.78.164 ip
100
 31 UZ 2026-11-12 15:32 UTC 2026-11-12 15:27 UTC
223.188.140.43 ip
97
 6 IN 2026-11-12 15:28 UTC 2026-11-12 15:27 UTC
94.73.40.203 ip
100
 23 ES 2026-11-12 15:22 UTC 2026-11-12 15:19 UTC
128.79.62.32 ip
100
 25 FR 2026-11-12 15:22 UTC 2026-11-12 15:18 UTC
181.26.102.55 ip
100
 27 AR 2026-11-12 15:21 UTC 2026-11-12 15:18 UTC
42.110.140.145 ip
97
 5 IN 2026-11-12 15:18 UTC 2026-11-12 15:18 UTC
81.19.216.69 ip
39
 1 NL 2026-11-12 15:16 UTC 2026-11-12 15:16 UTC
189.203.99.61 ip
100
 14 MX 2026-11-12 15:07 UTC 2026-11-12 15:05 UTC
157.49.143.111 ip
99
 8 IN 2026-11-12 15:04 UTC 2026-11-12 15:03 UTC
38.51.28.154 ip
100
 29 AR 2026-11-12 15:07 UTC 2026-11-12 15:03 UTC

Showing 1-25 of 97120 indicators