IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 149.90.220.189 ip

Score
100
/100
raw: 109.68
Reports
14
Last Reported
2026-10-31 22:18 UTC
Categories
Web Stack Probe (12) API Probe (2)

Network details

ASN
12353
Organization
Vodafone Portugal - Communicacoes Pessoais S.A.
Country
PT

Threat Intelligence enriched 2026-10-31 22:15 UTC

Reverse DNS
189.220.90.149.rev.vodafone.pt
DNSBL Status
Listed
zen.spamhaus.org

Sensor Activity last 14 events

Time (UTC) Trap Signal Method Path Flags Sensor
2026-10-31 22:18 UTC wp-json direct GET /wp-json/ldlms/v2/users EU West Sensor 3
2026-10-31 22:17 UTC wp-json direct GET /wp-json/dokan/v1/wholesale/customers EU West Sensor 3
2026-10-31 22:16 UTC wp-json direct GET /wp-json/dokan/v1/wholesale/customers EU West Sensor 3
2026-10-31 22:16 UTC wp-json direct GET /wp-json/wemail/v1/subscribers EU West Sensor 3
2026-10-31 22:16 UTC wp-json direct GET /wp-json/wemail/v1/subscribers EU West Sensor 3
2026-10-31 22:16 UTC api direct POST /api/graphql EU West Sensor 3
2026-10-31 22:16 UTC graphql direct POST /graphql EU West Sensor 3
2026-10-31 22:15 UTC wp-user-enum direct GET / burst EU West Sensor 3
2026-10-31 22:15 UTC wp-user-enum direct GET / burst EU West Sensor 3
2026-10-31 22:15 UTC wp-user-enum direct GET / burst EU West Sensor 3
2026-10-31 22:15 UTC catch-all-cms direct GET /wp/wp-json/wp/v2/users burst EU West Sensor 3
2026-10-31 22:15 UTC wp-json direct GET /index.php EU West Sensor 3
2026-10-31 22:15 UTC wp-json direct GET /index.php/wp-json/wp/v2/users EU West Sensor 3
2026-10-31 22:15 UTC wp-json direct GET /wp-json/oembed/1.0/embed EU West Sensor 3

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
20.205.120.210 ip
100
 41 US 2026-10-31 23:40 UTC 2026-10-31 23:35 UTC
156.225.1.116 ip
33
 2 HK 2026-10-31 23:30 UTC 2026-10-31 23:30 UTC
209.50.168.194 ip
59
 1 IT 2026-10-31 23:24 UTC 2026-10-31 23:24 UTC
65.111.3.74 ip
59
 1 IT 2026-10-31 23:24 UTC 2026-10-31 23:24 UTC
209.50.168.226 ip
59
 1 IT 2026-10-31 23:24 UTC 2026-10-31 23:24 UTC
104.207.44.41 ip
50
 1 IT 2026-10-31 23:24 UTC 2026-10-31 23:24 UTC
65.111.8.104 ip
50
 1 IT 2026-10-31 23:24 UTC 2026-10-31 23:24 UTC
209.50.161.44 ip
50
 1 IT 2026-10-31 23:24 UTC 2026-10-31 23:24 UTC
104.207.45.154 ip
59
 1 IT 2026-10-31 23:24 UTC 2026-10-31 23:24 UTC
172.64.192.139 ip
70
 2 SG 2026-10-31 23:22 UTC 2026-10-31 23:22 UTC
207.154.200.222 ip
18
 1 CA 2026-10-31 23:21 UTC 2026-10-31 23:21 UTC
138.0.244.95 ip
100
 15 BR 2026-10-31 23:19 UTC 2026-10-31 23:17 UTC
5.38.44.46 ip
100
 15 AE 2026-10-31 23:19 UTC 2026-10-31 23:17 UTC
181.228.242.54 ip
100
 14 AR 2026-10-31 23:19 UTC 2026-10-31 23:17 UTC
70.51.106.212 ip
100
 14 CA 2026-10-31 23:19 UTC 2026-10-31 23:17 UTC
121.122.240.225 ip
100
 14 MY 2026-10-31 23:19 UTC 2026-10-31 23:17 UTC
170.247.91.2 ip
100
 13 AR 2026-10-31 23:20 UTC 2026-10-31 23:17 UTC
34.80.68.0 ip
100
 69 SG 2026-10-31 23:13 UTC 2026-10-31 23:13 UTC
35.232.76.162 ip
100
 412 SG 2026-10-31 23:35 UTC 2026-10-31 23:05 UTC
45.172.19.195 ip
97
 5 AR 2026-10-31 23:04 UTC 2026-10-31 23:03 UTC
31.171.53.118 ip
86
 4 AZ 2026-10-31 23:04 UTC 2026-10-31 23:03 UTC
151.237.6.204 ip
96
 5 BG 2026-10-31 23:03 UTC 2026-10-31 23:03 UTC
131.72.253.198 ip
94
 4 BR 2026-10-31 23:03 UTC 2026-10-31 23:03 UTC
197.14.98.202 ip
85
 3 TN 2026-10-31 23:03 UTC 2026-10-31 23:03 UTC
31.15.23.16 ip
78
 3 RU 2026-10-31 23:03 UTC 2026-10-31 23:03 UTC

Showing 1-25 of 80267 indicators