IP and domain reputation lookup

BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.

Reputation 177.32.39.216 ip

Score
100
/100
raw: 111.76
Reports
16
Last Reported
2026-11-12 19:10 UTC
Categories
Web Stack Probe (16)

Network details

ASN
28573
Organization
Claro NXT Telecomunicacoes Ltda
Country
BR

Threat Intelligence enriched 2026-11-12 19:08 UTC

Reverse DNS
b12027d8.virtua.com.br
DNSBL Status
Clean

Sensor Activity last 16 events

Time (UTC) Trap Signal Method Path Flags
2026-11-12 19:09 UTC wp-json direct GET /wp-json/users/v1/users
2026-11-12 19:09 UTC wp-json direct GET /wp-json/wp/v2/users/me
2026-11-12 19:09 UTC wp-json direct GET /wp-json/ultimate-member/v1/users
2026-11-12 19:08 UTC wp-json direct GET /wp-json/wemail/v1/subscribers
2026-11-12 19:08 UTC wp-json direct GET /wp-json/wemail/v1/subscribers
2026-11-12 19:08 UTC wp-json direct GET /wp-json/wemail/v1/subscribers
2026-11-12 19:08 UTC wp-json direct GET /wp-json/wemail/v1/subscribers
2026-11-12 19:08 UTC wp-json direct GET /wp-json/wc/v1/customers
2026-11-12 19:08 UTC wp-json direct GET /wp-json/wc/v2/customers
2026-11-12 19:08 UTC wp-json direct GET /wp-json/wc/v3/customers burst
2026-11-12 19:07 UTC wp-admin direct POST /wp-admin/admin-ajax.php burst
2026-11-12 19:07 UTC wp-admin direct POST /wp-admin/admin-ajax.php burst
2026-11-12 19:07 UTC wp-json direct GET /wp-json/kirki/v1/forgot-password burst
2026-11-12 19:07 UTC wp-json direct GET /wp-json/crm-memberships/v1/reset
2026-11-12 19:07 UTC wp-json direct GET /wp-json/peprodev/v1/reset-password
2026-11-12 19:07 UTC wp-json direct GET /wp-json/login-register-forms/v1/lost-password

Recent Indicators

Indicator Type Score Reports Country Last Reported First Seen
2.56.189.185 ip
100
 10 US 2026-11-12 20:10 UTC 2026-11-12 20:09 UTC
181.21.130.201 ip
100
 11 AR 2026-11-12 20:10 UTC 2026-11-12 20:09 UTC
98.97.134.39 ip
39
 1 AR 2026-11-12 20:09 UTC 2026-11-12 20:09 UTC
38.65.138.34 ip
100
 8 MX 2026-11-12 20:09 UTC 2026-11-12 20:08 UTC
42.191.128.167 ip
100
 8 MY 2026-11-12 20:09 UTC 2026-11-12 20:08 UTC
185.181.109.118 ip
100
 8 IQ 2026-11-12 20:09 UTC 2026-11-12 20:08 UTC
172.68.195.240 ip
70
 2 DE 2026-11-12 20:07 UTC 2026-11-12 20:07 UTC
94.249.164.182 ip
98
 4 DE 2026-11-12 20:05 UTC 2026-11-12 20:05 UTC
31.134.15.115 ip
39
 1 SC 2026-11-12 20:01 UTC 2026-11-12 20:01 UTC
185.68.155.225 ip
78
 3 RU 2026-11-12 20:01 UTC 2026-11-12 20:01 UTC
68.183.165.14 ip
50
 1 US 2026-11-12 20:01 UTC 2026-11-12 20:01 UTC
147.182.136.176 ip
50
 1 US 2026-11-12 19:59 UTC 2026-11-12 19:59 UTC
102.213.134.86 ip
100
 10 ZA 2026-11-12 19:48 UTC 2026-11-12 19:47 UTC
220.255.242.184 ip
100
 26 SG 2026-11-12 19:48 UTC 2026-11-12 19:44 UTC
90.251.222.214 ip
99
 8 GB 2026-11-12 19:26 UTC 2026-11-12 19:25 UTC
179.191.54.85 ip
39
 1 BR 2026-11-12 19:24 UTC 2026-11-12 19:24 UTC
189.160.37.58 ip
39
 1 MX 2026-11-12 19:24 UTC 2026-11-12 19:24 UTC
136.69.210.210 ip
100
 82 US 2026-11-12 19:24 UTC 2026-11-12 19:23 UTC
41.56.178.201 ip
100
 28 ZA 2026-11-12 19:27 UTC 2026-11-12 19:23 UTC
45.149.24.104 ip
100
 23 UA 2026-11-12 19:24 UTC 2026-11-12 19:20 UTC
38.156.89.25 ip
100
 24 DO 2026-11-12 19:26 UTC 2026-11-12 19:20 UTC
45.148.126.124 ip
50
 1 RU 2026-11-12 19:19 UTC 2026-11-12 19:19 UTC
185.61.218.77 ip
50
 1 RU 2026-11-12 19:19 UTC 2026-11-12 19:19 UTC
140.235.2.43 ip
50
 1 US 2026-11-12 19:19 UTC 2026-11-12 19:19 UTC
178.73.114.113 ip
100
 26 SA 2026-11-12 19:17 UTC 2026-11-12 19:14 UTC

Showing 1-25 of 97237 indicators