IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 200.115.125.103 ip
Score
100
/100
raw: 226.61
Reports
28
Last Reported
2026-11-13 00:33 UTC
Categories
Web Stack Probe (25)
Scanning (3)
Network details
ASN
270272
Organization
ZIRR & HEIMERDINGER LTDA
Country
BR
Threat Intelligence enriched 2026-11-13 00:29 UTC
DNSBL Status
Clean
Sensor Activity last 20 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-13 00:33 UTC | wp-json | direct | GET | /wp-json/wp-user-manager/v1/users | |
| 2026-11-13 00:33 UTC | wp-json | direct | GET | /wp-json/wp/v2/users/me | |
| 2026-11-13 00:32 UTC | wp-json | direct | GET | /wp-json/ldlms/v2/users | |
| 2026-11-13 00:32 UTC | wp-json | direct | GET | /wp-json/ultimate-member/v1/users | |
| 2026-11-13 00:32 UTC | wp-json | direct | GET | /wp-json/buddypress/v1/members | |
| 2026-11-13 00:32 UTC | wp-json | direct | GET | /wp-json/dokan/v1/wholesale/customers | |
| 2026-11-13 00:32 UTC | wp-json | direct | GET | /wp-json/dokan/v1/wholesale/customers | |
| 2026-11-13 00:32 UTC | wp-json | direct | GET | /wp-json/dokan/v1/wholesale/customers | |
| 2026-11-13 00:32 UTC | wp-json | direct | GET | /wp-json/dokan/v1/wholesale/customers | |
| 2026-11-13 00:31 UTC | wp-json | direct | GET | /wp-json/dokan/v1/wholesale/customers | |
| 2026-11-13 00:31 UTC | wp-json | direct | GET | /wp-json/dokan/v1/wholesale/customers | |
| 2026-11-13 00:31 UTC | wp-json | direct | GET | /wp-json/crm-memberships/v1/users | |
| 2026-11-13 00:31 UTC | wp-json | direct | GET | /wp-json/peprodev/v1/users | |
| 2026-11-13 00:31 UTC | wp-json | direct | GET | /wp-json/profilepress/v1/users | |
| 2026-11-13 00:31 UTC | wp-json | direct | GET | /wp-json/decent-comments/v1/authors | |
| 2026-11-13 00:31 UTC | wp-json | direct | GET | /wp-json/authorsy/v1/authors | |
| 2026-11-13 00:30 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-11-13 00:30 UTC | wp-json | direct | GET | /wp-json/buddyboss/v1/members | burst |
| 2026-11-13 00:30 UTC | wp-json | direct | GET | /wp-json/buddypress/v1/members | burst |
| 2026-11-13 00:30 UTC | catch-all-scan | direct | GET | /readme.html | burst |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 96.21.231.174 | ip |
100
|
11 | CA | 2026-11-13 01:21 UTC | 2026-11-13 01:20 UTC |
| 191.95.131.22 | ip |
100
|
8 | CO | 2026-11-13 01:21 UTC | 2026-11-13 01:20 UTC |
| 177.226.172.40 | ip |
100
|
31 | MX | 2026-11-13 01:21 UTC | 2026-11-13 01:17 UTC |
| 182.10.129.199 | ip |
100
|
29 | ID | 2026-11-13 01:21 UTC | 2026-11-13 01:17 UTC |
| 177.130.118.57 | ip |
100
|
28 | BR | 2026-11-13 01:21 UTC | 2026-11-13 01:17 UTC |
| 177.20.248.222 | ip |
39
|
1 | BR | 2026-11-13 01:17 UTC | 2026-11-13 01:17 UTC |
| 185.213.154.244 | ip |
50
|
1 | SE | 2026-11-13 01:14 UTC | 2026-11-13 01:14 UTC |
| 193.56.28.234 | ip |
50
|
1 | US | 2026-11-13 01:07 UTC | 2026-11-13 01:07 UTC |
| 104.207.37.181 | ip |
50
|
1 | US | 2026-11-13 01:07 UTC | 2026-11-13 01:07 UTC |
| 104.207.36.245 | ip |
50
|
1 | US | 2026-11-13 01:07 UTC | 2026-11-13 01:07 UTC |
| 209.50.170.110 | ip |
50
|
1 | US | 2026-11-13 01:07 UTC | 2026-11-13 01:07 UTC |
| 209.50.172.19 | ip |
50
|
1 | US | 2026-11-13 01:07 UTC | 2026-11-13 01:07 UTC |
| 65.111.14.18 | ip |
50
|
1 | US | 2026-11-13 01:07 UTC | 2026-11-13 01:07 UTC |
| 167.148.195.148 | ip |
39
|
1 | DE | 2026-11-13 01:02 UTC | 2026-11-13 01:02 UTC |
| 34.173.131.41 | ip |
85
|
5 | US | 2026-11-13 00:59 UTC | 2026-11-13 00:59 UTC |
| 187.190.190.205 | ip |
100
|
28 | MX | 2026-11-13 00:39 UTC | 2026-11-13 00:35 UTC |
| 186.79.173.221 | ip |
100
|
30 | CL | 2026-11-13 00:39 UTC | 2026-11-13 00:35 UTC |
| 170.150.156.13 | ip |
100
|
14 | CL | 2026-11-13 00:33 UTC | 2026-11-13 00:31 UTC |
| 27.130.177.87 | ip |
100
|
27 | TH | 2026-11-13 00:33 UTC | 2026-11-13 00:29 UTC |
| 200.115.125.103 | ip |
100
|
28 | BR | 2026-11-13 00:33 UTC | 2026-11-13 00:29 UTC |
| 185.244.21.137 | ip |
100
|
10 | RU | 2026-11-13 00:30 UTC | 2026-11-13 00:29 UTC |
| 46.227.184.199 | ip |
18
|
1 | KZ | 2026-11-13 00:25 UTC | 2026-11-13 00:25 UTC |
| 167.172.88.109 | ip |
100
|
72 | SG | 2026-11-13 00:37 UTC | 2026-11-13 00:10 UTC |
| 172.70.246.235 | ip |
70
|
2 | DE | 2026-11-13 00:08 UTC | 2026-11-13 00:08 UTC |
| 89.19.112.103 | ip |
100
|
32 | UA | 2026-11-13 00:11 UTC | 2026-11-13 00:06 UTC |
Showing 1-25 of 97328 indicators