IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 204.197.172.142 ip
Score
1
/100
raw: 0.12
Reports
16
Last Reported
2026-06-28 16:35 UTC
Categories
Web Stack Probe (9)
Credential Stuffing (4)
API Probe (2)
Scanning (1)
Network details
ASN
53850
Organization
GorillaServers, Inc.
Country
US
Threat Intelligence enriched 2026-11-05 00:16 UTC
DNSBL Status
Clean
Sensor Activity last 14 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-06-28 15:24 UTC | catch-all-script | direct | GET | /index.php | |
| 2026-06-28 15:19 UTC | wp-json | direct | GET | /wp-json/ultimate-member/v1/users | |
| 2026-06-28 14:04 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-06-28 13:57 UTC | api | direct | POST | /api/graphql | |
| 2026-06-28 10:25 UTC | catch-all-cms | direct | GET | /wp-sitemap-users-1.xml | |
| 2026-06-28 08:20 UTC | wp-login | direct | POST | /wp-login.php | creds |
| 2026-06-28 08:20 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-06-28 02:07 UTC | wp-login | direct | POST | /wp-login.php | creds |
| 2026-06-28 02:07 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-06-27 16:54 UTC | wp-login | direct | POST | /wp-login.php | creds |
| 2026-06-27 16:54 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-06-27 12:55 UTC | wp-login | direct | POST | /wp-login.php | creds |
| 2026-06-27 12:55 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-06-26 07:42 UTC | api | direct | POST | /api/graphql |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 180.243.33.87 | ip |
39
|
1 | ID | 2026-11-11 11:08 UTC | 2026-11-11 11:08 UTC |
| 118.179.20.101 | ip |
39
|
1 | BD | 2026-11-11 11:08 UTC | 2026-11-11 11:08 UTC |
| 181.224.223.146 | ip |
39
|
1 | AR | 2026-11-11 11:07 UTC | 2026-11-11 11:07 UTC |
| 194.117.253.163 | ip |
39
|
1 | UA | 2026-11-11 11:06 UTC | 2026-11-11 11:06 UTC |
| 103.35.156.216 | ip |
50
|
1 | BD | 2026-11-11 11:06 UTC | 2026-11-11 11:06 UTC |
| 212.47.134.72 | ip |
50
|
1 | AZ | 2026-11-11 11:04 UTC | 2026-11-11 11:04 UTC |
| 190.48.6.106 | ip |
50
|
1 | AR | 2026-11-11 11:04 UTC | 2026-11-11 11:04 UTC |
| 223.204.247.56 | ip |
39
|
1 | TH | 2026-11-11 11:04 UTC | 2026-11-11 11:04 UTC |
| 161.142.153.236 | ip |
39
|
1 | MY | 2026-11-11 11:03 UTC | 2026-11-11 11:03 UTC |
| 103.145.45.14 | ip |
50
|
1 | BD | 2026-11-11 11:03 UTC | 2026-11-11 11:03 UTC |
| 186.39.136.216 | ip |
39
|
1 | AR | 2026-11-11 11:03 UTC | 2026-11-11 11:03 UTC |
| 85.234.16.237 | ip |
39
|
1 | RU | 2026-11-11 11:03 UTC | 2026-11-11 11:03 UTC |
| 113.211.208.99 | ip |
50
|
1 | MY | 2026-11-11 11:02 UTC | 2026-11-11 11:02 UTC |
| 38.159.224.14 | ip |
39
|
1 | AR | 2026-11-11 11:01 UTC | 2026-11-11 11:01 UTC |
| 203.96.241.27 | ip |
50
|
1 | MM | 2026-11-11 11:01 UTC | 2026-11-11 11:01 UTC |
| 94.228.205.184 | ip |
39
|
1 | RU | 2026-11-11 10:59 UTC | 2026-11-11 10:59 UTC |
| 103.55.146.13 | ip |
50
|
1 | BD | 2026-11-11 10:59 UTC | 2026-11-11 10:59 UTC |
| 134.249.8.128 | ip |
39
|
1 | UA | 2026-11-11 10:59 UTC | 2026-11-11 10:59 UTC |
| 89.151.162.132 | ip |
50
|
1 | RU | 2026-11-11 10:58 UTC | 2026-11-11 10:58 UTC |
| 153.67.5.195 | ip |
39
|
1 | VE | 2026-11-11 10:58 UTC | 2026-11-11 10:58 UTC |
| 45.159.22.111 | ip |
50
|
1 | US | 2026-11-11 10:58 UTC | 2026-11-11 10:58 UTC |
| 153.117.69.34 | ip |
39
|
1 | PK | 2026-11-11 10:58 UTC | 2026-11-11 10:58 UTC |
| 169.224.90.159 | ip |
39
|
1 | IQ | 2026-11-11 10:58 UTC | 2026-11-11 10:58 UTC |
| 103.20.242.73 | ip |
39
|
1 | BD | 2026-11-11 10:58 UTC | 2026-11-11 10:58 UTC |
| 5.21.91.55 | ip |
50
|
1 | OM | 2026-11-11 10:58 UTC | 2026-11-11 10:58 UTC |
Showing 1-25 of 93383 indicators