IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 38.65.138.34 ip
Score
100
/100
raw: 61.93
Reports
8
Last Reported
2026-11-12 20:09 UTC
Categories
Web Stack Probe (6)
Scanning (2)
Network details
ASN
28458
Organization
IENTC S DE RL DE CV
Country
MX
Threat Intelligence enriched 2026-11-12 20:08 UTC
Reverse DNS
38-65-138-34.customer.ientc.net.mx
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 8 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-12 20:08 UTC | wp-json | direct | GET | / | |
| 2026-11-12 20:08 UTC | wp-json | direct | GET | /index.php/wp-json/wp/v2/users | |
| 2026-11-12 20:08 UTC | wp-json | direct | GET | /wp-json/batch/v1/users | burst |
| 2026-11-12 20:08 UTC | wp-json | direct | GET | /wp-json/ | burst |
| 2026-11-12 20:08 UTC | wp-json | direct | GET | /wp-json/oembed/1.0/embed | burst |
| 2026-11-12 20:08 UTC | catch-all-scan | direct | GET | /comments/feed/ | burst |
| 2026-11-12 20:08 UTC | catch-all-suspicious | direct | GET | /author-sitemap.xml | |
| 2026-11-12 20:08 UTC | wp-json | direct | GET | /wp-json/wp/v2/users |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 185.220.101.22 | ip |
50
|
1 | DE | 2026-11-12 20:38 UTC | 2026-11-12 20:38 UTC |
| 152.53.150.12 | ip |
50
|
1 | DE | 2026-11-12 20:38 UTC | 2026-11-12 20:38 UTC |
| 45.191.142.165 | ip |
100
|
23 | BR | 2026-11-12 20:39 UTC | 2026-11-12 20:36 UTC |
| 24.125.200.216 | ip |
100
|
26 | US | 2026-11-12 20:39 UTC | 2026-11-12 20:36 UTC |
| 2.27.154.39 | ip |
100
|
24 | NL | 2026-11-12 20:35 UTC | 2026-11-12 20:32 UTC |
| 102.156.131.227 | ip |
100
|
28 | TN | 2026-11-12 20:35 UTC | 2026-11-12 20:31 UTC |
| 5.62.147.120 | ip |
100
|
25 | IQ | 2026-11-12 20:35 UTC | 2026-11-12 20:31 UTC |
| 203.215.169.112 | ip |
100
|
29 | PK | 2026-11-12 20:28 UTC | 2026-11-12 20:24 UTC |
| 181.63.178.40 | ip |
100
|
31 | CO | 2026-11-12 20:29 UTC | 2026-11-12 20:24 UTC |
| 176.224.29.118 | ip |
100
|
15 | SA | 2026-11-12 20:24 UTC | 2026-11-12 20:23 UTC |
| 189.147.193.117 | ip |
100
|
31 | MX | 2026-11-12 20:24 UTC | 2026-11-12 20:20 UTC |
| 2.56.189.185 | ip |
100
|
17 | US | 2026-11-12 20:12 UTC | 2026-11-12 20:09 UTC |
| 181.21.130.201 | ip |
100
|
19 | AR | 2026-11-12 20:12 UTC | 2026-11-12 20:09 UTC |
| 98.97.134.39 | ip |
39
|
1 | AR | 2026-11-12 20:09 UTC | 2026-11-12 20:09 UTC |
| 38.65.138.34 | ip |
100
|
8 | MX | 2026-11-12 20:09 UTC | 2026-11-12 20:08 UTC |
| 42.191.128.167 | ip |
100
|
8 | MY | 2026-11-12 20:09 UTC | 2026-11-12 20:08 UTC |
| 185.181.109.118 | ip |
100
|
8 | IQ | 2026-11-12 20:09 UTC | 2026-11-12 20:08 UTC |
| 172.68.195.240 | ip |
70
|
2 | DE | 2026-11-12 20:07 UTC | 2026-11-12 20:07 UTC |
| 94.249.164.182 | ip |
98
|
4 | DE | 2026-11-12 20:05 UTC | 2026-11-12 20:05 UTC |
| 31.134.15.115 | ip |
39
|
1 | SC | 2026-11-12 20:01 UTC | 2026-11-12 20:01 UTC |
| 185.68.155.225 | ip |
78
|
3 | RU | 2026-11-12 20:01 UTC | 2026-11-12 20:01 UTC |
| 68.183.165.14 | ip |
50
|
1 | US | 2026-11-12 20:01 UTC | 2026-11-12 20:01 UTC |
| 147.182.136.176 | ip |
50
|
1 | US | 2026-11-12 19:59 UTC | 2026-11-12 19:59 UTC |
| 102.213.134.86 | ip |
100
|
10 | ZA | 2026-11-12 19:48 UTC | 2026-11-12 19:47 UTC |
| 220.255.242.184 | ip |
100
|
26 | SG | 2026-11-12 19:48 UTC | 2026-11-12 19:44 UTC |
Showing 1-25 of 97248 indicators