IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 41.185.64.163 ip
Score
1
/100
raw: 0.07
Reports
12
Last Reported
2026-06-28 13:33 UTC
Categories
Web Stack Probe (8)
Credential Stuffing (2)
API Probe (1)
Scanning (1)
Network details
ASN
36943
Organization
1 GRID (PTY) LTD
Country
ZA
Threat Intelligence enriched 2026-11-04 16:12 UTC
Reverse DNS
syf05-cvps01.hostserv.co.za
DNSBL Status
Clean
Sensor Activity last 10 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-06-28 13:33 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-06-27 15:43 UTC | wp-login | direct | POST | /wp-login.php | creds |
| 2026-06-27 15:43 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-06-12 19:43 UTC | xmlrpc | direct | POST | /xmlrpc.php | |
| 2026-06-12 17:52 UTC | wp-json | direct | GET | /wp-json/mepr/v1/members | |
| 2026-06-12 15:49 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-06-12 15:49 UTC | catch-all-suspicious | direct | GET | /author-sitemap.xml | |
| 2026-06-12 15:38 UTC | wp-json | direct | GET | /wp-json/learnpress/v1/users | |
| 2026-06-12 15:20 UTC | api | direct | POST | /api/graphql | |
| 2026-06-12 15:20 UTC | catch-all-cms | direct | GET | /wp-sitemap-users-1.xml |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 181.188.121.119 | ip |
80
|
3 | TT | 2026-11-09 09:24 UTC | 2026-11-09 09:24 UTC |
| 93.178.117.105 | ip |
73
|
3 | RU | 2026-11-09 09:24 UTC | 2026-11-09 09:24 UTC |
| 82.146.19.247 | ip |
39
|
1 | RU | 2026-11-09 09:24 UTC | 2026-11-09 09:24 UTC |
| 79.174.45.192 | ip |
78
|
3 | RU | 2026-11-09 09:24 UTC | 2026-11-09 09:24 UTC |
| 196.74.205.156 | ip |
89
|
4 | MA | 2026-11-09 09:24 UTC | 2026-11-09 09:24 UTC |
| 196.75.180.185 | ip |
85
|
4 | MA | 2026-11-09 09:24 UTC | 2026-11-09 09:24 UTC |
| 106.219.64.74 | ip |
91
|
4 | IN | 2026-11-09 09:24 UTC | 2026-11-09 09:23 UTC |
| 103.154.236.96 | ip |
93
|
5 | BD | 2026-11-09 09:23 UTC | 2026-11-09 09:23 UTC |
| 180.131.135.109 | ip |
63
|
2 | BD | 2026-11-09 09:22 UTC | 2026-11-09 09:22 UTC |
| 217.199.144.56 | ip |
39
|
1 | KE | 2026-11-09 09:22 UTC | 2026-11-09 09:22 UTC |
| 38.19.73.204 | ip |
86
|
4 | EC | 2026-11-09 09:22 UTC | 2026-11-09 09:21 UTC |
| 45.161.133.134 | ip |
73
|
3 | AR | 2026-11-09 09:21 UTC | 2026-11-09 09:21 UTC |
| 31.181.84.55 | ip |
82
|
3 | RU | 2026-11-09 09:21 UTC | 2026-11-09 09:21 UTC |
| 190.6.255.250 | ip |
89
|
4 | AR | 2026-11-09 09:21 UTC | 2026-11-09 09:21 UTC |
| 201.203.117.63 | ip |
80
|
3 | CR | 2026-11-09 09:21 UTC | 2026-11-09 09:21 UTC |
| 102.206.140.84 | ip |
39
|
1 | KE | 2026-11-09 09:21 UTC | 2026-11-09 09:21 UTC |
| 68.98.98.20 | ip |
93
|
5 | US | 2026-11-09 09:21 UTC | 2026-11-09 09:20 UTC |
| 37.114.186.48 | ip |
94
|
5 | AZ | 2026-11-09 09:21 UTC | 2026-11-09 09:20 UTC |
| 102.67.254.89 | ip |
80
|
3 | CI | 2026-11-09 09:20 UTC | 2026-11-09 09:20 UTC |
| 90.119.68.163 | ip |
39
|
1 | FR | 2026-11-09 09:20 UTC | 2026-11-09 09:20 UTC |
| 108.56.165.182 | ip |
86
|
4 | US | 2026-11-09 09:20 UTC | 2026-11-09 09:20 UTC |
| 103.73.100.110 | ip |
93
|
5 | PK | 2026-11-09 09:20 UTC | 2026-11-09 09:20 UTC |
| 45.65.227.71 | ip |
73
|
4 | AR | 2026-11-09 09:20 UTC | 2026-11-09 09:19 UTC |
| 154.159.238.173 | ip |
78
|
3 | KE | 2026-11-09 09:19 UTC | 2026-11-09 09:19 UTC |
| 181.32.214.157 | ip |
91
|
4 | CO | 2026-11-09 09:19 UTC | 2026-11-09 09:19 UTC |
Showing 1-25 of 90157 indicators