IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 89.116.28.203 ip
Score
0
/100
raw: 0.05
Reports
17
Last Reported
2026-06-13 07:43 UTC
Categories
Web Stack Probe (14)
Scanning (3)
Network details
ASN
51167
Organization
Contabo GmbH
Country
FR
Threat Intelligence enriched 2026-11-04 16:09 UTC
Reverse DNS
server.webzymarketing.com
Sensor Activity last 9 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-06-13 07:43 UTC | wp-json | direct | GET | /wp-json/wc/v2/customers | |
| 2026-06-13 04:23 UTC | wp-json | direct | GET | /wp-json/ldlms/v2/users | |
| 2026-06-13 02:56 UTC | wp-json | direct | GET | /wp-json/wp/v2/posts | |
| 2026-06-12 23:59 UTC | catch-all-suspicious | direct | GET | /author-sitemap.xml | |
| 2026-06-12 22:56 UTC | catch-all-cms | direct | GET | /wp-sitemap-users-1.xml | |
| 2026-06-12 19:17 UTC | catch-all-cms | direct | GET | /wp-sitemap-users-1.xml | |
| 2026-06-12 16:55 UTC | wp-json | direct | GET | /wp-json/ultimate-member/v1/users | |
| 2026-06-12 15:47 UTC | wp-json | direct | GET | /wp-json/wp/v2/users | |
| 2026-06-12 08:36 UTC | wp-json | direct | GET | /wp-json/buddypress/v1/members |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 172.64.200.104 | ip |
45
|
1 | PL | 2026-11-09 08:51 UTC | 2026-11-09 08:51 UTC |
| 73.245.46.221 | ip |
93
|
5 | US | 2026-11-09 08:50 UTC | 2026-11-09 08:50 UTC |
| 45.252.73.160 | ip |
86
|
4 | IN | 2026-11-09 08:50 UTC | 2026-11-09 08:50 UTC |
| 161.142.124.10 | ip |
85
|
4 | MY | 2026-11-09 08:50 UTC | 2026-11-09 08:49 UTC |
| 113.211.212.245 | ip |
80
|
3 | MY | 2026-11-09 08:50 UTC | 2026-11-09 08:49 UTC |
| 179.238.45.229 | ip |
93
|
5 | AR | 2026-11-09 08:49 UTC | 2026-11-09 08:49 UTC |
| 109.117.111.91 | ip |
73
|
3 | IT | 2026-11-09 08:49 UTC | 2026-11-09 08:49 UTC |
| 103.88.83.100 | ip |
94
|
5 | IN | 2026-11-09 08:49 UTC | 2026-11-09 08:49 UTC |
| 136.109.8.71 | ip |
100
|
73 | US | 2026-11-09 08:48 UTC | 2026-11-09 08:47 UTC |
| 181.26.177.178 | ip |
39
|
1 | AR | 2026-11-09 08:47 UTC | 2026-11-09 08:47 UTC |
| 103.183.82.110 | ip |
90
|
3 | IN | 2026-11-09 08:47 UTC | 2026-11-09 08:47 UTC |
| 31.172.136.82 | ip |
63
|
2 | UA | 2026-11-09 08:47 UTC | 2026-11-09 08:47 UTC |
| 42.190.87.103 | ip |
86
|
4 | MY | 2026-11-09 08:46 UTC | 2026-11-09 08:46 UTC |
| 45.234.207.203 | ip |
73
|
4 | BR | 2026-11-09 08:46 UTC | 2026-11-09 08:46 UTC |
| 189.242.175.129 | ip |
82
|
3 | MX | 2026-11-09 08:46 UTC | 2026-11-09 08:46 UTC |
| 190.93.195.20 | ip |
93
|
5 | AR | 2026-11-09 08:46 UTC | 2026-11-09 08:46 UTC |
| 41.139.196.27 | ip |
85
|
3 | KE | 2026-11-09 08:46 UTC | 2026-11-09 08:46 UTC |
| 213.204.120.203 | ip |
82
|
3 | LB | 2026-11-09 08:46 UTC | 2026-11-09 08:46 UTC |
| 27.97.160.5 | ip |
86
|
4 | IN | 2026-11-09 08:38 UTC | 2026-11-09 08:37 UTC |
| 117.7.215.150 | ip |
93
|
5 | VN | 2026-11-09 08:38 UTC | 2026-11-09 08:37 UTC |
| 63.143.95.122 | ip |
85
|
4 | JM | 2026-11-09 08:37 UTC | 2026-11-09 08:37 UTC |
| 198.163.193.136 | ip |
90
|
3 | UZ | 2026-11-09 08:37 UTC | 2026-11-09 08:37 UTC |
| 187.190.21.110 | ip |
91
|
4 | MX | 2026-11-09 08:37 UTC | 2026-11-09 08:37 UTC |
| 186.195.30.63 | ip |
94
|
5 | BR | 2026-11-09 08:37 UTC | 2026-11-09 08:36 UTC |
| 5.36.139.23 | ip |
93
|
5 | OM | 2026-11-09 08:37 UTC | 2026-11-09 08:36 UTC |
Showing 1-25 of 90094 indicators