IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 91.231.89.33 ip
Score
0
/100
raw: 0.04
Reports
27
Last Reported
2026-07-01 02:46 UTC
Categories
Web Stack Probe (27)
Network details
ASN
213412
Organization
ONYPHE SAS
Country
FR
Threat Intelligence enriched 2026-11-02 22:06 UTC
Reverse DNS
charlotte.probe.onyphe.net
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 14 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-07-01 02:46 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-06-22 10:44 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-05-25 13:49 UTC | wp-json | direct | GET | /wp-json/ | |
| 2026-05-10 23:02 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-05-10 23:00 UTC | wp-json | direct | GET | /wp-json/ | |
| 2026-05-10 22:47 UTC | wp-json | direct | GET | /wp-json/ | |
| 2026-05-10 22:23 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-05-10 21:18 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-05-10 20:56 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-05-02 18:02 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-04-08 23:51 UTC | wp-json | direct | GET | /wp-json/ | |
| 2026-04-08 23:39 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-04-08 23:21 UTC | xmlrpc | direct | GET | /xmlrpc.php | |
| 2026-03-28 18:41 UTC | xmlrpc | direct | GET | /xmlrpc.php |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 104.248.61.156 | ip |
18
|
1 | US | 2026-11-04 06:04 UTC | 2026-11-04 06:04 UTC |
| 103.93.219.166 | ip |
100
|
18 | PK | 2026-11-04 06:04 UTC | 2026-11-04 05:59 UTC |
| 34.23.219.146 | ip |
100
|
26 | US | 2026-11-04 05:54 UTC | 2026-11-04 05:53 UTC |
| 47.101.171.159 | ip |
99
|
6 | CN | 2026-11-04 05:51 UTC | 2026-11-04 05:50 UTC |
| 86.48.2.136 | ip |
100
|
14 | FR | 2026-11-04 05:47 UTC | 2026-11-04 05:47 UTC |
| 8.134.95.40 | ip |
88
|
3 | CN | 2026-11-04 05:46 UTC | 2026-11-04 05:46 UTC |
| 147.182.165.92 | ip |
55
|
2 | US | 2026-11-04 05:25 UTC | 2026-11-04 05:25 UTC |
| 159.89.142.101 | ip |
18
|
1 | US | 2026-11-04 05:25 UTC | 2026-11-04 05:25 UTC |
| 178.128.11.78 | ip |
33
|
1 | US | 2026-11-04 05:25 UTC | 2026-11-04 05:25 UTC |
| 138.68.53.28 | ip |
50
|
1 | US | 2026-11-04 05:24 UTC | 2026-11-04 05:24 UTC |
| 52.187.224.173 | ip |
100
|
103 | AU | 2026-11-04 05:34 UTC | 2026-11-04 05:17 UTC |
| 51.255.165.74 | ip |
100
|
11 | FR | 2026-11-04 05:16 UTC | 2026-11-04 05:15 UTC |
| 34.27.245.17 | ip |
18
|
1 | US | 2026-11-04 05:14 UTC | 2026-11-04 05:14 UTC |
| 163.227.230.194 | ip |
45
|
1 | VN | 2026-11-04 05:12 UTC | 2026-11-04 05:12 UTC |
| 169.58.14.55 | ip |
100
|
11 | FR | 2026-11-04 05:10 UTC | 2026-11-04 05:09 UTC |
| 163.5.222.217 | ip |
45
|
1 | GB | 2026-11-04 05:05 UTC | 2026-11-04 05:05 UTC |
| 192.53.123.56 | ip |
18
|
1 | CA | 2026-11-04 05:04 UTC | 2026-11-04 05:04 UTC |
| 138.197.157.0 | ip |
55
|
2 | CA | 2026-11-04 05:04 UTC | 2026-11-04 05:04 UTC |
| 178.128.79.128 | ip |
33
|
1 | US | 2026-11-04 05:04 UTC | 2026-11-04 05:04 UTC |
| 192.155.89.199 | ip |
50
|
1 | US | 2026-11-04 05:04 UTC | 2026-11-04 05:04 UTC |
| 157.230.92.201 | ip |
33
|
1 | US | 2026-11-04 05:01 UTC | 2026-11-04 05:01 UTC |
| 138.197.211.94 | ip |
18
|
1 | US | 2026-11-04 05:01 UTC | 2026-11-04 05:01 UTC |
| 142.93.21.163 | ip |
50
|
1 | US | 2026-11-04 05:01 UTC | 2026-11-04 05:01 UTC |
| 157.245.83.92 | ip |
55
|
2 | US | 2026-11-04 05:01 UTC | 2026-11-04 05:01 UTC |
| 172.64.198.215 | ip |
75
|
2 | PL | 2026-11-04 04:59 UTC | 2026-11-04 04:59 UTC |
Showing 1-25 of 86489 indicators