IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 154.159.254.202 ip
Score
100
/100
raw: 73.88
Reports
9
Last Reported
2026-11-06 10:44 UTC
Categories
Web Stack Probe (9)
Network details
ASN
36926
Organization
Airtel Networks Kenya Limited
Country
KE
Threat Intelligence enriched 2026-11-06 10:43 UTC
Reverse DNS
202-254-159-154.r.airtelkenya.com
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 9 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-06 10:43 UTC | xmlrpc | direct | POST | /xmlrpc.php | burst |
| 2026-11-06 10:43 UTC | wp-json | direct | GET | /wp-json/webmention/1.0 | burst |
| 2026-11-06 10:43 UTC | wp-json | direct | GET | /wp-json/wp/v2/users/me | burst |
| 2026-11-06 10:43 UTC | wp-login | direct | GET | /wp-login.php | burst |
| 2026-11-06 10:43 UTC | wp-admin | direct | POST | /wp-admin/admin-ajax.php | burst |
| 2026-11-06 10:43 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-11-06 10:42 UTC | wp-admin | direct | POST | /wp-admin/admin-ajax.php | |
| 2026-11-06 10:42 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-11-06 10:42 UTC | wp-admin | direct | POST | /wp-admin/admin-ajax.php |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 159.26.108.184 | ip |
83
|
2 | SE | 2026-11-06 10:44 UTC | 2026-11-06 10:44 UTC |
| 39.37.189.250 | ip |
39
|
1 | PK | 2026-11-06 10:44 UTC | 2026-11-06 10:44 UTC |
| 104.23.166.99 | ip |
70
|
2 | NL | 2026-11-06 10:44 UTC | 2026-11-06 10:44 UTC |
| 154.159.254.202 | ip |
100
|
9 | KE | 2026-11-06 10:44 UTC | 2026-11-06 10:43 UTC |
| 47.18.194.105 | ip |
63
|
2 | US | 2026-11-06 10:43 UTC | 2026-11-06 10:43 UTC |
| 201.81.235.40 | ip |
39
|
1 | BR | 2026-11-06 10:43 UTC | 2026-11-06 10:43 UTC |
| 161.142.137.17 | ip |
86
|
3 | MY | 2026-11-06 10:43 UTC | 2026-11-06 10:43 UTC |
| 180.191.229.179 | ip |
97
|
6 | PH | 2026-11-06 10:43 UTC | 2026-11-06 10:43 UTC |
| 187.189.127.93 | ip |
63
|
2 | MX | 2026-11-06 10:43 UTC | 2026-11-06 10:43 UTC |
| 217.142.31.5 | ip |
39
|
1 | IQ | 2026-11-06 10:43 UTC | 2026-11-06 10:43 UTC |
| 76.13.101.139 | ip |
50
|
1 | US | 2026-11-06 10:42 UTC | 2026-11-06 10:42 UTC |
| 193.250.255.206 | ip |
100
|
21 | FR | 2026-11-06 10:43 UTC | 2026-11-06 10:40 UTC |
| 187.220.21.201 | ip |
100
|
20 | MX | 2026-11-06 10:43 UTC | 2026-11-06 10:40 UTC |
| 103.152.159.230 | ip |
100
|
21 | IN | 2026-11-06 10:42 UTC | 2026-11-06 10:40 UTC |
| 216.25.90.31 | ip |
63
|
2 | US | 2026-11-06 10:35 UTC | 2026-11-06 10:34 UTC |
| 23.132.164.252 | ip |
80
|
4 | US | 2026-11-06 10:30 UTC | 2026-11-06 10:30 UTC |
| 159.65.9.41 | ip |
100
|
24 | SG | 2026-11-06 10:25 UTC | 2026-11-06 10:17 UTC |
| 149.13.148.65 | ip |
50
|
1 | IT | 2026-11-06 10:07 UTC | 2026-11-06 10:07 UTC |
| 45.43.62.50 | ip |
55
|
1 | DE | 2026-11-06 09:55 UTC | 2026-11-06 09:55 UTC |
| 199.242.184.75 | ip |
55
|
1 | US | 2026-11-06 09:52 UTC | 2026-11-06 09:52 UTC |
| 162.55.208.254 | ip |
50
|
1 | DE | 2026-11-06 09:48 UTC | 2026-11-06 09:48 UTC |
| 80.82.220.235 | ip |
50
|
1 | DE | 2026-11-06 09:46 UTC | 2026-11-06 09:46 UTC |
| 150.228.139.30 | ip |
99
|
9 | GU | 2026-11-06 09:41 UTC | 2026-11-06 09:40 UTC |
| 144.48.111.240 | ip |
99
|
9 | BD | 2026-11-06 09:41 UTC | 2026-11-06 09:40 UTC |
| 103.109.238.232 | ip |
92
|
4 | BD | 2026-11-06 09:40 UTC | 2026-11-06 09:40 UTC |
Showing 1-25 of 87380 indicators