IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 172.235.181.217 ip
Score
33
/100
raw: 3.97
Reports
316
Last Reported
2026-07-24 14:46 UTC
Categories
Scanning (246)
API Probe (30)
Admin Panel Probe (26)
Web Stack Probe (14)
Network details
ASN
63949
Organization
Akamai Connected Cloud
Country
NL
Threat Intelligence enriched 2026-11-04 06:09 UTC
Reverse DNS
prod47client01.academyforinternetresearch.org
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 20 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-07-24 14:46 UTC | catch-all-suspicious | direct | GET | /language/en-GB/en-GB.xml | burst |
| 2026-07-24 14:46 UTC | catch-all-scan | direct | GET | /login.html | burst |
| 2026-07-24 14:46 UTC | catch-all-scan | direct | GET | /versa/login | burst |
| 2026-07-24 14:46 UTC | catch-all-script | direct | GET | /apps/zxtm/login.cgi | burst |
| 2026-07-24 14:46 UTC | catch-all-cms | direct | GET | /administrator/manifests/files/joomla.xml | burst |
| 2026-07-24 14:46 UTC | catch-all-suspicious | direct | GET | /language/en-GB/en-GB.xml | burst |
| 2026-07-24 14:46 UTC | catch-all-scan | direct | GET | /cluster/list.query | burst |
| 2026-07-24 14:46 UTC | catch-all-scan | direct | GET | /helpdesk/WebObjects/Helpdesk.woa | burst |
| 2026-07-24 14:46 UTC | catch-all-cms | direct | GET | /administrator/manifests/files/joomla.xml | burst |
| 2026-07-24 14:46 UTC | catch-all-scan | direct | GET | /evox/about | burst |
| 2026-07-24 14:46 UTC | catch-all-cms | direct | GET | /magento_version | burst |
| 2026-07-24 14:46 UTC | catch-all-scan | direct | GET | /ise/img/rm-logo_small.png | burst |
| 2026-07-24 14:46 UTC | catch-all-script | direct | GET | /apps/zxtm/login.cgi | burst |
| 2026-07-24 14:46 UTC | catch-all-script | direct | GET | /fog/management/index.php | burst |
| 2026-07-24 14:46 UTC | catch-all-scan | direct | GET | /cluster/list.query | burst |
| 2026-07-24 14:46 UTC | catch-all-scan | direct | GET | /ise/img/rm-logo_small.png | burst |
| 2026-07-24 14:46 UTC | catch-all-scan | direct | GET | /helpdesk/WebObjects/Helpdesk.woa | burst |
| 2026-07-24 14:46 UTC | api | direct | GET | /api/v1/check-version | burst |
| 2026-07-24 14:46 UTC | catch-all-scan | direct | GET | /routes | burst |
| 2026-07-24 14:46 UTC | catch-all-suspicious | direct | GET | /xml/info.xml | burst |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 159.26.108.184 | ip |
83
|
2 | SE | 2026-11-06 10:44 UTC | 2026-11-06 10:44 UTC |
| 39.37.189.250 | ip |
39
|
1 | PK | 2026-11-06 10:44 UTC | 2026-11-06 10:44 UTC |
| 104.23.166.99 | ip |
70
|
2 | NL | 2026-11-06 10:44 UTC | 2026-11-06 10:44 UTC |
| 154.159.254.202 | ip |
100
|
9 | KE | 2026-11-06 10:44 UTC | 2026-11-06 10:43 UTC |
| 47.18.194.105 | ip |
63
|
2 | US | 2026-11-06 10:43 UTC | 2026-11-06 10:43 UTC |
| 201.81.235.40 | ip |
39
|
1 | BR | 2026-11-06 10:43 UTC | 2026-11-06 10:43 UTC |
| 161.142.137.17 | ip |
86
|
3 | MY | 2026-11-06 10:43 UTC | 2026-11-06 10:43 UTC |
| 180.191.229.179 | ip |
97
|
6 | PH | 2026-11-06 10:43 UTC | 2026-11-06 10:43 UTC |
| 187.189.127.93 | ip |
63
|
2 | MX | 2026-11-06 10:43 UTC | 2026-11-06 10:43 UTC |
| 217.142.31.5 | ip |
39
|
1 | IQ | 2026-11-06 10:43 UTC | 2026-11-06 10:43 UTC |
| 76.13.101.139 | ip |
50
|
1 | US | 2026-11-06 10:42 UTC | 2026-11-06 10:42 UTC |
| 193.250.255.206 | ip |
100
|
21 | FR | 2026-11-06 10:43 UTC | 2026-11-06 10:40 UTC |
| 187.220.21.201 | ip |
100
|
20 | MX | 2026-11-06 10:43 UTC | 2026-11-06 10:40 UTC |
| 103.152.159.230 | ip |
100
|
21 | IN | 2026-11-06 10:42 UTC | 2026-11-06 10:40 UTC |
| 216.25.90.31 | ip |
63
|
2 | US | 2026-11-06 10:35 UTC | 2026-11-06 10:34 UTC |
| 23.132.164.252 | ip |
80
|
4 | US | 2026-11-06 10:30 UTC | 2026-11-06 10:30 UTC |
| 159.65.9.41 | ip |
100
|
24 | SG | 2026-11-06 10:25 UTC | 2026-11-06 10:17 UTC |
| 149.13.148.65 | ip |
50
|
1 | IT | 2026-11-06 10:07 UTC | 2026-11-06 10:07 UTC |
| 45.43.62.50 | ip |
55
|
1 | DE | 2026-11-06 09:55 UTC | 2026-11-06 09:55 UTC |
| 199.242.184.75 | ip |
55
|
1 | US | 2026-11-06 09:52 UTC | 2026-11-06 09:52 UTC |
| 162.55.208.254 | ip |
50
|
1 | DE | 2026-11-06 09:48 UTC | 2026-11-06 09:48 UTC |
| 80.82.220.235 | ip |
50
|
1 | DE | 2026-11-06 09:46 UTC | 2026-11-06 09:46 UTC |
| 150.228.139.30 | ip |
99
|
9 | GU | 2026-11-06 09:41 UTC | 2026-11-06 09:40 UTC |
| 144.48.111.240 | ip |
99
|
9 | BD | 2026-11-06 09:41 UTC | 2026-11-06 09:40 UTC |
| 103.109.238.232 | ip |
93
|
4 | BD | 2026-11-06 09:40 UTC | 2026-11-06 09:40 UTC |
Showing 1-25 of 87380 indicators