IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 185.220.100.255 ip
Score
25
/100
raw: 2.84
Reports
20
Last Reported
2026-09-30 08:53 UTC
Categories
Credential Stuffing (6)
Admin Panel Probe (4)
Web Probe (3)
Web Stack Probe (3)
API Probe (2)
Scanning (2)
Network details
ASN
205100
Organization
F3 Netze e.V.
Country
DE
Threat Intelligence enriched 2026-11-04 23:09 UTC
Reverse DNS
tor-exit-4.zbau.f3netze.de
DNSBL Status
Clean
Sensor Activity last 20 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-09-30 08:53 UTC | wp-content | direct | GET | /wp-content/plugins/sniplets/readme.txt | |
| 2026-09-29 23:17 UTC | catch-all-script | direct | GET | /backupmgt/pre_connect_check.php | |
| 2026-09-29 23:16 UTC | catch-all-script | direct | GET | /backupmgt/localJob.php | |
| 2026-09-24 01:02 UTC | catch-all-cms | direct | GET | /blog/wp-content/uploads/ | |
| 2026-09-11 11:42 UTC | wp-json | direct | POST | /wp-json/batch/v1 | |
| 2026-06-23 17:29 UTC | hidden-link:debug-console | direct | GET | /debug/console/ | burst |
| 2026-06-23 17:29 UTC | hidden-link:api-tokens | direct | GET | /api/v1/tokens/ | burst |
| 2026-06-23 17:29 UTC | graphql | direct | GET | /graphql | burst |
| 2026-06-23 17:29 UTC | dashboard | direct | GET | /dashboard/ | burst |
| 2026-06-23 17:29 UTC | api-admin-export | direct | GET | /api/v1/admin/export/ | burst |
| 2026-06-23 17:28 UTC | login | direct | POST | /login/ | burst creds |
| 2026-06-23 17:28 UTC | login | direct | POST | /login/ | burst creds |
| 2026-06-23 17:28 UTC | login | direct | POST | /login/ | burst creds |
| 2026-06-23 17:28 UTC | hidden-link:internal-portal | direct | GET | /internal-portal/ | burst |
| 2026-06-23 17:28 UTC | login | direct | POST | /login/ | burst creds |
| 2026-06-23 17:28 UTC | login | direct | POST | /login/ | burst creds |
| 2026-06-23 17:28 UTC | login | direct | POST | /login/ | creds |
| 2026-06-23 17:28 UTC | contact-form | direct | POST | /contact/ | |
| 2026-06-23 17:28 UTC | contact-form | direct | POST | /contact/ | |
| 2026-06-23 17:28 UTC | contact-form | direct | POST | /contact/ |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 212.164.178.237 | ip |
50
|
1 | RU | 2026-11-11 06:06 UTC | 2026-11-11 06:06 UTC |
| 176.115.149.225 | ip |
39
|
1 | RU | 2026-11-11 06:05 UTC | 2026-11-11 06:05 UTC |
| 172.196.43.109 | ip |
99
|
10 | NZ | 2026-11-11 06:06 UTC | 2026-11-11 06:05 UTC |
| 109.126.248.235 | ip |
50
|
1 | RU | 2026-11-11 06:05 UTC | 2026-11-11 06:05 UTC |
| 45.239.32.216 | ip |
39
|
1 | AR | 2026-11-11 06:04 UTC | 2026-11-11 06:04 UTC |
| 102.213.48.173 | ip |
50
|
1 | KE | 2026-11-11 06:04 UTC | 2026-11-11 06:04 UTC |
| 187.207.66.136 | ip |
39
|
1 | MX | 2026-11-11 06:04 UTC | 2026-11-11 06:04 UTC |
| 143.105.97.131 | ip |
50
|
1 | AR | 2026-11-11 06:04 UTC | 2026-11-11 06:04 UTC |
| 38.52.147.60 | ip |
39
|
1 | ID | 2026-11-11 06:04 UTC | 2026-11-11 06:04 UTC |
| 117.253.111.200 | ip |
39
|
1 | IN | 2026-11-11 06:03 UTC | 2026-11-11 06:03 UTC |
| 171.25.212.162 | ip |
50
|
1 | RU | 2026-11-11 06:03 UTC | 2026-11-11 06:03 UTC |
| 46.36.123.45 | ip |
39
|
1 | AM | 2026-11-11 06:02 UTC | 2026-11-11 06:02 UTC |
| 213.135.155.0 | ip |
39
|
1 | RU | 2026-11-11 06:02 UTC | 2026-11-11 06:02 UTC |
| 89.23.211.53 | ip |
50
|
1 | RU | 2026-11-11 06:01 UTC | 2026-11-11 06:01 UTC |
| 186.130.79.26 | ip |
50
|
1 | AR | 2026-11-11 06:01 UTC | 2026-11-11 06:01 UTC |
| 152.56.164.155 | ip |
39
|
1 | IN | 2026-11-11 06:00 UTC | 2026-11-11 06:00 UTC |
| 185.252.220.147 | ip |
39
|
1 | RO | 2026-11-11 05:59 UTC | 2026-11-11 05:59 UTC |
| 91.233.121.216 | ip |
39
|
1 | DE | 2026-11-11 05:58 UTC | 2026-11-11 05:58 UTC |
| 103.145.74.139 | ip |
50
|
1 | BD | 2026-11-11 05:58 UTC | 2026-11-11 05:58 UTC |
| 49.205.47.89 | ip |
39
|
1 | IN | 2026-11-11 05:57 UTC | 2026-11-11 05:57 UTC |
| 103.190.40.249 | ip |
50
|
1 | NP | 2026-11-11 05:57 UTC | 2026-11-11 05:57 UTC |
| 112.205.222.221 | ip |
39
|
1 | PH | 2026-11-11 05:56 UTC | 2026-11-11 05:56 UTC |
| 138.84.69.40 | ip |
50
|
1 | PH | 2026-11-11 05:56 UTC | 2026-11-11 05:56 UTC |
| 190.213.178.169 | ip |
50
|
1 | TT | 2026-11-11 05:56 UTC | 2026-11-11 05:56 UTC |
| 160.187.140.129 | ip |
39
|
1 | IN | 2026-11-11 05:56 UTC | 2026-11-11 05:56 UTC |
Showing 1-25 of 92666 indicators