IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 185.220.101.154 ip
Score
61
/100
raw: 9.51
Reports
22
Last Reported
2026-09-30 19:33 UTC
Categories
Scanning (10)
Admin Panel Probe (4)
Credential Stuffing (3)
Web Probe (3)
API Probe (1)
Web Stack Probe (1)
Network details
ASN
60729
Organization
Stiftung Erneuerbare Freiheit
Country
DE
Threat Intelligence enriched 2026-05-12 15:19 UTC
Reverse DNS
tor-exit-154.relayon.org
DNSBL Status
Listed
bl.spamcop.net
Sensor Activity last 16 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-09-30 19:32 UTC | catch-all-suspicious | direct | GET | /costModule/faces/javax.faces.resource/web.xml | burst |
| 2026-09-30 19:32 UTC | catch-all-suspicious | direct | GET | /SupportPortlet/faces/javax.faces.resource./WEB-INF/web.xml.jsf | burst |
| 2026-09-30 19:32 UTC | catch-all-suspicious | direct | GET | /myaccount/javax.faces.resource./WEB-INF/web.xml.jsf | burst |
| 2026-09-30 19:32 UTC | catch-all-suspicious | direct | GET | /costModule/faces/javax.faces.resource./WEB-INF/web.xml.jsf | burst |
| 2026-09-30 19:32 UTC | catch-all-suspicious | direct | GET | /faces/javax.faces.resource/web.xml | burst |
| 2026-09-30 19:32 UTC | catch-all-suspicious | direct | GET | /SupportPortlet/faces/javax.faces.resource/web.xml | burst |
| 2026-09-30 19:32 UTC | catch-all-suspicious | direct | GET | /myaccount/javax.faces.resource/web.xml | |
| 2026-09-30 19:32 UTC | catch-all-suspicious | direct | GET | /faces/javax.faces.resource./WEB-INF/web.xml.jsf | |
| 2026-09-30 19:32 UTC | catch-all-suspicious | direct | GET | /secureader/javax.faces.resource./WEB-INF/web.xml.jsf | |
| 2026-09-30 19:32 UTC | catch-all-suspicious | direct | GET | /secureader/javax.faces.resource/web.xml | |
| 2026-09-29 23:12 UTC | wp-content | direct | GET | /wp-content/plugins/trafficanalyzer/readme.txt | |
| 2026-05-16 20:51 UTC | hidden-link:debug-console | direct | GET | /debug/console/ | burst |
| 2026-05-16 20:51 UTC | hidden-link:internal-portal | direct | GET | /internal-portal/ | |
| 2026-05-16 20:51 UTC | hidden-link:api-tokens | direct | GET | /api/v1/tokens/ | |
| 2026-05-16 20:51 UTC | api-admin-export | direct | GET | /api/v1/admin/export/ | |
| 2026-05-16 20:51 UTC | dashboard | direct | GET | /dashboard/ |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 190.145.240.77 | ip |
39
|
1 | CO | 2026-11-02 20:33 UTC | 2026-11-02 20:33 UTC |
| 176.38.30.189 | ip |
50
|
1 | UA | 2026-11-02 20:33 UTC | 2026-11-02 20:33 UTC |
| 197.101.116.211 | ip |
39
|
1 | ZA | 2026-11-02 20:32 UTC | 2026-11-02 20:32 UTC |
| 213.195.91.70 | ip |
39
|
1 | ES | 2026-11-02 20:32 UTC | 2026-11-02 20:32 UTC |
| 38.191.80.85 | ip |
50
|
1 | CO | 2026-11-02 20:31 UTC | 2026-11-02 20:31 UTC |
| 121.121.57.62 | ip |
39
|
1 | MY | 2026-11-02 20:31 UTC | 2026-11-02 20:31 UTC |
| 161.0.156.112 | ip |
39
|
1 | TT | 2026-11-02 20:29 UTC | 2026-11-02 20:29 UTC |
| 41.208.129.146 | ip |
50
|
1 | SN | 2026-11-02 20:29 UTC | 2026-11-02 20:29 UTC |
| 198.163.194.36 | ip |
50
|
1 | UZ | 2026-11-02 20:29 UTC | 2026-11-02 20:29 UTC |
| 37.8.53.228 | ip |
39
|
1 | PS | 2026-11-02 20:29 UTC | 2026-11-02 20:29 UTC |
| 115.133.214.252 | ip |
50
|
1 | MY | 2026-11-02 20:29 UTC | 2026-11-02 20:29 UTC |
| 187.95.166.117 | ip |
39
|
1 | BR | 2026-11-02 20:28 UTC | 2026-11-02 20:28 UTC |
| 200.189.19.1 | ip |
39
|
1 | AR | 2026-11-02 20:28 UTC | 2026-11-02 20:28 UTC |
| 188.166.181.151 | ip |
100
|
6 | SG | 2026-11-02 20:28 UTC | 2026-11-02 20:28 UTC |
| 181.51.88.32 | ip |
39
|
1 | CO | 2026-11-02 20:27 UTC | 2026-11-02 20:27 UTC |
| 179.213.245.245 | ip |
50
|
1 | BR | 2026-11-02 20:27 UTC | 2026-11-02 20:27 UTC |
| 94.28.182.91 | ip |
39
|
1 | RU | 2026-11-02 20:27 UTC | 2026-11-02 20:27 UTC |
| 189.219.215.254 | ip |
50
|
1 | MX | 2026-11-02 20:27 UTC | 2026-11-02 20:27 UTC |
| 177.226.183.78 | ip |
39
|
1 | MX | 2026-11-02 20:26 UTC | 2026-11-02 20:26 UTC |
| 200.123.201.23 | ip |
39
|
1 | TT | 2026-11-02 20:26 UTC | 2026-11-02 20:26 UTC |
| 38.25.2.217 | ip |
39
|
1 | PE | 2026-11-02 20:25 UTC | 2026-11-02 20:25 UTC |
| 41.214.101.162 | ip |
39
|
1 | SN | 2026-11-02 20:24 UTC | 2026-11-02 20:24 UTC |
| 146.158.30.52 | ip |
39
|
1 | UA | 2026-11-02 20:23 UTC | 2026-11-02 20:23 UTC |
| 181.78.178.69 | ip |
50
|
1 | CO | 2026-11-02 20:22 UTC | 2026-11-02 20:22 UTC |
| 45.189.105.5 | ip |
39
|
1 | MX | 2026-11-02 20:22 UTC | 2026-11-02 20:22 UTC |
Showing 1-25 of 84676 indicators