IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 213.165.70.179 ip
Score
100
/100
raw: 68.84
Reports
10
Last Reported
2026-11-07 15:39 UTC
Categories
Scanning (7)
API Probe (2)
Web Stack Probe (1)
Network details
ASN
8560
Organization
IONOS SE
Country
ES
Threat Intelligence enriched 2026-11-07 15:38 UTC
DNSBL Status
Listed
zen.spamhaus.org
Sensor Activity last 10 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-07 15:38 UTC | catch-all-script | direct | PUT | /sa0cabf28626fa84f.aspx | burst |
| 2026-11-07 15:38 UTC | catch-all-script | direct | PUT | /shell_a0cabf28626fa84f.jsp | burst |
| 2026-11-07 15:38 UTC | catch-all-scan | direct | GET | /crumbIssuer/api/json | burst |
| 2026-11-07 15:38 UTC | catch-all-scan | direct | POST | /run | burst |
| 2026-11-07 15:38 UTC | catch-all-scan | direct | POST | /code/blocks/exec/start | burst |
| 2026-11-07 15:38 UTC | api | direct | POST | /api/v1/code/blocks/exec/start | burst |
| 2026-11-07 15:38 UTC | catch-all-scan | direct | POST | /code/blocks/exec/code | burst |
| 2026-11-07 15:37 UTC | api | direct | POST | /api/v1/code/blocks/exec/code | |
| 2026-11-07 15:37 UTC | catch-all-script | direct | GET | /foo.jsp | scanner |
| 2026-11-07 15:37 UTC | wp-json | direct | POST | / |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 212.164.26.185 | ip |
50
|
1 | RU | 2026-11-07 16:42 UTC | 2026-11-07 16:42 UTC |
| 60.50.200.23 | ip |
50
|
1 | MY | 2026-11-07 16:42 UTC | 2026-11-07 16:42 UTC |
| 39.38.143.102 | ip |
50
|
1 | PK | 2026-11-07 16:42 UTC | 2026-11-07 16:42 UTC |
| 109.105.209.22 | ip |
18
|
1 | PT | 2026-11-07 16:42 UTC | 2026-11-07 16:42 UTC |
| 177.130.190.208 | ip |
39
|
1 | BR | 2026-11-07 16:41 UTC | 2026-11-07 16:41 UTC |
| 213.230.87.212 | ip |
39
|
1 | UZ | 2026-11-07 16:39 UTC | 2026-11-07 16:39 UTC |
| 102.23.40.46 | ip |
39
|
1 | BF | 2026-11-07 16:38 UTC | 2026-11-07 16:38 UTC |
| 172.58.121.144 | ip |
50
|
1 | US | 2026-11-07 16:38 UTC | 2026-11-07 16:38 UTC |
| 185.223.235.32 | ip |
39
|
1 | NL | 2026-11-07 16:37 UTC | 2026-11-07 16:37 UTC |
| 169.224.70.219 | ip |
50
|
1 | IQ | 2026-11-07 16:37 UTC | 2026-11-07 16:37 UTC |
| 129.226.49.126 | ip |
100
|
121 | HK | 2026-11-07 16:45 UTC | 2026-11-07 16:37 UTC |
| 181.118.37.131 | ip |
39
|
1 | TT | 2026-11-07 16:36 UTC | 2026-11-07 16:36 UTC |
| 190.158.29.36 | ip |
50
|
1 | CO | 2026-11-07 16:35 UTC | 2026-11-07 16:35 UTC |
| 213.230.92.111 | ip |
50
|
1 | UZ | 2026-11-07 16:34 UTC | 2026-11-07 16:34 UTC |
| 94.230.133.66 | ip |
50
|
1 | RU | 2026-11-07 16:33 UTC | 2026-11-07 16:33 UTC |
| 212.15.63.136 | ip |
39
|
1 | RU | 2026-11-07 16:31 UTC | 2026-11-07 16:31 UTC |
| 20.84.153.123 | ip |
18
|
1 | US | 2026-11-07 16:29 UTC | 2026-11-07 16:29 UTC |
| 20.221.59.29 | ip |
18
|
1 | US | 2026-11-07 16:28 UTC | 2026-11-07 16:28 UTC |
| 172.212.227.85 | ip |
18
|
1 | US | 2026-11-07 16:27 UTC | 2026-11-07 16:27 UTC |
| 189.203.231.91 | ip |
39
|
1 | MX | 2026-11-07 16:27 UTC | 2026-11-07 16:27 UTC |
| 201.132.249.10 | ip |
39
|
1 | MX | 2026-11-07 16:26 UTC | 2026-11-07 16:26 UTC |
| 38.211.222.115 | ip |
50
|
1 | CD | 2026-11-07 16:24 UTC | 2026-11-07 16:24 UTC |
| 59.98.128.29 | ip |
39
|
1 | IN | 2026-11-07 16:22 UTC | 2026-11-07 16:22 UTC |
| 193.41.76.190 | ip |
50
|
1 | RU | 2026-11-07 16:17 UTC | 2026-11-07 16:17 UTC |
| 103.121.179.198 | ip |
39
|
1 | PK | 2026-11-07 16:17 UTC | 2026-11-07 16:17 UTC |
Showing 1-25 of 88061 indicators