IP and domain reputation lookup
BadBot Gateway scores IP addresses and domains by the abuse that BadBot's own honeypot sensors catch, such as scanners, brute-force bots and exploit probes, with recent activity counting most. Search an indicator for its score, report history and categories, or download the high-risk feeds; how the sensor network works is explained at badbot.net.
Reputation 216.24.210.157 ip
Score
100
/100
raw: 93.9
Reports
11
Last Reported
2026-11-07 00:34 UTC
Categories
Config Exposure Probe (5)
Web Stack Probe (3)
API Probe (2)
Credential Stuffing (1)
Network details
ASN
62240
Organization
Clouvider Limited
Country
US
Threat Intelligence enriched 2026-11-07 00:19 UTC
DNSBL Status
Clean
Sensor Activity last 11 events
| Time (UTC) | Trap | Signal | Method | Path | Flags |
|---|---|---|---|---|---|
| 2026-11-07 00:34 UTC | api | direct | GET | /api/.env.production.old | |
| 2026-11-07 00:34 UTC | catch-all-config | direct | GET | /current/.env.old.txt | |
| 2026-11-07 00:33 UTC | catch-all-config | direct | GET | /.github/.env | burst |
| 2026-11-07 00:33 UTC | catch-all-config | direct | GET | /.env.prod.txt | |
| 2026-11-07 00:33 UTC | catch-all-config | direct | GET | /releases/current/.env.old | |
| 2026-11-07 00:33 UTC | catch-all-config | direct | GET | /pterodactyl/.env.backup | |
| 2026-11-07 00:33 UTC | api | direct | GET | /api/v1/.env.bak | |
| 2026-11-07 00:18 UTC | wp-login | direct | POST | /wp-login.php | scanner creds |
| 2026-11-07 00:18 UTC | wp-login | direct | GET | /wp-login.php | |
| 2026-11-07 00:18 UTC | wp-admin | direct | POST | /wp-admin/admin-ajax.php | |
| 2026-11-07 00:18 UTC | wp-json | direct | GET | /wp-json/wp/v2/users/ |
Recent Indicators
| Indicator | Type | Score | Reports | Country | Last Reported | First Seen |
|---|---|---|---|---|---|---|
| 161.193.1.170 | ip |
45
|
1 | US | 2026-11-07 00:45 UTC | 2026-11-07 00:45 UTC |
| 86.38.187.178 | ip |
39
|
1 | LT | 2026-11-07 00:44 UTC | 2026-11-07 00:44 UTC |
| 98.159.37.84 | ip |
91
|
4 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 98.159.37.85 | ip |
99
|
6 | US | 2026-11-07 00:36 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.155 | ip |
100
|
12 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.159 | ip |
98
|
6 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.165 | ip |
100
|
8 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.153 | ip |
100
|
10 | US | 2026-11-07 00:35 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.156 | ip |
100
|
8 | US | 2026-11-07 00:35 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.158 | ip |
100
|
10 | US | 2026-11-07 00:35 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.154 | ip |
100
|
10 | US | 2026-11-07 00:35 UTC | 2026-11-07 00:34 UTC |
| 98.159.37.81 | ip |
100
|
11 | US | 2026-11-07 00:35 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.151 | ip |
100
|
8 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.174 | ip |
100
|
11 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.52 | ip |
98
|
6 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 98.159.37.79 | ip |
98
|
7 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.150 | ip |
91
|
4 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.161 | ip |
95
|
5 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.164 | ip |
98
|
6 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.166 | ip |
100
|
9 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 216.24.210.169 | ip |
100
|
10 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 98.159.37.75 | ip |
96
|
5 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 98.159.37.73 | ip |
89
|
4 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 98.159.37.80 | ip |
97
|
6 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
| 98.159.37.89 | ip |
97
|
6 | US | 2026-11-07 00:34 UTC | 2026-11-07 00:34 UTC |
Showing 1-25 of 87685 indicators